Johannes Plunien plu

brew is a bad neighbor

This isn't a guide about locking down homebrew so that it can't touch the rest of your system security-wise.

This guide doesn't fix the inherent security issues of a package management system that will literally yell at you if you try to do something about "huh, maybe it's not great my executables are writeable by my account without requiring authorization first".

But it absolutely is a guide about shoving it into its own little corner so that you can take it or leave it as you see fit, instead of just letting the project do what it likes like completely taking over permissions and ownership of a directory that might be in use by other software on your Mac and stomping all over their contents.

By following this guide you will:

Never have to run sudo to forcefully change permissions of some directory to be owned by your account

Usage

swiftc main.swift -emit-module-path main.swiftmodule -emit-executable -enable-private-imports -Xfrontend -enable-implicit-dynamic
./main -> prints From original bar()
swiftc -emit-library inject.swift -o inject.dylib -I . -Xlinker -undefined -Xlinker suppress -Xlinker -flat_namespace -Xfrontend -disable-access-control
DYLD_INSERT_LIBRARIES=inject.dylib ./main -> prints From replacement bar()

Notes

Passing -Xfrontend -enable-implicit-dynamic removes you from having to add dynamic to everything you want to be replacable

Adding tailscale to an EdgeRouter (and surviving system upgrades)

I suggest you run sudo bash on all of these so you're the root user.

Installing

Download tailscale and put the files in /config/. Find the latest stable or unstable version for your EdgeRouter's processor (ex. ER4 is mips and ERX is mipself)

sudo bash    # if you havent already

	#!/bin/sh

	# This is an example script to force provision a UniFi network device using the controller API

	# If you are running this externally then replace localhost with the hostname
	baseurl=https://localhost:8443

	# I would make a dedicated admin user for this
	username=<username_here>
	password=<password_here>

	require 'tempfile'
	require 'open3'

	INTERMEDIATE_CERTIFICATES = [
	{
	OU: 'G1',
	url: 'https://www.apple.com/certificateauthority/DeveloperIDCA.cer'
	},
	{
	OU: 'G2',

	#!/bin/bash
	# based on https://medium.com/@zoispag/collect-restic-metrics-when-using-resticker-cf862f87fc41

	# This script will execute restic commands and will pipe the output to jq,
	# in order to format it in a prometheus compatible metric.
	# Add this script in the host crontab, to be executed every few hours.

	HOST=${HOST:-`hostname -f`}

	# Ensure jq package is installed, as it is needed to format

	@propertyWrapper
	public final class LayoutInvalidating<Value> where Value: Equatable {

	public static subscript<EnclosingSelf>(
	_enclosingInstance observed: EnclosingSelf,
	wrapped wrappedKeyPath: ReferenceWritableKeyPath<EnclosingSelf, Value>,
	storage storageKeyPath: ReferenceWritableKeyPath<EnclosingSelf, LayoutInvalidating>
	) -> Value where EnclosingSelf: UIView {
	get {
	return observed[keyPath: storageKeyPath].stored

	import SwiftUI

	private let linkDetector = try! NSDataDetector(types: NSTextCheckingResult.CheckingType.link.rawValue)

	struct LinkColoredText: View {
	enum Component {
	case text(String)
	case link(String, URL)
	}

	import UIKit
	import SafariServices
	import AuthenticationServices
	import AppAuth
	import Reachability

	class OIDExternalUserAgentASWebAuthenticationSession: NSObject, OIDExternalUserAgent {
	private let presentingViewController: UIViewController
	private var externalUserAgentFlowInProgress: Bool = false
	private var authenticationViewController: ASWebAuthenticationSession?

	#!/bin/bash

	# Parameters
	source="$(pwd)/$1" # Track folder source where diffs are checked
	index=$2 # Track diff remote
	project_root=${0%/*} # Track project root folder
	swiftlint_path='Pods/SwiftLint/swiftlint' # Track SwiftLint path

	# Parameter check
	if [[ $# < 1 ]]; then