Archive for the ‘Software Development’ Category
Posted by jpluimers on 2025/11/29

Besides the August 2025 XKCD infrastructure dependency inspired cartoon on the right, the more recent and great [Wayback/Archive] XCKD: Dependency derivative below is a monumental piece as it combines the recent:
- fiber outage of the Internet Archive
- DoS of Cloudflare by itself
- AWS us-east-1 dependencies outage
- Crowdstrike DoS of Windows machines
- framework-du-jour mentality in the JavaScript world
- many more¹
Image [Wayback/Archive] 36247840bf294a9d.png (1080×1389) from [Wayback/Archive] xyla 🐀🪇: “someone pls alt text this shit…” – buy shitpost cheap:
Read the rest of this entry »
Posted in *nix, Amazon.com/.de/.fr/.uk/..., AWS Amazon Web Services, C, CDN (Content Delivery Network), Cloud, Cloudflare, cURL, Development, Fun, Hardware, Infrastructure, ISP, JavaScript/ECMAScript, Network-and-equipment, Node.js, npm, Power User, Rust, Scripting, Software Development, Web Development | Tagged: Meme, ProgrammerHumor | Leave a Comment »
Posted by jpluimers on 2025/11/27
A while ago, I mentioned a 404-text simulating the Marvin the Paranoid Android as a side-line on a PlantUML post.
While categorising my ASCII art posts, I came across it, and it was published before I started archiving blog links in the Wayback Machine and Archive.is as much as possible.
Back during categorising, I added a few of those archived links, then made a note to research deeper.
So later, I got to that digging and did some digital spelunking, restored the text from an archived page and the underlying JavaScript code that simulated the text being typed on a “terminal”.
Then I did some more spelunking to the oldest usage I could find.
Here are the results:
Read the rest of this entry »
Posted in ASCII art / AsciiArt, Development, Fun, HTML, JavaScript/ECMAScript, Meme, Scripting, Software Development, Web Development | Leave a Comment »
Posted by jpluimers on 2025/11/25
The libc C standard library memcpy function is very fast, but because of that also very dumb and with a list of circumstances where its behaviour is undefined (a great opportunity to introduce vulnerabilities in your code). The specs of those are in [Wayback/Archive] memcpy, memcpy_s – cppreference.com, including:
The behavior is undefined if either dest or src is an invalid or null pointer.
With C compilers becoming smarter and smarter, their optimisations can hide the fact that you call memcpy with parameters causing undefined behaviour.
This is a nice example of that: [Wayback/Archive] Fix a crash trying to save an empty AudioStream by hpvb · Pull Request #100422 · godotengine/godot · GitHub
The change is relatively simple, but hardly shows why the change is there. Only one line got changed in [Wayback/Archive] Fix a crash trying to save an empty AudioStream by hpvb · Pull Request #100422 · godotengine/godot · GitHub
Read the rest of this entry »
Posted in C, Development, Software Development | Tagged: 100422, 97720, 97790 | Leave a Comment »
Posted by jpluimers on 2025/11/20
A longer while I ago, I could not find a URL that would bring up the BKSY post pop-up.
A while ago, I found out there is a compose intent URL: you can even add a text parameter with URL-encoded content!
[Wayback/Archive] Cory LaViska: “ooh you can create intent links for Bluesky” — Bluesky

[Wayback/Archive] bafkreig4tmnf44akrfnqvuvinsj6pkg4zsosu5uivwpgqypkpgree247xq@jpeg (1000×425)
The below queries revealed various other posts indicating the same:
Read the rest of this entry »
Posted in Development, Encoding, HTML, Software Development, URL Encoding, Web Development | Leave a Comment »
Posted by jpluimers on 2025/11/19
[Wayback/Archive] Thread by @cyb3rops on Thread Reader App – Thread Reader App
If your agent gets flooded – detect the flooding.
If code gets obfuscated – detect the obfuscation.
If ETW gets silenced – detect the silence.
If the EDR gets killed – detect the killing.
If logs get cleared – detect the clearing.
The act of hiding is often more suspicious than what’s being hidden.
It’s like a surveillance camera going black or freezing.
That is the signal.
I’ve been doing this successfully for years.
I detect obfuscated crap all the time.
People ask, “What is it?”
I say, “No fucking clue. Could be:
– a Themida-packed sample with a Microsoft copyright,
– a UPX-packed ELF with a 1-char filename,
– a PowerShell script that looks like static noise, or
– a fake svchost.exe with no Microsoft copyright.”
I don’t need to know what it is.
It’s obviously shady.
That’s enough to detect it – and deal with it.
There’s a Chinese saying that fits perfectly: 欲蓋彌彰
The more you try to hide it, the more obvious it becomes.
--jeroen
Posted in Blue team, Development, DevOps, LifeHacker, Power User, Red team, Security, Software Development | Leave a Comment »