Frederic Hemberger fhemberger

## rdsosreport.txt
+ cat /lib/dracut/dracut-053
dracut-053
+ cat /proc/cmdline
+ sed -e 's/\(ftp:\/\/.*\):.*@/\1:*******@/g;s/\(cifs:\/\/.*\):.*@/\1:*******@/g;s/cifspass=[^ ]*/cifspass=*******/g;s/iscsi:.*@/iscsi:******@/g;s/rd.iscsi.password=[^ ]*/rd.iscsi.password=******/g;s/rd.iscsi.in.password=[^ ]*/rd.iscsi.in.password=******/g'
rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=proxmoxve verity.usrhash=16261ecd72c9d30b45c8e9d1e52f6657408bc6ca8b70716dbfd030ea52f39326
+ '[' -f /etc/cmdline ']'
+ for _i in /etc/cmdline.d/*.conf
+ '[' -f /etc/cmdline.d/00-btrfs.conf ']'
+ echo /etc/cmdline.d/00-btrfs.conf
/etc/cmdline.d/00-btrfs.conf

## init.lua
local usbLogger = hs.logger.new('usb', 'debug')

function configureKeyboard(data)
  -- Uncomment the "usbLogger" line below, plug in the USB keyboard and update the USB vendor and product ID
  local isKeyboardAffected = data.vendorID == 9610 and data.productID == 89
  -- usbLogger.df("eventType %s, pname %s, vname %s, vId %s, pId %s, keyboardAffected %s", data.eventType, data.productName, data.vendorName, data.vendorID, data.productID, isKeyboardAffected)
  if isKeyboardAffected and data.eventType == "added" then
    hs.keycodes.setLayout("U.S.")
  end
  if isKeyboardAffected and data.eventType == "removed" then

## README.md

      
              2 files
            
          
              0 forks
            
          
                0 comments
              
            
              1 star
            
          
                fhemberger
                / README.md
            
            
              Last active
              February 10, 2021 21:37
            
              
                Node.js: Create checksums for npm's 'postinstall' actions
              
          
    Node.js: Create checksums for npm's 'postinstall' actions

After watching Patrick Debois' talk from DeliveryConf »How Secure Is Your Build / Server?«, I tried to get at least a rough idea if postinstall steps where running at all and if they do the same things after a package update.
So I wrote a little proof of concept that will:

Create a Dockerfile, using package.json and package-lock.json from a Node.js project in the current directory
Install all its dependencies inside the Docker container first, without running any postinstall steps, then do the same with running the scripts.
Reading the diff of those steps using Docker's image layers
And calculate a checksum of those changes.


## gist:3676b14899a4591498b3

      
              1 file
            
          
              0 forks
            
          
                1 comment
              
            
              0 stars
            
          
                fhemberger
                / gist:3676b14899a4591498b3
            
            
              Created
              November 20, 2015 23:14
            
          
    I'm using the git pr command from the git-extras toolset to check out a local copy of a PR.
To rebase the PR again, I wrote a little script, which needs to be run in the PR's branch:
#!/usr/bin/env bash

branch=$(git symbolic-ref HEAD --short)

git rebase master

  
## talks.md

      
              1 file
            
          
              0 forks
            
          
                5 comments
              
            
              3 stars
            
          
                fhemberger
                / talks.md
            
            
              Last active
              August 29, 2015 14:05
            
              
                FrOSCon 2014 Cologne.js JavaScript track
              
          
    Robin Böhm, Philipp Tarasiewicz

AngularJS: Overview, Best Practices and Pitfalls

Slides

Twitter (Robin, @roobijn)

Twitter (Philipp, @justphilmusic)
Christian Schaefer

HTTP/2: Die Zukunft beginnt jetzt.

Slides

Twitter (@derSchepp)

  
## gist:9642879

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              1 star
            
          
                fhemberger
                / gist:9642879
            
            
              Last active
              October 27, 2015 08:24
            
              
                Security related links 
              
          
    Security in General


Open Web Application Security Project (OWASP)
OWASP: Top Ten Critical Security Risks 2013
Secure SSL Configuration for nginx, Apache, etc
helmet: Security related middlewares for Express

CSRF


Cross-Site Request Forgery (CSRF) Prevention Cheat Sheet


## README.md

      
              2 files
            
          
              0 forks
            
          
                3 comments
              
            
              4 stars
            
          
                fhemberger
                / README.md
            
            
              Last active
              December 27, 2015 10:59
            
              
                Get rid of content farms and W3Schools in search results.
              
          
    How to use this list


Download a result blocking extension for your browser:


Google Chrome: Google's "Personal Blocklist"
Mozilla Firefox: Hide Unwanted Results of Google Search


Feed the list to the plugin.
Search results from these sites are now blocked in Google.


## backup-uberspace.exclude
.gem
.npm
cgi-bin
fcgi-bin
html
lib
man
share
tmp
**/node_modules

## index.html
<!DOCTYPE html>
<html>
  <head>
    <title>Socket.io Test</title>

    <!-- Dieses Script wird von Socket.io automatisch zu Verfügung gestellt -->
    <script src="/socket.io/socket.io.js"></script>

    <script>
      // Mit dem Socket.io-Server verbinden

## gist:3974360
var topics = {};

$.Topic = function( id ) {
  if ( !topics[ id ] ) {
    var callbacks = jQuery.Callbacks();
    topics[ id ] = {
      publish: callbacks.fire,
      subscribe: callbacks.add,
      unsubscribe: callbacks.remove
    };
	+ cat /lib/dracut/dracut-053
	dracut-053
	+ cat /proc/cmdline
	+ sed -e 's/\(ftp:\/\/.\):.@/\1:******@/g;s/\(cifs:\/\/.\):.@/\1:*****@/g;s/cifspass=[^ ]/cifspass=******/g;s/iscsi:.@/iscsi:*****@/g;s/rd.iscsi.password=[^ ]/rd.iscsi.password=*****/g;s/rd.iscsi.in.password=[^ ]/rd.iscsi.in.password=******/g'
	rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=proxmoxve verity.usrhash=16261ecd72c9d30b45c8e9d1e52f6657408bc6ca8b70716dbfd030ea52f39326
	+ '[' -f /etc/cmdline ']'
	+ for _i in /etc/cmdline.d/*.conf
	+ '[' -f /etc/cmdline.d/00-btrfs.conf ']'
	+ echo /etc/cmdline.d/00-btrfs.conf
	/etc/cmdline.d/00-btrfs.conf
	local usbLogger = hs.logger.new('usb', 'debug')

	function configureKeyboard(data)
	-- Uncomment the "usbLogger" line below, plug in the USB keyboard and update the USB vendor and product ID
	local isKeyboardAffected = data.vendorID == 9610 and data.productID == 89
	-- usbLogger.df("eventType %s, pname %s, vname %s, vId %s, pId %s, keyboardAffected %s", data.eventType, data.productName, data.vendorName, data.vendorID, data.productID, isKeyboardAffected)
	if isKeyboardAffected and data.eventType == "added" then
	hs.keycodes.setLayout("U.S.")
	end
	if isKeyboardAffected and data.eventType == "removed" then
	<!DOCTYPE html>
	<html>
	<head>
	<title>Socket.io Test</title>

	<!-- Dieses Script wird von Socket.io automatisch zu Verfügung gestellt -->
	<script src="/socket.io/socket.io.js"></script>

	<script>
	// Mit dem Socket.io-Server verbinden
	var topics = {};

	$.Topic = function( id ) {
	if ( !topics[ id ] ) {
	var callbacks = jQuery.Callbacks();
	topics[ id ] = {
	publish: callbacks.fire,
	subscribe: callbacks.add,
	unsubscribe: callbacks.remove
	};