Searching yarn

Twts matching #http
Sort by: Newest, Oldest, Most Relevant
In-reply-to » "Forgive me for the harm I have caused this world. None may atone for my actions but me and only in me shall their stain live on. I am thankful to have been caught, my fall cut short by those with wizened hands. All I can be is sorry, and that is all I am."

@bender@twtxt.net Ahh I see. That reminds me, I was going to start watching something someone recommended here hmmm 🧐

⤋ Read More
In-reply-to » "Forgive me for the harm I have caused this world. None may atone for my actions but me and only in me shall their stain live on. I am thankful to have been caught, my fall cut short by those with wizened hands. All I can be is sorry, and that is all I am."

@prologic@twtxt.net LOL. It is from the Severance, AppleTV+ series. I am about to finish watching it with my kid—well, what’s available for seeing. The series is still ongoing. I recommend it!

⤋ Read More
In-reply-to » "Forgive me for the harm I have caused this world. None may atone for my actions but me and only in me shall their stain live on. I am thankful to have been caught, my fall cut short by those with wizened hands. All I can be is sorry, and that is all I am."

@bender@twtxt.net Huh? šŸ¤”

⤋ Read More

Thanks to @kat@yarn.girlonthemoon.xyz and her shelf I finally spent several hours in the woodshop. I wanted to build two drawers for the workbench and thought that I will complete this project in no time. I’ve been so wrong again. ;-)

I didn’t draw any plans, just measured a few times and then went to cutting a bunch of particle board leftovers at the table saw. I routed rebates on the sides, fronts and backs to lap the boxes and sink in the bottom. It turned out that having no plans was a stupid idea. I cut exactly on the lines as I calculated and measured, however, the math in my head fell apart when it eventually met reality. The bottoms are too short, so I gotta glue on some strips. Also, with the longer fronts, the sides won’t work either, I have to fix them as well. :-D

Finally, the lid of my cyclone bucket broke when the negative pressure got too large. Oh well. It was just an old wood glue bucket, I’ve got another empty one, so I can use that lid but strengthen it first with some plywood. Something for future Lyse to deal with.

All in all, it was still good fun. Wood (haha) do it again, but at least with some sketches on paper. ;-)

⤋ Read More
In-reply-to » Also spent the morning continuing to think about a new design for EdgeGuard's WAF. I'm basically going to build an entirely new pluggable WAF that will be designed to only consider Rate Limiting, IP/ASN-based filtering, JavaScript challenge handling, Basic behavioral analysis and Anomaly detection.

@prologic@twtxt.net anubis is THE BESTTTTTTTTTTTTTT

⤋ Read More
In-reply-to » What do you think I just learned about in this awesome Computerphile video with Matt Godbolt called "Subroutines in Low Level Code"? https://www.youtube.com/watch?v=1su3lAh-k4o

@lyse@lyse.isobeef.org … and I realized only now that that’s the guy behind godbolt.org? I never assumed ā€œgodboltā€ to be a human name, more like some kind of wordplay. 🄓

⤋ Read More
In-reply-to » My main domain name turned 24 years old today. That feels weird.

@anth@a.9srv.net I actually don’t have a clue how old my public-facing domain is 🤣 I have another more personal one that’s probably around ~15 years, but I’m not even sure how to check tbh šŸ˜…

⤋ Read More
In-reply-to » One thing about my design here is that it would no longer incorporate "regex"-based rules like OWASP, mostly because my experience thus far has taught me that these rules are kind of overly sensitive, produce false positives and I'm not sure they are really very effective. For example, why is the point of performing SQL injection detection at the Edge using a WAF if you already handle SQL properly in the first place? (seriously does anyone still construct SQL queries by hand with effectively printf?!)

@lyse@lyse.isobeef.org I agree with this sentiment šŸ™Œ

⤋ Read More
In-reply-to » One thing about my design here is that it would no longer incorporate "regex"-based rules like OWASP, mostly because my experience thus far has taught me that these rules are kind of overly sensitive, produce false positives and I'm not sure they are really very effective. For example, why is the point of performing SQL injection detection at the Edge using a WAF if you already handle SQL properly in the first place? (seriously does anyone still construct SQL queries by hand with effectively printf?!)

@prologic@twtxt.net There have always been and there will always be people who have absolutely no clue what they’re doing. I’ve been 100% one of them when I started. Guaranteed, heaps of new SQL injections are born every single day, numbers rising.

That doesn’t justify all the WAF crap in the first place, though. In my opinion it’s just a filthy plaster applied to an injected wound. The software itself must be secure. Otherwise, don’t put that shit on the internet. Probably not even operate it at all. Nowhere. Fix it or throw it in the bin.

⤋ Read More
In-reply-to » Also spent the morning continuing to think about a new design for EdgeGuard's WAF. I'm basically going to build an entirely new pluggable WAF that will be designed to only consider Rate Limiting, IP/ASN-based filtering, JavaScript challenge handling, Basic behavioral analysis and Anomaly detection.

And yes I’m taking some inspiration from Anubis here šŸ˜…

⤋ Read More

I’ve been poking around with #Crowdsec for the past couple of days, had to deal with a lot of false paositives but I’m starting to get it. I’ve even hooked it up with #Ntfy just because I can. Now I should try making my own scenarios and see how it goes.

Image

⤋ Read More

@terron@duque-terron.cat este gato habla Castellano, o Catalan? Esa oracion suena extranya en Castellano. Yo hubiera escrito:

ā€œEn estos momentos, no sĆ© si le estĆ” pidiendo a un dios que libere su pueblo felino, o estĆ” mirando una paloma.ā€

⤋ Read More
In-reply-to » Sometimes things go wrong when buying CDs second-hand. I bought an album quite cheap – but as it turned out, they only checked the cover, not the content, so I got something else instead which is actually much more expensive. 🤣

@movq@www.uninformativ.de a first edition signed Superman comic book, carefully folded just to fit, but not damaged enough to have lost its value?

⤋ Read More
In-reply-to » i got a shelf for all my cassette tapes! from a lovely person on facebook marketplace :] i don't think they produce these anymore, i think i got a good deal Media

@lyse@lyse.isobeef.org oooh that’s a good point! woodworking is scary and i don’t have much room for it but i do have SOME room in mind that could work for it… i feel like i’d just hurt myself in the process though LOL

⤋ Read More
In-reply-to » i got a shelf for all my cassette tapes! from a lovely person on facebook marketplace :] i don't think they produce these anymore, i think i got a good deal Media

@kat@yarn.girlonthemoon.xyz That’s cool. Also, looks like a fun woodworking project in case you exceed the hundred slots. :-) The plywood lap joints might be quite repetetive, but gang cutting them with a story stick or some other fixture shouldn’t be too terrible.

⤋ Read More

What do you think I just learned about in this awesome Computerphile video with Matt Godbolt called ā€œSubroutines in Low Level Codeā€? https://www.youtube.com/watch?v=1su3lAh-k4o

Here’s the plot twist, the phrase ā€œtill the cows come homeā€. Hahaha, I never heard this before, but I love it! It’s always interesting to me to hear English sayings. Sometimes we have the same in German, sometimes – like in this case – entirely different ones. It’s fascinating that even though one hasn’t come across proverbs, it’s typically still clear from the context what’s meant.

Yep, some unexpected language stuff. ;-)

⤋ Read More
In-reply-to » @lyse Nice! Next up: Passing file descriptors over Unix sockets. 😃

Thanks, @movq@www.uninformativ.de! That seems to be much easier. It’s already implemented in the Python docs as examples of recvmsg(…) and sendmsg(…):

I looked at them sooo many times in order to figure out why my SCM_CREDENTIALS sending code didn’t work. :-D

⤋ Read More