Daily Shaarli

All links of one day in a single page.

July 29, 2024

Overview | Bon

bon is a Rust crate for generating compile-time-checked builders for functions and structs.

Note: Prepare Mastodon toot templates

Example of template with https://fosstodon.org/@orhun/112869522457979235.

Considering a rust crate: extract the documentation link, the repository project URL, associated tags, etc...

It could also check if such crate is referenced on popular lists such as Awesome Rust.

Call programming language feature spells- Akkoma

protip: when referring to your favourite programming language’s features, call them spells instead to sound more mysterious and cool.

👎 “memory safety feature”

👍‍ “memory safety spell”

lusingander/serie: A rich git commit graph in your terminal, like magic 📚
arboard - Rust

Handle clipboard operations

Anyone can Access Deleted and Private Repository Data on GitHub ◆ Truffle Security Co.

Forks are copy of the original repository. As such, leaked credentials remains in the forks.

A deleted repository still has the commit from the original repository and it can access it. Demo on youtube

Example:

They immediately deleted the repository, but since it had been forked, I could still access the commit containing the sensitive data via a fork

Also related to private repositories:

We demonstrate how organizations open-source new tools while maintaining private internal forks, and then show how someone could access commit data from the private internal version via the public one.

How to access the data? By direct access to the commit.

If you know the commit hash you can directly access data that is not intended for you.

AND

Commit hashes can be brute forced through GitHub’s UI, particularly because the git protocol permits the use of short SHA-1 values when referencing a commit.

because there are 65.536 minimal values, and 16.777.216 is a more realistic approach (6 characters per commit).

Also, "deleting a repository or fork does not mean your commit data is actually deleted."

The flaw also exists in other version control system products.