junkblocker

73 karma · joined December 5, 2012

junkblockeron A proof-of-concept of a vulnerability in custom shell prompt scripts

Confirming what GP said on version 5.3.1, not seeing any escaping

    git checkout <Tab>
    git checkout $(./pwd)

junkblockeron A proof-of-concept of a vulnerability in custom shell prompt scripts

This is worrisome. Even carelessly trying to checkout a branch named like that is vulnerable without a prompt being involved:

    git co -b foo <Tab> to complete branch names
    git co -b foo $(./pw3n) <- execution right here

junkblockeron Entr(1) – Run tests whenever files change

A long time entr user, I recently switch to modd for flexible almost makefile like configurability, and watching/ignoring of multiple patterns to name a few convenient feature.

https://github.com/cortesi/modd

junkblockeron Inside the Extreme Machine That Mimics Bombs and Black Holes

I was expecting the article to be able a supercomputer simulating these events. Pleasantly surprised to find an actual physical/physics based machine.

junkblockeron Oblique programming strategies

I knew I had seen something like this before - http://kevinlawler.com/prompts

junkblockeron Stark, Spare, Beautiful Midcentury British Safety Posters

Reminded me of the Nasa JPL space exploration posters - http://www.jpl.nasa.gov/visions-of-the-future/

junkblockeron Ask HN: Good sci-fi movies?

The book, [Roadside Picnic](https://en.wikipedia.org/wiki/Roadside_Picnic) it is based on is equally amazing and both the movie adaptation and the book stand great on their own even though the movie was an artistic interpretation.

junkblockeron Ask HN: Good sci-fi movies?

Same here. I loved the book (Do Androids dream of Electric Sheep?) but didn't care for the movie version at all as I felt it missed the magic of the book completely. Maybe as in most such cases what got read/seen first mattered.

junkblockeron Hammerspoon – Powerful automation of OS X with Lua

My thoughts - It gives people powerful scriptability over things they couldn't control before. It has been refined down a few products/generations so its molded for more people to find it useful. It is free. Nobody is trying to sell anything or take anything away. So, maybe there is no need for any negativity.

junkblockeron Hammerspoon – Powerful automation of OS X with Lua

1. Automating network connection switching and related tiggered actions

2. Site specific apps (e.g. trello)

3. Custom browser chooser per URL

4. Clipboard manager

5. Downloader manager

6. Various system information displays

7. Pomodoro timer

8. Various utilities.

junkblockeron iTerm2 version 3 beta released

It was all changed to termguicolors finally around 7.4.1809 . Example config:

    if has('termguicolors') && !has('gui_running')
       set termguicolors
    endif

junkblockeron Rewiring Your Brain: Neurofeedback Goes Mainstream

Works here. Try http://i.imgur.com/mzDNngh.jpg .

junkblockeron Go 1.6 is Released

Does https://github.com/stars not work for you?

junkblockeron OS X El Capitan GM Candidate available

What's the definition of system files in this context? I run ssh on alternate port by editing /System/Library/LaunchDaemons/ssh.plist . Will that not be editable anymore or is this applicable to executables only?

junkblockeron Secretive fusion company claims reactor breakthrough

Reminds me of this BBC infographic on hottest temperatures in the universe, http://www.bbc.co.uk/bbc.com/future/bespoke/20131218-tempera... , very enlightening.

junkblockeron Ask HN: What is the best device for reading technical e-books?

I have a 1st gen Google Nexus 7, 32GB RAM. For technical books requiring scaling, color and illustrations it is pretty good with Manatano Reader.

junkblockeron Show HN: 'rebaser' improves on 'git rebase -i'

You are running that in shell by hand. The python program running here is not shell. If you do a print(os.environ["GIT_EDITOR"]) in the python3 program you'll still see ~/bin/vim .

junkblockeron Show HN: 'rebaser' improves on 'git rebase -i'

See my quick python2 edit at https://gist.github.com/junkblocker/c4b7f2417e62f0893021 . It needed os.path.expanduser(...) since my editor was set to ~/bin/vim and ~ is only expanded by shell without that.

junkblockeron Show HN: 'rebaser' improves on 'git rebase -i'

Quick python2 conversion: https://gist.github.com/junkblocker/c4b7f2417e62f0893021

junkblockeron Bug in widely used OpenSSH opens servers to password cracking

Usually automated bulk (non-targeted) hacking tools don't like to spend time looking for services on non-standard ports. I get zero ssh hack attempts on my machines ever since I changed to a non-standard port vs 100s of attempts everyday previously on standard ssh port.

junkblockeron Ask HN: What is the most mind blowing book you've ever read?

Ann Leckie was being touted as Iain M Bank's successor with her Imperial Radch series. But due to that expectation being set up I was underwhelmed. It was enjoyable on its own but doesn't compare in quality to Banks's works, e.g. Excession, in my opinion.

junkblockeron Tarsnap performance issues in late March, most of April

Oops

  s/\//\\%/

yeah.

  sleep $[RANDOM\%3600]

junkblockeron Tarsnap performance issues in late March, most of April

sleep $[RANDOM/3600] works everywhere without requiring jot/seq etc. on BSD/Mac/Linux.

junkblockeron Hound: A Fast Code Search Tool

I am maintaining a fork of it at https://github.com/junkblocker/codesearch where I've added some niceties.

junkblockeron How to set up stress-free SSL on an OS X development machine

Also, xca works just fine on OS X too.

junkblockeron OS X 10.10 Yosemite: The Ars Technica Review

I noticed Chrome crashing whenever I was in the Chrome store too many time. The 'graphics error happened' message after the crash was another clue. So I turned off native graphics acceleration in Chrome's setting and it's not crashed since then.

junkblockeron Gitjk – command to undo what you just did in git