Skip to content

Instantly share code, notes, and snippets.

View reconbot's full-sized avatar
🏴‍☠️
Building at @github

Francis Gulotta reconbot

🏴‍☠️
Building at @github
View GitHub Profile
@reconbot
reconbot / gist:6495244
Created September 9, 2013 12:58
stream behavior now requires buffers
> require('stream').Writable().write([4])
TypeError: Invalid non-string/buffer chunk
at validChunk (_stream_writable.js:150:14)
at Writable.write (_stream_writable.js:179:12)
at repl:1:31
at REPLServer.self.eval (repl.js:110:21)
at Interface.<anonymous> (repl.js:239:12)
at Interface.EventEmitter.emit (events.js:95:17)
at Interface._onLine (readline.js:202:10)
at Interface._line (readline.js:531:8)
@reconbot
reconbot / README.md
Last active December 25, 2015 22:09
Get your first 100 users by Lauren at Pivotal Labs

Get your first 100 users by Lauren

Video starts at 35 minutes

My notes on the video;

Name and land grab

  • Value prop (ref crossing the chasm)
  • Get it short, not slogan or video it marketing copy - skymall is great info
@reconbot
reconbot / Gemfile.rb
Last active December 29, 2015 06:49
my default gemfile on new projects
source 'https://rubygems.org'
ruby '2.0.0'
gem 'rails', '4.0.0'
gem 'pg'
gem 'uglifier', '>= 1.3.0'
gem 'therubyracer'
gem 'jquery-rails'
gem 'bcrypt-ruby', '~> 3.0.0'
@reconbot
reconbot / .env
Last active December 29, 2015 07:09
Foreman example
RAILS_ENV=development
PORT=3001
AWS_KEY=boooo
ETC=whatever can go in here shows up in ENV['ETC']
@reconbot
reconbot / broadcaster.js
Created November 27, 2013 20:46
A small nodejs chat client
var dgram = require('dgram');
// Make a udp socket
var socket = dgram.createSocket('udp4', function () {
socket.setBroadcast(true);
});
process.stdin.write("# Sending messages to everyone port 1337\n< ");
process.stdin.on('data', function (message) {
process.stdin.write("< ");
@reconbot
reconbot / avatar.txt
Last active December 30, 2015 07:19
Me
XXXXXXXXXXXXXXXXXXXXXXXXNMMMMMMMMMWNXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXNMMMMWNNNNNWWMWWNXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXNWMMWNXXXXXXXXX00XWMMWNXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXNMMMWXXXXXXKocx00OOOOKNMMMWXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXNMMMNXXXXXX0o,d0o,:dOOOOO0NMMMWXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXNMMMNXXXXXX0l,xNMMMW0l,cxOOOO0XMMMXXXXXXXXXXXXXXX
XXXXXXXXXXXXWMMWXXXXXXOc;kWNXNNNWWMWk;:dOOOO0NMMNXXXXXXXXXXXXX
XXXXXXXXXXNMMMNXXXXXOc;kWMXOkkkkkkOXMM0c;dOOOOXMMNXXXXXXXXXXXX
XXXXXXXXXNMMWXXXXXOc;OMMXkddddddddddxXMMKc;dOOOKMMNXXXXXXXXXXX
XXXXXXXXXMMWXXXXOc,xWMNkdddddddddddddokXNMO;:xOOKMMXXXXXXXXXXX
let's play a game
the board is a mercator projection of planet earth with the equator running thru the middle
everyone has 32 pieces
put 1 on the board, that's your capitol
put 15 more on the board, they are your cities(tribes)
@reconbot
reconbot / my_app_one.html.erb
Created February 10, 2014 18:21
I want to link to things that have routes that are constrained by a host by using their path helper.
<%= link_to "Second App", my_app_two_path %>
alias gh='open `git config --get remote.origin.url | sed "s@.*com.\(.*\)\.git@https://github.com/\1@"`/compare/`git symbolic-ref HEAD | cut -d "/" -f 3`'

Thoughts and notes

RegExp Denial of Service

I didn't really learn why this was an issue. Don't allow arbituarily large groups in regexes seems to be the message but since we weren't using the group beforehand the message was sort of lost on me.

Maybe we could rely on the group for some reason and then limit the length of the username to gaurd against this?

Reflected Cross Site Scripting && HttpOnly Cookie

I was confused why two lessons were mixed into one. It took a few read throughs to understand that wasn't the case. I'd have an XSS lesson first.