| #!/usr/bin/env bash | |
| # Applies common security measures for Ubuntu servers. Run it before doing the inital deploy with basecamp/kamal | |
| # | |
| # Afterwards, you'll only be able to SSH into the server as 'nonroot', eg. [email protected] | |
| # | |
| # So add this to your Kamal deploy.yml: | |
| # ``` | |
| # ssh: | |
| # user: nonroot |
| (?i)((access_key|access_token|admin_pass|admin_user|algolia_admin_key|algolia_api_key|alias_pass|alicloud_access_key|amazon_secret_access_key|amazonaws|ansible_vault_password|aos_key|api_key|api_key_secret|api_key_sid|api_secret|api.googlemaps AIza|apidocs|apikey|apiSecret|app_debug|app_id|app_key|app_log_level|app_secret|appkey|appkeysecret|application_key|appsecret|appspot|auth_token|authorizationToken|authsecret|aws_access|aws_access_key_id|aws_bucket|aws_key|aws_secret|aws_secret_key|aws_token|AWSSecretKey|b2_app_key|bashrc password|bintray_apikey|bintray_gpg_password|bintray_key|bintraykey|bluemix_api_key|bluemix_pass|browserstack_access_key|bucket_password|bucketeer_aws_access_key_id|bucketeer_aws_secret_access_key|built_branch_deploy_key|bx_password|cache_driver|cache_s3_secret_key|cattle_access_key|cattle_secret_key|certificate_password|ci_deploy_password|client_secret|client_zpk_secret_key|clojars_password|cloud_api_key|cloud_watch_aws_access_key|cloudant_password|cloudflare_api_key|cloudflare_auth_k |
This is a summary of how to start your own NextJS app, create the repo on Github, upload later in an AWS EC2 Instance and automate the process with AWS Codebuild, CodeDeploy, & CodePipeline.
After following these instructions you should be able to:
| module.exports = { | |
| purge: [], | |
| theme: { | |
| extend: { | |
| gridTemplateColumns: { | |
| 'auto-fit': 'repeat(auto-fit, minmax(0, 1fr))', | |
| 'auto-fill': 'repeat(auto-fill, minmax(0, 1fr))', | |
| }, | |
| gridTemplateRows: { | |
| 'auto-fit': 'repeat(auto-fit, minmax(0, 1fr))', |
| { | |
| "$schema": "https://aka.ms/terminal-profiles-schema", | |
| "copyOnSelect": false, | |
| "defaultProfile": "{574e775e-4f2a-5b96-ac1e-a2962a402336}", | |
| // Add custom keybindings to this array. | |
| // To unbind a key combination from your defaults.json, set the command to "unbound". | |
| // To learn more about keybindings, visit https://aka.ms/terminal-keybindings | |
| "keybindings": | |
| [ | |
| // Copy and paste are bound to Ctrl+Shift+C and Ctrl+Shift+V in your defaults.json. |
| |=-----------------------------------------------------------------------=| | |
| |=-------------=[ 3 Years of Attacking JavaScript Engines ]=-------------=| | |
| |=-----------------------------------------------------------------------=| | |
| |=------------------------------=[ saelo ]=------------------------------=| | |
| |=-----------------------------------------------------------------------=| | |
| The following are some brief notes about the changes that have taken place | |
| since the release of the "Attacking JavaScript Engines" paper [1]. In | |
| general, no big conceptional changes have happened since. Mitigations have | |
| been added to break some of the presented techniques and, as expected, a |
2019 update: this essay has been updated on my personal site, together with a followup on how to get started
2020 update: I'm now writing a book with updated versions of all these essays and 35 other chapters!!!!
If there's a golden rule, it's this one, so I put it first. All the other rules are more or less elaborations of this rule #1.
You already know that you will never be done learning. But most people "learn in private", and lurk. They consume content without creating any themselves. Again, that's fine, but we're here to talk about being in the top quintile. What you do here is to have a habit of creating learning exhaust. Write blogs and tutorials and cheatsheets. Speak at meetups and conferences. Ask and answer things on Stackoverflow or Reddit. (Avoid the walled gardens like Slack and Discourse, they're not public). Make Youtube videos
| body { | |
| white-space: pre; | |
| font-family: monospace; | |
| background: rgba(34,47,53,1); | |
| color: rgba(96,125,138,1); | |
| } | |
| .property { | |
| font-weight: bold; | |
| color:rgba(0,253,255,1); |
| from hashlib import md5 | |
| from base64 import b64decode | |
| from base64 import b64encode | |
| from Crypto.Cipher import AES | |
| # Padding for the input string --not | |
| # related to encryption itself. | |
| BLOCK_SIZE = 16 # Bytes | |
| pad = lambda s: s + (BLOCK_SIZE - len(s) % BLOCK_SIZE) * \ |
