Juan Riaza juanriaza

Bot-Buster™

Tracks nefarious activity on website, and manages accordingly.

It's probably a bot.

If the requesting entity:

declares its user-agent as being wget, curl, webcopier etc - it's probably a bot.
requests details -> details -> details -> details ad nauseum - it's probably a bot.
requests the html, but not .css, .js or site furniture - it's probably a bot.

PSQL

Magic words:

psql -U postgres

Some interesting flags (to see all, use -h or --help depending on your psql version):

-E: will describe the underlaying queries of the \ commands (cool for learning!)
-l: psql will list all databases and then exit (useful if the user you connect with doesn't has a default database, like at AWS RDS)

The introduction to Reactive Programming you've been missing

(by @andrestaltz)

This tutorial as a series of videos

If you prefer to watch video tutorials with live-coding, then check out this series I recorded with the same contents as in this article: Egghead.io - Introduction to Reactive Programming.

2015-01-29 Unofficial Relay FAQ

Compilation of questions and answers about Relay from React.js Conf.

Disclaimer: I work on Relay at Facebook. Relay is a complex system on which we're iterating aggressively. I'll do my best here to provide accurate, useful answers, but the details are subject to change. I may also be wrong. Feedback and additional questions are welcome.

What is Relay?

Relay is a new framework from Facebook that provides data-fetching functionality for React applications. It was announced at React.js Conf (January 2015).

Most VPN Services are Terrible

Short version: I strongly do not recommend using any of these providers. You are, of course, free to use whatever you like. My TL;DR advice: Roll your own and use Algo or Streisand. For messaging & voice, use Signal. For increased anonymity, use Tor for desktop (though recognize that doing so may actually put you at greater risk), and Onion Browser for mobile.

This mini-rant came on the heels of an interesting twitter discussion: https://twitter.com/kennwhite/status/591074055018582016

	#!/usr/bin/python

	'''
	Python implementation of passcode hashing algorithm used on the Samsung Galaxy S4 GT-I9505 4.2.2
	Correct PIN for hash and salt below is 1234.

	Get 40-character hash value in ascii hex format from file /data/system/password.key on the phone

	Get salt in signed numeric format by doing sqlite3 query SELECT value FROM locksettings WHERE name = 'lockscreen.password_salt' on /data/system/locksettings.db

	#!/usr/bin/env python
	# Quick and dirty demonstration of CVE-2014-0160 by
	# Jared Stafford ([email protected])
	# Modified so that it finds cookies

	import sys
	import struct
	import socket
	import time
	import select

	"""XPath extension functions for lxml, inspired by:

	https://gist.github.com/shirk3y/458224083ce5464627bc

	Usage:

	import xpathfuncs; xpathfuncs.setup()

	"""
	import string

	# -- coding: utf-8 --
	from __future__ import absolute_import

	import os
	from scrapy.contrib.httpcache import FilesystemCacheStorage
	from .dupefilter import splash_requst_fingerprint


	class SplashAwareFSCacheStorage(FilesystemCacheStorage):
	def _get_request_path(self, spider, request):

	#!/usr/bin/env python
	# -- coding: utf-8 --

	import subprocess
	import time

	VERBOSE = False


	def wait(seconds):