Tyler Rockwood rockwotj

name

threat-model-producer

description

Produce an open-source project's threat model — the implicit contract between the project and downstream users (what's in scope, what's out, what's claimed, what's disclaimed). Use when a project needs a threat model for an automated security scan (e.g. Glasswing), to anchor vulnerability-report triage, or when a maintainer asks "what's our security model?". Source — Michael Scovetta's gist `https://gist.github.com/scovetta/2dc9a0695c7cbcc32e23799e00d2ced3`, imported verbatim and bound here as a reusable SKILL.

THREAT MODEL — Skill for Producing Open-Source Project Threat Models

This document is an instruction set for whoever is producing a threat model for an open-source project — a human reviewer, a coding assistant, an automated tooling pipeline, or any combination. It is deliberately

Virtual Hosts on nginx (CSC309)

When hosting our web applications, we often have one public IP address (i.e., an IP address visible to the outside world) using which we want to host multiple web apps. For example, one may wants to host three different web apps respectively for example1.com, example2.com, and example1.com/images on the same machine using a single IP address.

How can we do that? Well, the good news is Internet browsers

	function LspRename()
	local curr_name = vim.fn.expand("<cword>")
	local value = vim.fn.input("LSP Rename: ", curr_name)
	local lsp_params = vim.lsp.util.make_position_params()

	if not value or #value == 0 or curr_name == value then return end

	-- request lsp rename
	lsp_params.newName = value
	vim.lsp.buf_request(0, "textDocument/rename", lsp_params, function(_, res, ctx, _)

	# Generate module-info.java
	jdeps --generate-module-info <output-path-for-module-info.java> <path-to-non-modular-jar>

	# Compile the module-info.java
	javac --patch-module <name-of-the-module>=<path-to-non-modular-jar> <path-to-module-info.java>

	# Update jar with module-info
	cd <directory-containing-module-info.class> # avoid path prefix to module-info for next command
	jar uf <path-to-non-modular-jar> module-info.class

	"""
	Problem: provide two-way communication with a subprocess in Python.

	See also:
	- https://kevinmccarthy.org/2016/07/25/streaming-subprocess-stdin-and-stdout-with-asyncio-in-python/
	- http://eli.thegreenplace.net/2017/interacting-with-a-long-running-child-process-in-python/
	"""

	import asyncio
	import sys

	Latency Comparison Numbers
	--------------------------
	L1 cache reference/hit 1.5 ns 4 cycles
	Floating-point add/mult/FMA operation 1.5 ns 4 cycles
	L2 cache reference/hit 5 ns 12 ~ 17 cycles
	Branch mispredict 6 ns 15 ~ 20 cycles
	L3 cache hit (unshared cache line) 16 ns 42 cycles
	L3 cache hit (shared line in another core) 25 ns 65 cycles
	Mutex lock/unlock 25 ns
	L3 cache hit (modified in another core) 29 ns 75 cycles

	ios_app(
	name = "App",
	hdrs = ["src/*.h"],
	srcs = ["src/*.m"],
	deps = [
	"@SDWebImage//:latest_library",
	],
	)

	ios_test(

	package services

	import java.lang.reflect.Type

	import com.google.gson._
	import org.joda.time.format.ISODateTimeFormat
	import org.joda.time.{DateTime, DateTimeZone}

	object Serializers {

	/**
	* Copyright (c) 2013 Xcellent Creations, Inc.
	*
	* Permission is hereby granted, free of charge, to any person obtaining
	* a copy of this software and associated documentation files (the
	* "Software"), to deal in the Software without restriction, including
	* without limitation the rights to use, copy, modify, merge, publish,
	* distribute, sublicense, and/or sell copies of the Software, and to
	* permit persons to whom the Software is furnished to do so, subject to
	* the following conditions: