Joshua Rogers’ Scribbles

Antiperspirant without aluminum Toothpaste without fluoride Mouthwash without antiseptic ingredients Food without salt (and don’t get me started on msg!)

Cleaner HTML-sanitizer bypass: mutation-XSS via MathML namespace confusion Reported as: Inside MathML foreign content, <style> is a raw-text element. jsoup therefore stores <img src=x onerror=...> as opaque text (a DataNode) and copies it verbatim, so it…

Person A: Have you heard about Shilajit?

Design, style, and ergonomics are all high up on my interests when it comes to the world.

cJSON is probably the most widely used JSON parser in the C world.

I was recently reading Max Justicz’s blog post, where he outlined how he was able to hack the unpkg.com CDN by getting the service to extract a tar file which contained: A symlink to a directory on the system, followed by a file in the symlink/directory, A

TL;DR: Magic Switch is a free, open-source macOS app for sharing an Apple Magic Keyboard, Trackpad, or Mouse between two Macs — with no Apple ID and no USB re-pairing dance.

This was originally written on June 12, 2020 and published on LinkedIn.

This was originally written on September 15, 2020 and published on LinkedIn.

This was originally written on July 10, 2020 and published on LinkedIn.