richzw

Stop using JWTs!

TLDR: JWTs should not be used for keeping your user logged in. They are not designed for this purpose, they are not secure, and there is a much better tool which is designed for it: regular cookie sessions.

If you've got a bit of time to watch a presentation on it, I highly recommend this talk: https://www.youtube.com/watch?v=pYeekwv3vC4 (Note that other topics are largely skimmed over, such as CSRF protection. You should learn about other topics from other sources. Also note that "valid" usecases for JWTs at the end of the video can also be easily handled by other, better, and more secure tools. Specifically, PASETO.)

A related topic: Don't use localStorage (or sessionStorage) for authentication credentials, including JWT tokens: https://www.rdegges.com/2018/please-stop-using-local-storage/

The reason to avoid JWTs comes down to a couple different points:

• The JWT specification is specifically designed only for very short-live tokens (~5 minute or less). Sessions

richzw

# /// script
# dependencies = [
#   "datasets>=3.0.0",
#   "peft>=0.13.0",
#   "torch",
#   "transformers",
#   "trl>=1.5.0",
# ]
# ///

richzw

Chat GPT "DAN" (and other "Jailbreaks")

• https://chat.openai.com/
• Is ChatGPT "DAN" Real? Gonna find out [Part 1]
  (https://www.youtube.com/watch?v=-q8woRG9FrI)
• Part 2: I thought ChatGPT DAN was a hoax, but...
  (https://www.youtube.com/watch?v=rHZRrDu3A2U&lc=UgxfrxX8aK7gnCzkend4AaABAg)

richzw

func main() {
	addr := flag.String("addr", ":4000", "HTTPS network address")
	certFile := flag.String("certfile", "cert.pem", "certificate PEM file")
	keyFile := flag.String("keyfile", "key.pem", "key PEM file")
	flag.Parse()

	mux := http.NewServeMux()
	mux.HandleFunc("/", func(w http.ResponseWriter, req *http.Request) {
		if req.URL.Path != "/" {
			http.NotFound(w, req)

richzw

FROM alpine:latest

RUN apk add -U libcap netcat-openbsd

RUN apk add --no-cache iptables ip6tables

RUN apk --no-cache add tcpdump

ENTRYPOINT ["sleep", "1h"]

richzw

FROM alpine:latest

RUN apk add -U libcap netcat-openbsd

RUN apk add --no-cache iptables ip6tables

RUN apk --no-cache add tcpdump

ENTRYPOINT ["sleep", "1h"]

richzw

    public static void main(String[] args) throws IOException {
        //create scope list with DataFlow's scopes
        Set<String> scopeList = new HashSet<>();
        scopeList.addAll(DataflowScopes.all());

        GoogleCredentials credential = null;
        try {
            String curDir = Paths.get(".").toAbsolutePath().normalize().toString();
            FileInputStream credFile = new FileInputStream(curDir + "/secrete.json");

richzw

        PCollection<String> lines = pipeline.apply("readDataFromGCS",
                TextIO.read().from("gcs path")
                        .watchForNewFiles(Duration.standardMinutes(2), Watch.Growth.never()));

        PCollection<KV<String, Map<String, String>>> filter_event = lines.apply("ParseAndFilterFn", ParDo.of(new ParseAndFilterFn()));
        PCollection<KV<String, Map<String, String>>> minute_window_events = filter_event.apply("MinuteFixwindow",
                Window.<KV<String, Map<String, String>>>into(FixedWindows.of(Duration.standardMinutes(3)))
                        .triggering(AfterProcessingTime
                                .pastFirstElementInPane()
                                .plusDelayOf(Duration.standardMinutes(2)))

richzw

class RedisSink(object):
    def __init__(self, host='localhost', port=6379, password=None, field=None):
        self._host = host
        self._port = port
        self._field = field
        self._password = password
        self._client = None
        self._pool = None

    def _connect(self):

richzw

//file.js

C = require('./C.js')

console.log(typeof C);

module.exports = function() {
    //var c = new C();
	return {c: new C()};