28 April 2022

45 links · Thursday

Adversarial Pair Programming

In traditional pair programming, two trusted developers are assigned to work jointly on writing sections of software. This article explores an adversarial pair programming concept where two anonymous developers code together under the assumption the other pers…

My Startup is Broken - Caseysoftware

Whenever I advise (or join!) a startup, one of the first conversations goes something like this: “Oh man. Everything here is broken! It sucks! There’s so much to do and not enough people to do it. We’re missing so many things, we don’t know where to start! The…

Using Pushover for Super Simple SysAdmin Alerts

For those who don't know, Pushover is a really great tool that allows users to easily set up and send push notifications to a smartphone. The setup is super simple, and all you need is their app and a little scripting know-how.

Your Opinion Doesn't Matter

The current "race" debate (or lack thereof) is essentially about the honoring of opinions from one side, but not the other. There is no equal footing here. The only way to get on common ground is to put both sides in an equivalent place - Only my opinion an…

Some Thoughts on Terraform CI for Monorepos

Continuous integration and deployment for terraform monorepos is not a solved problem. I’m not proposing to solve it, but this is a record of my thoughts and experiments.

April 28, 2022

When you need to pass two sets of variadic parameters, and to work around other extremely weird edge cases.

RavenDB Grafana Data Source

I’m happy to announce that we have released v1.0 of RavenDB’s Grafana Data Source. This RavenDB data source plugin allows you to query and visual...

Hacking PayPal Accounts with one click

An interesting 0day on paypal was discolsed by Yasser Ali. We have found out that an Attacker can obtain the CSRF Auth which can be valid for ALL users, by intercepting the POST request from a page that provide an Auth Token before the Logging-in process, che…

Simple Web Interactivity with Alpine.js

After working with lots of these little JavaScript libraries, sometimes I pine for something simple to create interactivity on websites. In this Coding Short, I investigate Alpine.js to see how it works and where it might be useful:

jwt.ms: Welcome!

Enter token below (it never leaves your browser):