Readit News logoReadit News
alexpls commented on Gitlab password reset bug leaves more than 5.3K servers up for grabs   scmagazine.com/news/gitla... · Posted by u/LinuxBender
thedanbob · 2 years ago
This doesn't look like the actual fix but rather a follow-up refactor. I believe the fix is here: https://gitlab.com/gitlab-org/gitlab/-/commit/abe79e4ec43798...

    - recoverable.send_reset_password_instructions(to: email) if recoverable&.persisted?
    + recoverable.send_reset_password_instructions if recoverable&.persisted?

alexpls · 2 years ago
Oh yeah, good pickup thanks!
alexpls commented on Gitlab password reset bug leaves more than 5.3K servers up for grabs   scmagazine.com/news/gitla... · Posted by u/LinuxBender
alexpls · 2 years ago
For folks who wanna see what led to this exploit in a Rails codebase, here’s the commit where it’s fixed:

https://gitlab.com/gitlab-org/gitlab/-/commit/c571840ba2f0e9...

alexpls commented on Making small games, which is fun in itself   abagames.github.io/joys-o... · Posted by u/breck
alexpls · 2 years ago
I've been playing around with the Playdate SDK (https://sdk.play.date) over the holidays and it's awesome for small games like the author describes.

Working with a tiny 1-bit screen and ~150MHz CPU puts some serious constraints on what you can do, which I've found to be pretty freeing (less analysis paralysis, more doing...)

alexpls commented on Easy SVG sparklines   alexplescan.com/posts/202... · Posted by u/alexpls
mindok · 2 years ago
Cool explanation! I use quite a lot of SVG visualisations generated server-side. Some basic charts (including sparkline) are bundled up into ContEx (an elixir library) - see https://contex-charts.org/ (disclosure - author).
alexpls · 2 years ago
Thanks! And thanks also for your work on ContEx, its Sparkline module [1] was a big inspiration for what I ended up implementing.

[1] https://github.com/mindok/contex/blob/master/lib/chart/spark...

u/alexpls

KarmaCake day494July 28, 2014
About
Web developer in Brisbane, Australia

https://alexplescan.com

View Original