grin lyoshenka

WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm

Virus Name: WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY
Vector: All Windows versions before Windows 10 are vulnerable if not patched for MS-17-010. It uses EternalBlue MS17-010 to propagate.
Ransom: between $300 to $600. There is code to 'rm' (delete) files in the virus. Seems to reset if the virus crashes.
Backdooring: The worm loops through every RDP session on a system to run the ransomware as that user. It also installs the DOUBLEPULSAR backdoor. It corrupts shadow volumes to make recovery harder. (source: malwarebytes)
Kill switch: If the website www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com is up the virus exits instead of infecting the host. (source: malwarebytes). This domain has been sinkholed, stopping the spread of the worm. Will not work if proxied (source).

update: A minor variant of the viru

Awesome new tab extensions and apps for Google Chrome

Currently (time and weather)
Dayboard (task list)
Dream Afar, Wandertab by Hitlist (travel wallpapers, weather)
Exposure, Wallcat, Tab.Pics (wallpapers)
Infinity (Tons of goodies)
[xkcd](https://chrome.g

layout	title
post	RethinkDB: why we failed

Posted on Github by Slava Akhmechet

When we [announced][shutdown-announcement] that RethinkDB is shutting down, I promised to write a post-mortem. I took some time to process the experience, and I can now write about it clearly.

What I Wish I'd Known About Equity Before Joining A Unicorn

Disclaimer: This piece is written anonymously. The names of a few particular companies are mentioned, but as common examples only.

This is a short write-up on things that I wish I'd known and considered before joining a private company (aka startup, aka unicorn in some cases). I'm not trying to make the case that you should never join a private company, but the power imbalance between founder and employee is extreme, and that potential candidates would

README

This gist assumes you are migrating an existing site for www.example.com — ideally WordPress — to a new server — ideally Ubuntu Server 16.04 LTS — and wish to enable HTTP/2 (backwards compatibile with HTTP/1.1) with always-on HTTPS, caching, compression, and more. Although these instructions are geared towards WordPress, they should be trivially extensible to other PHP frameworks, other FastCGI backends, and even non-FastCGI backends (using proxy in lieu of fastcgi in the terminal Caddyfile stanza).

Quickstart: Use your own naked and canonical domain names instead of example.com and www.example.com and customize the Caddyfile and VCL provided in this gist to your preferences!

These instructions target Varnish Cache 4.1, PHP-FPM 7.0, and Caddy 0.10. (I'm using MariaDB 10.1 as well, but that's not relevant to this guide.)

Coding Maxims

updated list moved to https://grin.io/coding-maxims

Random color from string in javascript

Consider a list of strings you need to permanently assign a random color.

First you should turn the string into a hash.

var string = "string"
var hash = 0

	# Borrowed from:
	# https://github.com/silven/go-example/blob/master/Makefile
	# https://vic.demuzere.be/articles/golang-makefile-crosscompile/

	BINARY = superdo
	VET_REPORT = vet.report
	TEST_REPORT = tests.xml
	GOARCH = amd64

	VERSION?=?

	Price breakdown vs DigitalOcean, Vultr and Linode:

	RAM / CPU Cores / STORAGE / Transfer

	$5/mo
	LightSail: 512MB, 1, 20GB SSD, 1TB
	DO: 512MB, 1, 20GB SSD, 1TB
	VULTR: 768MB, 1, 15GB SSD, 1TB

	$10/mo

	find . -maxdepth 3 -type d -name '.git' \
	-exec sh -c '(cd {}/.. && pwd && echo $(basename $(pwd)) && \
	curl -H "Authorization: token $GITHUB_TOKEN" --include --request POST \
	--data "{\"name\":\"hacktoberfest\",\"color\":\"ff4499\"}" \
	-H "Accept: application/vnd.github.v3+json" \
	"https://api.github.com/repos/paazmaya/$(basename $(pwd))/labels")' ';'