Do It by Code
54 subscribers
713 photos
100 videos
15 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
This media is not supported in your browser
VIEW IN TELEGRAM
LocalStack

A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline


http://github.com/localstack/localstack
Visual Studio Code: Text Buffer Reimplementation (2018)

The Visual Studio Code team redesigned the text buffer implementation to improve performance and memory usage, replacing the old line array representation with a piece table data structure and a red-black tree for efficient line lookups. The new implementation, called the "piece tree," significantly reduces memory usage and provides faster line lookups, although it has some limitations


#vscode
Cloud Comparison Cheat Sheet
Maizzle

Quickly build HTML emails with Tailwind CSS


https://maizzle.com
The Big List of Naughty Strings

This is a list of strings which have a high probability of causing issues when used as user-input data.


https://github.com/minimaxir/big-list-of-naughty-strings
python's is_integer

Returns True if the float instance is finite with integral value, and False otherwise.

example:

>>> 1.5.is_integer()
False
>>> 1.0.is_integer()
True
>>> 1.4142135623730951.is_integer()
False
A Self-Mutating x86_64 C Program (2013)

A self-mutating C program that changes its code at runtime by modifying the text segment of its memory space using the mprotect() function and changing the permissions of a page to be writeable. The program then replaces a single byte in the foo() function with a new value to change the behavior of the function, and later replaces the entire foo() function with a shellcode
Envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications, high-performance edge/middle/service proxy (written in C++).

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

In practice, achieving the previously stated goal is incredibly difficult.


- Official documentation
- What is Envoy?
- GitHub repo
- hot restart
- stats architecture
- sandboxes docs
- Lyft's Envoy dashboards
SteamOS can be installed on some devices now (using recovery image)

SteamOS is Valve’s Linux-based operating system. It features a seamless user experience optimized for gaming, while retaining access to the power and flexibility of a PC, and plays tens of thousands of games on Steam. SteamOS officially ships on Steam Deck, and will soon ship with certain Legion Go S models.


https://store.steampowered.com/steamos

installation instructions using recovery image
Remote Prompt Injection in Gitlab Duo Leads to Source Code Theft
Article, Comments

#prompt_injection
Avoid Updating your MinIO instance
developers introduce trojan horse update stripping community edition of most features in the UI

I noticed today that my MinIO docker image had been updated and the UI was stripped down to just an object browser. After some digging I found this disgusting PR that removes away all the features in the UI. 110k lines effectively removed and most features including admin functions gone. The discussion around this PR is locked and one of the developers points users to their commercial product instead.


https://github.com/minio/object-browser/pull/3509

#minio
1
before and after

#minio
5
Windows Server 2025 dMSA Vulnerability

A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD).

"The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement," Akamai security researcher Yuval Gordon said in a report.


What is dMSA?

A new account type known as delegated Managed Service Account (dMSA) is introduced in Windows Server 2025 that allows migration from a traditional service account to a machine account with managed and fully randomized keys, while disabling original service account passwords. Authentication for dMSA is linked to the device identity, which means that only specified machine identities mapped in Active Directory (AD) can access the account.


- blog
- PoC (PowerShell)
2
Mkcert: Simple zero-config tool to make locally trusted development certificates

https://github.com/FiloSottile/mkcert
1