Another Dev's Two Cents

Topic

Programming

A collection of 51 issues

Reverse Engineering an RDP and WebLogic Attack

I've been learning more about common attacks that appear in my Nginx logs to learn more about what happens beyond the log entries. The internet appeared to enjoy my previous post on the subject so I thought I'd share more of my findings. If you haven&

I made a Mastodon bot with GoToSocial

I've been running my own GoToSocial ActivityPub server for a while and it's been great. It's Mastodon compatible, super easy to set up and works well as a single-account server despite being in alpha. 👋 Thanks for reading. If you like my work, leave a

Is GitHub Copilot For Everyone?

I've been using GitHub Copilot (Copilot) for almost a year. As discussed in a previous write-up, I consider it a modern iteration of IntelliSense or autocomplete. If you're not yet acquainted with it, Copilot serves as an IDE integration that leverages the context surrounding your code

I looked through attacks in my access logs. Here's what I found

I've been self-hosting for over a decade. It's freeing because I own my data, and do not depend on any platform other than my cloud host, which I can easily switch off. Self-hosting gives much insight into what it takes to run a cloud service. Anyone

On OpenAI, GPT, and products

This week OpenAI had a fantastic keynote at their Dev Day event. They announced new products and enhancements to ChatGPT[1]. Interestingly, some parts of the internet described the keynote as an "Extinction Event"[2] for many AI startups. Many of the startups reportedly facing extinction share the

It's 2023. Your API should have a schema

Here's a story you might find relatable. We kicked off a new integration project that started 3 months later than everyone wanted. APIs just shipped after a bunch of delays. We were handed API docs and a test environment and started work building out the new feature. The

How to enable SSH Key Verification with Git and GitHub

With the right know-how, it's incredibly easy to impersonate anyone when making commits. This is a potential attack vector that gives the false impression that code can be trusted and attributed to the named author when in fact it cannot. Unverified Commits: Are You Unknowingly Trusting Attackers’ Code?

Automating form input with Selenium IDE

A form is the most common means of collecting user information on the internet. When implemented well, they can be simple to use particularly when the requested data is short and easy to enter. More complex data is usually better collected through other means such as structured file imports. However,

How to get IDEA to detect openJDKs installed with brew

I recently went through a Homebrew (brew) Open JDK 11 and IntelliJ IDEA installation on a new Macbook Pro. $ brew install openjdk@11 $ brew install intellij-idea-ce However, I noticed that IntelliJ did not auto-detect the Java installation when creating new projects. Selecting the Project SDK dropdown did not give me

Interacting with WebAssembly memory

One of the most interesting features of WebAssembly is its memory model. Despite providing a system that allows for direct access and control of raw bytes, it does this in a way that offers more safety than one would typically expect out of low-level environments like C/C++. WASM memory