Ümit Ünal umit

🗺🐘 1000+ PostgreSQL EXTENSIONs

This is a list of URLs to PostgreSQL EXTENSION repos, listed in alphabetical order of parent repo, with active forks listed under each parent.

⭐️ >= 10 stars
⭐️⭐️ >= 100 stars
⭐️⭐️⭐️ >= 1000 stars
Numbers of stars might not be up-to-date.

Log4J, JNDI, LDAP: JDK Changes Archeology

DISCLAIMER #1: THIS GIST IS INFORMATIONAL ONLY AND NOT A COMPLETE SECURITY GUIDANCE. Use this data with care, and please recheck the commits if you want to cite them as the source.

DISCLAIMER #2: JDK MITIGATIONS ARE NOT THE WHOLE STORY. THE REAL FIX IS IN LOG4J, UPGRADE TO AT LEAST 2.15.0 OR SET log4j2.formatMsgNoLookups=true. There might be more vectors than these mitigations cover. JDK mitigations shrink the attack surface, but they are not guaranteed to solve everything. I only checked this mitigates a few simple proof-of-concepts.

*TL;DR: Use JDK update releases that are less than 3 years old, and all known mitigations are there.

Things I believe

This is a collection of the things I believe about software development. I have worked for years building backend and data processing systems, so read the below within that context.

Agree? Disagree? Feel free to let me know at @JanStette. See also my blog at www.janvsmachine.net.

Fundamentals

Keep it simple, stupid. You ain't gonna need it.

	#include <stdio.h>
	#include <stdlib.h>

	#define da_append(xs, x) \
	do { \
	if ((xs)->count >= (xs)->capacity) { \
	if ((xs)->capacity == 0) (xs)->capacity = 256; \
	else (xs)->capacity *= 2; \
	(xs)->items = realloc((xs)->items, (xs)->capacitysizeof((xs)->items)); \
	} \

	This uses llm.datasette.io and OpenAI.

	I use `git commit --template` to provide the output from the LLM to Git. This way, if you do not like the results, you
	can quit your editor and no commit will be made.

	# Shell function for generating a diff and editing it in your default editor:

	gcllm() {
	GIT_DIR="$(git rev-parse --git-dir)"
	TEMPLATE="$GIT_DIR/COMMIT_EDITMSG_TEMPLATE"

	FROM golang:1.21.0-bullseye as builder

	COPY . /workdir
	WORKDIR /workdir

	ENV CGO_CPPFLAGS="-D_FORTIFY_SOURCE=2 -fstack-protector-all"
	ENV GOFLAGS="-buildmode=pie"

	RUN go build -ldflags "-s -w" -trimpath ./cmd/app

	#!/bin/bash
	set -x

	function setenv-all-pods() {
	echo
	DEPLOYMENT_LIST=$(kubectl -n $1 get deployment -o jsonpath='{.items[*].metadata.name}')
	echo "Set Log4J setting for all pods by overriding LOG4J_FORMAT_MSG_NO_LOOKUPS with true."
	for deployment_name in $DEPLOYMENT_LIST; do
	kubectl -n $1 set env deployment $deployment_name LOG4J_FORMAT_MSG_NO_LOOKUPS="true"
	done

	go func() {
	for {
	err = rmq.Stream(cancelCtx)
	if errors.Is(err, rabbitmq.ErrDisconnected) {
	continue
	}
	break
	}
	}()

	import java.util.*;

	@SuppressWarnings("ALL")
	class Test {
	static class ReifiedList<T> extends AbstractList<T> {
	private final List<T> delegate = new ArrayList<>();
	private final Class<?> type;

	@SafeVarargs
	ReifiedList(@Deprecated T... unused) {

	#define _GNU_SOURCE
	#include <errno.h>
	#include <sched.h>
	#include <signal.h>
	#include <stdio.h>
	#include <stdlib.h>
	#include <sys/mount.h>
	#include <sys/stat.h>
	#include <sys/syscall.h>
	#include <sys/types.h>