Skip to content

Instantly share code, notes, and snippets.

View janl's full-sized avatar
🛋️
Drop ICE

Jan Lehnardt janl

🛋️
Drop ICE
View GitHub Profile
This file has been truncated, but you can view the full file.
12006 silly gunzTarPerm extractEntry LICENSE
12007 silly gunzTarPerm extractEntry writable.js
12008 silly install resolved []
12009 verbose about to build /usr/local/lib/node_modules/hoodie-cli/node_modules/insight/node_modules/request/node_modules/qs
12010 info build /usr/local/lib/node_modules/hoodie-cli/node_modules/insight/node_modules/request/node_modules/qs
12011 silly gunzTarPerm extractEntry index.js
12012 silly gunzTarPerm extractEntry test.js
12013 info preinstall [email protected]
12014 silly gunzTarPerm extractEntry LICENSE
12015 silly gunzTarPerm extractEntry writable.js
@janl
janl / new-hoodie-architecture.md
Last active August 21, 2018 16:22
The New Hoodie Architecture

// this is a draft of an outline of an result of an in-person meeting that will eventually live in a GitHub issue for the community to discuss, this is just to vet the outline with the in-person meeting members.

New Hoodie Architecture

This is going to be a long one, grab a nice beverage and enjoy the ride :)

Table of Contents

  • Motivation
    • Making work on and with Hoodie easier and more fun
@janl
janl / test.sh
Last active August 29, 2015 14:23
string interpolation / variable substitution
#!/bin/sh -ex
# I have a variable that’s a string, that includes the expansion for another variable, albeit quited: `\${foo}`
# how can I get a string that is that original string, but with the variable expanded?
# no bashisms allowed, this needs to be stock-sh.
var1=foo
var2=\${var1}/bar
# insert magic here
@janl
janl / checkbashisms.log
Last active August 29, 2015 14:23
You had one job
> head -1 configure
#!/bin/sh
> checkbashisms -f configure
> echo $?
0
> head -1 configure
#!/bin/bash

@ppk asks: “OK, suggestions for my next bit of research?” — https://twitter.com/ppk/status/587545743625478144

@rem replies: “@ppk storage. What works in browser, what browsers, what phones, how it changes when *added to home screen", limits, etc. How's that?” — https://twitter.com/rem/status/587566978065367040

Here’s what I whipped up, please add more in the comments:

APIs:

@janl
janl / secadv_20150319.txt
Created March 19, 2015 14:20
mirror because original at secadv_20150319.txt is slooooow
OpenSSL Security Advisory [19 Mar 2015]
=======================================
OpenSSL 1.0.2 ClientHello sigalgs DoS (CVE-2015-0291)
=====================================================
Severity: High
If a client connects to an OpenSSL 1.0.2 server and renegotiates with an
invalid signature algorithms extension a NULL pointer dereference will occur.
- var hash = crypt.createHash('sha256');
- hash.update(assetData);
- return hash.digest('hex');
+ return crypt.createHash('sha256')
+ .update(assetData)
+ .digest('hex');
@janl
janl / log
Last active August 29, 2015 14:12
> echo '{"a":1}' | ../node_query_server/bin/qs2
net.js:614
throw new TypeError('invalid data');
^
TypeError: invalid data
at WriteStream.Socket.write (net.js:614:11)
at null._onTimeout (/Users/jan/Work/qs2/node_query_server/index.js:17:20)
at Timer.listOnTimeout [as ontimeout] (timers.js:112:15)
> grunt test
Running "jshint:files" (jshint) task
>> 9 files lint free.
Running "simplemocha:unit" (simplemocha) task
․․
2 passing (6ms)
> grunt test
Running "jshint:files" (jshint) task
>> 9 files lint free.
Running "simplemocha:unit" (simplemocha) task
․․
2 passing (6ms)