Ilias Karim iliaskarim

Last week, a number of publications ran a story about 1,000's of apps allegedly being vulnerable due to an SSL bug in AFNetworking. These articles contain a number of inaccurate and misleading statements on this matter.

We are publishing this response to clarify and correct these statements.

Background Information

For those not familiar with AFNetworking, here are some relevant details about the library for this story:

AFNetworking is an open source, third-party library that provides convenience functionality on top of Apple's built-in frameworks.
One component of AFNetworking is AFSecurityPolicy, which handles authentication challenges according to a policy configured by the application. This includes the evaluation of X.509 certificates which servers send back when connecting over HTTPS.

Extracting Emoji From Slack!

Slack doesn't provide an easy way to extract custom emoji from a team. (Especially teams with thousands of custom emoji) This Gist walks you through a relatively simple approach to get your emoji out.

If you're an admin of your own team, you can get the list of emoji directly using this API: https://api.slack.com/methods/emoji.list. Once you have it, skip to Step 3

HOWEVER! This gist is intended for people who don't have admin access, nor access tokens for using that list.

Follow along...

Common Options

-#, --progress-bar Make curl display a simple progress bar instead of the more informational standard meter.

-b, --cookie <name=data> Supply cookie with request. If no =, then specifies the cookie file to use (see -c).

-c, --cookie-jar <file name> File to save response cookies to.

1. Copy m3u8 link

2. Run command

echo "Enter m3u8 link:";read link;echo "Enter output filename:";read filename;ffmpeg -i "$link" -bsf:a aac_adtstoasc -vcodec copy -c copy -crf 50 $filename.mp4

	1. Create a folder called Payload
	2. Place the .app folder inside of that
	3. Zip up the Payload folder using normal compression
	4. Then rename the file with a .ipa extension

	//
	// Created by Dima Vartanian on 10/29/15.
	//

	import Foundation
	import Crashlytics

	// this method gives us pretty much the same functionality as the CLS_LOG macro, but written as a Swift function, the only differences are that we have to use array syntax for the argument list and that we don't get see if the method being called is a class method or an instance method. We also have to define the DEBUG compiler flag with -D DEBUG.
	/// Usage:
	///

	public protocol FloatConvertible {
	var doubleValue: Double { get }
	var floatValue: Float { get }
	var intValue: Int { get }
	var CGFloatValue: CGFloat { get }
	}

	public extension FloatConvertible {
	public var floatValue: Float {get {return Float(doubleValue)}}
	public var intValue: Int {get {return lrint(doubleValue - 0.5)}}

	sudo: required

	language: ruby

	services:
	- docker

	before_install:
	- echo "Testing Docker Hub credentials"
	- docker login -e=$DOCKER_EMAIL -u=$DOCKER_USERNAME -p=$DOCKER_PASSWORD

	# Note: You MUST have curl 7.47+ with http/2 support compiled in

	curl -v \
	-d '{"aps":{"alert":"<message>","badge":42}}' \
	-H "apns-topic: <bundle id>" \
	-H "apns-priority: 10" \
	--http2 \
	--cert <certificate file> \
	https://api.development.push.apple.com/3/device/<device token>

	( •_•)
	( •_•)>⌐■-■
	(⌐■_■)