~betterdevlink | Bookmarks (157)

Stop worrying about your to-do list. Zapier connects the apps you use every day, so you can focus on what matters most. Start working more efficiently - Create your free account today.

Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection BetterDev usually doesn’t include these kind of vulnerability report. However, this one is very interesting because it happen through using a cache key as a truncate hash of user input data, lead to collision. And caching is common particularlly in web dev, picking right cache key is important to avoid cache poisoning.

Applied offensive security with Rust it’s a from-theory-to-practice guide and you may enjoy it if you are a developer and want to learn security

Breaking the 4Chan CAPTCHA This project was entered into as a learning experience, to enhance my knowledge of machine learning, as well as TensorFlow specifically. At the end, I wanted to have a trained machine learning model that runs in the browser to reliably (at least 80% accuracy, >90% preferred) solve the 4Chan CAPTCHA. These goals were achieved - let’s talk about how I...

What you need to know about SQLite A compilation of lessons about what the SQLite database engine can and cannot do. It’s written for Rails, but you can apply all the lessons to use SQLite generally.

The Case for Shared Storage If you operate Kafka, you know how important the storage layer is. In K8S, when a pod went down, and come back up, we need o make sure the storage is mounted to the same node, lead to slowness of pod because it needs to detach and re-attach volume. WarpStream is essentially serverless Kafka. They aim to solve this...

quill Simple mac binary signing and notarization from any platform (replacing the codesign utility for simple use cases).

fastmcp Model Context Protocol (MCP) servers are a new, standardized way to provide context and tools to your LLMs, and FastMCP makes building MCP servers simple and intuitive. Create tools, expose resources, and define prompts with clean, Pythonic code:

tonic A rust implementation of gRPC, a high performance, open source, general RPC framework that puts mobile and HTTP/2 first.

bunbuster Ridiculously fast web & TCP fuzzer designed for brute-forcing directories, subdomains, and files on web servers.