joernchen

GitHub RCE by Environment variable injection Bug Bounty writeup

Disclaimer: I'll keep this really short but  I hope you'll get the key points.

GitHub blogged a while ago about some internal tool called gerve:
https://github.com/blog/530-how-we-made-github-fast

Upon git+sshing to github.com gerve basically looks up your permission
on the repo you want to interact with. Then it bounces you further in
another forced SSH session to the back end where the repo actually is.

lukehedger

$ ffmpeg -i input.mp4 -vcodec h264 -acodec mp2 output.mp4

CMCDragonkai

HTTP Streaming (or Chunked vs Store & Forward)

The standard way of understanding the HTTP protocol is via the request reply pattern. Each HTTP transaction consists of a finitely bounded HTTP request and a finitely bounded HTTP response.

However it's also possible for both parts of an HTTP 1.1 transaction to stream their possibly infinitely bounded data. The advantages is that the sender can send data that is beyond the sender's memory limit, and the receiver can act on

paulirish

What forces layout / reflow

All of the below properties or methods, when requested/called in JavaScript, will trigger the browser to synchronously calculate the style and layout*. This is also called reflow or layout thrashing, and is common performance bottleneck.

Generally, all APIs that synchronously provide layout metrics will trigger forced reflow / layout. Read on for additional cases and details.

Element APIs

Getting box metrics

• elem.offsetLeft, elem.offsetTop, elem.offsetWidth, elem.offsetHeight, elem.offsetParent

johnbillion

WordPress Emails

This document lists all the situations where WordPress sends an email, along with how to filter or disable each email.

This documentation has moved here: https://github.com/johnbillion/wp_mail

Lewiscowles1986

# -*- mode: ruby -*-
# vi: set ft=ruby :

Vagrant.configure(2) do |config|
  config.vm.box = "debian/jessie64"
  config.vm.network "private_network", ip: "10.0.0.7"
  config.vm.hostname = "magento2.local"

  config.vm.provider "virtualbox" do |vb|
    # Display the VirtualBox GUI when booting the machine

subfuzion

Common Options

-#, --progress-bar Make curl display a simple progress bar instead of the more informational standard meter.

-b, --cookie <name=data> Supply cookie with request. If no =, then specifies the cookie file to use (see -c).

-c, --cookie-jar <file name> File to save response cookies to.

owise1

'use strict';

function sayHello() {
  if (navigator.userAgent.toLowerCase().indexOf('chrome') > -1) {
    var args = ['\n %c Made with ♥ by Dogstudio %c %c %c http://www.dogstudio.be/ %c %c🐶 \n\n', 'color: #fff; background: #b0976d; padding:5px 0;', 'background: #494949; padding:5px 0;', 'background: #494949; padding:5px 0;', 'color: #fff; background: #1c1c1c; padding:5px 0;', 'background: #fff; padding:5px 0;', 'color: #b0976d; background: #fff; padding:5px 0;'];

    window.console.log.apply(console, args);
  } else if (window.console) {
    window.console.log('Made with love ♥ Dogstudio - http://www.dogstudio.be/ 🐶');
  }

jhaddix

.
..
........
@
*
*.*
*.*.*
🐎

kellymears

const mix = require('laravel-mix');

const url       = 'http://lab.tinypixel.test';
const app       = './src';
const config    = './config';
const resources = './resources';
const assets    = './resources/assets';
const dist      = './dist';

const externals = {