Show newer

@thor ah, i could've sworn that i've had bought some like it on my detour to trondheim, but maybe i've had one too many then :P

@thor yes, most do indeed. i have tested many and only found one decent here in germany. interestingly the alcohol-free beers of the "discount" breweries were almost universally better.

the "liquid bread" part is why i don't like white beer. it just tastes like bread and yeast.

i just know from my scandinavia-trips that i can drink multiple cans of lettøl/lättöl, get a very light buzz but without having a hangover in the next day ;)

@thor don't you have the "light beer" there? i don't like to drink sweet stuff in the evenings too, the beers with a low abv are a good thing if one doesn't want to get drunk imho.

I continue

Regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)
github.com/doyensec/regexploit

Examples

```
(ven)$ regexploit
Welcome to Regexploit. Enter your regexes:
(?:A{6}x|a{6}X)
No ReDoS found.
^(?:A{6}x|a{6}X)$
No ReDoS found.
v\w*_\w*_\w*$
Pattern: v\w*_\w*_\w*$
---
Redos(starriness=3, prefix_sequence=SEQ{ [v] }, redos_sequence=SEQ{ [WORD]{0+} [5f:_] [WORD]{0+} [5f:_] [WORD]{0+} $[WORD] }, repeated_character=[5f:_], killer=[^WORD])
Worst-case complexity: 3 ⭐⭐⭐ (cubic)
Repeated character: [5f:_]
Final character to cause backtracking: [^WORD]
Example: 'v' + '_' * 3456 + '!'

```
Also
Parses Python code (without executing it) via the AST to find regexes. The regexes are then analysed for ReDoS.

$ regexploit-py my-project/
$ regexploit-py "my-project/**/*.py" --glob

And JSON / YAML too
$ regexploit-json *.json
$ regexploit-yaml *.yaml

#commandline #regex

Show thread
You have to assume that everywhere you go is compromised... because it is. In some ways, getting jabbed or relying on an app to tell you if you are compromised makes you more likely to take risks or to get careless.

@Hyolobrika i don't think that the government is usually so stupid to leave much of a trace for the really obvious things.

a thing which no one can deny is that if there is more money to be spend they'll receive more taxes.

which then can be spend paying businesses of their friends :P

minitrue.de 

the protests in were largely ignored in german mass media. the flood catastrophe came in handy to have an excuse to ignore it.

meanwhile journalists here are wondering why nobody trusts them anymore. associated press and reuters had something about the protests, the agencies from where our outlets usually just copy verbatim. it seems that if it doesn't fit the narrative it's just ignored here that 100k are protesting.

a decent surprise was deutschlandfunk where it was in the news, but this is a programme only a tiny minority listens to (deutschlandfunk.de/frankreich-)

hunter thompson was more objective than most german journalists.

Politisch korrekte Sprache: Müssen wir nun den Schwarzwald umbenennen? - Unser Kolumnist ärgert sich, dass der Begriff "Schwarzfahren" aus dem Alltag verschwinden soll. Er glaubt: Die politische Wirklichkeit lässt sich so nicht verändern. zeit.de/gesellschaft/2021-07/p #Gesellschaft

@fribbledom @eris nope. as a system programmer with 20+ years of experience I assure you: dbus and useless-d are total crap and terrible misuse of resources and generic try of Red Rat to take control over the open source development. that's why I especially recommend to keep out of any of their "improvements", unless you want to get discovered of an inseparable corporate hook in your arse system one fine day.
I can advice for suckless software, for brutality web design, for light and fast web protocols like gemini, for p2p applications networks and many more things that can help us to get rid of da Big Brother in our old good open source. and their doubtful "help".

@bshah chances are your tooling just sucks. i also had an avid dislike of xml, but xpath etc. really works well if the xml isn't structured shitty. which it probably is ;)

@senator i don't even know where i've got that trick from.. i think it was in an assembler tutorial txt file i read as teen :)

Show older
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.