Andy Tang EnoF

Gas Stations

A gas station is a coin account that pays for gas fees on behalf of a user. Let's explore how we can create an account that is scoped to only pay for gas for specific transactions.

Unscoped Gas Station

To start off, let's create a gas station that is unscoped. From there we can then see how we can scope it to only pay for gas for specific transactions.

What are Principals in pact?

An account has many different forms and can be used in different ways. When users create an account an attacker could try to frontrun the transaction. The attacker would mutate the guard associated with the account, hoping the user won't notice or worse tokens are already on it's way to this newly created account. We can prevent such attacks by providing a way to pin an account to it's guard. If the attackes decides to mutate the guard now,

Capabilities and Referenced modules vulnerability

Modules can be brought into scope dynamically. This can be done like:

(defun test(referenced-module:module{interface-of-module})
  (module::a-function-that-is-defined-on-the-interface))

This is useful for it's dynamic nature, but brings potential vulnerabilities

REST.IO

Small extendable REST framework for express and mongoose.

Installation

$ npm install rest-io --save

New in v1.0.0

Custom Resource declarations

	#!/usr/bin/env node
	const fs = require("fs");

	const acceptedArgs = ["--send", "--local", "--node"];
	const { send, local, node } = process.argv.reduce((args, arg) => {
	const [key, value] = arg.split("=");
	if (!value) return args;
	if (!acceptedArgs.includes(key)) return args;
	return { ...args, [key.replace("--", "")]: value };
	}, {});

	#!/bin/bash

	function print_help_dup() {
	echo " usage:"
	echo " dup [-i\|--image] (options)"
	echo
	echo " -i\|--images required The name of the docker image you to load into your container"
	echo " dup -i node"
	echo " -cmd\|--command optional Provide a different command to run"
	echo " default: /bin/bash"

	---
	Banana
	type: object
	properties:
	id:
	type: string
	description: Mongoose ID
	description:
	type: string
	description: Some text to describe this specific banana

	function Router(){
	this.addRoute = function addRoute(route){
	route.url = route.url \|\| 'defaultUrl';
	route.name = route.name \|\| 'defaultName';

	// Do your stuff
	}
	}

	'use strict';

	var express = require('express');
	var mongoskin = require('mongoskin');

	var allowCrossDomain = function(req, res, next) {
	res.header('Access-Control-Allow-Origin', '*');
	res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
	res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization, Content-Length, X-Requested-With');

	# this cleans up your dead containers, cleaned up 50gigs before...
	docker ps --filter status=dead --filter status=exited -aq \| xargs docker rm -v