samsch

Stop using JWTs!

TLDR: JWTs should not be used for keeping your user logged in. They are not designed for this purpose, they are not secure, and there is a much better tool which is designed for it: regular cookie sessions.

If you've got a bit of time to watch a presentation on it, I highly recommend this talk: https://www.youtube.com/watch?v=pYeekwv3vC4 (Note that other topics are largely skimmed over, such as CSRF protection. You should learn about other topics from other sources. Also note that "valid" usecases for JWTs at the end of the video can also be easily handled by other, better, and more secure tools. Specifically, PASETO.)

A related topic: Don't use localStorage (or sessionStorage) for authentication credentials, including JWT tokens: https://www.rdegges.com/2018/please-stop-using-local-storage/

The reason to avoid JWTs comes down to a couple different points:

• The JWT specification is specifically designed only for very short-live tokens (~5 minute or less). Sessions

g1eb

export function convertTime(seconds) {                     
  var seconds = parseInt(seconds, 10)                      
  var hours   = Math.floor(seconds / 3600)                 
  var minutes = Math.floor((seconds - (hours * 3600)) / 60)
  var seconds = seconds - (hours * 3600) - (minutes * 60)  
  if ( !!hours ) {                                         
    if ( !!minutes ) {                                     
      return `${hours}h ${minutes}m ${seconds}s`           
    } else {                                               
      return `${hours}h ${seconds}s`                       

pierrejoubert73

How to add a collapsible section in markdown

1. Example

Click me

Heading

1. Foo
2. Bar
   • Baz

• Qux

deadlydog

param([string] $PfxFilePath, $Password)

# You may provide a [string] or a [SecureString] for the $Password parameter.

$absolutePfxFilePath = Resolve-Path -Path $PfxFilePath
Write-Output "Importing store certificate '$absolutePfxFilePath'..."

Add-Type -AssemblyName System.Security
$cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
$cert.Import($absolutePfxFilePath, $Password, [System.Security.Cryptography.X509Certificates.X509KeyStorageFlags]"PersistKeySet")

Pusnow

한글과 유니코드

유니코드에서 한글을 어떻게 다루는지를 정리하였다.

유니코드

• 유니코드(Unicode)는 전 세계의 모든 문자를 컴퓨터에서 일관되게 표현하고 다룰 수 있도록 설계된 산업 표준 (위키 백과)
• 단순히 문자마다 번호를 붙임
• 계속 업데이트되며 현재는 Unicode Version 9.0.0 이 최신이다.

UTF

• 유니코드를 실제 파일 등에 어떻게 기록할 것인지를 표준화한 것이다.

knu

arn=arn:aws:sns:...
p12=/path/to.p12

aws sns set-platform-application-attributes --platform-application-arn "$arn" --attributes PlatformCredential="\"$(openssl pkcs12 -in "$p12" -nodes -nocerts)\"",PlatformPrincipal="\"$(openssl pkcs12 -in "$p12" -nodes -nokeys)\""

massahud

1. Get node binary (node.exe) from http://nodejs.org/download/
2. Create the folder where node will reside and move node.exe to it
3. Download the last zip version of npm from http://nodejs.org/dist/npm
4. Unpack the zip inside the node folder
5. Download the last tgz version of npm from http://nodejs.org/dist/npm
6. Open the tgz file and unpack only the file bin/npm (without extension) directly on the node folder.
7. Add the the node folder and the packages/bin folder to PATH
8. On a command prompt execute npm install -g npm to update npm to the latest version

Now you can use npm and node from windows cmd or from bash shell like Git Bash of msysgit.

jnovack

Mosh (mobile shell) is a gift from the Gods(tm). Anyone with spotty internet or wireless connection has suffered the pain of a lost SSH session. Sure, one can fire up screen (or tmux as the kids are using these days), but that's an extra step and you are still using the SSH protocol.

I'm not here to tout the benefits of Mosh, you came here to open it up in your firewall.

1. Create the following file as /etc/firewalld/services/mosh.xml
2. firewall-cmd --add-service=mosh --permanent
3. firewall-cmd --reload

If you tend to have a lot of sessions (not recommended), you can increase the ports, but the default should be fine for most applications.

chitacan

VM module

• inside vm
• vm.js
• 성능??
• 데모

나름의 계획

• V8 Java Script Engine

jason-s13r

When I use JS Fiddle, I find myself wanting console.log() stuff to show up in the output pane as well as the actual JavaScript console.

• console(...) is the real console.log(...)
• console.log(...) is the output pane + real console.log(...)
• console.clear() deletes everything in the ol/ul tag.
• console._ is mapped to the original browser console.

console.log('hello', 'world')
 .clear()