You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Notes on sandboxing untrusted code - why Python can't be sandboxed, comparing Firecracker/gVisor/WASM approaches
Sandboxing Untrusted Python
Python doesn't have a built-in way to run untrusted code safely. Multiple attempts have been made, but none really succeeded.
Why? Because Python is a highly introspective object-oriented language with a mutable runtime. Core elements of the interpreter can be accessed through the object graph, frames and tracebacks, making runtime isolation difficult.
This means that even aggressive restrictions can be bypassed:
There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support
to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder
which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!
Custom react view for a home assistant Webrtc camera
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Pop Note is a userscript that enhances the user experience of Google NotebookLM by opening the notes in full screen mode with right-click and exit with Escape key. This allows users to focus on their notes without distractions from other UI elements.
Pop Note for NotebookLM
Pop Note is a userscript that enhances the user experience of Google NotebookLM by opening the notes in full screen mode with right-click and exit with Escape key. This allows users to focus on their notes without distractions from other UI elements.
Key Features
Adds a right-click context menu option to open notes in full screen mode
Allows exiting full screen mode by pressing the Escape key
Adds a control panel on upper left corner to allow user to change the column layout between 1, and 2 columns.
What you NEED to know before touching a video file
What you NEED to Know Before Touching a Video File
Hanging out in subtitling and video re-editing communities,
I see my fair share of novice video editors and video encoders,
and see plenty of them make the classic beginner mistakes when it comes to working with videos.
A man can only read "Use Handbrake to convert your mkv to an mp4 :)" so many times before losing it,
so I am writing this article to channel the resulting psychic damage into something productive.
If you are new to working with videos (or, let's face it, even if you aren't),
please read through this guide to avoid making mistakes that can cost you lots of computing power, storage space, or video quality.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Make Ubuntu packages 90% faster by rebuilding them
Make Ubuntu packages 90% faster by rebuilding them
TL;DR
You can take the same source code package that Ubuntu uses to build jq, compile it again, and realize 90% better performance.
Setting
I use jq for processing GeoJSON files and other open data offered in JSON format. Today I am working with a 500MB GeoJSON file that contains the Alameda County Assessor's parcel map. I want to run a query that prints the city for every parcel worth more than a threshold amount. The program is
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters