Skip to content

Instantly share code, notes, and snippets.

View larkly's full-sized avatar
πŸ‘‹

Bosse Klykken larkly

πŸ‘‹
View GitHub Profile
@dollspace-gay
dollspace-gay / VSDD.md
Last active July 29, 2026 00:12
Verified Spec-Driven Development

Verified Spec-Driven Development (VSDD)

The Fusion: VDD Γ— TDD Γ— SDD for AI-Native Engineering

Overview

Verified Spec-Driven Development (VSDD) is a unified software engineering methodology that fuses three proven paradigms into a single AI-orchestrated pipeline:

  • Spec-Driven Development (SDD): Define the contract before writing a single line of implementation. Specs are the source of truth.
  • Test-Driven Development (TDD): Tests are written before code. Red β†’ Green β†’ Refactor. No code exists without a failing test that demanded it.
@hibobmaster
hibobmaster / README.md
Last active March 30, 2026 20:11
Matrix (dendrite + element-web) in Docker with Traefik and federation

project structure

.
β”œβ”€β”€ compose.yaml
β”œβ”€β”€ config
β”‚   └── dendrite.yaml
β”œβ”€β”€ element-web
β”‚   └── config.json
β”œβ”€β”€ nginx
β”‚   └── dendrite.conf
@samsch
samsch / stop-using-jwts.md
Last active July 23, 2026 05:39
Stop using JWTs

Stop using JWTs!

TLDR: JWTs should not be used for keeping your user logged in. They are not designed for this purpose, they are not secure, and there is a much better tool which is designed for it: regular cookie sessions.

If you've got a bit of time to watch a presentation on it, I highly recommend this talk: https://www.youtube.com/watch?v=pYeekwv3vC4 (Note that other topics are largely skimmed over, such as CSRF protection. You should learn about other topics from other sources. Also note that "valid" usecases for JWTs at the end of the video can also be easily handled by other, better, and more secure tools. Specifically, PASETO.)

A related topic: Don't use localStorage (or sessionStorage) for authentication credentials, including JWT tokens: https://www.rdegges.com/2018/please-stop-using-local-storage/

The reason to avoid JWTs comes down to a couple different points:

  • The JWT specification is specifically designed only for very short-live tokens (~5 minute or less). Sessions
@leinaddm
leinaddm / dell_soap_check.py
Created February 23, 2012 14:18
dell warranty check
#!/usr/bin/python
# Daniel De Marco - ddm@didiemme.net - 2012-02-23
# suds from https://fedorahosted.org/suds/
import suds
import sys
def get_warr(svctag):