Skip to content

Instantly share code, notes, and snippets.

View ponsfrilus's full-sized avatar
🤖
Ideas are easy. Execution is everything.

Nicolas Borboën ponsfrilus

🤖
Ideas are easy. Execution is everything.
View GitHub Profile
@bagder
bagder / slop.md
Last active December 5, 2025 10:09
AI slop security reports submitted to curl

Slop

This collection is limited to only include the reports that were submitted as security vulnerabilities to the curl bug-bounty program on Hackerone.

Several other issues not included here are highly suspcious as well.

Reports

  1. [Critical] Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet. #2199174
{
"slug": "codingClubDE",
"title": "Coding Club für Mädchen — DE",
"description": "Quiz für den SPS-Tag Wettbewerb am 8. Juni 2024.",
"image": "https://www.epfl.ch/education/education-and-science-outreach/wp-content/uploads/2020/01/Visuel-Coding-Club-plusieurs-pictos.png",
"visibility": "public",
"shuffle": true,
"info": {
"date": "2024-06-08",
"timeLimit": "15 Minuten",
@thesamesam
thesamesam / xz-backdoor.md
Last active November 30, 2025 22:27
xz-utils backdoor situation (CVE-2024-3094)

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

<!doctype html>
<!-- This is just a very slightly modified tracking.js demo: https://trackingjs.com/examples/face_camera.html -->
<html>
<head>
<meta charset="utf-8">
<script src="https://cdnjs.cloudflare.com/ajax/libs/tracking.js/1.1.3/tracking-min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/tracking.js/1.1.3/data/face-min.js"></script>
<style>
video, canvas {
margin-left: 100px;
@olalonde
olalonde / apply-registry-secret.sh
Created April 22, 2017 08:56
Create or update AWS registry secret on Kubernetes
#!/bin/bash
update_registry_secret() {
login_cmd=$(aws ecr get-login)
username=$(echo $login_cmd | cut -d " " -f 4)
password=$(echo $login_cmd | cut -d " " -f 6)
endpoint=$(echo $login_cmd | cut -d " " -f 9)
auth=$(echo "$username:$password" | /usr/bin/base64)
configjson="{ \"auths\": { \"${endpoint}\": { \"auth\": \"${auth}\" } } }"

Building a desktop application with Electron

This is a tutorial for building a Markdown-to-HTML renderer using Electron. It is meant to accompany my session on Building a desktop application with Electron at JSConf Colombia.

The slides for the first part of the presentation are available here.

About Steve

Steve is the Director of Academics for the Front-End Engineering program at the Turing School of Software and Design in Denver, Colorado, USA.

@ikasty
ikasty / README.md
Last active June 18, 2024 06:46
'Cat' solution for colorized logs in docker-compose

When you use docker-compose, logs are not colorized like: before

However, you can get colorized logs using really-cute-'cat' solution. Instead of

docker-compose up

using

docker-compose up | cat
@klmr
klmr / Makefile
Last active July 30, 2025 14:29
Self-documenting makefiles
# Example makefile with some dummy rules
.PHONY: all
## Make ALL the things; this includes: building the target, testing it, and
## deploying to server.
all: test deploy
.PHONY: build
# No documentation; target will be omitted from help display
build:
@shirishp
shirishp / dilbert-strip-scrapper.js
Last active February 22, 2019 21:17
Scrape Dilbert strips from http://dilbert.com/ for given duration
var request = require("request"),
cheerio = require("cheerio"),
fs = require('fs');
var site = "http://dilbert.com";
var startingPage = "/strip/2005-01-01";
var finalPage = '/strip/2006-01-01';
var nextPage = startingPage;

Contributing

When contributing to this repository, please first discuss the change you wish to make via issue, email, or any other method with the owners of this repository before making a change.

Please note we have a code of conduct, please follow it in all your interactions with the project.

Pull Request Process

  1. Ensure any install or build dependencies are removed before the end of the layer when doing a