Skip to content

Instantly share code, notes, and snippets.

View khalby786's full-sized avatar
donuts

Khaleel Gibran khalby786

donuts
View GitHub Profile

g.co, Google's official URL shortcut (update: or Google Workspace's domain verification, see bottom), is compromised. People are actively having their Google accounts stolen.

Someone just tried the most sophisticated phishing attack I've ever seen. I almost fell for it. My mind is a little blown.

  1. Someone named "Chloe" called me from 650-203-0000 with Caller ID saying "Google". She sounded like a real engineer, the connection was super clear, and she had an American accent. Screenshot.

  2. They said that they were from Google Workspace and someone had recently gained access to my account, which they had blocked. They asked me if I had recently logged in from Frankfurt, Germany and I said no.

  3. I asked if they can confirm this is Google calling by emailing me from a Google email and they said sure and sent me this email and told me to look for a case number in it, which I saw in

@adtac
adtac / Dockerfile
Last active July 13, 2025 20:06
#!/usr/bin/env docker run
#!/usr/bin/env -S bash -c "docker run -p 8080:8080 -it --rm \$(docker build --progress plain -f \$0 . 2>&1 | tee /dev/stderr | grep -oP 'sha256:[0-9a-f]*')"
# syntax = docker/dockerfile:1.4.0
FROM node:20
WORKDIR /root
RUN npm install sqlite3
Twitter ID Screen name Followers Removal observed Before After
17461978 SHAQ 15612791 2022-02-26T22:24:52Z SHAQ.ETH SHAQ.SOL
21910850 jakeowen 2119904 2022-02-26T15:45:18Z jakeowen.eth Jake Owen
7846 ijustine 1811449 2022-03-09T14:43:37Z iJustine.eth iJustineUltra
1666038950 BoredElonMusk 1752290 2022-02-17T08:05:47Z bored.eth Bored
381051960 ethRuby 1267133 2022-03-19T08:08:11Z CryptoSolis.eth Ruby
1282418324228337665 wsbmod 832406 2022-02-24T06:52:07Z wsbmod.eth wsbmod
20882981 EclecticMethod 495235 2022-02-18T04:39:30Z eclecticm.eth Eclectic Method
811350 alexisohanian 479340 2022-02-08T06:31:55Z AlexisOhanian.eth 7️⃣7️⃣6️⃣ Alexis Ohanian 7️⃣7️⃣6️⃣
22784458 Fwiz 410813 2022-03-22T08:54:42Z Ryan Wyatt - fwiz.eth 💜 Ryan Wyatt - @ GDC
@azagniotov
azagniotov / beautiful.rest.api.docs.in.markdown.md
Last active December 8, 2025 01:27
Example to create beautiful REST API docs in Markdown, inspired by Swagger API docs.

Hello there, I regret to inform you that back in June, the glitch team noticed that pinging services affected the stability of glitch by a significant amount so they took action by banning all traffic that appeared to originate from a pinging service. Pinging services may or may not have also been the causes of the frequent outages as outages now happen a lot less frequently after the ban. Another reason was that a lot of money was being wasted, because most projects spend a lot of idle time waiting for requests or in the case of discord bots responding to gateway ping events. The glitch project wakeup system is designed so that a project with no requests in 5 minutes will sleep allowing more apps to run on the platform concurrently and ensuring better stability. You might argue that discord bots don't do that, and you might be right if your discord bot is in a large amount of servers(>=1000). In that case you should be getting glit

Going static isn't so bad

In fact some people called it a stack called JAMStack. Here are ways you can make static apps that are still as cool as server side apps.

How do I make stuff only show when someone enters a password

  1. Encrypt something with your password as the key
  2. Put it on the webpage. When someone enters the password attempt to decrypt using the same key(please use non-bruteforcable encryption so don't use the Vigenere cipher for this). If it's successful show the decrypted content.

Suppose someone is answering a math problem how do I make it so they can't just hack and find the answer without checking the answer on the server side

Hash the answer and when the user presses a button to check their answers just hash their input and compare. In addition, use a similiar method like the blockchain and add a really long salt to make computation slower so it isn't bruteforcable.

How do I make it so people can load data and save data from other people

  • You c
@khalby786
khalby786 / server.js
Created August 26, 2020 11:27
GitHub oAuth Login with Express & without Passport.js
const express = require("express");
const app = express();
var session = require('express-session');
const fetch = require('node-fetch');
const clientID = process.env.CLIENT_ID;
const clientSecret = process.env.CLIENT_SECRET;
async function getAccessToken(code, client_id, client_secret) {
const request = await fetch("https://github.com/login/oauth/access_token", {
@jaames
jaames / fancy-css-links.md
Last active June 26, 2025 11:49
Fancy CSS link underlines with inline SVGs (plus embedded animations!)
@nvbn
nvbn / app.py
Last active March 11, 2023 13:16
Sound lights with spotify, esp8266 and neopixel strip
from __future__ import annotations
import array
import asyncio
from bisect import bisect_left
from dataclasses import dataclass
import logging
import os
import socket
import time
@chengguizi
chengguizi / _rpi_common_problems_on_windows.md
Last active February 2, 2025 14:04
SSH into Raspberry Pi on Windows using "raspberrypi.local"

SSH into Raspberry Pi on Windows using "raspberrypi.local"

General Steps

  • Download the latest Raspbian OS image, and burn it into a micro SD card using Etcher.
  • Create a file "ssh" in the boot partition in your micro SD card, without extension! ( How to check file extensions? )
  • Insert the freshly prepared micro SD card into Raspberry Pi.
  • Power on Raspberry Pi.
  • Plug in Ethernet cable, connecting the Raspberry to the Windows machine. Verify the lights of Ethernet ports are blinking.
  • Open a cmd window, and verify ping raspberrypi.local returns "Reply from ..."
  • Open your favourite ssh terminal (e.g. MobaXterm) and type ssh [email protected], password is raspberry.