Introduction I’ve always been inspired by the simdjson project. Their commitment to speed, but also modern development practices and ease-of-use are … well … inspiring! I watched a talk given by Daniel Lemire on how simdjson is so fast. In the presentation he mentioned that they are not writing their...
As of 2022-08-30, ruby-i18n/i18n is the ninth most popular Ruby gem. Yet, its documentation, performance, and code quality leave a lot to be desired. While I contribute bug reports and fixes whenever I can, I found I needed a place to jot down the issues, history, and surprises I’ve discovered...
CLDR defines several mechanisms for keys to inheriting values from other keys: Locale Inheritance Lateral Inheritance Aliases and defines an algorithm that clients can use to resolve any key in the CLDR data to a value. However, some clients are not capable of handling all of these mechanisms, so the...
I recently purchased a Genmitsu Sainsmart 3018 PROver CNC machine, with a GRBL v1.1 control board. I’ve spent more time then I’d care to admit on simple, silly things. So I’ll be documenting them here for my posterity. Hopefully this can help you on your CNC journey. Table of Contents...
TL;DR: There are several privilege escalation vulnerabilities in Cobbler’s XMLRPC API. There are also many endpoints that are not validating the auth tokens passed to them. As a result, the API is effectively unauthenticated. Consider using a firewall to restrict access to the /cobbler_api endpoint. Introduction Cobbler is an infrastructure...
TL;DR: Badges are not magic. They are just image hotlinks, and therefore you need to be able to trust the third party who serves them. Introduction Badges are those cute little colourful rectangles that you see at the top of many READMEs. They often display things like the current version...
TL;DR: Many badges were broken since they were using the shuttered pypip.in site. I wrote a bot that could fix these and automatically submit pull requests with the changes. And then I had my GitHub account suspended. Do not make automatic unsolicited pull requests. Disclaimer This post discusses the design...