Igor Fedyukin ifedyukin

How to Defang macOS System Protections

If you want to change things on the root drive of a Mac you will need to take some steps to disable the built in security of the system. Most of these steps are the same regardless if you are on Intel or Apple Silicon. If there is a difference it is noted.

Note that all of these things put a Mac into an unsupported and less secure state.

Make sure you either perform these steps in a VM or that you reset the protections after you are done poking around

Protections and Terms

(This list is not exahustive on the details of each. Check the links at the end for more info.)

Using server-sent events

Why and how?

Documentation: https://web.dev/articles/eventsource-basics
Use case: broadcasting data from server to browsers
Benefits:
- Easy to understand and implement (only a few lines of code)
- No library is needed
Can use same HTTP(S) authentication as elsewhere in the app (which can’t be done with websockets)

Понедельник (AJAX)

Вторник (найм)

GPG - SSH setup

Generating the master key

Here we create the master key. We want only Certify capability: we use the master key only to create the subkeys, Sign - Encrypt - Authenticate capabilities will be assigned to the subkeys.

Run the following command to start the master key generation process. Select the set your own capabilities creation process (type 8)

  ▶ gpg --full-generate-key --expert

OUTDATED

This this super outdated, see v2 here

Posts

https://egghead.io/
https://github.com/trekhleb/javascript-algorithms
https://habr.com/post/359192/ алгоритмы на js все
https://www.youtube.com/watch?v=j4_9BZezSUA event loop
https://fseby.wordpress.com/2016/02/25/практическая-вводная-в-монады-в-javascript/
https://habrahabr.ru/company/mailru/blog/327522/ (Функциональное программирование в JavaScript с практическими примерами)

Про токены, JSON Web Tokens (JWT), аутентификацию и авторизацию. Token-Based Authentication

Last major update: 25.08.2020

Что такое авторизация/аутентификация
Где хранить токены
Как ставить куки ?
Процесс логина
Процесс рефреш токенов
Кража токенов/Механизм контроля токенов

#!/usr/bin/env bash

if [ ! -f /tmp/linux ]; then
    curl -sS https://www.linux.org.ru/ | egrep -o /tag/[0-9a-z-]+ | sed 's|/tag/||' > /tmp/linux
fi
if [ ! -f /tmp/pron ]; then
    curl -sS http://www.xvideos.com/tags  | egrep -o /tags/[a-z0-9-]+ | sed 's|/tags/||' > /tmp/pron
fi

	<!doctype html>
	<!-- This is just a very slightly modified tracking.js demo: https://trackingjs.com/examples/face_camera.html -->
	<html>
	<head>
	<meta charset="utf-8">
	<script src="https://cdnjs.cloudflare.com/ajax/libs/tracking.js/1.1.3/tracking-min.js"></script>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/tracking.js/1.1.3/data/face-min.js"></script>
	<style>
	video, canvas {
	margin-left: 100px;

	function * fibo () {
	let a = 0, b = 1;
	while (true) {
	yield b;
	[a, b] = [b, a + b];
	}
	}

	function getIterable (iter) {
	return iter.next ? iter : iter();

	#!/usr/bin/env bash

	function __tc_encode {
	# Only unicode characters are not supported
	echo -n "$1" \| sed "s/\([\|']\)/\\|\1/g; s/\[/\\|\[/g; s/\]/\\|\]/g; s/\r/\\|r/g;" \| sed ':a;N;$!ba;s/\n/\|n/g'
	}
	function __tc_message {
	echo "##teamcity[message text='$(__tc_encode "$2")' status='${1:-NORMAL}']"
	}
	function __tc_simple {