LocalStack
http://github.com/localstack/localstack
A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline
http://github.com/localstack/localstack
Visual Studio Code: Text Buffer Reimplementation (2018)
#vscode
The Visual Studio Code team redesigned the text buffer implementation to improve performance and memory usage, replacing the old line array representation with a piece table data structure and a red-black tree for efficient line lookups. The new implementation, called the "piece tree," significantly reduces memory usage and provides faster line lookups, although it has some limitations
#vscode
The Big List of Naughty Strings
https://github.com/minimaxir/big-list-of-naughty-strings
This is a list of strings which have a high probability of causing issues when used as user-input data.
https://github.com/minimaxir/big-list-of-naughty-strings
python's is_integer
Returns True if the float instance is finite with integral value, and False otherwise.
example:
Returns True if the float instance is finite with integral value, and False otherwise.
example:
>>> 1.5.is_integer()
False
>>> 1.0.is_integer()
True
>>> 1.4142135623730951.is_integer()
False
A Self-Mutating x86_64 C Program (2013)
A self-mutating C program that changes its code at runtime by modifying the text segment of its memory space using the mprotect() function and changing the permissions of a page to be writeable. The program then replaces a single byte in the foo() function with a new value to change the behavior of the function, and later replaces the entire foo() function with a shellcode
Envoy
- Official documentation
- What is Envoy?
- GitHub repo
- hot restart
- stats architecture
- sandboxes docs
- Lyft's Envoy dashboards
Envoy is an open source edge and service proxy, designed for cloud-native applications, high-performance edge/middle/service proxy (written in C++).
Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:
The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.
In practice, achieving the previously stated goal is incredibly difficult.
- Official documentation
- What is Envoy?
- GitHub repo
- hot restart
- stats architecture
- sandboxes docs
- Lyft's Envoy dashboards
SteamOS can be installed on some devices now (using recovery image)
https://store.steampowered.com/steamos
installation instructions using recovery image
SteamOS is Valve’s Linux-based operating system. It features a seamless user experience optimized for gaming, while retaining access to the power and flexibility of a PC, and plays tens of thousands of games on Steam. SteamOS officially ships on Steam Deck, and will soon ship with certain Legion Go S models.
https://store.steampowered.com/steamos
installation instructions using recovery image
Avoid Updating your MinIO instance
developers introduce trojan horse update stripping community edition of most features in the UI
https://github.com/minio/object-browser/pull/3509
#minio
developers introduce trojan horse update stripping community edition of most features in the UI
I noticed today that my MinIO docker image had been updated and the UI was stripped down to just an object browser. After some digging I found this disgusting PR that removes away all the features in the UI. 110k lines effectively removed and most features including admin functions gone. The discussion around this PR is locked and one of the developers points users to their commercial product instead.
https://github.com/minio/object-browser/pull/3509
#minio
Windows Server 2025 dMSA Vulnerability
What is dMSA?
- blog
- PoC (PowerShell)
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD).
"The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement," Akamai security researcher Yuval Gordon said in a report.
What is dMSA?
A new account type known as delegated Managed Service Account (dMSA) is introduced in Windows Server 2025 that allows migration from a traditional service account to a machine account with managed and fully randomized keys, while disabling original service account passwords. Authentication for dMSA is linked to the device identity, which means that only specified machine identities mapped in Active Directory (AD) can access the account.
- blog
- PoC (PowerShell)
Mkcert: Simple zero-config tool to make locally trusted development certificates
https://github.com/FiloSottile/mkcert
https://github.com/FiloSottile/mkcert