ssokolow

import shlex

def lex_shellscript(script_path, statement_cb):
    """Given a file-like object, use a POSIX-mode shlex.shlex object to split 
       it into statements and call the given statement processor to convert 
       statements into dicts.
    """
    fields = {}

    with open(script_path, 'r') as fobj:

joeblau

Securely erase an external disk using dd on OSX

1. Plug in your SD card, HDD, or other block device and then use the following command to see which /dev/diskN node it's located on:

diskutil list

2. Unmount the disk where “N� is the number of the disk taken from the above command:

kennwhite

Most VPN Services are Terrible

Short version: I strongly do not recommend using any of these providers. You are, of course, free to use whatever you like. My TL;DR advice: Roll your own and use Algo or Streisand. For messaging & voice, use Signal. For increased anonymity, use Tor for desktop (though recognize that doing so may actually put you at greater risk), and Onion Browser for mobile.

This mini-rant came on the heels of an interesting twitter discussion: https://twitter.com/kennwhite/status/591074055018582016

smalltown

//
// This Groovy snippet is used for Jenkins Job DSL groovy script,
// when ...
// 1. enable Jenkins Global Security
// 2. use pipelineJob
// 3. want to approve pipeline cps automatically
//

import jenkins.model.Jenkins

stephansnyt

def doTheThing(Closure doMe) {
    try {
        return doMe()
    } catch (org.jenkinsci.plugins.workflow.steps.FlowInterruptedException fie) {
        // this ambiguous condition means a user probably aborted
        if (fie.causes.size() == 0) {
            throw new UserInterruptedException(fie)
        } else {
            throw fie
        }

unnamed777

 Hammerspoon for karabiner

sghiassy

Disable Device Enrollment Notification on Mac.md

Restart the Mac in Recovery Mode by holding Comment-R during restart

Open Terminal in the recovery screen and type

csrutil disable

tallclair

apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
  name: restricted
  annotations:
    seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default'
    apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
    seccomp.security.alpha.kubernetes.io/defaultProfileName:  'docker/default'
    apparmor.security.beta.kubernetes.io/defaultProfileName:  'runtime/default'
spec:

bobrik

Overly aggressive CFS

We're looking at CPU bandwidth control via CFS:

• https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt

Reproduction program

Program does number of iterations, in each iteration we burn CPU in small chunks until we get 5ms of real time spent. On each iteration we also print how much

a7ul

REMOVE JAMF RESTRICTIONS ON MAC

REMOVE ONLY RESTRICTIONS

sudo jamf removeMDMProfile removes all restrictions

sudo jamf manage brings back all restrictions and profiles

REMOVE ALL RESTRICTIONS AND DISABLE JAMF BINARIES WHILE KEEPING YOUR ACCESS TO VPN AND OTHER SERVICES

sudo jamf removeMDMProfile removes all restrictions