Harry Adel harryadel

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

Don't use VPN services.

No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.

Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.

A Russian translation of this article can be found here, contributed by Timur Demin.
A Turkish translation can be found here, contributed by agyild.
There's also this article about VPN services, which is honestly better written (and has more cat pictures!) than my article.

Install Terminator (shell)

sudo add-apt-repository ppa:gnome-terminator
sudo apt-get update
sudo apt-get install terminator

Terminator should be setup as default now. Restart your terminal (shortcut: "Ctrl+Alt+T").

Install ZSH

Not all random values are created equal - for security-related code, you need a specific kind of random value.

A summary of this article, if you don't want to read the entire thing:

Don't use Math.random(). There are extremely few cases where Math.random() is the right answer. Don't use it, unless you've read this entire article, and determined that it's necessary for your case.
Don't use crypto.getRandomBytes directly. While it's a CSPRNG, it's easy to bias the result when 'transforming' it, such that the output becomes more predictable.
If you want to generate random tokens or API keys: Use uuid, specifically the uuid.v4() method. Avoid node-uuid - it's not the same package, and doesn't produce reliably secure random values.
If you want to generate random numbers in a range: Use random-number-csprng.

You should seriously consider reading the entire article, though - it's

	var waitForEl = function(selector, callback) {
	if (jQuery(selector).length) {
	callback();
	} else {
	setTimeout(function() {
	waitForEl(selector, callback);
	}, 100);
	}
	};

	var assert = require('chai').assert;
	var status = require('http-status');
	var app = require('../server/server');
	var request = require('supertest');
	var boot = require('loopback-boot');
	var DataSource = require('loopback-datasource-juggler').DataSource;

	request = request('http://0.0.0.0:3000/api');

	describe('Metrics resource', function() {

	// File Location: test/unit/user/

	const appRoot = require('app-root-path')

	const bootstrap = appRoot.require('/test/bootstrap')
	const expect = bootstrap.expect

	describe('Example Unit Tests', function () {
	const User = bootstrap.app.models.User

	# one or the other, NOT both

	[url "https://github"]
	insteadOf = git://github

	# or

	[url "[email protected]:"]
	insteadOf = git://github

	#!/bin/bash
	rsync -auhiP -e 'ssh -p {sshPort}' /path/to/app/myApp.tar.gz user@host:/home/meteoruser/

	#It's not directly mentioned in the documentation on how to do this, so here you go. This command will tunnel everything including DNS:
	sshuttle --dns -vr [email protected] 0/0 --ssh-cmd 'ssh -i /your/key/path.pem'