My booking tool reported Room 4 occupied for 150 minutes when it was 120. Summing each booking's length double-counts overlap: the 9:00-10:00 and 9:30-11:00 reservations share a half hour I counted twice.
Fix: merge overlapping bookings before measuring. The unlock is sorting by start time. Once starts are non-decreasing, any overlap is with the most recent block, so one sweep does it: if start <= last.end, extend, else open a new block.
Handoff doc said "API secrets encrypted at rest." The Stripe key was base64. One b64decode and the live key was in my REPL. Encoding is not encryption.
Fix for the secrets: Fernet from the cryptography library. It pins authenticated AES-128-CBC plus a random IV, and the key lives in an env var.
Passwords were unsalted MD5. Fast hashes lose because speed helps the attacker. Swapped to argon2 via passlib, upgraded at login.
Esta vez, a pedido ve algunos seguidores y alumnos, vamos a profundizar en el #oomkiller del kernel #Linux, y por qué puede que algunos procesos de servicio mueran sin razón aparente...
... todo para que el kernel pueda seguir gestionando recursos 🙂
Y para probarlo, nada mejor que saturar la memoria del sistema con #python 😅
Esta vez, a pedido ve algunos seguidores y alumnos, vamos a profundizar en el #oomkiller del kernel #Linux, y por qué puede que algunos procesos de servicio mueran sin razón aparente...
... todo para que el kernel pueda seguir gestionando recursos 🙂
Y para probarlo, nada mejor que saturar la memoria del sistema con #python 😅
The Knuckle-Dragging Way: How a Vendor With No API Got Us a Better Tool
Our email security vendor has no API, syslog needs a firewall hole, and the robot hit a CAPTCHA. So we did it the knuckle-dragging way, and my team loved it.
Looking for #coding advice, specifically editor advice.. I code as a hobby, mostly my own small projects in #Rust#RustLang#Python. Like many people I use #VScode, but each "new" version seems to have more and more #AI features -- features I have zero interest in. I opt out but would rather see this at all.
Any suggestions for an alternative editor that will work on my #ARM#aarch64#Fedora#Asahi remix system?
Most Python web applications are developed over plain HTTP and deployed behind HTTPS, so Secure cookies, HTTP/2 and generated URLs only get properly exercised once deployed. Testing that locally usually means a proxy and a certificate to set up, which few people bother with.
With a Muru development run you add --https and it generates the certificate for you. If you use mkcert your browser already trusts it, and there is no proxy to configure.