Do It by Code
54 subscribers
714 photos
100 videos
15 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
Maizzle

Quickly build HTML emails with Tailwind CSS


https://maizzle.com
The Big List of Naughty Strings

This is a list of strings which have a high probability of causing issues when used as user-input data.


https://github.com/minimaxir/big-list-of-naughty-strings
python's is_integer

Returns True if the float instance is finite with integral value, and False otherwise.

example:

>>> 1.5.is_integer()
False
>>> 1.0.is_integer()
True
>>> 1.4142135623730951.is_integer()
False
A Self-Mutating x86_64 C Program (2013)

A self-mutating C program that changes its code at runtime by modifying the text segment of its memory space using the mprotect() function and changing the permissions of a page to be writeable. The program then replaces a single byte in the foo() function with a new value to change the behavior of the function, and later replaces the entire foo() function with a shellcode
Envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications, high-performance edge/middle/service proxy (written in C++).

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

In practice, achieving the previously stated goal is incredibly difficult.


- Official documentation
- What is Envoy?
- GitHub repo
- hot restart
- stats architecture
- sandboxes docs
- Lyft's Envoy dashboards
SteamOS can be installed on some devices now (using recovery image)

SteamOS is Valve’s Linux-based operating system. It features a seamless user experience optimized for gaming, while retaining access to the power and flexibility of a PC, and plays tens of thousands of games on Steam. SteamOS officially ships on Steam Deck, and will soon ship with certain Legion Go S models.


https://store.steampowered.com/steamos

installation instructions using recovery image
Remote Prompt Injection in Gitlab Duo Leads to Source Code Theft
Article, Comments

#prompt_injection
Avoid Updating your MinIO instance
developers introduce trojan horse update stripping community edition of most features in the UI

I noticed today that my MinIO docker image had been updated and the UI was stripped down to just an object browser. After some digging I found this disgusting PR that removes away all the features in the UI. 110k lines effectively removed and most features including admin functions gone. The discussion around this PR is locked and one of the developers points users to their commercial product instead.


https://github.com/minio/object-browser/pull/3509

#minio
1
before and after

#minio
5
Windows Server 2025 dMSA Vulnerability

A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD).

"The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement," Akamai security researcher Yuval Gordon said in a report.


What is dMSA?

A new account type known as delegated Managed Service Account (dMSA) is introduced in Windows Server 2025 that allows migration from a traditional service account to a machine account with managed and fully randomized keys, while disabling original service account passwords. Authentication for dMSA is linked to the device identity, which means that only specified machine identities mapped in Active Directory (AD) can access the account.


- blog
- PoC (PowerShell)
2
Mkcert: Simple zero-config tool to make locally trusted development certificates

https://github.com/FiloSottile/mkcert
1
dotnet run app.cs

.NET 10 Preview 4 introduces file-based apps, allowing direct execution of C# files using dotnet run. This feature streamlines development, especially for beginners, and supports directives, NuGet packages, and cross-platform scripting.
Do It by Code
dotnet run app.cs .NET 10 Preview 4 introduces file-based apps, allowing direct execution of C# files using dotnet run. This feature streamlines development, especially for beginners, and supports directives, NuGet packages, and cross-platform scripting.
Referencing NuGet packages with #:package

#:package Humanizer@2.14.1

using Humanizer;

var dotNet9Released = DateTimeOffset.Parse("2024-12-03");
var since = DateTimeOffset.Now - dotNet9Released;

Console.WriteLine($"It has been {since.Humanize()} since .NET 9 was released.");
Do It by Code
dotnet run app.cs
so I just noticed they made their devblog with php and wordpress
1
Forwarded from Gregory Klyushnikov
AI is a solution in a desperate search of a problem, just like blockchain. AI is very good at solving some very specific tasks, like data classification or generation of new data based on a prompt (image generation, speech synthesis, etc), but to use it for anything else is nothing but pure hype
👍1