Francois Lebel flebel

Checking for Python Security Vulnerabilities with VIM (Buffer Pre-write Hook Part 3)

Introduction

To continue my series of vim pre-write hooks, I wanted to add a new check for security static analysis failures. To see the progression of the series, please check out my other gists.

Back to security... In my office, we use OpenStack's Bandit static analysis tool. If you're not familiar with it, you should check it out. It's pretty nifty.

Getting Started

What I Wish I'd Known About Equity Before Joining A Unicorn

Disclaimer: This piece is written anonymously. The names of a few particular companies are mentioned, but as common examples only.

This is a short write-up on things that I wish I'd known and considered before joining a private company (aka startup, aka unicorn in some cases). I'm not trying to make the case that you should never join a private company, but the power imbalance between founder and employee is extreme, and that potential candidates would

Raspberry Pi Zero OTG Mode

Simple guide for setting up OTG modes on the Raspberry Pi Zero - By Andrew Mulholland (gbaman).

The Raspberry Pi Zero (and model A and A+) support USB On The Go, given the processor is connected directly to the USB port, unlike on the B, B+ or Pi 2 B, which goes via a USB hub.
Because of this, if setup to, the Pi can act as a USB slave instead, providing virtual serial (a terminal), virtual ethernet, virtual mass storage device (pendrive) or even other virtual devices like HID, MIDI, or act as a virtual webcam!
It is important to note that, although the model A and A+ can support being a USB slave, they are missing the ID pin (is tied to ground internally) so are unable to dynamically switch between USB master/slave mode. As such, they default to USB master mode. There is no easy way to change this right now.
It is also important to note, that a USB to UART serial adapter is not needed for any of these guides, as may be documented elsewhere across the int

	https://google-cloud-python.readthedocs.io/en/latest/logging/usage.html
	https://google-cloud-python.readthedocs.io/en/latest/logging/usage.html#integration-with-python-logging-module
	https://cloud.google.com/logging/docs/reference/v2/rest/v2/LogEntry



	NOTE: as of 9/7/18
	https://github.com/GoogleCloudPlatform/google-cloud-python/pull/5878
	https://github.com/GoogleCloudPlatform/google-cloud-python/pull/5885

	package main

	import (
	"context"
	"flag"
	"fmt"
	"log"
	"net/http"
	"os"
	"os/signal"

	PROJECT = myProject
	FUNCTION = $(PROJECT)
	REGION = us-west-1
	ENVCHAIN = my-aws-env

	all: build

	.PHONY: clean build deploy

	clean:

	--
	-- Read only
	--

	-- Create a group
	CREATE ROLE postgres_ro_group;

	-- Grant access to existing tables
	GRANT USAGE ON SCHEMA public TO postgres_ro_group;
	GRANT SELECT ON ALL TABLES IN SCHEMA public TO postgres_ro_group;

	import os, sys, re, io, json, time
	import mechanize
	import pytz
	import smtplib
	import bs4

	from datetime import datetime, timedelta
	from pytz import timezone
	from bs4 import BeautifulSoup
	from email.mime.text import MIMEText

	import speech_recognition
	import pyttsx

	speech_engine = pyttsx.init('sapi5') # see http://pyttsx.readthedocs.org/en/latest/engine.html#pyttsx.init
	speech_engine.setProperty('rate', 150)

	def speak(text):
	speech_engine.say(text)
	speech_engine.runAndWait()

	package main

	import (
	"fmt"
	"reflect"
	)

	// Name of the struct tag used in examples
	const tagName = "validate"