Markus Kohler kohlerm

Self isolating binaries

This is a play proposal for a new wrapper around go build that would build your binary but wrap it in code that would prepare isolation around your binary on run.

A concept of this is in https://github.com/jfrazelle/binctr, in that it takes a docker image and embeds the contents into a final binary so you have a self-contained binary.

The binctr example is unnessesarily heavy for go binaries because all you need is a completely static binary.

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

Gradle tab completion script for Bash

A tab completion script that works for Bash. Relies on the BSD md5 command on Mac and md5sum on Linux, so as long as you have one of those two commands, this should work.

Usage

$ gradle [TAB]

What forces layout / reflow

All of the below properties or methods, when requested/called in JavaScript, will trigger the browser to synchronously calculate the style and layout*. This is also called reflow or layout thrashing, and is common performance bottleneck.

Generally, all APIs that synchronously provide layout metrics will trigger forced reflow / layout. Read on for additional cases and details.

Element APIs

Getting box metrics

elem.offsetLeft, elem.offsetTop, elem.offsetWidth, elem.offsetHeight, elem.offsetParent

	#!/bin/sh
	git log --shortstat \| grep -E "(Author: )(\b\s*([A-Z]\w+)){2}\|fil(e\|es) changed" \| awk '
	{
	if($1 ~ /Author/) {
	author = $2" "$3
	} else {
	files[author]+=$1
	inserted[author]+=$4
	deleted[author]+=$6
	}

	[
	{
	"name": "Iris Keyboard",
	"author": "Lewis Ridden"
	},
	[
	{
	"x": 3,
	"c": "#c4c8c5",
	"a": 5

	function getLambdaEventSource(event) {
	if (event.Records && event.Records[0].cf) return 'isCloudfront';

	if (event.configRuleId && event.configRuleName && event.configRuleArn) return 'isAwsConfig';

	if (event.Records && (event.Records[0].eventSource === 'aws:codecommit')) return 'isCodeCommit';

	if (event.authorizationToken === "incoming-client-token") return 'isApiGatewayAuthorizer';

	if (event.StackId && event.RequestType && event.ResourceType) return 'isCloudFormation';

	import unittest
	import urllib

	#URL_TO_TEST = 'https://example.com/'
	URL_TO_TEST = 'https://securityheaders.com/'

	class TestSecurityHeaders(unittest.TestCase):
	"""
	Tests for security headers based on the recommendations
	from https://securityheaders.com/

	#! /usr/bin/env python

	"""
	The MIT License (MIT)

	Copyright (c) 2013 Hannes Bretschneider

	Permission is hereby granted, free of charge, to any person obtaining a copy of
	this software and associated documentation files (the "Software"), to deal in
	the Software without restriction, including without limitation the rights to