10 December 2021

39 links ยท Friday

Anomaly Detection in Machine Learning

In this article, you will read about different types of outliers and machine learning techniques that help to find anomalies. Learn how you can apply ML anomaly detection techniques to fraud prevention, medical diagnosis, and more.

on building with a squad

post #5. I’ve spent the past half-year building with wonderful people I re/met on the internet. Our squad consists of a site, private Discord server, and a multisig wallet. With them we’ve developed a practice of building in the open and are in the midst of ho…

The three types of development

Author: Chloé LourseyreEditor: Peter Fordham This week we’ll discuss a serious topic affecting the developer community. This touches several languages, but the C++ community is one …

Cubic Bézier: from math to motion - Maxime Heckel's Blog

A deep dive into the math behind Bézier curves, from simple linear interpolations to Cubic Bézier and how they are used to describe motion. This article introduces the concepts underneath cubic-bezier and easing timing functions that are used in CSS and Framer…

Secure how your servers connect to the Internet today

The vulnerability disclosed yesterday in the Java-based logging package, log4j, allows attackers to execute code on a remote server. We’ve updated Cloudflare’s WAF to defend your infrastructure against this 0-day attack.

December 10, 2021

Software architecture and design is a skill. You can develop it over time with experience. Everyone on a team can help even if it's simply asking questions t...

UniFi Controller security concern (zero-day Log4j exploit)

I see that the UniFi Controller software uses Java and the Log4j framework for logging (as of this writing, Log4j 2.13.3 is used by UniFi Controller ("UniFi Network Application") version 6.5.53).

Inside the log4j2 vulnerability (CVE-2021-44228)

In this post we explain the history of this vulnerability, how it was introduced, how Cloudflare is protecting our clients. We will update later with actual attempted exploitation we are seeing blocked by our firewall service.

Code Maze Weekly #105 - Code Maze

Issue #105 of the Code Maze weekly. Check out what’s new this week and enjoy the read. .NET and C# .NET 6 Has Arrived: Here Are A Few of My Favorite Things [daveabrock.com] What’s your favorite thing in .NET 6? Fastest way to enumerate a List<T> [www.meziantou…

CVE-2021-44228 - Log4j RCE 0-day mitigation

A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021 that results in remote code execution (RCE). This vulnerability is actively being exploited and anyone using Log4j should update to version 2.15.…

Bring your own functions to Azure Static Web Apps

Azure Static Web Apps APIs are supported by two possible configurations: managed functions and bring your own functions. This post is about using your existing functions in Azure Static Web apps. Bring your own functions is only available in the Azure Static W…

Weekly Update 273

3D Printed Moon Lamp; New Profile Pics; Children’s Toy Surveillance Camera; Gravatar Scraped Data; 50% Off 1Password

Announcing PowerShell Crescendo Release Candidate (RC)

Announcing Crescendo 0.9.0 Release Candidate (RC) We are pleased to announce the Release Candidate (RC) of PowerShell Crescendo, a framework to rapidly develop PowerShell cmdlets for native commands, regardless of platform. The release candidate is now availab…

The Miracle of IQueryAttributable

This knocked me out. Let’s say you have a value in one view model, and when you navigate to another page you want that value in the new page’s view model. Enter IQueryAttributable. (tou…

Rocket League & coding rig for a work colleague

Check out DamianEdwards's completed build on PCPartPicker! Ryzen 9 5900X 3.7 GHz 12-Core, GeForce RTX 2060 SUPER 8 GB Founders Edition, Eclipse P360A ATX Mid Tower, ...

A New Chapter for HashiCorp

As we officially enter the public markets, we plan to continue to do what we think we do best: solving problems for our end users.

Chrome Users Beware: Manifest V3 is Deceitful and Threatening

Manifest V3, Google Chrome’s soon-to-be definitive basket of changes to the world of web browser extensions, has been framed by its authors as “a step in the direction of privacy, security, and performance.” But we think these changes are a raw deal for users.…