GitHub 1C Enterprise Daily Trending

ziglang/zig

2023-09-11T01:25:47Z

A PSP emulator for Android, Windows, Mac and Linux, written in C++. Want to contribute? Join us on Discord at https://discord.gg/5NJB6dD or just send pull requests / issues. For discussion use the forums at forums.ppsspp.org.

PPSSPP - a fast and portable PSP emulator

Created by Henrik Rydgård

Additional code by many contributors, see the Credits screen

Originally released under the GPL 2.0 (and later) in November 2012

Official website: https://www.ppsspp.org/

Discord: https://discord.gg/5NJB6dD

No BIOS file required to play, PPSSPP is an "HLE" emulator. Default settings balance good compatibility and speed.

To contribute, see the development page. Help testing, investigating, or fixing is always welcome. See the list of issues.

For the latest source code, see our GitHub page.

For documentation of all kinds (usage, reference, development), see the documentation on the main website

For build instructions and other development tutorials, see the wiki.

If you want to download regularly updated builds for Android, Windows x86 and x64, visit Orphis' buildbot

For game compatibility, see community compatibility feedback.

What's new in 1.16

Special thanks to unknownbrackets for the new JIT compilers, and fp64 for finally cracking the vrnd instruction.

RetroAchievements support (#17589, #17631, many more). See RetroAchievements on ppsspp.org.
New JIT backends:
- RISC-V, based on IR
- x86 JIT based on IR. Often faster than the existing one.
Input fixes
- Improve behavior when analog and digital inputs clash (#17960)
- Combo mapping is now disabled by default (#17673)
- Android: Better tracking of devices names (#17562, auto config)
- Fix mapping custom touch buttons to analog inputs (#17433)
Rendering performance and fixes
- Fix flicker in WWE Smackdown vs Raw 2006 (#18009), video flicker in Naruto 2 (framebuffer copies, fixing video flicker in Naruto UNH 2">#18008)
- Fix bad colors in Syphon Filter: Logan's Shadow menu (#17965)
- On lower-end devices, avoid "uber" shaders due to performance and driver bugs (#17449, #17922)
- Allow disabling V-sync on Android with Vulkan, more SDL platforms (#17903, #18087)
- On Vulkan, reduce input lag when "Buffer graphics commands" is set to off (#17831)
- Assorted minor perf (#17810, #17505, #17478, #17471, #17452, #17446, #17442)
- Fix shadows in MotorStorm (#17602) (not actually a rendering problem)
- Fix rendering issue in Lunar Silver Star (#17451)
- Add a cache for MakePixelsTexture, improving perf in God of War (#17534)
- Lots of software renderer improvements (#17571, #17569, #17619, #17621, #17618, #17609, ...)
Networking
- HTTPS support now enabled in store and for RA on Windows, Android, Mac, iOS (#17744, ...)
- Ad-hoc: Fix for Metal Gear Acid issue with Link Battle (#17947)
Texture replacement fixes
- Fix Tactics Ogre texture issues (#18001, #18011)
- Fix problem with anisotropic filtering (#17930)
- Fix glitches on D3D11 with KTX2 textures (#17749)
UI changes
- Color emoji support on some platforms (#17854, #17856)
- Use TTF fonts on SDL where available (macOS, Linux/Steam Deck) (#17844), support HiDPI (#17651)
- Allow setting the PSP's MAC address directly (#17755)
- Better looking notifications (#17606, #17674, #17672)
Cheats
- Fix loading cheat dbs on Android devices with scoped storage (#17834)
VR (Quest, other Android VR devices)
- Cinema screen mode improvements (#17704, #17752)
- Quest-only passthrough mode (#17591)
- Cleanups, compatibility fixes, make VR settings per-game (#17636, #17656, #17598, #17518)
Other
- Fix horrible audio glitch in After Burner (#18076)
- Emulate the vrnd instruction accurately (#17506, #17549)
- Fix timing issue causing slowdowns in MLB games (#17676, #17677)
- UWP keyboard support, many other updates (#17952, #17974)
- Allow choosing the display resolution on Android again (#17473)
- Fix issue running some file types out of the Download folder on Android (#17466)

What's new in 1.15.4

Tilt controls: Restore "Low end radius" control (#17489)
Android: Restore the ability to choose "display" (hardware scaler) resolution (#17473)
Improve the workarounds for the DJ Max games (#17467)
Android: Fix running some file formats directly from the Downloads folder (#17466)
OpenGL: Restore most of the lost performance on low-end hardware from the shader variant reduction ([#17440, #17439])
Add a simple profiling tool to check CPU usage by the GL backend (#17475)
Loader: Fix bug preventing WWE 2009 from starting (#17435)
Misc minor fixes and optimizations (#17442, #17457, #17486, #17446, more)

What's new in 1.15.3

Assorted minor crash- and other fixes (#17406, #17414, #17415, #17422)
Android: Allow launch by content URI (for frontends) (#17425)
Control mapping: Fix bugs in mapping UI causing trouble with some controllers (#17412, #17420)

What's new in 1.15.2

Assorted minor crash fixes (#17401, #17399)
Fix Android 12 support in the Android VR build (avoid scoped storage) (#17398)

What's new in 1.15.1

Assorted minor crash fixes (#17374, #17370, #17392, #17394)
Fix for non-png texture replacements when not listed in textures.ini (#17380)
Fix for broken tilt d-pad controls (#17393)
Workaround for Vulkan driver bugs on Mali-T8x0 series GPUs (#17396)

What's new in 1.15

Stutter caused by shader compilation has been reduced drastically (#16873)
- Parallelization: (#16802, #16804, #16809, #16812)
- Shader variant reduction: (#16773, #16778, #16770, #16763)
Rendering performance and fixes
- Integer scaling added (#17224)
- Post-processing fixes (#17262)
- SOCOM overlay glitch removed, night vision fixed (#17297, #17317)
- PowerVR compatibility fixes (#17232)
- CLUT fixes (#17212)
- ToP - Narikiri Dungeon X: Avoid GPU readback (#17181, #17191, #17192)
- DTM / Toca: Avoid GPU readback (#16715)
- Fixed Dante's Inferno performance regression (#17032, #17035)
- Fix wrong device selection on Poco C40 phones, causing broken UI (#17027, #17022)
- Rainbow Six GPU performance fix (#16971)
- Subtitles fixed in The Godfather (#17298, #17314)
Texture replacement improvements
- Less I/O on the main thread, leading to smoother framerates (#17078, #17091, #17120, #17134)
- Support for KTX2 files with UASTC compressed textures added (#17111 #17104)
- Support for DDS files with BC1-7 textures added (#17083, #17103, #17097, #17096, #17095)
- Improve default ini (#17146)
- Mipmaps now always used if provided (#17144)
- Additional optimizations (#17139, #17088)
Optimizations
- Software renderer fixes and performance (#17295, #17214, #17028, #16753, #16706, #16690)
- Vulkan texture upload optimizations (#17052, #17122, #17121, image copies to do all the mips at once.">#17114, #17011)
- Depth readback added, fixing lens flares in Syphon Filter (at perf cost..) (#16907, #16905)
- Async readback supported in Vulkan - currently only enabled in Dangan Ronpa (#16910, #16916)
- Lighting shader optimizations (#16791, #16787)
Controls
- Android tilt control has been overhauled and fixed (#16889, #16896)
- You can now map combinations of buttons to single functions (#17210, #17215, #17228, etc)
- Custom buttons now support analog inputs (#16855)
VR features
- Top down camera: (#17098)
- Head rotation control: (#16857)
- More stereo support: (#16952, #16953)
- Other: (#16826, #16821)
Other
- Windows Dark Mode support (#16704)
- GLSL shader compatibility fixes (#16710, #16709)
- GTA math issue on macOS/iOS fixed, playable again (#16928)
- More accurate VFPU emulation has been added, though not all enabled yet (#16984)
- Debugger features and fixes (#17270, #17269, #17263, #17260, #17203, #17190, #17042, #16994, #16988, #16818 etc)
- Rewind savestates no longer slows things down a lot (#17291)
- Chat window bugfixes (#17241)
- IR Jit fixes - helps iOS when native jit is unavailable (#17129)
- Depth-related rendering fixes (#17055, #16880)
- More RISCV support work (#16976, #16957, #16962, #16832, #16829)
- macOS native menu bar (#16922)
- Font fixes (#16859)
- Rockman 2 audio glitch fix (#16810, #16798)
- UI fixes: Vertical use of space (#16795), scrollbars (#16785), touchpad scroll on Windows (#16699)

Looking for older news?

Adhoc support

Not fully functional, but some games work. Check the Ad-Hoc section of the forum for help.

Credit goes to:

ANR2ME
Igor Calabria
coldbird's code
Kyhel
And more, of course.

ckolderup/postmarks

2023-09-11T01:25:47Z

Apple BLE proximity pairing message spoofing

AppleJuice

Apple BLE Proximity Pairing Message Spoofing

🔴 Disclaimer

These scripts are an experimental PoC that uses Bluetooth Low Energy (BLE) to send proximity pairing messages to Apple devices.
This project is created for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials of this project.

Updates

Flipper Zero

Thanks to the amazing work of Willy-JL this has been added to the Flipper Zero Xtreme Firmware. It's currently in dev and will be officially released in the next update.

To install it now, follow the guide below from the Xtreme Firmware page to clone and compile the current dev build that contains the Apple BLE Spam app.

⚠ Warning!
We will not give basic support for compiling in our server. This is intended for people that already know what they are doing!

To download the needed tools:
$ git clone --recursive --jobs 8 https://github.com/Flipper-XFW/Xtreme-Firmware.git
$ cd Xtreme-Firmware/

To flash directly to the Flipper (Needs to be connected via USB, qFlipper closed)
$ ./fbt flash_usb_full

To compile a TGZ package
$ ./fbt updater_package

To build and launch a single app:
$ ./fbt launch APPSRC=some_appid

ESP-32

Thanks to ronaldstoner for porting this over to the ESP-32

Android

Check out this in-depth walk though by Mobile Hacker about running AppleJuice on a rooted Android phone.

About This Project

This was created in response to the various AppleTV spoof messages being sent out during DEF CON 31. After experiencing it first hand, I had to figure out what was happening. The existing research projects I could find (see credits) had great info but were both a couple years out of date with broken package dependencies, so I decided to take what I could from them and start building from there.

Hardware Requirements

To run these scripts you need a Linux machine with an internal Bluetooth card or a USB Bluetooth adapter.

All original testing was done on a Lenovo T480 with a built-in Bluetooth adapter.
Later tested on Raspberry Pi 3B+ and Raspberry Pi Zero W running Kali Linux with a Zexmte Long Range USB Bluetooth 5.1 Adapter with Dual Antenna.

Range
Range of messages by device type

Device	Range
Lenovo	Couple feet from machine
Raspberry Pi and long range adapter	20+ feet indoors in heavy BLE traffic

Installation Instructions

Please follow in this exact order or you might run into issues with bluetooth dependencies.

Clone the Main Repo

git clone https://github.com/ECTO-1A/AppleJuice.git && cd ./AppleJuice

Install dependencies

sudo apt update && sudo apt install -y bluez libpcap-dev libev-dev libnl-3-dev libnl-genl-3-dev libnl-route-3-dev cmake libbluetooth-dev

Dependencies requiring manual installation

⚠ Warning
The pybluez library is broken on GitHub and needs to be installed manually

Download the latest version 
pip install git+https://github.com/pybluez/pybluez.git#egg=pybluez

pycrypto is not maintained, be sure to install pycryptodome instead 
pip install pycryptodome

Install requirements

sudo pip install -r requirements.txt

Execute scripts without `sudo`

To be able to run without sudo, you need to set the capabilities of the python binary to allow it to access raw sockets. This is done with the following command

sudo setcap cap_net_raw,cap_net_admin+eip $(eval readlink -f $(which python))

Reboot Machine

Several users have reported the need for a reboot after installing the bluetooth packages in order for everything to work properly.

Usage

Before running the script, check that your Bluetooth adapter is connected and showing as `hci0`

Run hcitool dev to get a list of connected adapters

hcitool dev
Devices:
    hci0    00:00:7C:00:3A:13

📝 Note
If the adapter is showing as hci1 you will need to edit the dev_id variable in the scripts to match

Available options

All messages have been combined into a single app. You can now run app.py to get a list of available options.
To run the script use -d (number of message)

Example
app.py -d 13

python3 app.py
Please select a message option using -d.
Available message options:
1: Airpods
2: Airpods Pro
3: Airpods Max
4: Airpods Gen 2
5: Airpods Gen 3
6: Airpods Pro Gen 2
7: PowerBeats
8: PowerBeats Pro
9: Beats Solo Pro
10: Beats Studio Buds
11: Beats Flex
12: BeatsX
13: Beats Solo3
14: Beats Studio3
15: Beats Studio Pro
16: Beats Fit Pro
17: Beats Studio Buds+
18: AppleTV Setup
19: AppleTV Pair
20: AppleTV New User
21: AppleTV AppleID Setup
22: AppleTV Wireless Audio Sync
23: AppleTV Homekit Setup
24: AppleTV Keyboard
25: AppleTV 'Connecting to Network'
26: Homepod Setup
27: Setup New Phone
28: Transfer Number to New Phone
29: TV Color Balance

Examples

beatssolopro.py

Model: Beats Solo Pro

airpods_max.py

Model: Airpods Max

Credit

FuriousMAC and Hexway for all the prior research on Apple BLE, Continuity, and building the Wireshark disector.
Jae Bochs for exposing this to me at DEF CON 31 which made me jump into learning about BLE.
Guillaume Celosia and Mathieu Cunche for reverse engineering Proximity Pairing

Ironclad/rivet

2023-09-11T01:25:47Z

AI agent and prompt chaining IDE and library

Rivet

Download | Website | Documentation

Rivet, the IDE for creating complex AI agents and prompt chaining, and embedding it in your application.

Report Bug · Request Feature · Disussions · Chat

Have a question? Need some help? Check out the Rivet Discord server!

About Rivet

Rivet Application

Rivet is a desktop application for creating complex AI agents and prompt chaining, and embedding it in your application.

Rivet currently has LLM support for:

Rivet has embedding/vector database support for:

Rivet also supports these additional integrations:

Audio Transcription from AssemblyAI

For more information on how to use the application and all of its capabilities, see the documentation!

Rivet Core

Rivet core is a TypeScript library for running graphs created in Rivet. It is used by the Rivet application, but can also be used in your own applications, so that Rivet can call into your own application's code, and your application can call into Rivet graphs.

For more information on using Rivet Core, see the Rivet Integration Getting Started page and the related API documentation.

Rivet core is available on NPM as @ironclad/rivet-core. Rivet node is available as @ironclad/rivet-node. Documentation for each is available on the Rivet website.

Getting Started

Prebuilt Binaries

Latest downloads

All Releases

Check out the releases page for all available releases.

Running from Source

See CONTRIBUTING.md for information on building and running Rivet from source.

Contributing

All types of contributions are welcome - from code to documentation, bug reports, user experience feedback, and new feature suggestions!

Take a moment to read through the CONTRIBUTING.md file for help with setting up your development environment, and how to get started contributing to Rivet.

We use the All Contributors bot to recognize all our contributors, so every contribution is acknowledged. See the Contributors section below for everyone!

Code of Conduct

The Rivet project is welcome to all contributors, and as such, we have a Code of Conduct that all contributors must follow.

Troubleshooting

If you have run into any issues while running the Rivet application, or when integrating it into your code, please check the Issues page for any existing issues, and if you can't find any, please open a new issue!

If you have any other questions on using Rivet, or have any other ideas, feel free to open a discussion!

Contributors ✨

Thanks goes to these wonderful people (emoji key):

_{Andy Brenneke} 💻 🤔 🔬 ⚠️ 🔧 👀 💬 🧑‍🏫	_{Cai GoGwilt} 💻 💼 🤔 🚧 📣 👀 🐛	_{Teddy Coleman} 💻 🐛	_{Todd Berman} 💻 🐛	_{Andrew Rothwell} ✅ 📖	_{Dominic Cooney} 🤔 🐛	_{Ankur Goyal} 📖 💻
_{Scott Bessler} 💡 💻 🐛	_{Brandon Hong} 💻 🐛	_{Niels Swimberghe} 💻	_{Terence C} 💻	_{Thomas Brodahl} 🎨	_{Justin Kwok} 🐛	_{Zhang Yi Jiang} 📖
_{Michael Kuc} 💻	_{Ikko Eltociear Ashimine} 📖

This project follows the all-contributors specification. Contributions of any kind welcome!

statichunt/geeky-astro

2023-09-11T01:26:39Z

nixcon/2023.nixcon.org

2023-09-11T01:26:39Z

🚀 An open-source, MIT-licensed portfolio template using CSS, HTML, JavaScript, and Astro to create personalized portfolio websites or showcase projects online. 🚀

Xilinx/meta-kria

2023-09-12T01:23:00Z

cedev935/OpenChat

2023-09-11T01:27:00Z

AnnulusGames/MagicTween

2023-09-11T01:27:27Z

Extremely fast tween library implemented in Unity ECS

Magic Tween

Extremely fast tween library implemented in Unity ECS

日本語版READMEはこちら

Overview

Magic Tween is a high-performance tweening library implemented in Unity Entity Component System (ECS).

In addition to powerful tweening functionality compatible with traditional components, it also offers even higher-performance APIs for ECS.

Features

High-performance tweening library implemented in ECS.
Add extension methods compatible with many components.
Tween anything with Tween.To.
Apply various settings using method chaining.
Create complex animations with Sequences.
Add processing via callbacks.
Support for tweening TextMesh Pro.
Support for conversion to Observable with UniRx.
Support for async/await with UniTask.
Even higher-performance implementation for ECS.

Performance

When tweening float values of regular classes using Tween.To(), Magic Tween operates more than 2 to 5 times faster than other libraries.

When tweening float values within ECS components using Tween.Entity.To(), it is possible to achieve even higher performance.

For more details on performance, please refer to the README in the MagicTween.Benchmarks project.

Samples

The MagicTween.Samples project includes several samples implemented using Magic Tween. For more details, please refer to the README in the project.

Setup

Requirement

Unity 2022.1 or higher
Entities 1.0.0 or higher
Burst 1.8.8 or higher

Install

Open the Package Manager from Window > Package Manager
"+" button > Add package from git URL
Enter the following to install

https://github.com/AnnulusGames/MagicTween.git?path=/MagicTween/Assets/MagicTween

or open Packages/manifest.json and add the following to the dependencies block.

{
    "dependencies": {
        "com.annulusgames.magic-tween": "https://github.com/AnnulusGames/MagicTween.git?path=/MagicTween/Assets/MagicTween"
    }
}

Basic Usage

By introducing Magic Tween, numerous extension methods for creating tweens on traditional Unity components are added. Below is an example of animating the position of a Transform using these extension methods:

// Move from the current position to (1, 2, 3) over 5 seconds
transform.TweenPosition(
    new Vector3(1f, 2f, 3f), // Target value
    5f // Duration of the change
);

// Move from (0, 0, 0) to (1, 2, 3) over 5 seconds
transform.TweenPosition(
    new Vector3(0f, 0f, 0f), // Starting value
    new Vector3(1f, 2f, 3f), // Target value
    5f // Duration of the change
);

Warning Do not play multiple tweens on the same parameter simultaneously. This can lead to unexpected behavior due to overlapping value changes. (Tweens on different axes, such as TweenPositionX and TweenPositionY, will work.)

Warning Creating tweens in the editor is not supported.

Extension Methods

Magic Tween provides extension methods for most components included in Unity. These extension methods allow for more concise and optimized code compared to Tween.To(). It's recommended to use extension methods when available.

You can find a list of available extension methods here (a wiki is currently being created).

Classification

The extension methods added for tweening are classified into several categories:

Method Name	Behavior
Tween...	Creates a tween for a specific field/property.
Punch...	Creates a tween that vibrates the value of a specific field/property.
Shake...	Creates a tween that randomly shakes the value of a specific field/property.
Set...	Adds settings to customize the tween's behavior.
On...	Adds callbacks at specific points during the tween.

Tweening Custom Value

You can animate custom value using the Tween.To() method:

float foo;

float endValue = 10f;
float duration = 2f;

Tween.To(
    () => foo,
    x => foo = x,
    endValue,
    duration
);

If you want to use only values without defining variables, you can use Tween.FromTo():

float startValue = 0f;
float endValue = 10f;
float duration = 2f;

Tween.FromTo(
    x => Debug.Log("current value: " + x),
    startValue,
    endValue,
    duration
);

You can create tweens that follow a curve passing through multiple points using Tween.Path():

Vector3 foo;

Vector3[] points;
float duration = 2f;

Tween.Path(
    () => foo,
    x => foo = x,
    points,
    duration
);

Avoiding Allocations

The To and FromTo methods mentioned above cause allocations because they capture external variables. To reduce unnecessary allocations when performing tweens on an object, you can specify the target object as the first argument to avoid lambda expression allocations:

// A class with a field named 'foo'
ExampleClass target;

float endValue = 10f;
float duration = 2f;

// Pass the object as the first argument to avoid allocations
Tween.To(
    target,
    obj => obj.foo,
    (obj, x) => obj.foo = x,
    endValue,
    duration
);

Tween Control

In general, created tweens play and are destroyed automatically, so there's no need for explicit control. However, there are situations where manual control is necessary, such as when dealing with tweens that loop indefinitely. In such cases, you can control tweens through the Tween struct:

Tween tween = transform.TweenPosition(Vector3.up, 2f);

// Start/resume the tween
tween.Play();

// Pause the tween
tween.Pause();

// Restart the tween from the beginning
tween.Restart();

// Complete the tween
tween.Complete();

// Kill the tween
tween.Kill();

// Complete and kill the tween
tween.CompleteAndKill();

You can also perform operations on all playing tweens collectively. If you specify an ID as an argument, you can target only the tweens with matching IDs:

// Kill all playing tweens
Tween.KillAll();

// Complete all tweens with an ID of 1
Tween.CompleteAll(1);

// Pause all tweens with an ID of "Alpha"
Tween.PauseAll("Alpha");

Getting Tween Information

You can check if a tween is currently active using IsActive(). When performing operations on tweens, it's a good practice to check for activity, especially when there's a possibility that the tween may not be active:

// Kill the tween if it's active
if (tween.IsActive()) tween.Kill();

You can also retrieve the duration of a tween using GetDuration():

float duration = tween.GetDuration();

Adding Settings

You can customize the behavior of a tween using the Set methods. These methods can be chained together for concise code. The following code is an example of applying custom settings to a tween:

transform.TweenLocalScale(Vector3.one * 2f, 5f)
    .SetEase(Ease.OutSine) // Set the easing function to OutSine
    .SetLoops(3, LoopType.Restart) // Repeat 3 times with restart behavior
    .SetDelay(1f); // Delay the start by 1 second

SetEase

Sets the easing function to use for the tween. You can also use your own easing function by passing an AnimationCurve.

SetLoops

Sets the number of times the tween should loop. By default, it's set to 1. You can create a tween that loops infinitely by setting it to -1. You can also specify the loop behavior using the second argument, LoopType.

SetPlaybackSpeed

Sets the playback speed of the tween. The default is 1, and negative values are not supported.

SetDelay

Sets a delay in seconds before the tween starts.

SetIgnoreTimeScale

Ignores the effect of TimeScale.

SetRelative

Sets the end value as a relative value from the start value.

SetInvert

Swaps the start and end values. You can adjust the behavior using the InvertMode.

InvertMode	Behavior
InvertMode.None	Moves from the start value to the end value as usual.
InvertMode.Immediate	Moves to the end value as soon as the tween starts and then transitions towards the start value.
InvertMode.AfterDelay	Waits until the tween starts, then moves to the end value and transitions towards the start value.

SetId

Assigns an ID to the tween. This allows you to operate on tweens with the same ID in bulk when performing operations like KillAll. You can pass an int or a string with a length of 32 bytes or less as an ID (default is int 0 or an empty string).

SetLink

Links the tween's lifecycle to a GameObject. You can change the behavior by setting the LinkBehaviour as the second argument. However, regardless of the option set, Kill will be called on OnDestroy.

SetAutoPlay

Sets whether the tween should automatically play (default is true). If set to false, you need to manually call Play() to start the tween.

SetAutoKill

Sets whether the tween should automatically be killed at the end (default is true). If set to false, you need to manually call Kill() to remove the tween. This option is useful when you want to reuse the same tween multiple times.

SetFrequency (Punch, Shake)

Available options for Punch and Shake tweens to set the frequency of vibration (default is 10).

SetDampingRatio (Punch, Shake)

Available options for Punch and Shake tweens to set the damping ratio of vibration. A value of 1 will completely dampen the vibration at the end, and a value of 0 will result in no damping (default is 1).

SetRandomSeed (Shake)

Available option for Shake tweens to set the seed value for the random numbers used in vibration. This option must be applied before playback.

SetPathType (Path)

Available option for Path-based tweens to set how the points are connected.

PathType	Behavior
PathType.Linear	Connects each point using a straight line.
PathType.CatmullRom	Connects each point using a Catmull-Rom spline curve.

SetClosed (Path)

Available option for Path-based tweens to set whether the path is closed, allowing it to return to the starting point.

SetRoundingMode (int, int2, int3, int4, long)

Sets the rounding mode for decimal values. This option is applicable only to integer-based types.

RoundingMode	Behavior
RoundingMode.ToEven	Default setting. Rounds the value to the nearest integer, and if the value is midway, it rounds to the nearest even integer.
RoundingMode.AwayFromZero	Rounds the value to the nearest integer, and if the value is midway, it rounds away from zero.
RoundingMode.ToZero	Rounds the value towards zero.
RoundingMode.ToPositiveInfinity	Rounds the value towards positive infinity.
RoundingMode.ToNegativeInfinity	Rounds the value towards negative infinity.

SetScrambleMode (string)

Allows you to fill unrevealed characters with random characters. This option is only applicable to string tweens.

ScrambleMode	Behavior
ScrambleMode.None	Default setting. Nothing is displayed for unrevealed parts.
ScrambleMode.Uppercase	Fills unrevealed parts with random uppercase letters.
ScrambleMode.Lowercase	Fills unrevealed parts with random lowercase letters.
ScrambleMode.Numerals	Fills unrevealed parts with random numbers.
ScrambleMode.All	Fills unrevealed parts with random uppercase letters, lowercase letters, or numbers.
(ScrambleMode.Custom)	Fills unrevealed parts with random numbers from the specified string. This option cannot be explicitly set and is determined when passing a string as an argument to SetScrambleMode.

SetRichTextEnabled (string)

Enables RichText support, allowing text with RichText tags to be animated with proper character advancement. This option is only applicable to string tweens.

Callbacks

When you want to perform some actions at specific times, such as the start or completion of a tween, you can use the On-series methods. Callback methods, like other settings, can be written using method chaining.

transform.TweenPosition(new Vector3(1f, 2f, 3f), 5f)
    .SetLoops(5)
    .OnUpdate(() => Debug.Log("update"))
    .OnStepComplete(() => Debug.Log("step complete"))
    .OnComplete(() => Debug.Log("complete"));

Note When you set up any callback, the first callback creates an allocation for generating the component. Additionally, enabling one or more callbacks can reduce performance during playback. In most cases, the impact on performance is minimal, but it's recommended to avoid using callbacks when creating a large number of tweens.

OnPlay

Called when the tween starts playing. Unlike OnStart, it ignores delays set with SetDelay and is also called if Play is invoked after a pause.

OnStart

Called when the tween begins its operation. If a delay is set with SetDelay, it is called after the delay has passed.

OnUpdate

Called every frame during the tween's playback.

OnStepComplete

Called at the end of each loop when SetLoops is configured.

OnComplete

Called when the tween is completed.

OnKill

Called when the tween is killed.

DelayedCall / Empty

You can create a tween that performs a specified action after a certain delay using Tween.DelayedCall().

// Display a log after 3 seconds
Tween.DelayedCall(3f, () => Debug.Log("delayed call"));

Additionally, you can create an empty tween using Tween.Empty().

// A tween that completes after 3 seconds
Tween.Empty(3f);

// DelayedCall() internally calls the following code
Tween.Empty(3f)
    .OnStepComplete(() => Debug.Log("delayed call"))
    .OnComplete(() => Debug.Log("delayed call"));

Sequence

A Sequence is a feature used to group multiple tweens together. By using Sequences, you can easily create complex animations by combining multiple tweens.

Creating a Sequence

You can obtain a new Sequence from Sequence.Create():

// Create a new Sequence
Sequence sequence = Sequence.Create();

Adding Tweens

Next, you add the tweens you want to include in the Sequence. There are various methods available to add tweens to a Sequence. By using these methods, you can combine tweens and build complex animations.

Sequences can be nested regardless of their hierarchy. Options and callbacks such as SetDelay and SetLoops will also work for the Sequence after it has been added.

Append

The Append() method adds tweens to the end of the Sequence. The added tweens will play in sequence when you play the Sequence.

// Append a tween to the end
sequence.Append(transform.TweenPosition(new Vector3(1f, 0f, 0f), 2f))
    .Append(transform.TweenPosition(new Vector3(1f, 3f, 0f), 2f));

You can use AppendInterval() and AppendCallback() to add delays or callbacks:

// Append a delay to the end
sequence.AppendInterval(1f);

// Append a callback to the end
sequence.AppendCallback(() => Debug.Log("Hello!"));

Prepend

If you want to add tweens to the beginning, you can use Prepend(). In this case, the tweens already added will move back by the duration of the new prepend tween.

// Prepend a tween to the beginning
sequence.Prepend(transform.TweenPosition(new Vector3(1f, 0f, 0f), 2f));

You can also use PrependInterval() and PrependCallback():

// Prepend a delay to the beginning
sequence.PrependInterval(1f);

// Prepend a callback to the beginning
sequence.PrependCallback(() => Debug.Log("Hello!"));

Join

To concatenate a tween with the ones added before it, you can use Join(). Tweens added with Join() will play concurrently with the previously added tween.

sequence.Append(transform.TweenPosition(new Vector3(1f, 0f, 0f), 2f));

// Join with the previous tween
sequence.Join(transform.TweenPosition(new Vector3(1f, 3f, 0f), 2f));

Insert

If you want to insert a tween at an arbitrary point, you can use Insert(). The tween added with Insert() will operate independently of other tweens and will start playing once it reaches the specified position.

// Insert a tween at 1 second from the start
sequence.Insert(1f, transform.TweenPosition(new Vector3(1f, 0f, 0f), 2f));

You can also insert callbacks using InsertCallback():

// Insert a callback at 1 second from the start
sequence.InsertCallback(1f, () => Debug.Log("Hello!"));

Implicit Conversion to Tween

A Sequence can be implicitly converted to a Tween, allowing you to assign it directly:

Sequence sequence = Sequence.Create();

// Can be assigned directly to a Tween variable
Tween tween = sequence;

Usage Considerations

Here are some important points to keep in mind when using Sequences:

You cannot add tweens to a Sequence while it is playing.
You cannot add tweens with infinite loops to a Sequence.
Once a tween is added to a Sequence, it becomes locked, and you cannot access it individually. Be cautious, as you cannot manipulate the individual tweens within a Sequence.
You cannot include the same tween in multiple Sequences.

Logging

If you want to perform logging of Tween callbacks and values for debugging purposes, you can easily achieve this using dedicated extension methods. Note that these logs will only be displayed if MagicTweenSettings' LoggingMode is set to Full.

using MagicTween;
using MagicTween.Diagnostics; // Enable debug extension methods

// Log specific callback
transform.TweenPosition(Vector3.up, 5f)
    .LogOnUpdate();

// Log all callbacks together
transform.TweenEulerAngles(new Vector3(0f, 0f, 90f), 5f)
    .LogCallbacks();

// You can also assign a name for identification
transform.TweenLocalScale(Vector3.one * 2f, 5f)
    .LogCallbacks("Scale");

float foo;
// You can also log values (current value per frame)
Tween.To(() => foo, x => foo = x, 5f, 10f)
    .LogValue();

Project Settings

You can customize Tween's initial settings and logging preferences.

Creating MagicTweenSettings

Create a MagicTweenSettings asset to store your configuration by navigating to Assets > Create > Magic Tween > Magic Tween Settings.

Note The created MagicTweenSettings will be automatically added to the project's Preload Assets. If the settings are not being loaded, ensure that MagicTweenSettings is included in the Preload Assets.

Logging Mode

Set whether logging is enabled or not.

LoggingMode	Behavior
LoggingMode.Full	Display all logs, including Log-related extension methods, in the Console.
LoggingMode.WarningsAndErrors	Display only warnings and errors in the Console.
LoggingMode.ErrorsOnly	Display only errors in the Console.

Capture Exceptions

When set to "On," exceptions that occur internally in Tweens will be logged as warnings. When set to "Off," exceptions will be logged as regular exceptions.

Default Tween Parameters

You can modify the default settings for Tweens.

Changing Settings from Script

You can access these settings from the MagicTweenSettings class in your script.

// Change Logging Mode from script
MagicTweenSettings.loggingMode = LoggingMode.ErrorsOnly;

TextMesh Pro

Magic Tween supports TextMesh Pro (TMP) and allows you to tween text characters individually using the TweenChar extension methods. Here's how you can use it:

TMP_Text tmp;

// GetCharCount retrieves the number of tweenable characters
for (int i = 0; i < tmp.GetCharCount(); i++)
{
    tmp.TweenCharScale(i, Vector3.zero).SetInvert().SetDelay(i * 0.07f);
}

You can stop the tweens associated with TMP_Text and reset the text's decoration to its initial state using ResetCharTweens():

// Stop the character tweens and reset the decoration to the initial state
tmp.ResetCharTweens();

Character tweens are powered by the TMPTweenAnimator class internally, which you can access using GetTMPTweenAnimator():

// Get the internal TMPTweenAnimator
TMPTweenAnimator tmpAnimator = tmp.GetTMPTweenAnimator();

// Extension methods for TMP_Text use methods from TMPTweenAnimator internally
tmpAnimator.TweenCharOffset(0, Vector3.up);

// You can directly set parameters for each character using SetChar**
tmpAnimator.SetCharScale(1, Vector3.one * 2f);
tmpAnimator.SetCharColor(1, Color.red);

// ResetCharTweens() equivalent
tmpAnimator.Reset();

// GetCharCount() equivalent
tmpAnimator.GetCharCount();

UniRx

By integrating UniRx, you can convert Tween callbacks and Tween operations into Observables.

Converting Callbacks to Observables

You can use methods like OnUpdateAsObservable() to convert Tween callbacks into Observables. For example:

float foo;

Tween.To(() => foo, x => foo = x, 10f, 10f)
    .OnUpdateAsObservable()
    .Subscribe(_ =>
    {
        Debug.Log("update!");
    });

Converting Tweens to Observables

You can use ToObservable() to transform a Tween into an Observable that emits values each frame. For example:

Tween.FromTo(0f, 10f, 10f, null)
    .ToObservable()
    .Where(x => x >= 5f)
    .Subscribe(x =>
    {
        Debug.Log("current value: " + x);
    });

UniTask

By integrating UniTask, you can use async/await to handle Tween waiting operations.

var tween = transform.TweenPosition(Vector3.up, 2f);

// You can directly await the Tween (waits until the Tween is killed)
await tween;

You can use AwaitForKill() and pass a CancellationToken to handle cancellation.

// Create a CancellationTokenSource
var cts = new CancellationTokenSource();

// Wait until the Tween is killed, passing the CancellationToken
await transform.TweenPosition(Vector3.up, 2f)
    .AwaitForKill(cancellationToken: cts.Token);

You can also wait for other events like completion using AwaitForComplete() or AwaitForPause().

// Wait until the Tween completes
await transform.TweenPosition(Vector3.up, 2f).AwaitForComplete();

Furthermore, you can specify the CancelBehaviour to determine the behavior on cancellation.

var cts = new CancellationTokenSource();

// On cancellation, call Complete and throw OperationCanceledException
await transform.TweenPosition(Vector3.up, 2f)
    .AwaitForComplete(CancelBehaviour.CompleteAndCancelAwait, cts.Token);

CancelBehaviour	Behavior on Cancellation
CancelBehaviour.Kill	Calls the Kill method.
CancelBehaviour.Complete	Calls the Complete method.
CancelBehaviour.CompleteAndKill	Calls both Complete and Kill methods.
CancelBehaviour.CancelAwait	Throws an OperationCanceledException without calling Complete or Kill.
CancelBehaviour.KillAndCancelAwait	Default behavior. Calls Kill and throws an OperationCanceledException.
CancelBehaviour.CompleteAndCancelAwait	Calls Complete and throws an OperationCanceledException.
CancelBehaviour.CompleteAndKillAndCancelAwait	Calls both Complete and Kill methods and throws an OperationCanceledException.

Implementation for ECS

Magic Tween provides APIs for implementing Tween for ECS (Entity Component System), allowing you to create high-performance Tweens compared to regular ones.

Creating a Translator

To Tween the values of specific Components, you need to create a Translator for the target Component, along with a System to make it work.

As an example, let's create a Translator for the following Component:

public struct ExampleComponent : IComponentData
{
    public float value;
}

First, define a structure that implements ITweenTranslator, like this:

public struct ExampleTranslator : ITweenTranslator<float, ExampleComponent>
{
    // A property to track the target Entity, used in the System
    public Entity TargetEntity { get; set; }

    // Apply the value to the Component
    public void Apply(ref ExampleComponent component, in float value)
    {
        component.value = value;
    }

    // Return the current value of the Component
    public float GetValue(ref ExampleComponent component)
    {
        return component.value;
    }
}

Next, create a System class that inherits from TweenTranslationSystemBase, providing the Translator you created as a type argument. Keep the internal of the derived class empty, as the base class already implements the necessary logic.

public partial class ExampleTweenTranslationSystem : TweenTranslationSystemBase<float, ExampleComponent, ExampleTranslator> { }

Now, you're prepared to Tween values.

Tweening Component Values

To Tween values using the Translator you created, you can use Tween.Entity.To() or Tween.Entity.FromTo(). Provide the type of your Translator as type arguments.

var entity = EntityManager.CreateEntity();
EntityManager.AddComponent<ExampleComponent>(entity);

// Tween the value of ExampleComponent's 'value' field to 5 over 10 seconds
Tween.Entity.To<ExampleTranslator>(entity, 5f, 10f);

Just like regular Tweens, you can chain methods to add settings:

Tween.Entity.FromTo<ExampleTranslator>(entity, 0f, 5f, 10f)
    .SetEase(Ease.OutSine)
    .SetLoops(3, LoopType.Restart)
    .SetDelay(1f);

You can also add these Tweens to a Sequence:

var entity1 = EntityManager.CreateEntity();
var entity2 = EntityManager.CreateEntity();
EntityManager.AddComponent<ExampleComponent>(entity1);
EntityManager.AddComponent<ExampleComponent>(entity2);

var tween1 = Tween.Entity.To<ExampleTranslator>(entity1, 5f, 10f);
var tween2 = Tween.Entity.To<ExampleTranslator>(entity2, 5f, 10f);

var sequence = Sequence.Create()
    .Append(tween1)
    .Append(tween2);

Warning Avoid applying multiple concurrent Tweens with the same Translator to the same Entity. This may lead to overlapping value modifications and unexpected behavior.

Built-in Translators

Under MagicTween.Translators, you can find built-in Translators for ECS components.

Currently, there's a Translator that works with LocalTransform.

If you have the Entities Graphics package installed, you'll find Translators for tweening Material properties.

Limitations

Creating and manipulating Tweens/Sequences is only supported on the main thread. You cannot create new Tweens or perform operations like Kill or Complete from a Job. To alleviate this limitation, there's ongoing development to introduce functionality for creating/operating Tweens using a dedicated CommandBuffer.

Other Features

EaseUtility

The easing functions used internally by Tween can be accessed via EaseUtility.

float value1 = EaseUtility.Evaluate(0.5f, Ease.OutQuad);
float value2 = EaseUtility.InOutQuad(0.5f);

Experimental Features

The MagicTween.Experimental namespace contains features that are currently under development. These features are available for use but come with no guarantees, and there may be breaking changes without notice.

Known Issues

Performance Drop in the Editor

ECS performs numerous checks to enhance safety, which leads to decreased performance within the editor. This performance degradation is particularly noticeable when creating Tweens and, in some cases, can result in processing times several times longer than usual.

It's important to note that these safety checks are disabled in the build, so performance measurements should always be conducted in the build environment.

Performance Drop in WebGL

While it's possible to use ECS in WebGL, limitations in WebGL's specifications, such as the absence of multi-threading and SIMD, disable optimizations like the Job System and Burst. ECS achieves its high performance through the Job System and Burst, making performance degradation unavoidable in WebGL (hence, there are few advantages to using ECS on WebGL currently).

Magic Tween optimizes the calculation part of Tweens using the Job System and Burst. Therefore, on WebGL, performance suffers for the reasons mentioned above. While these effects are typically not noticeable, please be mindful of this when creating a large number of Tweens.

Support

Forum: https://forum.unity.com/threads/magic-tween-extremely-fast-tween-library-implemented-in-ecs.1490080/

License

MIT License

LuemmelSec/PMP-Decrypter

2023-09-12T01:23:26Z

PMP-Decrypter

This is a tool to decrypt the encrypted password strings in Patch My PC settings.xml files.
In my case it was the SMTP password, but as there is only one encryption and decryption function in the tool, it should work for all of them.
Patch My PC saves the values for the crypto functions in registry keys under:
HKLM\Software\Patch My PC Publishing Service
Data1 = Key
Data2 = Salt
Data3 = IV

I honestly dunno if this is also true for the latest latest latest version, but the one I stumbled upon seems to be from 04/2023 so pretty new.

The ACLs on those keys are lax, so can be read by everyone.

The settings file resides in the application's main folder and is called Settings.xml.

Usage

The tool first trys to fetch those key values automagically for you.
If not found, you still have the option to specify them manually.

PMP-Decrypter.exe <encryptedText> [privateKey] [saltKey] [ivKey]

Build

I used Visual Studio 2017, .Net Framework 4 and release mode.
If you dare, you can use the precompiled version.

Countermeasures

Honestly speaking: If a company which wants to connect to such critical assets takes security like this, I would not recommend using this at all.
You could restrict access to the reg keys, so that not everyone is able to read them.

If you operate it, where ever possible use low privileged, dedicated accounts. Sending mails with your DA account is not the best idea you might have.

ModOrganizer2/modorganizer

2023-09-11T01:27:34Z

Mod manager for various PC games. Discord Server: https://discord.gg/ewUVAqyrQX if you would like to be more involved

Mod Organizer

Mod Organizer (MO) is a tool for managing mod collections of arbitrary size. It is specifically designed for people who like to experiment with mods and thus need an easy and reliable way to install and uninstall them. Mod Organizer 2 is a mod manager created by Tannin to support 64-bit games like Skyrim Special Edition and Fallout 4 in addition to all the 32-bit games MO1 already supported.

Tannin discontinued the project when he was hired by the Nexus team to develop their new Vortex mod manager. MO2 was not completed and was left with many issues. LePresidente managed to fix it to a usable state by himself after SkyrimSE came out, adding support for it, and releasing v2.0.8. The project took up speed again after a few more coders showed up in late 2017, and a lot of progress has been made.

Help Wanted!

Mod Organizer 2 is an open project in the hands of the community, there are problems that need to be solved and things that could be added. MO2 really needs developers and if you have the programming skills and some free time you can really improve the experience of the modding community.

To have more information, please join the open MO2 Development discord server: Mod Organizer 2 If you want to help translate MO2 to your language you should join the discord server too and head to the #translation channel. To setup a development environment on your machine, there is the mob project that handles that. If you want to submit your code changes, please use a good formatting style like the default one in Visual Studio.

Through the work of a few people of the community MO2 has come quite far, now it needs some more of those people to go further.

Reporting Issues:

Issues should be reported to the GitHub page or on the open discord server: Mod Organizer 2. Here is also where dev builds are tested, bugs are reported and investigated, suggestions are discussed and a lot more.

Credits to Tannin, LePresidente, Silarn, erasmux, AL12, LostDragonist, AnyOldName3, isa, Holt59 and many others for the development.

Download Location

on GitHub.com
on NexusMods.com

Old Download Location

TanninOne/modorganizer/releases

Building

Please refer to Modorganizer2/mob for build instructions.

Other Repositories

MO2 consists of multiple repositories on github. The mob project will download them automatically as required. They should however also be buildable individually. Here is a complete list:

Unused Repositories

nginx/unit

2023-09-12T01:23:21Z

NGINX Unit - universal web app server - a lightweight and versatile open source server that simplifies the application stack by natively executing application code across eight different programming language runtimes.

NGINX Unit

Universal Web App Server

NGINX Unit is a lightweight and versatile open-source server that has two primary capabilities:

serves static media assets,
runs application code in seven languages.

Unit compresses several layers of the modern application stack into a potent, coherent solution with a focus on performance, low latency, and scalability. It is intended as a universal building block for any web architecture regardless of its complexity, from enterprise-scale deployments to your pet's homepage.

Its native RESTful JSON API enables dynamic updates with zero interruptions and flexible configuration, while its out-of-the-box productivity reliably scales to production-grade workloads. We achieve that with a complex, asynchronous, multithreading architecture comprising multiple processes to ensure security and robustness while getting the most out of today's computing platforms.

Quick Installation

macOS

$ brew install nginx/unit/unit

For details and available language packages, see the docs.

Docker

$ docker pull unit

For a description of image tags, see the docs.

Amazon Linux, Fedora, RedHat

$ wget https://raw.githubusercontent.com/nginx/unit/master/tools/setup-unit && chmod +x setup-unit
# ./setup-unit repo-config && yum install unit
# ./setup-unit welcome

For details and available language packages, see the docs.

Debian, Ubuntu

$ wget https://raw.githubusercontent.com/nginx/unit/master/tools/setup-unit && chmod +x setup-unit
# ./setup-unit repo-config && apt install unit
# ./setup-unit welcome

For details and available language packages, see the docs.

Running a Hello World App

Unit runs apps in a variety of languages. Let's consider a basic example, choosing PHP for no particular reason.

Suppose you saved a PHP script as /www/helloworld/index.php:

<?php echo "Hello, PHP on Unit!"; ?>

To run it on Unit with the unit-php module installed, first set up an application object. Let's store our first config snippet in a file called config.json:

{
    "helloworld": {
        "type": "php",
        "root": "/www/helloworld/"
    }
}

Saving it as a file isn't necessary, but can come in handy with larger objects.

Now, PUT it into the /config/applications section of Unit's control API, usually available by default via a Unix domain socket:

# curl -X PUT --data-binary @config.json --unix-socket  \
       /path/to/control.unit.sock http://localhost/config/applications


{
	"success": "Reconfiguration done."
}

Next, reference the app from a listener object in the /config/listeners section of the API. This time, we pass the config snippet straight from the command line:

# curl -X PUT -d '{"127.0.0.1:8000": {"pass": "applications/helloworld"}}'  \
       --unix-socket /path/to/control.unit.sock http://localhost/config/listeners

{
    "success": "Reconfiguration done."
}

Now Unit accepts requests at the specified IP and port, passing them to the application process. Your app works!

$ curl 127.0.0.1:8080

      Hello, PHP on Unit!

Finally, query the entire /config section of the control API:

# curl --unix-socket /path/to/control.unit.sock http://localhost/config/

Unit's output should contain both snippets, neatly organized:

{
    "listeners": {
        "127.0.0.1:8080": {
            "pass": "applications/helloworld"
        }
    },

    "applications": {
        "helloworld": {
            "type": "php",
            "root": "/www/helloworld/"
        }
    }
}

For full details of configuration management, see the docs.

OpenAPI Specification

Our OpenAPI specification aims to simplify configuring and integrating NGINX Unit deployments and provide an authoritative source of knowledge about the control API.

Although the specification is still in the early beta stage, it is a promising step forward for the NGINX Unit community. While working on it, we kindly ask you to experiment and provide feedback to help improve its functionality and usability.

Community

The go-to place to start asking questions and share your thoughts is our Slack channel.
Our GitHub issues page offers space for a more technical discussion at your own pace.
The project map on GitHub sheds some light on our current work and plans for the future.
Our official website may provide answers not easily found otherwise.
Get involved with the project by contributing! See the contributing guide for details.
To reach the team directly, subscribe to the mailing list.
For security issues, email us, mentioning NGINX Unit in the subject and following the CVSS v3.1 spec.

raysan5/raygui

2023-09-12T01:23:21Z

A simple and easy-to-use immediate-mode gui library

raygui is a simple and easy-to-use immediate-mode-gui library.

raygui was originally inspired by Unity IMGUI (immediate mode GUI API).

raygui was designed as an auxiliar module for raylib to create simple GUI interfaces using raylib graphic style (simple colors, plain rectangular shapes, wide borders...) but it can be adapted to other engines/frameworks.

raygui is intended for tools development; it has already been used to develop multiple published tools.

WARNING: Latest raygui from master branch is always aligned with latest raylib from master branch. Make sure to use the appropiate versions.

WARNING: Master branch now contains raygui 4.0-dev, it is an API-BREAKING redesign from previous versions (3.x), now all functions are more consistent and coherent, you can read the details about this breaking change in issue 283

NOTE: raygui is a single-file header-only library (despite its internal dependency on raylib), so, functions definition AND implementation reside in the same file raygui.h, when including raygui.h in a module, RAYGUI_IMPLEMENTATION must be previously defined to include the implementation part of raygui.h BUT only in one compilation unit, other modules could also include raygui.h but RAYGUI_IMPLEMENTATION must not be defined again.

features

Immediate-mode gui, no retained data
+25 controls provided (basic and advanced)
Powerful styling system for colors, font and metrics
Standalone usage mode supported (for other graphic libs)
Icons support, embedding a complete 1-bit icons pack
Multiple tools provided for raygui development

raygui controls

basic controls

Label       |  Button      |  LabelButton |  Toggle      |  ToggleGroup  |  ToggleSlider
CheckBox    | ComboBox     |  DropdownBox |  TextBox     |  ValueBox     |  Spinner
Slider      |  SliderBar   |  ProgressBar |  StatusBar   |  DummyRec     |  Grid

container/separator controls

WindowBox   |  GroupBox    |  Line        |  Panel       |  ScrollPanel  | TabBar

advanced controls

ListView    |  ColorPicker |  MessageBox  |  TextInputBox

raygui styles

raygui comes with a default style automatically loaded at runtime:

Some additional styles are also provided for convenience, just check styles directory for details:

Custom styles can also be created very easily using rGuiStyler tool.

Styles can be loaded at runtime using raygui GuiLoadStyle() function. Simple and easy-to-use.

raygui icons

raygui supports custom icons, by default, a predefined set of icons is provided inside raygui as an array of binary data; it contains 256 possible icons defined as 16x16 pixels each; each pixel is codified using 1-bit. The total size of the array is 2048 bytes.

To use any of those icons just prefix the #iconId# number to any text written within raygui controls:

if (GuiButton(rec, "#05#Open Image")) { /* ACTION */ }

It's also possible to use the provided GuiIconText() function to prefix it automatically, using a clearer identifier (defined in raygui.h).

if (GuiButton(rec, GuiIconText(RICON_FILE_OPEN, "Open Image"))) { /* ACTION */ }

Provided set of icons can be reviewed and customized using rGuiIcons tool.

raygui support tools

rGuiStyler - A simple and easy-to-use raygui styles editor.
rGuiIcons - A simple and easy-to-use raygui icons editor.
rGuiLayout - A simple and easy-to-use raygui layouts editor.

building

raygui is intended to be used as a portable single-file header-only library, to be directly integrated into any C/C++ codebase but some users could require a shared/dynamic version of the library, for example, to create bindings:

Windows (MinGW, GCC)

copy src/raygui.h src/raygui.c
gcc -o src/raygui.dll src/raygui.c -shared -DRAYGUI_IMPLEMENTATION -DBUILD_LIBTYPE_SHARED -static-libgcc -lopengl32 -lgdi32 -lwinmm -Wl,--out-implib,src/librayguidll.a

Windows (MSVC)

copy src\raylib.h src\raylib.c
cl /O2 /I../raylib/src/ /D_USRDLL /D_WINDLL /DRAYGUI_IMPLEMENTATION /DBUILD_LIBTYPE_SHARED src/raygui.c /LD /Feraygui.dll /link /LIBPATH ../raylib/build/raylib/Release/raylib.lib /subsystem:windows /machine:x64

Linux (GCC)

mv src/raygui.h src/raygui.c
gcc -o raygui.so src/raygui.c -shared -fpic -DRAYGUI_IMPLEMENTATION -lraylib -lGL -lm -lpthread -ldl -lrt -lX11

Mac (clang, homebrew installed raylib)

cp src/raygui.h src/raygui.c
brew install raylib
gcc -o raygui.dynlib src/raygui.c -shared -fpic -DRAYGUI_IMPLEMENTATION -framework OpenGL -lm -lpthread -ldl $(pkg-config --libs --cflags raylib)

license

raygui is licensed under an unmodified zlib/libpng license, which is an OSI-certified, BSD-like license that allows static linking with closed source software. Check LICENSE for further details.

lambdaclass/yet-another-swap

2023-09-12T01:23:54Z

YAS is Yet Another Swap on Starknet but this time is a UniswapV3 implementation.

yayitswei/rama-electric-example

2023-09-12T01:24:11Z

wordcount example using electric and rama

lukaszkorecki/tolkien

2023-09-12T01:24:11Z

GPT model token counter, with extra support for OpenAI's completion API

nafu/coderacer

2023-09-12T01:24:23Z

An awesome game.

NYPL/digital-collections

2023-09-11T01:28:33Z

repo for the "DC Facelift" project

Digital Collections App

This is the Repo for the Digital Collections app using the DS (internally referred to as "DC Facelift")

This is a Next.js project bootstrapped with create-next-app.

Getting Started

First, install Dependencies:

npm install

Use node version 18 or higher. If you have nvm installed on your local machine, use the following command to use node 18.

nvm use

If you don't already have node 18 installed on your machine, you can install it using:

nvm install 18

Second, run the development server:

npm run dev
# or
yarn dev
# or
pnpm dev

Open http://localhost:3000 with your browser to see the result.

You can start editing the page by modifying pages/index.tsx. The page auto-updates as you edit the file.

API routes can be accessed on http://localhost:3000/api/hello. This endpoint can be edited in pages/api/hello.ts.

The pages/api directory is mapped to /api/*. Files in this directory are treated as API routes instead of React pages.

This project uses next/font to automatically optimize and load Inter, a custom Google Font.

Learn More

To learn more about Next.js, take a look at the following resources:

Next.js Documentation - learn about Next.js features and API.
Learn Next.js - an interactive Next.js tutorial.

You can check out the Next.js GitHub repository - your feedback and contributions are welcome!

Vercel

We use Vercel for internal purposes. Pull requests get deployed via Vercel for VQA and accessibility review. We do not formally deploy the app to qa and production using Vercel. We use Travis for this instead.

If you need access to the instance, please contact someone from the NYPL team.

Roaa94/wallet_app_workshop

2023-09-12T01:25:08Z

Wallet App UI Flutter Workshop

Wallet App

A minimalistic, animated Flutter wallet app UI built for the workshop conducted at the Flutter & Friends conference in Stockholm, Sweden.

In this workshop, you learn how to add animations with gradually increasing complexity to a Flutter Wallet app UI to bring it to life.

📃 Article version coming soon...

Chapter 1 - Onboarding Page

Introduction to simple implicit and explicit animations by adding simple animations to the onboarding page.

🔗 Preview the code of the animation

https://github.com/Roaa94/wallet_app_workshop/assets/50345358/67ddf8b7-2518-4533-a44a-4d3ac37cb7bd

Chapter 2 - Stack of Dismissible Cards

Utilizing user input to implement a stack of animated dismissible cards. Cards can be dragged by the user and can either animate back into place, or get thrown and fade away is a direction that depends on the location the user dragged them to. The cards are implemented such that they infinitely loop with the dismissed card returning to the back of the cards.

🔗 Preview the code of the animation

https://github.com/Roaa94/wallet_app_workshop/assets/50345358/3efad15e-5297-4ffe-90b3-6e3a7f7f9c06

Chapter 3 - Cards Hero Animation & Custom Page Transitions

Implementing custom page transitions and highly customized Hero animation. The key here is using the Hero widget's flightShuttleBuilder parameter to return the animated widget. Because the way the Hero widget works with Flutter is that behind the scenes, there are actually 3 widgets, the child of the Hero widget in the source page, the child of the Hero widget in the target page, and another widget for the animation hapenning in between, and the flightShuttleBuilder is how you can override that widget and perform any animations on it, no matter how complex, with the help of the Animation object provided in the parameter's callback.

🔗 Preview the code of the animation

https://github.com/Roaa94/wallet_app_workshop/assets/50345358/0d868308-8fd7-4adb-8cfe-dfc2c3bc4693

Bonus - Slide to Pay Animation

Based on all the concepts covered before, this slide-tp-pay animation includes draging functionality, and uses a mix of implicit and explicit animation widgets. Check it out for some practice!

🔗 Preview the code of the animation

https://github.com/Roaa94/wallet_app_workshop/assets/50345358/376eddd2-9c25-407c-8ef7-348f3be38be8

gabrielfroes/byebg

2023-09-11T01:29:20Z

Remova o fundo das fotos automagicamente!

byebg

Remova o fundo de suas imagens JPG automagicamente.

📌 Descrição

byebg é uma ferramenta de linha de comando e também uma integração com o menu de contexto do Windows, permitindo que desenvolvedores e usuários removam o fundo de imagens JPG de forma automática.

🚀 Instalação e Compilação

Pré-requisitos

Python >=3.8,<3.12
Pip ou Poetry
PyInstaller (para compilação do executável)
Docker

Passos utilizando PIP

Clone o repositório:

git clone https://github.com/gabrielfroes/byebg.git
cd byebg

Construa e execute a image docker:
```
docker compose up --build
```

Opcional: Gerar executavel com Docker compose

docker compose -f docker-compose.pyinstaller.yaml up --build

Compile o projeto (opcional):
```
pyinstaller --onefile --noconsole --icon=byebg.ico ./src/byebg.py
```
Pode ser que você precise ajustar o caminho correto do ícone se quiser incorporá-lo no executável.

Passos Utilizando Poetry

Certifique-se de ter o Poetry instalado (tutorial oficial)

Clone o repositório:

git clone https://github.com/gabrielfroes/byebg.git
cd byebg

Crie um ambiente virtual e instale as dependências:
```
poetry install
```
Compile o projeto (opcional):
```
pyinstaller --onefile --noconsole --icon=byebg.ico ./src/byebg.py
```
Pode ser que você precise ajustar o caminho correto do ícone se quiser incorporá-lo no executável.

Instalação do menu de contexto

Após compilar, se você quiser adicionar a opção no menu de contexto do Windows:

Adapte o arquivo .reg para apontar para o local correto do seu executável.
Execute o arquivo .reg como administrador.

Docker branch

Aos desenvolvedores que não tem o Python instalado e quiserem testar a funcionalide do byebg, podem testar utilizando o docker.

Para mais detalhes, visualize a branch main.

🎯 Como usar

Linha de Comando

Execute o script ou o executável compilado passando a imagem de entrada e a saída desejada:

python byebg.py input.jpg output.png

Menu de Contexto

Após instalar a integração com o menu de contexto:

Navegue até uma imagem JPG no windows explorer.
Clique com o botão direito na imagem.
Selecione a opção "Remover Fundo".
Uma nova imagem será gerada no mesmo diretório com o sufixo "_byebg.png".

🤖 Contribuições

Se você encontrar bugs, tiver sugestões de melhorias ou quiser expandir as funcionalidades, sinta-se à vontade para abrir uma issue ou enviar um pull request.

linuxserver/docker-unifi-network-application

2023-09-11T01:29:20Z

The LinuxServer.io team brings you another container release featuring:

regular and timely application updates
easy user mappings (PGID, PUID)
custom base image with s6 overlay
weekly base OS updates with common layers across the entire LinuxServer.io ecosystem to minimise space usage, down time and bandwidth
regular security updates

Find us at:

Blog - all the things you can do with our containers including How-To guides, opinions and much more!
Discord - realtime support / chat with the community and the team.
Discourse - post on our community forum.
Fleet - an online web interface which displays all of our maintained images.
GitHub - view the source for all of our repositories.
Open Collective - please consider helping us by either donating or contributing to our budget

linuxserver/unifi-network-application

The Unifi-network-application software is a powerful, enterprise wireless software engine ideal for high-density client deployments requiring low latency and high uptime performance.

Supported Architectures

We utilise the docker manifest for multi-platform awareness. More information is available from docker here and our announcement here.

Simply pulling lscr.io/linuxserver/unifi-network-application:latest should retrieve the correct image for your arch, but you can also pull specific arch images via tags.

The architectures supported by this image are:

Architecture	Available	Tag
x86-64	✅	amd64-<version tag>
arm64	✅	arm64v8-<version tag>
armhf	❌

Application Setup

This container requires an external mongodb database instance.

The web UI is at https://ip:8443, setup with the first run wizard.

Setting Up Your External Database

Formally only mongodb 3.6 through 4.4 are supported, however, it has been reported that newer versions will work. If you choose to use a newer version be aware that you will not be operating a supported configuration.

Make sure you pin your database image version and do not use latest, as mongodb does not support automatic upgrades between major versions.

If you are using the official mongodb container, you can create your databases using an init-mongo.js file with the following contents:

db.getSiblingDB("MONGO_DBNAME").createUser({user: "MONGO_USER", pwd: "MONGO_PASS", roles: [{role: "readWrite", db: "MONGO_DBNAME"}]});
db.getSiblingDB("MONGO_DBNAME_stat").createUser({user: "MONGO_USER", pwd: "MONGO_PASS", roles: [{role: "readWrite", db: "MONGO_DBNAME_stat"}]});

Being sure to replace the placeholders with the same values you supplied to the Unifi container, and mount it into your mongodb container.

volumes:
  - ./init-mongo.js:/docker-entrypoint-initdb.d/init-mongo.js:ro

Note that the init script method will only work on first run. If you start the mongodb container without an init script it will generate test data automatically and you will have to manually create your databases, or restart with a clean /data/db volume and an init script mounted.

If you are using the init script method do not also set MONGO_INITDB_ROOT_USERNAME or MONGO_INITDB_ROOT_PASSWORD values as they will cause conflicts.

You can also run the commands directly against the database using either mongo (< 6.0) or mongosh (>= 6.0).

Device Adoption

For Unifi to adopt other devices, e.g. an Access Point, it is required to change the inform IP address. Because Unifi runs inside Docker by default it uses an IP address not accessible by other devices. To change this go to Settings > System > Advanced and set the Inform Host to a hostname or IP address accessible by your devices. Additionally the checkbox "Override" has to be checked, so that devices can connect to the controller during adoption (devices use the inform-endpoint during adoption).

Please note, Unifi change the location of this option every few releases so if it's not where it says, search for "Inform" or "Inform Host" in the settings.

In order to manually adopt a device take these steps:

ssh ubnt@$AP-IP
set-inform http://$address:8080/inform

The default device password is ubnt. $address is the IP address of the host you are running this container on and $AP-IP is the Access Point IP address.

When using a Security Gateway (router) it could be that network connected devices are unable to obtain an ip address. This can be fixed by setting "DHCP Gateway IP", under Settings > Networks > network_name, to a correct (and accessible) ip address.

Migration From Unifi-Controller

If you were using the mongoless tag for the Unifi Controller container, you can switch directly to the Unifi Network Application container without needing to perform any migration steps.

You cannot perform an in-place upgrade from an existing Unifi-Controller container, you must run a backup and then a restore.

The simplest migration approach is to take a full backup of your existing install, including history, from the Unifi-Controller web UI, then shut down the old container.

You can then start up the new container with a clean /config mount (and a database container configured), and perform a restore using the setup wizard.

Strict reverse proxies

This image uses a self-signed certificate by default. This naturally means the scheme is https. If you are using a reverse proxy which validates certificates, you need to disable this check for the container.

Usage

Here are some example snippets to help you get started creating a container.

docker-compose (recommended, click here for more info)

---
version: "2.1"
services:
  unifi-network-application:
    image: lscr.io/linuxserver/unifi-network-application:latest
    container_name: unifi-network-application
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - MONGO_USER=unifi
      - MONGO_PASS=
      - MONGO_HOST=unifi-db
      - MONGO_PORT=27017
      - MONGO_DBNAME=unifi
      - MEM_LIMIT=1024 #optional
      - MEM_STARTUP=1024 #optional
    volumes:
      - /path/to/data:/config
    ports:
      - 8443:8443
      - 3478:3478/udp
      - 10001:10001/udp
      - 8080:8080
      - 1900:1900/udp #optional
      - 8843:8843 #optional
      - 8880:8880 #optional
      - 6789:6789 #optional
      - 5514:5514/udp #optional
    restart: unless-stopped

docker cli (click here for more info)

docker run -d \
  --name=unifi-network-application \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=Etc/UTC \
  -e MONGO_USER=unifi \
  -e MONGO_PASS= \
  -e MONGO_HOST=unifi-db \
  -e MONGO_PORT=27017 \
  -e MONGO_DBNAME=unifi \
  -e MEM_LIMIT=1024 `#optional` \
  -e MEM_STARTUP=1024 `#optional` \
  -p 8443:8443 \
  -p 3478:3478/udp \
  -p 10001:10001/udp \
  -p 8080:8080 \
  -p 1900:1900/udp `#optional` \
  -p 8843:8843 `#optional` \
  -p 8880:8880 `#optional` \
  -p 6789:6789 `#optional` \
  -p 5514:5514/udp `#optional` \
  -v /path/to/data:/config \
  --restart unless-stopped \
  lscr.io/linuxserver/unifi-network-application:latest

Parameters

Container images are configured using parameters passed at runtime (such as those above). These parameters are separated by a colon and indicate <external>:<internal> respectively. For example, -p 8080:80 would expose port 80 from inside the container to be accessible from the host's IP on port 8080 outside the container.

Parameter	Function
`-p 8443`	Unifi web admin port
`-p 3478/udp`	Unifi STUN port
`-p 10001/udp`	Required for AP discovery
`-p 8080`	Required for device communication
`-p 1900/udp`	Required for `Make controller discoverable on L2 network` option
`-p 8843`	Unifi guest portal HTTPS redirect port
`-p 8880`	Unifi guest portal HTTP redirect port
`-p 6789`	For mobile throughput test
`-p 5514/udp`	Remote syslog port
`-e PUID=1000`	for UserID - see below for explanation
`-e PGID=1000`	for GroupID - see below for explanation
`-e TZ=Etc/UTC`	specify a timezone to use, see this list.
`-e MONGO_USER=unifi`	Mongodb Username. Only evaluated on first run.
`-e MONGO_PASS=`	Mongodb Password. Only evaluated on first run.
`-e MONGO_HOST=unifi-db`	Mongodb Hostname. Only evaluated on first run.
`-e MONGO_PORT=27017`	Mongodb Port. Only evaluated on first run.
`-e MONGO_DBNAME=unifi`	Mongodb Database Name (stats DB is automatically suffixed with `_stat`). Only evaluated on first run.
`-e MEM_LIMIT=1024`	Optionally change the Java memory limit (in Megabytes). Set to `default` to reset to default
`-e MEM_STARTUP=1024`	Optionally change the Java initial/minimum memory (in Megabytes). Set to `default` to reset to default
`-v /config`	All Unifi data stored here

Environment variables from files (Docker secrets)

You can set any environment variable from a file by using a special prepend FILE__.

As an example:

-e FILE__PASSWORD=/run/secrets/mysecretpassword

Will set the environment variable PASSWORD based on the contents of the /run/secrets/mysecretpassword file.

Umask for running applications

For all of our images we provide the ability to override the default umask settings for services started within the containers using the optional -e UMASK=022 setting. Keep in mind umask is not chmod it subtracts from permissions based on it's value it does not add. Please read up here before asking for support.

User / Group Identifiers

When using volumes (-v flags) permissions issues can arise between the host OS and the container, we avoid this issue by allowing you to specify the user PUID and group PGID.

Ensure any volume directories on the host are owned by the same user you specify and any permissions issues will vanish like magic.

In this instance PUID=1000 and PGID=1000, to find yours use id user as below:

  $ id username
    uid=1000(dockeruser) gid=1000(dockergroup) groups=1000(dockergroup)

Docker Mods

We publish various Docker Mods to enable additional functionality within the containers. The list of Mods available for this image (if any) as well as universal mods that can be applied to any one of our images can be accessed via the dynamic badges above.

Support Info

Shell access whilst the container is running: docker exec -it unifi-network-application /bin/bash
To monitor the logs of the container in realtime: docker logs -f unifi-network-application
container version number
- docker inspect -f '{{ index .Config.Labels "build_version" }}' unifi-network-application
image version number
- docker inspect -f '{{ index .Config.Labels "build_version" }}' lscr.io/linuxserver/unifi-network-application:latest

Updating Info

Most of our images are static, versioned, and require an image update and container recreation to update the app inside. With some exceptions (ie. nextcloud, plex), we do not recommend or support updating apps inside the container. Please consult the Application Setup section above to see if it is recommended for the image.

Below are the instructions for updating containers:

Via Docker Compose

Update all images: docker-compose pull
- or update a single image: docker-compose pull unifi-network-application
Let compose update all containers as necessary: docker-compose up -d
- or update a single container: docker-compose up -d unifi-network-application
You can also remove the old dangling images: docker image prune

Via Docker Run

Update the image: docker pull lscr.io/linuxserver/unifi-network-application:latest
Stop the running container: docker stop unifi-network-application
Delete the container: docker rm unifi-network-application
Recreate a new container with the same docker run parameters as instructed above (if mapped correctly to a host folder, your /config folder and settings will be preserved)
You can also remove the old dangling images: docker image prune

Via Watchtower auto-updater (only use if you don't remember the original parameters)

Pull the latest image at its tag and replace it with the same env variables in one run:

docker run --rm \
-v /var/run/docker.sock:/var/run/docker.sock \
containrrr/watchtower \
--run-once unifi-network-application

You can also remove the old dangling images: docker image prune

Note: We do not endorse the use of Watchtower as a solution to automated updates of existing Docker containers. In fact we generally discourage automated updates. However, this is a useful tool for one-time manual updates of containers where you have forgotten the original parameters. In the long term, we highly recommend using Docker Compose.

Image Update Notifications - Diun (Docker Image Update Notifier)

We recommend Diun for update notifications. Other tools that automatically update containers unattended are not recommended or supported.

Building locally

If you want to make local modifications to these images for development purposes or just to customize the logic:

git clone https://github.com/linuxserver/docker-unifi-network-application.git
cd docker-unifi-network-application
docker build \
  --no-cache \
  --pull \
  -t lscr.io/linuxserver/unifi-network-application:latest .

The ARM variants can be built on x86_64 hardware using multiarch/qemu-user-static

docker run --rm --privileged multiarch/qemu-user-static:register --reset

Once registered you can define the dockerfile to use with -f Dockerfile.aarch64.

Versions

05.09.23: - Initial release.

SuhailTechInfo/Secktor-bot

2023-09-11T01:29:20Z

❌ Repository Closed ❌

This repository is Depricated

Deploy Suhail Md From Here.

hotwired/turbo-native-demo

2023-09-11T01:30:06Z

Demo web server for the Turbo Native adapters

cbh123/emoji

2023-09-11T01:30:11Z

Make emojis for slack using AI

geolessel/vox

2023-09-11T01:30:11Z

Tools and helpers we constantly find repeated in most of our projects.

ThomasToka/MarlinFirmware

2023-09-11T01:30:52Z

This is [MARLIN-E3S1PROFORK-BYTT]. A Fork of Marlin 2.1.x-bugfix with the Creality Ender 3 S1 Pro source code included. Personal tweaks, fixes and enhancements included. This firmware is for the Ender 3 S1 Pro (touchscreen) and Ender 3 S1 Plus (touchscreen).

Zennyth/EnhancedStat

2023-09-11T01:31:01Z

Enhanced Stat is an addon for Godot 4.1, designed to provide an intuitive and powerful way to manage stats in games such as Health, Mana, Speed, and Attack Damage.

sipeed/TangPrimer-20K-example

2023-09-12T01:27:54Z

TangPrimer-20K-example project

github/gh-ost

2023-09-11T01:31:25Z

GitHub's Online Schema-migration Tool for MySQL

gh-ost

GitHub's online schema migration for MySQL

gh-ost is a triggerless online schema migration solution for MySQL. It is testable and provides pausability, dynamic control/reconfiguration, auditing, and many operational perks.

gh-ost produces a light workload on the master throughout the migration, decoupled from the existing workload on the migrated table.

It has been designed based on years of experience with existing solutions, and changes the paradigm of table migrations.

How?

All existing online-schema-change tools operate in similar manner: they create a ghost table in the likeness of your original table, migrate that table while empty, slowly and incrementally copy data from your original table to the ghost table, meanwhile propagating ongoing changes (any INSERT, DELETE, UPDATE applied to your table) to the ghost table. Finally, at the right time, they replace your original table with the ghost table.

gh-ost uses the same pattern. However it differs from all existing tools by not using triggers. We have recognized the triggers to be the source of many limitations and risks.

Instead, gh-ost uses the binary log stream to capture table changes, and asynchronously applies them onto the ghost table. gh-ost takes upon itself some tasks that other tools leave for the database to perform. As result, gh-ost has greater control over the migration process; can truly suspend it; can truly decouple the migration's write load from the master's workload.

In addition, it offers many operational perks that make it safer, trustworthy and fun to use.

Highlights

Build your trust in gh-ost by testing it on replicas. gh-ost will issue same flow as it would have on the master, to migrate a table on a replica, without actually replacing the original table, leaving the replica with two tables you can then compare and satisfy yourself that the tool operates correctly. This is how we continuously test gh-ost in production.
True pause: when gh-ost throttles, it truly ceases writes on master: no row copies and no ongoing events processing. By throttling, you return your master to its original workload
Dynamic control: you can interactively reconfigure gh-ost, even as migration still runs. You may forcibly initiate throttling.
Auditing: you may query gh-ost for status. gh-ost listens on unix socket or TCP.
Control over cut-over phase: gh-ost can be instructed to postpone what is probably the most critical step: the swap of tables, until such time that you're comfortably available. No need to worry about ETA being outside office hours.
External hooks can couple gh-ost with your particular environment.

Please refer to the docs for more information. No, really, read the docs.

Usage

The cheatsheet has it all. You may be interested in invoking gh-ost in various modes:

a noop migration (merely testing that the migration is valid and good to go)
a real migration, utilizing a replica (the migration runs on the master; gh-ost figures out identities of servers involved. Required mode if your master uses Statement Based Replication)
a real migration, run directly on the master (but gh-ost prefers the former)
a real migration on a replica (master untouched)
a test migration on a replica, the way for you to build trust with gh-ost's operation.

Our tips:

Testing above all, try out --test-on-replica first few times. Better yet, make it continuous. We have multiple replicas where we iterate our entire fleet of production tables, migrating them one by one, checksumming the results, verifying migration is good.
For each master migration, first issue a noop
Then issue the real thing via --execute.

More tips:

Use --exact-rowcount for accurate progress indication
Use --postpone-cut-over-flag-file to gain control over cut-over timing
Get familiar with the interactive commands

Also see:

What's in a name?

Originally this was named gh-osc: GitHub Online Schema Change, in the likes of Facebook online schema change and pt-online-schema-change.

But then a rare genetic mutation happened, and the c transformed into t. And that sent us down the path of trying to figure out a new acronym. gh-ost (pronounce: Ghost), stands for GitHub's Online Schema Transmogrifier/Translator/Transformer/Transfigurator

License

gh-ost is licensed under the MIT license

gh-ost uses 3rd party libraries, each with their own license. These are found here.

Community

gh-ost is released at a stable state, but with mileage to go. We are open to pull requests. Please first discuss your intentions via Issues.

We develop gh-ost at GitHub and for the community. We may have different priorities than others. From time to time we may suggest a contribution that is not on our immediate roadmap but which may appeal to others.

Please see Coding gh-ost for a guide to getting started developing with gh-ost.

Download/binaries/source

gh-ost is now GA and stable.

gh-ost is available in binary format for Linux and Mac OS/X

Download latest release here

gh-ost is a Go project; it is built with Go 1.15 and above. To build on your own, use either:

script/build - this is the same build script used by CI hence the authoritative; artifact is ./bin/gh-ost binary.
build.sh for building tar.gz artifacts in /tmp/gh-ost

Generally speaking, master branch is stable, but only releases are to be used in production.

Authors

gh-ost is designed, authored, reviewed and tested by the database infrastructure team at GitHub:

keybase/client

2023-09-11T01:31:25Z

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron

Keybase

Hi, and welcome to the Keybase client repo. All our client apps (macOS, Windows, Linux, iOS, and Android) are being actively developed in this repository. Please, dig around.

Warnings

We'd love you to read our source code.

But - some of the things in this repo are explorations, and the app you build from source just might not do what it says it's doing. So, if you just want to install Keybase on your computer, you should monitor our releases for macOS, Linux, or Windows.

If you're interested in our Docker image releases, please check out the Docker README.

Code Layout

go: Core crypto libraries; the Keybase service; the command line client. Learn More
shared/{android,ios}: Android and iOS apps developed with React Native.
shared/desktop: Desktop application for macOS, Linux, and Windows, made with the Electron framework, sharing React code with react-native.
packaging: Scripts for releasing packages across the various platforms.
protocol: Defines the protocol for communication for clients to the Keybase services. Uses Avro. Learn More
media: Icons, graphics, media for Keybase apps.
osx: The macOS Keybase.app, development parallel to an Electron-based application above. Learn More

Problems?

Report any issues with client software on this GitHub issue tracker. Internally, we track our progress using Jira, but all PRs come through GitHub for your review!

If you're having problems with the command line keybase client, take a look at the troubleshooting doc.

If you're having problems with our Website, try the keybase-issues issue tracker.

We check and update both frequently.

License

Most code is released under the New BSD (3 Clause) License. If subdirectories include a different license, that license applies instead.

Development Guidelines

We check all git commits with pre-commit hooks generated via pre-commit.com pre-commit hooks. To enable use of these pre-commit hooks:

Install the pre-commit utility. For some common cases:
- pip install pre-commit
- brew install pre-commit
Remove any existing pre-commit hooks via rm .git/hooks/pre-commit
Configure via pre-commit install

Then proceed as normal.

External Contributors

If you forked this repository on GitHub and made a PR, then it'll show up as having failed Jenkins CI. We do not build external PRs because it's a security risk to do so without a review first. If your PR is successfully reviewed by a member of the Keybase team, then we will merge your commits to a branch on our primary fork and build from there.

Cryptography Notice

This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See http://www.wassenaar.org/ for more information.

The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code.

deepfence/PacketStreamer

2023-09-11T01:31:25Z

Generate a modern Web project with Go and Angular, React, or Vue in seconds 🎲

Goxygen

Generate a Web project with Go and Angular, React or Vue.

Goxygen aims at saving your time while setting up a new project. It creates a skeleton of an application with all configuration done for you. You can start implementing your business logic straight away. Goxygen generates back end Go code, connects it with front end components, provides a Dockerfile for the application and creates docker-compose files for convenient run in development and production environments.

Supported Technologies
Front End	Angular	React	Vue
Back End	Go
Database	MongoDB	MySQL	PostgreSQL

Requirements

You need to have Go 1.11 or newer on your machine.

How to use

Go 1.17 and later:

go run github.com/shpota/goxygen@latest init my-app

Older versions of Go

Go 1.16

Set the GO111MODULE environment variable to auto.

export GO111MODULE=auto

Run

go get -u github.com/shpota/goxygen
go run github.com/shpota/goxygen init my-app

Go 1.11 - 1.15

Run

go get -u github.com/shpota/goxygen
go run github.com/shpota/goxygen init my-app

This generates a project in my-app folder.

By default, it will use React and MongoDB. You can select a different front end framework and a database using --frontend and --db flags. For instance, this command will create a project with Vue and PostgreSQL:

go run github.com/shpota/goxygen@latest init --frontend vue --db postgres my-app

The --frontend flag accepts angular, react and vue. The --db flag accepts mongo, mysql and postgres.

The generated project is ready to run with docker-compose:

cd my-app
docker-compose up

After the build is completed, the application is accessible on http://localhost:8080.

You can find more details on how to work with the generated project in its README file.

Structure of a generated project (React/MongoDB example)

my-app
├── server                   # Go project files
│   ├── db                   # MongoDB communications
│   ├── model                # domain objects
│   ├── web                  # REST APIs, web server
│   ├── server.go            # the starting point of the server
│   └── go.mod               # server dependencies
├── webapp
│   ├── public               # icons, static files, and index.html
│   ├── src
│   │   ├── App.js           # the main React component
│   │   ├── App.css          # App component-specific styles
│   │   ├── index.js         # the entry point of the application
│   │   └── index.css        # global styles
│   ├── package.json         # front end dependencies
│   ├── .env.development     # holds API endpoint for dev environment
│   └── .env.production      # API endpoint for prod environment
├── Dockerfile               # builds back end and front end together
├── docker-compose.yml       # prod environment deployment descriptor
├── docker-compose-dev.yml   # runs local MongoDB for development needs
├── init-db.js               # creates a MongoDB collection with test data
├── .dockerignore            # specifies files ignored in Docker builds
├── .gitignore
└── README.md                # guide on how to use the generated repo

Files such as unit tests or sample components are not included here for simplicity.

Dependencies

Goxygen generates a basic structure of a project and doesn't force you to use a specific set of tools. That's why it doesn't bring unneeded dependencies to your project. It uses only a database driver on the back end side and axios in React and Vue projects. Angular projects use only Angular specific libraries.

How to contribute

If you found a bug or have an idea on how to improve the project open an issue and we will fix it as soon as possible. You can also propose your changes via a Pull Request. Fork the repository, make changes, send us a pull request and we'll review it shortly. We also have a Gitter chat where we discuss all the changes.

Credits

Goxygen's logo was created by Egon Elbre.

Verification-for-Security/haskell-intro

2023-09-11T01:31:57Z

An introductory assignment for Haskell.

Haskell introduction

In this assignment, you will pick up the basics of Haskell. This will help you to understand and write the harder assignments later in the course.

Getting started

GHCup

Install GHCup by following the installation instructions for your operating system. Do make sure to allow GHCup to hook into stack, as we will be using stack to build the assignments. To check if the installation went succesful, the following command should give a version number.

$ ghcup --version

Make sure this is the latest version of GHCup. If this is not the case, you can upgrade to the latest version via

$ ghcup upgrade

GHCup manages all your Haskell related software. For this course, we will be working with the package manager Stack. To install this, you can simply run:

$ ghcup install stack

We also recommend that you install the Haskell Language Server (HLS). If your code editor supports language servers (which most of them do), this will display errors or useful tips to improve your code! It also allows you to run some additional commands when editing, for example, jumping to a definition of a piece of code. You can install it via the following command.

$ ghcup install hls

For an overview of all the software installed on your system by GHCup, run the following command. With this, you can make sure that both Stack and HLS are on their latest versions.

$ ghcup tui

It should be the case that stack will automatically install the GHC version specified by the project when trying to compile it. If this doesn't work you could also manually install specific GHC versions, either through this menu, or through the command line.

Git

Install Git by following the installation instructions for your operating system.

You may clone this assignment through git. Make sure to run this command in the directory where you would like this project to exist. You can find the <directory-path> in the top right of this repository, under Code.

$ git clone <directory-path>

Git is also the recommended way to cooperate with your teammates during the later assignments. Do make sure to keep your repositories private in this case! Note that this is an individual assignment.

Running and testing

You can build and test the code through stack. Make sure to be within the project folder before you run stack. One of the most useful commands throughout the course will be:

$ stack test

This will run the entire test infrastructure on your code. If all went well up to this point, this will give you a list of functions that failed their tests.

There are many other ways to build and/or run your code. One recommended way would be to use GHCi. This is a Read-Eval-Print-Loop (REPL) that allows you to test smaller parts of your program. You could for example run a single function in your implementation via this command.

$ stack ghci

Here is a user-guide for GHCi. It is not all that difficult to use, but it is useful to know some of the commands like :r or :q. Note that running GHCi through stack already imports the current codebase into scope. This is practically always desireable, so we recommend running GHCi in this fashion instead of as a standalone program.

Assignment structure

Implement all function stubs found within the src folder of this project. A stub will have the following shape:

-- | Returns true if the passed list was empty
-- e.g. null [1, 2] = False
null :: [a] -> Bool
null = undefined

You will have to provide an implementation for this, e.g.

-- | Returns true if the passed list was empty
-- e.g. null [1, 2] = False
null :: [a] -> Bool
null [] = True
null _  = False

Notice how the comment above the stub provides you with an explanation of what the code is supposed to do, as well as an example case. Do make sure to read all the comments in a file. They provide useful insights, as well as occasionally ask you to implement functions in a specific way. Do not change the function signature of the stubs. This will generally make your program unable to compile!

The automatic tests that are ran by stack test will check whether your implementation is correct. These tests will also tell you in which order we think the assignment works best. Some tests may even depend on earlier pieces of your implementation in order to function. Hence, we strongly suggest to work in this order!

Grading

Your final grade corresponds directly to the one awarded to you by the test infrastructure. Do make sure your submission correctly executes on our online environment.

If there are issues with the submission system, don't panic! We will handle this on a case-by-case basis.

If your uploaded submission somehow fail tests that work locally, ping us and we will have a look!

If the online environment suddenly fails to work moments before the deadline, don't hesitate to send us your submission through different means (e.g. email).

Plagiarism

We have a strict zero tolerance policy against plagiarism. Sadly, we find cases every year... This is not fun for you, nor us. Please, refrain from copying and/or sharing your code with other students.

While we generally recommend our students to work via Git, do make sure to make your repository private! Sharing your code in this manner is sadly still plagiarism, even if unintentional.

mame/type-level-quine

2023-09-11T01:31:57Z

A type-level Quine in Haskell

Type-level-Quine

A type-level Quine in Haskell.

How to run the proof-of-concept version

$ ghc -fcontext-stack=2048 type-level-quine-poc.hs
$ ./type-level-quine-poc

NOTE:

-fcontext-stack=2048 is required. (Otherwise, ghc will fail with stack overflow)
The compilation may take a few minutes.
The result is partially snipped; this is not a complete quine.

How to run the full version

$ ghc -fcontext-stack=2048 type-level-quine.hs
$ ./type-level-quine

NOTE:

This may make your OS stuck because of short of memory.
Actually I has failed to confirm this.

References

Both are written in Japanese.

negative7/home-cluster

2023-09-11T01:31:56Z

ministryofjustice/data-platform

2023-09-11T01:31:56Z

Core Repo for Data Platform • This repository is defined and managed in Terraform

LinkedInLearning/terraform-managing-network-infrastructure-4373320

2023-09-12T01:28:35Z

This repo is for the Linkedin Learning course: Terraform: Managing Network Infrastructure

jess-hammer/2d-pixel-water-shader

2023-09-12T01:28:52Z

xiaorouji/openwrt-passwall

2023-09-12T01:28:57Z

A commonly used proxy toolchain for Openwrt LuCI Application.

microsoft/HydraLab

2023-09-11T01:33:51Z

Intelligent cloud testing made easy.

Hydra Lab

Build your own cloud testing infrastructure

中文(完善中)

https://github.com/microsoft/HydraLab/assets/8344245/cefefe24-4e11-4cc7-a3af-70cb44974735

What is Hydra Lab? | Get Started | Contribute | Contact Us | Wiki

What is Hydra Lab?

As mentioned in the above video, Hydra Lab is a framework that can help you easily build a cloud-testing platform utilizing the test devices/machines in hand.

Capabilities of Hydra Lab include:

Scalable test device management under the center-agent distributed design; Test task management and test result visualization.
Powering Android Espresso Test, and Appium(Java) test on different platforms: Windows/iOS/Android/Browser/Cross-platform.
Case-free test automation: Monkey test, Smart exploratory test.

For more details, see Introduction: What is Hydra Lab?

Get Started

Please visit our GitHub Project Wiki to understand the dev environment setup procedure: Contribution Guideline.

Supported environments for Hydra Lab agent: Windows, Mac OSX, and Linux (Docker).

Supported platforms and frameworks matrix:

	Appium(Java)	Espresso	XCTest	Maestro
Android	✔	✔	x	✔
iOS	✔	x	✔	✔
Windows	✔	x	x	x
Web (Browser)	✔	x	x	x

Quick guide on out-of-box Uber docker image

Hydra Lab offers an out-of-box experience of the Docker image, and we call it Uber. You can follow the below steps and start your docker container with both a center instance and an agent instance:

Step 1. Download and install Docker

Step 2. Run on your machine

By Default, Hydra Lab will use the local file system as a storage solution, and you may type the following in your terminal to run it:

docker run -p 9886:9886 --name=hydra-lab ghcr.io/microsoft/hydra-lab-uber:latest

We strongly recommend using Azure Blob Storage service as the file storage solution, and Hydra Lab has native, consistent, and validated support for it.

Step 3. Visit the web page and view your connected devices

Url: http://localhost:9886/portal/index.html#/ (or your custom port).

Enjoy starting your journey of exploration!

Step 4. Perform the test procedure with a minimal setup

Note: For Android, Uber image only supports Espresso/Instrumentation test. See the "User Manual" section on this page for more features: Hydra Lab Wikis.

To run a test with Uber image and local storage:

On the front-end page, go to the Runner tab and select HydraLab Client.
Click Run and change "Espresso test scope" to Test app, click Next.
Pick an available device, click Next again, and click Run to start the test.
When the test is finished, you can view the test result in the Task tab on the left navigator of the front-end page.

Build and run Hydra Lab from the source

You can also run the center java Spring Boot service (a runnable Jar) separately with the following commands:

The build and run process will require JDK11 | NPM | Android SDK platform-tools in position.

Step 1. Run Hydra Lab center service

# In the project root, switch to react folder to build the Web front.
cd react
npm ci
npm run pub
# Get back to the project root, and build the center runnable Jar. 
cd ..
# For the gradlew command, if you are on Windows please replace it with `./gradlew` or `./gradlew.bat`
gradlew :center:bootJar
# Run it, and then visit http://localhost:9886/portal/index.html#/
java -jar center/build/libs/center.jar
# Then visit http://localhost:9886/portal/index.html#/auth to generate a new agent ID and agent secret.

If you encounter the error: Error: error:0308010C:digital envelope routines::unsupported, set the System Variable NODE_OPTIONS as --openssl-legacy-provider and then restart the terminal.

Step 2. Run Hydra Lab agent service

# In the project root
cd android_client
# Build the Android client apk
./gradlew assembleDebug
cp app/build/outputs/apk/debug/app-debug.apk ../common/src/main/resources/record_release.apk
# If you don't have the SDK for Android ,you can download the prebuilt APK in https://github.com/microsoft/HydraLab/releases
# Back to the project root
cd .. 
# In the project root, copy the sample config file and update the:
# YOUR_AGENT_NAME, YOUR_REGISTERED_AGENT_ID and YOUR_REGISTERED_AGENT_SECRET.
cp agent/application-sample.yml application.yml
# Then build an agent jar and run it
gradlew :agent:bootJar
java -jar agent/build/libs/agent.jar

Step 3. visit http://localhost:9886/portal/index.html#/ and view your connected devices

More integration guidelines:

Contribute

Your contribution to Hydra Lab will make a difference for the entire test automation ecosystem. Please refer to CONTRIBUTING.md for instructions.

Contributor Hero Wall:

Contact Us

You can reach us by opening an issue or sending us mails.

Microsoft Give Sponsors

Thank you for your contribution to Microsoft employee giving program in the name of Hydra Lab:

@Germey(崔庆才), @SpongeOnline(王创), @ellie-mac(陈佳佩), @Yawn(刘俊钦), @White(刘子凡), @597(姜志鹏), @HCG(尹照宇)

License & Trademarks

The entire codebase is under MIT license.

This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft’s Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party’s policies.

Gedsh/InviZible

2023-09-12T01:29:54Z

Android application for Internet privacy and security

InviZible Pro

Google Play stable version

Download the latest version from Github

IzzyOnDroid F-Droid beta version

F-Droid stable version

Android application for Internet privacy and security

Keeps privacy, protects your device from dangerous sites, prevents tracking, gets access to blocked on-line resources

InviZible Pro includes well-known modules such as DNSCrypt, Tor and Purple I2P. They are used to achieve maximum security, privacy and comfortable use of the Internet.

DNSCrypt

Encrypts DNS requests
Protects against DNS spoofing
Can block ads *
Can protect against dangerous and malicious sites *
Can block "adult" sites *
Hides visited sites from your provider **
Prevents some types of resource blocks
Open-source

*Depending on the selected dnscrypt server (Not available in Google Play version!)

**In case your ISP does not use DPI equipment

Tor

Encrypts Internet traffic
Prevents sites blocking
Can provide privacy and anonymity
Provides access to "onion" sites
Open-source

Purple I2P

Encrypts Internet traffic
Provides access to the hidden anonymous network Invisible Internet and "i2p" sites
Open-source

To start using InviZible Pro, all you need is an android phone. Just run all three modules and enjoy safe and comfortable Internet surfing. However, if you want to get full control over the application and your Internet connection - no problem! There is access to a large number of both simple and professional settings. You can flexibly configure InviZible Pro itself, as well as its modules - DNSCrypt, Tor and Purple I2P, to satisfy the most non-standard requirements.

InviZible Pro is an all-in-one application. After installation, you can remove all of your VPN applications and ad blockers. In most cases, InviZible Pro works better, is more stable, and faster than free VPNs. It does not contain any ads, bloatware and does not spy upon its users.

Why InviZible Pro is better than other similar applications:

There are no analogs))).
The only application that provides handy use of DNSCrypt on Android.
It is often more stable than the Orbot application, which also uses the Tor network.
Much more handy than the official Purple I2P client.
Allows you to easily and flexibly configure which sites and applications will open through Tor, for anonymity or bypassing blocks.
Can transform your phone, or Android TV set-top box into a secure Wi-Fi access point, which can be used by any phone, without root access.
Optimized interface for set-top boxes.
Replaces various VPNs and other tools to achieve privacy and anonymity.
Successfully combines DNSCrypt, Tor and Purple I2P features.
Free and open-source.

Compatibility

InviZible Pro can be used both with a rooted or non-rooted device.

Please visit the wiki to find out how to use it.

Depending on the rooting method and device specifics, an application may be incompatible with some android phones.

Support

For questions, feature requests and bug reports, you can use GitHub.

Official site: invizible.net

International:

Telegram channel: InviZiblePro

Telegram group: InviZiblePro_Group

For Russian-speaking users:

Telegram channel: InviZiblePro

Telegram group: InviZiblePro_Group

There is support for the latest version of InviZible Pro only.

There is no support for things that are not directly related to InviZible Pro.

There is no support for building and developing things by yourself.

Contributing

Building

To clone a project, use the command:

git clone --recursive https://github.com/Gedsh/InviZible

To build InviZible Pro please use Android Studio.

If you see something like this: Illegal character in opaque part at index 2: C:\KStore\keystore.properties

Please comment lines of the settings.gradle file in the project root, as shown below:

include ':tordnscrypt', ':filepicker'
project(':filepicker').projectDir = new File('android-filepicker/filepicker')
//Please comment line below if you are not the project owner
//project(':tordnscrypt').buildFileName = 'owner.gradle'

It is expected that you can solve build problems yourself, so there is no support for building. If you cannot build yourself, there are prebuilt versions of InviZible Pro available here.

Translating

Translate InviZible on POEditor.

Translate InviZible on Hosted Weblate.

Attribution

InviZible Pro uses:

This product is produced independently from the Tor®, DNSCrypt, Purple I2P software and carries no guarantee from The Above Projects about quality, suitability or anything else.

Donations

Bitcoin: 1GfJwiHG6xKCQCpHeW6fELzFfgsvcSxVUR

Bitcoin Cache: qzl4w4ahh7na2z23056qawwdyuclkgty5gc4q8tw88

USD PAX: 0xdA1Dd53FE6501140E3Dcd5134323dfccF20aD536

Ether: 0xdA1Dd53FE6501140E3Dcd5134323dfccF20aD536

Stellar: GBID6I3VYR4NIFLZWI3MEQH3M2H72COC3HQDI5WMYYQGAC3TE55TSKAX

License

GNU General Public License version 3

This file is part of InviZible Pro.

InviZible Pro is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your discretion) any later version.

InviZible Pro is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with InviZible Pro. If not, see http://www.gnu.org/licenses/

Card-Forge/forge

2023-09-12T01:29:54Z

An unofficial rules engine for the world's greatest card game.

Forge

Official repo.

Dev instructions here: Getting Started (Somewhat outdated)

Discord channel here

Requirements / Tools

you favourite Java IDE (IntelliJ, Eclipse, VSCodium, Emacs, Vi...)
Java JDK 8 or later (some IDEs such as Eclipse require JDK11+, whereas the Android build currently only works with JDK8)
Git
Git client (optional)
Maven
GitHub account
Libgdx (optional: familiarity with this library is helpful for mobile platform development)
Android SDK (optional: for Android releases)
RoboVM (optional: for iOS releases) (TBD: Current status of support by libgdx)

Project Quick Setup

Login into GitHub with your user account and fork the project.
Clone your forked project to your local machine
Go to the project location on your machine. Run Maven to download all dependencies and build a snapshot. Example for Windows & Linux: mvn -U -B clean -P windows-linux install

Eclipse

Eclipse includes Maven integration so a separate install is not necessary. For other IDEs, your mileage may vary.

Project Setup

Follow the instructions for cloning from GitHub. You'll need to setup an account and your SSH key.

If you are on a Windows machine you can use Putty with TortoiseGit for SSH keys. Run puttygen.exe to generate the key -- save the private key and export the OpenSSH public key. If you just leave the dialog open, you can copy and paste the key from it to your GitHub profile under "SSH keys". Run pageant.exe and add the private key generated earlier. TortoiseGit will use this for accessing GitHub.
Fork the Forge git repo to your GitHub account.
Clone your forked repo to your local machine.
Make sure the Java SDK is installed -- not just the JRE. Java 8 or newer required. If you execute java -version at the shell or command prompt, it should report version 1.8 or later.
Install Eclipse 2018-12 or later for Java. Launch it.
Create a workspace. Go to the workbench. Right-click inside of Package Explorer > Import... > Maven > Existing Maven Projects > Navigate to root path of the local forge repo and ensure everything is checked > Finish.
Let Eclipse run through building the project. You may be prompted for resolving any missing Maven plugins -- accept the ones offered. You may see errors appear in the "Problems" tab. These should be automatically resolved as plug-ins are installed and Eclipse continues the build process. If this is the first time for some plug-in installs, Eclipse may prompt you to restart. Do so. Be patient for this first time through.
Once everything builds, all errors should disappear. You can now advance to Project launch.

Project Launch

Desktop

This is the standard configuration used for releasing to Windows / Linux / MacOS.

Right-click on forge-gui-desktop > Run As... > Java Application > "Main - forge.view" > Ok
The familiar Forge splash screen, etc. should appear. Enjoy!

Mobile (Desktop dev)

This is the configuration used for doing mobile development using the Windows / Linux / MacOS front-end. Knowledge of libgdx is helpful here.

Right-click on forge-gui-mobile-dev > Run As... > Java Application > "Main - forge.app" > Ok.
A view similar to a mobile phone should appear. Enjoy!

Eclipse / Android SDK Integration

Google no longer supports Android SDK releases for Eclipse. That said, it is still possible to build and debug Android platforms.

Android SDK

Reference SO for obtaining a specific release: https://stackoverflow.com/questions/27043522/where-can-i-download-an-older-version-of-the-android-sdk

Windows

Download the following archived version of the Android SDK: http://dl-ssl.google.com/android/repository/tools_r25.2.3-windows.zip. Install it somewhere on your machine. This is referenced in the following instructions as your 'Android SDK Install' path.

Linux / Mac OSX

TBD

Android Plugin for Eclipse

Google's last plugin release does not work completely with target's running Android 7.0 or later. Download the ADT-24.2.0-20160729.zip plugin from: https://github.com/khaledev/ADT/releases

In Eclipse go to: Help > Install New Software... > Add > Name: ADT Update, Click on the "Archive:" button and navigate to the downloaded ADT-24.2.0-20160729.zip file > Add. Install all "Developer Tools". Eclipse should restart and prompt you to run the SDK Manager. Launch it and continue to the next steps below.

Android Platform

In Eclipse, if the SDK Manager is not already running, go to Window > Android SDK Manager. Install the following options / versions:

Android SDK Build-tools 26.0.1
Android 8.0.0 (API 26) SDK Platform
Google USB Driver (in case your phone is not detected by ADB)

Note that this will populate additional tools in the Android SDK install path extracted above.

Proguard update

The Proguard included with the Android SDK Build-tools is outdated and does not work with Java 1.8. Download Proguard 6.0.3 or later (last tested with 7.0.1) from https://github.com/Guardsquare/proguard

Go to the Android SDK install path. Rename the tools/proguard/ path to tools/proguard-4.7/.
Extract your Proguard version to the Android SDK install path under tools/. You will need to either rename the dir proguard- to proguard/ or, if your filesystem supports it, use a symbolic link (the later is highly recommended), such as ln -s proguard proguard-<your-version>.

Android Build

The Eclipse plug-ins do NOT support building things for Android. They do however allow you to use the debugger so you can still set breakpoints and trace things out. The steps below show how to generate a debug Android build.

Create a Maven build for the forge top-level project. Right-click on the forge project. Run as.. > Maven build...
- On the Main tab, set Goals: clean install
Run forge Maven build. If everything built, you should see "BUILD SUCCESS" in the Console View.
Right-click on the forge-gui-android project. Run as.. > Maven build...
- On the Main tab, set Goals: install, Profiles: android-debug
- On the Environment tab, you may need to define the variable ANDROID_HOME with the value containing the path to your Android SDK installation. For example, Variable: ANDROID_HOME, Value: Your Android SDK install path here.
Run the forge-gui-android Maven build. This may take a few minutes. If everything worked, you should see "BUILD SUCCESS" in the Console View.

Assuming you got this far, you should have an Android forge-android-[version].apk in the forge-gui-android/target path.

Android Deploy

You'll need to have the Android SDK install path platform-tools/ path in your command search path to easily deploy builds.

Open a command prompt. Navigate to the forge-gui-android/target/ path.
Connect your Android device to your dev machine.
Ensure the device is visible using adb devices
Remove the old Forge install if present: adb uninstall forge.app
Install the new apk: adb install forge-android-[version].apk

Android Debugging

Assuming the apk is installed, launch it from the device.

In Eclipse, launch the DDMS. Window > Perspective > Open Perspective > Other... > DDMS. You should see the forge app in the list. Highlight the app, click on the green debug button and a green debug button should appear next to the app's name. You can now set breakpoints and step through the source code.

Windows / Linux SNAPSHOT build

SNAPSHOT builds can be built via the Maven integration in Eclipse.

Create a Maven build for the forge top-level project. Right-click on the forge project. Run as.. > Maven build...
- On the Main tab, set Goals: clean install, set Profiles: windows-linux
Run forge Maven build. If everything built, you should see "BUILD SUCCESS" in the Console View.

The resulting snapshot will be found at: forge-gui-desktop/target/forge-gui-desktop-[version]-SNAPSHOT

IntelliJ

Quick start guide for setting up the Forge project within IntelliJ.

Card Scripting

Visit this page for information on scripting.

Card scripting resources are found in the forge-gui/res/ path.

General Notes

Project Hierarchy

Forge is divided into 4 primary projects with additional projects that target specific platform releases. The primary projects are:

forge-ai
forge-core
forge-game
forge-gui

The platform-specific projects are:

forge-gui-android
forge-gui-desktop
forge-gui-ios
forge-gui-mobile
forge-gui-mobile-dev

forge-ai

forge-core

forge-game

forge-gui

The forge-gui project includes the scripting resource definitions in the res/ path.

forge-gui-android

Libgdx-based backend targeting Android. Requires Android SDK and relies on forge-gui-mobile for GUI logic.

forge-gui-desktop

Java Swing based GUI targeting desktop machines.

Screen layout and game logic revolving around the GUI is found here. For example, the overlay arrows (when enabled) that indicate attackers and blockers, or the targets of the stack are defined and drawn by this.

forge-gui-ios

Libgdx-based backend targeting iOS. Relies on forge-gui-mobile for GUI logic.

forge-gui-mobile

Mobile GUI game logic utilizing libgdx library. Screen layout and game logic revolving around the GUI for the mobile platforms is found here.

forge-gui-mobile-dev

Libgdx backend for desktop development for mobile backends. Utilizes LWJGL. Relies on forge-gui-mobile for GUI logic.

yagop/node-telegram-bot-api

2023-09-11T01:33:07Z

Telegram Bot API for NodeJS

Node.js Telegram Bot API

Node.js module to interact with the official Telegram Bot API.

📦 Install

npm i node-telegram-bot-api

✍️ Note: If you use Typescript you can install this package that contains type definitions for this library
npm install --save-dev @types/node-telegram-bot-api

🚀 Usage

const TelegramBot = require('node-telegram-bot-api');

// replace the value below with the Telegram token you receive from @BotFather
const token = 'YOUR_TELEGRAM_BOT_TOKEN';

// Create a bot that uses 'polling' to fetch new updates
const bot = new TelegramBot(token, {polling: true});

// Matches "/echo [whatever]"
bot.onText(/\/echo (.+)/, (msg, match) => {
  // 'msg' is the received Message from Telegram
  // 'match' is the result of executing the regexp above on the text content
  // of the message

  const chatId = msg.chat.id;
  const resp = match[1]; // the captured "whatever"

  // send back the matched "whatever" to the chat
  bot.sendMessage(chatId, resp);
});

// Listen for any kind of message. There are different kinds of
// messages.
bot.on('message', (msg) => {
  const chatId = msg.chat.id;

  // send a message to the chat acknowledging receipt of their message
  bot.sendMessage(chatId, 'Received your message');
});

📚 Documentation

Usage
Examples
Tutorials
Help Information
API Reference: (api-release / development / experimental)
Contributing to the Project
Experimental Features

Note: Development is done against the development branch. Code for the latest release resides on the master branch. Experimental features reside on the experimental branch.

💭 Community

We thank all the developers in the Open-Source community who continuously take their time and effort in advancing this project. See our list of contributors.

We have a Telegram channel where we post updates on the Project. Head over and subscribe!

We also have a Telegram group to discuss issues related to this library.

Some things built using this library that might interest you:

tgfancy: A fancy, higher-level wrapper for Telegram Bot API
node-telegram-bot-api-middleware: Middleware for node-telegram-bot-api
teleirc: A simple Telegram ↔ IRC gateway
bot-brother: Node.js library to help you easily create telegram bots
redbot: A Node-RED plugin to create telegram bots visually
node-telegram-keyboard-wrapper: A wrapper to improve keyboards structures creation through a more easy-to-see way (supports Inline Keyboards, Reply Keyboard, Remove Keyboard and Force Reply)
beetube-bot: A telegram bot for music, videos, movies, EDM tracks, torrent downloads, files and more.
telegram-inline-calendar: Date and time picker and inline calendar for Node.js telegram bots.
telegram-captcha: Telegram bot to protect Telegram groups from automatic bots.

👥 Contributors

License

The MIT License (MIT)

fanmingming/live

2023-09-11T01:33:07Z

✯ 一个国内可直连的直播源分享项目 ✯ 🔕 永久免费直连访问完整开源不含广告完善的台标直播源支持IPv4/IPv6双栈访问 🔕

✯ 一个国内可直连的直播源分享项目 ✯

🔕 永久免费直连访问完整开源不含广告完善的台标直播源支持IPv4/IPv6双栈访问 🔕

🤹‍♂️源地址:

名称	直播源地址	频道数	更新时间
🌏Global直播源	https://live.fanmingming.com/tv/m3u/global.m3u	204个	2023.9.8
📺IPTV(IPV6专用)	https://live.fanmingming.com/tv/m3u/ipv6.m3u	120个	2023.8.28
📻Radio直播源	https://live.fanmingming.com/radio/m3u/index.m3u	304个	2023.8.27

🛠️工具

🆕EPG接口地址：
- https://live.fanmingming.com/e.xml
🎞️m3u8下载工具：
- https://live.fanmingming.com/m3u8
📄M3U To TXT：
- Demo🔗 https://fanmingming.com/txt?url=https://live.fanmingming.com/tv/m3u/ipv6.m3u
🌐M3U8 Web Player
- Demo🔗 https://live.fanmingming.com/player/?vurl=https://livedoc.cgtn.com/500d/prog_index.m3u8

📖说明

所有播放源均收集于互联网，仅供测试研究使用，不得商用。
通过M3U8 Web Player测试直播源需使用https协议的直播源链接。
部分广播电台节目播出具有一定的时效性，需要在指定时段进行收听。
本项目不存储任何的流媒体内容，所有的法律责任与后果应由使用者自行承担。
您可以Fork本项目，但引用本项目内容到其他仓库的情况，务必要遵守开源协议。
本项目不保证直播频道的有效性，直播内容可能受直播服务提供商因素影响而失效。
所有文件均托管在GitHub且自动构建，由项目发起人公益维护，欢迎Star本项目或点击Issues反馈您的问题。
您可以编辑本项目的m3u文件或上传缺失的频道Logo到tv或radio目录下并发起拉取请求，收到请求后我们会对您提交的内容进行验证，审核通过后会自动发布。

📔更新

2023.9.9
- 🔥Global源大部分频道已支持节目回看功能(需播放器支持)。
- Global源修复了大多数频道跨整点观看节目出现404错误的问题。

☕捐赠

支持项目，赋予更多流量，共创更好体验，让服务更强大！
- 自2022年10月创立以来，得益于大家的支持，项目已获得超过6K颗星星，在中文GitHub项目中名声鹊起。感激一路相伴，项目将持续免费。所有款项将透明公示于项目的Sponsor.MD。

yoninazarathy/2504_2023_project1

2023-09-11T01:34:21Z

Template for project 1 in the 2023 MATH2504 course

jbisits/RasterHistograms.jl

2023-09-11T01:34:21Z

Tools for solving serialized Rel SolverAPI library models with external solvers.

UBC-CS/cpsc330-2023W1

2023-09-11T01:34:24Z

CPSC 330 Applied Machine Learning

UBC CPSC 330: Applied Machine Learning (2023W1)

This is the course homepage for CPSC 330: Applied Machine Learning at the University of British Columbia. You are looking at the current version (Sep-Dec 2023).

The teaching team

Instructors

Andrew Roth (Section 101: Tue Thu 15:30 to 17:00 Swing Space 121)
Varada Kolhatkar (Section 102: Tue Thu 11:00 to 12:30 West Mall Swing Space 221)

Course co-ordinator

Michelle Pang (cpsc330-admin@cs.ubc.ca)

TAs

Chen Liu (chenliu5@student.ubc.ca)
Justice Sefas (jsefas@cs.ubc.ca)
Mahsa Zarei (mzarei@chem.ubc.ca)
Miranda Chan (mc835@student.ubc.ca)
Vee Rajesh Bahel (bvedant@cs.ubc.ca)
Wilson Tu (linshuan@student.ubc.ca)
Yeojun Han (yeojunh@student.ubc.ca)

License

Software licensed under the MIT License, non-software content licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0) License. See the license file for more information.

Important links

Calendar
Course GitHub page
Course Jupyter book
Canvas: You will find the class recordings via Panopto in Canvas
Piazza
iClicker Cloud
Gradescope
Course videos YouTube channel
Syllabus / administrative info
Other course documents

Deliverable due dates (tentative)

Usually the homework assignments will be due on Mondays (except next week) and will be released on Tuesdays. We'll also add the due dates in the Calendar. If you find inconsistencies in due dates, follow the due date in the Calendar. For this course, we'll assume that the Calendar is always right!

Assessment	Due date	Where to find?	Where to submit?
hw1	Sept 12, 11:59 pm	Github repo	Gradescope
Syllabus quiz	Sept 19, 11:59 pm	Canvas	Canvas
hw2	Sept 18, 11:59 pm	Github repo	Gradescope
hw3	Oct 02, 11:59 pm	Github repo	Gradescope
hw4	Oct 10, 11:59 pm	Github repo	Gradescope
Midterm	Oct 26 6:00 pm to 7:20 pm	Canvas	Canvas
hw5	Oct 30, 11:59 pm	Github repo	Gradescope
hw6	November 13, 11:59 pm	Github repo	Gradescope
hw7	November 20, 11:59 pm	Github repo	Gradescope
hw8	November 27, 11:59 pm	Github repo	Gradescope
hw9	December 7, 11:59 pm	Github repo	Gradescope
Final exam	TBA	Canvas	Canvas

Lecture schedule (tentative)

Live lectures: The lectures will be in-person. The location can be found in the Calendar. The lectures will be recorded and will be made available after 5 pm on lecture days. You can find the link of Panopto videos in Canvas. That said, consider the recordings a backup resource and do not completely rely on it. You will get a lot more out of the course if you show up in person.

This course will be run in a semi flipped classroom format. There will be pre-watch videos for many lectures, at least in the first half of the course. All the videos are available on YouTube and are posted in the schedule below. Try to watch the assigned videos before the corresponding lecture. During the lecture, we'll summarize the important points from the videos and focus on demos, iClickers, worksheets, and Q&A.

We'll be developing lecture notes directly in this repository. So if you check them before the lecture, they might be in a draft form. Once they are finalized, they will be posted in the Course Jupyter book.

Date	Topic	Assigned videos	vs. CPSC 340
Sep 5	UBC Imagine Day - no class
Sep 7	Course intro	📹 Pre-watch: 1.0	n/a
Sep 12	Decision trees	📹 Pre-watch: 2.1, 2.2, 2.3, 2.4	less depth
Sep 14	ML fundamentals	📹 Pre-watch: 3.1, 3.2, 3.3, 3.4	similar
Sep 19	$k$-NNs and SVM with RBF kernel	📹 Pre-watch: 4.1, 4.2, 4.3, 4.4	less depth
Sep 21	Preprocessing, `sklearn` pipelines	📹 Pre-watch: 5.1, 5.2, 5.3, 5.4	more depth
Sep 26	More preprocessing, `sklearn` `ColumnTransformer`, text features	📹 Pre-watch: 6.1, 6.2	more depth
Sep 28	Linear models	📹 Pre-watch: 7.1, 7.2, 7.3	less depth
Oct 03	Hyperparameter optimization, overfitting the validation set	📹 Pre-watch: 8.1, 8.2	different
Oct 05	Evaluation metrics for classification	📹 Reference: 9.2, 9.3,9.4	more depth
Oct 10	No class. Monday classes moved to Tuesday.
Oct 12	Regression metrics	📹 Pre-watch: 10.1	more depth on metrics less depth on regression
Oct 17	Ensembles	📹 Pre-watch: 11.1, 11.2	similar
Oct 19	Feature importances, model interpretation	📹 Pre-watch: 12.1,12.2	feature importances is new, feature engineering is new
Oct 24	Feature engineering and feature selection	None	less depth

Oct 26	Midterm. No classes.
Oct 31	Clustering	📹 Pre-watch: 14.1, 14.2, 14.3	less depth
Nov 02	More clustering	📹 Pre-watch: 15.1, 15.2, 15.3	less depth
Nov 07	Simple recommender systems		less depth
Nov 14	Midterm break - no class
Nov 16	Text data, embeddings, topic modeling	📹 Pre-watch: 16.1, 16.2	new
Nov 21	Neural networks and computer vision		less depth
Nov 23	Time series data	(Optional) Humour: The Problem with Time & Timezones	new
Nov 28	Survival analysis	📹 (Optional but highly recommended)Calling Bullshit 4.1: Right Censoring	new
Nov 30	Ethics	📹 (Optional but highly recommended) Calling BS videos Chapter 5 (6 short videos, 50 min total) The ethics of data science	new
Dec 05	Communication	📹 (Optional but highly recommended) Calling BS videos Chapter 6 (6 short videos, 47 min total) Can you read graphs? Because I can't. by Sabrina (7 min)	new
Dec 07	Model deployment and conclusion		new

Covid Safety at UBC

Please read Covid Campus Rules.

Masks: This class is going to be in person. UBC no longer requires students, faculty and staff to wear non-medical masks, but continues to recommend that masks be worn in indoor public spaces.

Your personal health: If you are ill or believe you have COVID-19 symptoms or been exposed to SARS-CoV-2 use the Thrive Health self-assessment tool for guidance, or download the BC COVID-19 Support App for iOS or Android device and follow the instructions provided. Follow the advice from Public Health.

Stay home if you have recently tested positive for COVID-19 or are required to quarantine. You can check this website to find out if you should self-isolate or self-monitor.

Your precautions will help reduce risk and keep everyone safer. In this class, the marking scheme is intended to provide flexibility so that you can prioritize your health and still be able to succeed:

All course notes will be provided online.
All homework assignments can be done and handed in online.
All exams will be held online. (But you need to be present in the classroom to write the exam unless there is a legitimate reason for not doing so.)
Most of the class activity will be video recorded and will be made available to you.
There will be at least a few office hours which will be held online.

Land Acknowledgement

UBC’s Point Grey Campus is located on the traditional, ancestral, and unceded territory of the xwməθkwəy̓əm (Musqueam) peple. The land it is situated on has always been a place of learning for the Musqueam people, who for millennia have passed on their culture, history, and traditions from one generation to the next on this site.

It is important that this recognition of Musqueam territory and our relationship with the Musqueam people does not appear as just a formality. Take a moment to appreciate the meaning behind the words we use:

TRADITIONAL recognizes lands traditionally used and/or occupied by the Musqueam people or other First Nations in other parts of the country.

ANCESTRAL recognizes land that is handed down from generation to generation.

UNCEDED refers to land that was not turned over to the Crown (government) by a treaty or other agreement.

As you begin your journey at UBC, take some time to learn about the history of this land and to honour its original inhabitants.

sunshine0523/Mi-Freeform

2023-09-11T01:34:50Z

Use your phone as a dashcam and save the last 30 minutes when you need it.

Alibi

Alibi keeps recording in the background and saves the last 30 minutes at your request. Everything is completely configurable. No internet connection required.

Download

Supporting Alibi

You can support Alibi in various ways:

Contribute to the project

Add a new feature or fix bugs.

Add translations

Translate Alibi into your language so that other people can use it more easily.

Donate

It might sound crazy, but if you would just donate 1$, it would totally mean to world to me, since it's a really small amount and if everyone did that, I can totally focus on Alibi and my other open source projects. :)

You can donate via:

GitHub Sponsors
Bitcoin: bc1qw054829yj8e2u8glxnfcg3w22dkek577mjt5x6
Monero: 83dm5wyuckG4aPbuMREHCEgLNwVn5i7963SKBhECaA7Ueb7DKBTy639R3QfMtb3DsFHMp8u6WGiCFgbdRDBBcz5sLduUtm8

eecs281staff/lab-01-music-sorting

2023-09-11T01:35:47Z

HanshengGUO/DistriPerfMonitor

2023-09-11T01:35:47Z

DistriPerfMonitor is a robust and scalable C++ based performance monitoring solution specifically designed for distributed Linux environments. It aims to provide real-time insights and analytics into system performance, resource utilization, and potential bottlenecks across multiple nodes.

buddy-compiler/buddy-benchmark

2023-09-12T01:31:59Z

Benchmark Framework for Buddy Projects

mesosphere/charts

2023-09-11T01:36:35Z

D2IQ Helm Chart Repository

Helixo32/DetectHooks

2023-09-11T01:36:49Z

Detect userland hooks placed by AV/EDR

heraldofsolace/nixos-dots

2023-09-11T01:36:53Z

This is a collection of helm charts in a nix-digestable format.

nixcon/NixConContent

2023-09-12T01:32:39Z

A collection of all the content from NixCon Paris 2022 and beyond

aelmosalamy/thesoc.club

2023-09-12T01:32:48Z

The SOC's official website.

qiniu/happy-dns-objc

2023-09-11T01:37:12Z

Runtime Code Injection for Objective-C & Swift

Injection Plugin for Xcode

TLDR:

Xcode is an integrated development environment (IDE) for macOS containing a suite of software development tools developed by Apple for developing software for macOS, iOS, iPadOS, watchOS, and tvOS. Injection for Xcode is an Xcode plugin (available via Alcatraz) or AppCode that dynamically inserts new Swift / Objective-C code into a running app in order to speed up your build process. It does this without making any changes to your project.

An up-to-date overview by Rob Norback of how to incorporate it into your workflow is here

This repo is no longer maintained. The current version of Injection is InjectionIII in the Mac App Store.

Announcements of major additions to the project will be made on twitter @Injection4Xcode.

Stop Press

If you know the trick which I won't detail here plugins still load in Xcode 8 GM and injection has been updated for it and Swift 3. Patched injection works fine and unpatched injection works if the "InjectionLoader" bundle is codesigned for the simulator. This is done in a "Run Script" build phase in this project if you need to update the code signing identity to dis-ambiguate it. Please raise issues with any problems or look at this blog. One thing I have noticed is you can no longer add methods using injection which was proably never a particularly good idea in Swift.

Stop Stop Press

Injection is now available as a standalone app rather than have to build the plugin which you can download here. As injection no longer works on the deivce due to sandboxing in iOS10 this is the recommended route going forward. For more information consult the FAQ.

For TDD, there is a interesting fork of the injection plugin you can download here. It runs all tests covering a source file each time you inject. It's on the 'tdd' branch.

How to Use Injection for Xcode

For installation and usage for AppCode see below. If you're a visual learner, you may appreciate this video post from @Orta covering the basics.

With Xcode, either install via Alcatraz, or install by cloning this repo and build InjectionPluginLite/InjectionPlugin.xcodeproj. If you are building locally, note that you need to restart Xcode to load the plugin. A popup should appear asking to confirm loading a plugin not signed by Apple, that signals that the plugin is set up.

The plugin can be removed either via Alcatraz, or by running: rm -rf ~/Library/Application\ Support/Developer/Shared/Xcode/Plug-ins/InjectionPlugin.xcplugin

Simple Proof of Concept Once Installed

Once it is installed, compile and run a project as normal. From here you should take any class that would exist when your app is loaded, add a new function - injected and add a breakpoint on that line.

- (void)injected
{
    NSLog(@"I've been injected: %@", self);
}

@objc func injected() {
    print("I've been injected: \(self)")
}

Then press ctrl+=, and you'll see Xcode stop at the breakpoint. You've just injected new code into a running app. Awesome right?

Callbacks in Your Code

You can build on top of Injection from three callbacks:

- (void)injected as an instance method, which gives you the chance to re-update an object with new contexts.
+ (void)injected as a class method, making it possible to update globals with new information
Listening for INJECTION_BUNDLE_NOTIFICATION, allowing other classes to listen out for injection calls, this is useful for providing app level changes.

If you are interested in diving even deeper into callbacks, check out Tunable Parameters.

Swift Support

Swift support works great when working with a collection of classes. However, there are a number of cases where re-injection won't work elegantly with Swift:

Making changes to Structs.
Changing func or classes that are marked as final.
Global func or variables that are not constrained into a class.
Compiler optimisations can stop injection working. If so, build DEBUG.

In day-to-day development against Cocoa/UIKit, it's rare, but possible to hit these cases, for more information see What Happens With Swift?

How it Works

Injection for Xcode is an extension to the Xcode IDE that allows you to patch the implementation of a class's method without having to restart the application.

It performs this by parsing the build logs of the application to determine how a source file was last compiled. With this it wraps the result of re-compiling into a bundle which is injected into the application using the dynamic loader. At this point there are two versions of a class in the app, the original and a new modified version from the bundle. The modified version is then "swizzled" onto the original class so changes take effect.

This swizzling takes advantage of the fact that Objective-C binds method invocations to implementations at run time. This can also be performed on Swift classes provided that the method or class is not final or private (i.e. the method can be overridden) by patching the class' "vtable". This excludes the injection of methods of structs.

What Else Does This Plugin Do?

It has file watcher that can inject when a file is saved from whichever editor you use. Enable this in the preferences pane accessed on menu item "Product/Injection Plugin/Tunable Parameters": "File Watcher".
There is support for working specifically with Storyboard-based iOS projects.
The plugin offers a way to quickly change a collection of tunable parameters
Xcode is given a badge, showing the number of active Injection connections to apps.
When you start using Injection, a new Xcode Project is added to the same folder as your project (either iOSInjectionProject or OSXInjectionProject.) This is the xcode project base for the changes which are injected into your project, it is recommended to add this to your .gitignore.
Each time a project is injected, injectionCount.txt in the injection project's directory (above) is incremented. This can give you a sense of how much time you save (number of injections * amount saved per injection = a happier you).
The injection key command can be customised from ctrl+= in the "Tunable App Parameters" panel.
Works on a device, if you apply a patch to your project..
Perform unit tests that cover your Swift class/struct/enum. For details see TDD with Injection for Xcode

What Happens with Swift?

Swift, presents a few more stumbling blocks for the uninitiated. Provided that methods are of a non final class and are non final (this excludes structs alas) they can be injected. In this example the sharedInstance variable is declared static rather than "class" to make sure it is not injected to ensure there is only ever one singleton. For the "injected" methods to work your class must inherit from NSObject.

More problematic is the more common use of variables or functions outside a class which are referred to across the files of a bundle. Swift 1.2+ takes the view these "internal" scope symbols should not be available across bundles and are made "private extern" in their object file making them unavailable at run time. This means that the above code will inject but injecting another file referring to the dispatch_on_main function will fail with obscure dynamic loading errors.

The simplest solution is to make these variables and functions public though, for a framework, this may be unsatisfactory. The alternative is to patch the object files of the project to remove the private extern flag and relink the bundle. In order to do this a script ~/bin/unhide.sh is created by the plugin build which should be called as an additional "Run Script" build phase after linking your app to perform this patch and relink.

Use with AppCode

Injection can be used from inside AppCode provided the application has been patched and you have previously injected that project from inside Xcode to set up a link to the build logs.

To install, download the jar file InjectionPluginAppCode/Injection.jar from this repo and go to AppCode preferences, choose "Install plugin from disk" and locate the .jar. Then restart the IDE. Now you will get new menu options under the Run menu. You’ll need to re-patch the project from inside AppCode as it uses a different port number to connect.

Limitations of Injection

There are limitations of course, largely centering around static variables, static or global functions and their Swift equivalents. Consider the following Objective-C code.

One potential problem is when the new version of the class is loaded, it comes with it's own versions of static variables such as sharedInstance and the once token. After injection has occurred, this would generate a new singleton instance.

To prevent this, class methods with the prefix "shared" are not swizzled on injection to support this common idiom.
It can be tough to look through all of the memory of a running application. In order to determine the classes and instances to call the injected callbacks on, Injection performs a "sweep" to find all objects in memory. Roughly, this involves looking at an object, then recursively looking through objects which it refers to. For example, the object's instance variables and properties.

This process is seeded using the application's delegate and all windows. Once all the in-memory reference are collected, Injection will then filter these references to ones that it has compiled and injected. Then sending them the messages referenced in the callbacks section.

If no references are found, Injection will look through all objects that are referred to via sharedInstance. If that fails, well, Injection couldn't find your instance. This is one way in which you may miss callbacks in your app.
The function dispatch_on_main does not inject, as it has been statically linked into the application. It does however, inject by proxy in the case shown via the doSomething method. dispatch_on_main will have been linked locally to a version in the object file being injected.

spotify/ios-sdk

2023-09-11T01:37:12Z

Spotify SDK for iOS

Spotify iOS SDK

Overview

The Spotify iOS framework allows your application to interact with the Spotify app running in the background on a user's device. Capabilities include authorizing, getting metadata for the currently playing track and context, as well as issuing playback commands.

Please Note: By using Spotify developer tools you accept our Developer Terms of Use.

The Spotify iOS SDK is a set of lightweight objects that connect with the Spotify app and let you control it while all the heavy lifting of playback is offloaded to the Spotify app itself. The Spotify app takes care of playback, networking, offline caching and OS music integration, leaving you to focus on your user experience. Moving from your app to the Spotify app and vice versa is a streamlined experience where playback and metadata always stay in sync.

Key Features

Filing Bugs

Components

How Do App Remote Calls Work?

Tutorial

Frequently Asked Questions

Key Features

Playback is always in sync with Spotify app
Playback, networking, and caching is all accounted for by the Spotify app
Works offline and online and does not require Web API calls to get metadata for player state
Allows authentication through the Spotify app so users don't have to type in their credentials

Filing Bugs

We love feedback from the developer community, so please feel free to file missing features or bugs over at our issue tracker. Make sure you search existing issues before creating new ones.

Open bug tickets | Open feature requests

Requirements

The Spotify iOS framework requires a deployment target of iOS 9 or higher. The following architectures are supported: armv7, armv7s and arm64 for devices, i386 and x86_64 for the iOS Simulator. Bitcode is also supported.

Components

Models

SPTAppRemoteAlbum
SPTAppRemoteArtist
SPTAppRemoteLibraryState
SPTAppRemotePlaybackRestrictions
SPTAppRemotePlaybackOptions
SPTAppRemotePlayerState
SPTAppRemoteTrack
SPTAppRemoteContentItem
SPTAppRemoteUserCapabilities
SPTAppRemoteImageRepresentable
SPTConfiguration

SPTAppRemote

The main entry point to connect to the Spotify app and retrieve API components. Use this to establish, monitor, and terminate the connection.

SPTAppRemotePlayerAPI

Send playback related commands such as:

Play track by URI
Resume/pause playback
Skip forwards and backwards
Seek to position
Set shuffle on/off
Request player state
Request player context
Subscribe to player state

SPTAppRemoteImagesAPI

Fetch an image for a SPTAppRemoteImageRepresentable

SPTAppRemoteUserAPI

Fetch/subscribe/set user-related data such as:

Fetch and/or subscribe to SPTAppRemoteUserCapabilities
Determine if a user can play songs on demand (Premium vs Free)
Add/remove/check if a song is in a user's library

SPTAppRemoteContentAPI

Fetch recommended content for the user.

How App Remote calls work

When you interact with any of the App Remote APIs you pass in a SPTAppRemoteCallback block that gets invoked with either the expected result item or an NSError if the operation failed. The block is triggered after the command was received by the Spotify app (or if the connection could not be made).

Here is an example using the SPTRemotePlayerAPI to skip a song:

[appRemote.playerAPI skipToNext:^(id  _Nullable result, NSError * _Nullable error) {
    if (error) {
        // Operation failed
    } else {
        // Operation succeeded
    }
}];

Tutorial and Examples

We provide a few sample projects to help you get started with the iOS Framework in the DemoProjects folder. See the Readme in the DemoProjects folder for more information on what each sample does.

Authentication and Authorization

To communicate with the Spotify app your application will need to get a user's permission to control playback first by using built-in authorization for App Remote. To do that you will need to request authorization view when connecting to Spotify. The framework will automatically request the app-remote-control scope and show the auth view if user hasn't agreed to it yet.

Terms of Use

Note that by using Spotify developer tools, you accept our Developer Terms of Use.

Included Open Source Libraries

MPMessagePack

Tutorial

This tutorial leads you step-by-step through the creation of a simple app that uses the Spotify iOS SDK to play an audio track and subscribe to player state. It will walk through the authorization flow.

Prepare Your Environment

Follow these steps to make sure you are prepared to start coding.

Download the Spotify iOS framework from the "Clone or download" button at the top of this page, and unzip it.
Install the latest version of Spotify from the App Store onto the device you will be using for development. Run the Spotify app and login or sign up. Note: A Spotify Premium account will be required to play a track on-demand for a uri.
Register Your Application. You will need to register your application at My Applications and obtain a client ID. When you register your app you will also need to whitelist a redirect URI that the Spotify app will use to callback to your app after authorization.

Add Dependencies

Add the SpotifyiOS package to your project. You can either do this through Swift Package Manager (SPM), or by adding SpotifyiOS.framework or SpotifyiOS.xcframework to your Xcode project directly.
In your info.plist add your redirect URI you registered at My Applications. You will need to add your redirect URI under "URL types" and "URL Schemes". Be sure to set a unique "URL identifier" as well. More info on URL Schemes
Add #import <SpotifyiOS/SpotifyiOS.h> to your source files to import necessary headers.

Check if Spotify is Active

If a user is already using Spotify, but has not authorized your application, you can use the following check to prompt them to start the authorization process.

[SPTAppRemote checkIfSpotifyAppIsActive:^(BOOL active) {
    if (active) {
        // Prompt the user to connect Spotify here
    }
}];

Authorize Your Application

To be able to use the playback control part of the SDK the user needs to authorize your application. If they haven't, the connection will fail with a No token provided error. To allow the user to authorize your app, you can use the built-in authorization flow.

Initialize SPTConfiguration with your client ID and redirect URI.

SPTConfiguration *configuration =
    [[SPTConfiguration alloc] initWithClientID:@"your_client_id" redirectURL:[NSURL urlWithString:@"your_redirect_uri"]];

Initialize SPTAppRemote with your SPTConfiguration

self.appRemote = [[SPTAppRemote alloc] initWithConfiguration:configuration logLevel:SPTAppRemoteLogLevelDebug];

Initiate the authentication flow (for other ways to detect if Spotify is installed, as well as attributing installs, please see our Content Linking Guide).

// Note: A blank string will play the user's last song or pick a random one.
BOOL spotifyInstalled = [self.appRemote authorizeAndPlayURI:@"spotify:track:69bp2EbF7Q2rqc5N3ylezZ"];
if (!spotifyInstalled) {
    /*
    * The Spotify app is not installed.
    * Use SKStoreProductViewController with [SPTAppRemote spotifyItunesItemIdentifier] to present the user
    * with a way to install the Spotify app.
    */
}

Configure your AppDelegate to parse out the accessToken in application:openURL:options: and set it on the SPTAppRemote connectionParameters.

- (BOOL)application:(UIApplication *)app openURL:(NSURL *)url options:(NSDictionary<UIApplicationOpenURLOptionsKey,id> *)options
{
    NSDictionary *params = [self.appRemote authorizationParametersFromURL:url];
    NSString *token = params[SPTAppRemoteAccessTokenKey];
    if (token) {
        self.appRemote.connectionParameters.accessToken = token;
    } else if (params[SPTAppRemoteErrorDescriptionKey]) {
        NSLog(@"%@", params[SPTAppRemoteErrorDescriptionKey]);
    }
    return YES;
}

If you are using UIScene then you need to use appropriate method in your scene delegate.

func scene(_ scene: UIScene, openURLContexts URLContexts: Set<UIOpenURLContext>) {
    guard let url = URLContexts.first?.url else {
        return
    }

    let parameters = appRemote.authorizationParameters(from: url);

    if let access_token = parameters?[SPTAppRemoteAccessTokenKey] {
        appRemote.connectionParameters.accessToken = access_token
        self.accessToken = access_token
    } else if let error_description = parameters?[SPTAppRemoteErrorDescriptionKey] {
        // Show the error
    }
}

Connect and Subscribe to Player State

Set your connection delegate and attempt to connect.

self.appRemote.delegate = self;
[self.appRemote connect];


- (void)appRemoteDidEstablishConnection:(SPTAppRemote *)appRemote
{
    // Connection was successful, you can begin issuing commands
}

- (void)appRemote:(SPTAppRemote *)appRemote didFailConnectionAttemptWithError:(NSError *)error
{
    // Connection failed
}

- (void)appRemote:(SPTAppRemote *)appRemote didDisconnectWithError:(nullable NSError *)error
{
    // Connection disconnected
}

Set a delegate and subscribe to player state:

appRemote.playerAPI.delegate = self;

[appRemote.playerAPI subscribeToPlayerState:^(id  _Nullable result, NSError * _Nullable error) {
    // Handle Errors
}];

- (void)playerStateDidChange:(id<SPTAppRemotePlayerState>)playerState
{
    NSLog(@"Track name: %@", playerState.track.name);
}

Connection handling

As a courtesy you should always disconnect App Remote when your app enters a background state. This tells Spotify that it's safe to disable the active stream. If your app does not properly call disconnect Spotify has no way of knowing that it should not maintain the connection, and this may result in future connection issues.

If you want your app to automatically reconnect after disruption events like incoming calls or Siri interactions you may use the willResignActive and didBecomeActive callbacks to safely disconnect and reconnect. If you don't wish to reconnect directly, it's typically enough to close the connection in didEnterBackground callbacks.

- (void)applicationWillResignActive:(UIApplication *)application
{
    [self.appRemote disconnect];
}
- (void)applicationDidBecomeActive:(UIApplication *)application
{
    [self.appRemote connect];
}
// If you're using UIWindowSceneDelegate
- (void)sceneDidBecomeActive:(UIScene *)scene
{
    [self.appRemote connect];
}
- (void)sceneWillResignActive:(UIScene *)scene
{
    [self.appRemote disconnect];
}

Frequently Asked Questions

Why does music need to be playing to connect with SPTAppRemote?

Music must be playing when you connect with SPTAppRemote to ensure the Spotify app is not suspended in the background. iOS applications can only stay active in the background for a few seconds unless they are actively doing something like navigation or playing music.

Is SpotifyiOS.framework thread safe?

No, the framework currently expects to be called from the main thread. It will offload most of its work to a background thread internally but callbacks to your code will also occur on the main thread.

What if I need to authorize without starting playback?

There is an alternative authorization method. You can find more information about that here.

LIFX/LIFXKit

2023-09-11T01:37:12Z

Geetest 3.0 iOS Objective-C SDK

本仓库已停止维护。通过依赖管理或手动方式获取最新 SDK 请访问 iOS SDK 及 Demo 下载地址

GT3Captcha Project

概述

极验验证 3.0 iOS SDK 提供给集成 iOS 原生客户端开发的开发者使用, SDK 不依赖任何第三方库.

Bitcode 版本在 Bitcode 目录下的 GT3Captcha.framework及GT3Captcha.Bundle
非 Bitcode 版本在 GT3Example 目录下的 GT3Captcha.framework及GT3Captcha.Bundle

环境需求

条目
开发目标	兼容 iOS7, 推荐 iOS8+
开发环境	Xcode 8.0
系统依赖	`Webkit.framework`, `JavaScriptCore.framework`
SDK 三方依赖	无
资源依赖	依赖 `GT3Captcha.Bundle`

获取 SDK

使用 `git` 命令从 Github 获取

git clone https://github.com/GeeTeam/gt3-ios-objc.git

手动下载获取

使用从 github 下载.zip文件获取最新的 SDK.

Github: gt3-ios-objc

使用

引入 `GT3Captcha.framework`

使用 Linked Frameworks and Libraries 方式引入 GT3Captcha.framework. GT3Captcha.framework 是 Static Library, 支持 iOS7+.

引入 `GT3Captcha.Bundle`

把仓库中的 GT3Captcha.Bundle 拖入项目中. iOS7 不支持 Dynamic Library, 无法使用 embedded binaries. 而 Dynamic Library 无法获取 .strings 等资源文件, 这里以 bundle 外嵌的方式单独管理 SDK 所需资源文件.

如需自定义按钮的标题请查阅 tipsDict 相关定义

Demo 提供的示例场景

使用参见根部目录下的 GT3Example Demo 工程, Demo 包含以下场景:

在登录使用 SDK 默认封装接口 LoginViewController
在注册使用 SDK 默认封装接口RegisterViewController
在自定义按钮下使用 SDK 默认封装接口 CustomButton
在自定义按钮下使用自定义接口 AsyncButton

语言环境配置

Demo 以 iOS8 作为示例, 语言默认支持中文简体、中文繁体、英文，但需要在 .plist 里添加如下属性(已存在的不用再次添加):

<key>CFBundleLocalizations</key>
	<array>
		<string>en</string>
		<string>zh_CN</string>
		<string>zh_TW</string>
	</array>

SDK 及产品详情

极验验证 3.0 服务介绍服务介绍

SDK 安装教程见官方文档

SDK 接口文档见接口文档

接口

集成前需要先了解极验验证 3.0 的产品结构, 并且必须要先在您的后端搭建相应的服务端 SDK，并配置从极验后台获取的 <gt_captcha_id> 和 <geetest_key>用来配置您集成了极验服务端 SDK 的后台.

其中 iOS SDK 主要提供以下接口:

配置验证初始化
启动验证
验证生命周期的代理方法
- 错误处理
- 结果处理
- 流程控制

更新日志

0.10.2: 新增日语支持; 优化内部流程;
0.10.1: 优化网络模块; 优化内部状态控制; 功能增强; 新增印尼语支持; 其它问题修复;
0.9.0: 添加 GT3Captcha.Bundle, 为 Static Library 单独管理图片、文件等资源;
0.8.10: 修复潜在 bug; 增强统计接口;
0.8.8: 修复潜在的 crash 问题; 修复内存泄漏; 增加 debug 代理;
0.8.6: 紧急修复 openURL: 在 iOS11 上导致的 crash 问题;
0.8.5: 优化高度获取方案; 其他问题修复;
0.8.1: 修复 iOS8+ 网络 bug; 细节优化;
0.7.10: 错误统一; UI 逻辑调整;
0.7.6: 改善数据; 其他问题修复;
0.7.2: 改善数据交互; 增加 forbidden 事件;
0.6.3: 修复 onepass 下没有图形提示的问题; 修复因状态不一致导致的 server 返回 'runtime error';
0.6.2: 解决 0.6.1 版在部分情况下, 执行动画导致 CPU 高消费; 解决已发现在数据层面导致的服务端返回 'runtime error' 的问题;
0.6.1: 针对按钮绑定集成验证优化；针对反馈提供更多新接口；改善初始化体验；提供更详实的演示 Demo;
0.5.7: 修正 NSBundle 在非 embedded binaries 中的问题;
0.5.6: 修改提示文案；GTCaptchaManagerViewDelegate 方法更新；验证成功后再次验证只需要点击一次;
0.5.5: 对 GT3CaptchaButton 增加可选的代理方法;
0.5.4: 完善验证管理器生命周期;
0.5.3: 修复在未检测到传感器的情况下的表现行为；优化销毁逻辑;
0.5.2: 修改多交互逻辑, 界面适配修正;
0.5.0: 变更为静态库以支持 iOS7；支持静默验证；少量修复和改善;

robur-coop/miou

2023-09-12T01:33:09Z

A simple scheduler for OCaml 5

andreypopp/react_of_ocaml

2023-09-12T01:33:09Z

React Server Components (RSC) for OCaml

bugzilla/harmony

2023-09-11T01:37:58Z

next generation bugzilla

Bugzilla Harmony

Web based general purpose defect tracking software that helps to drive software development.

Stable and reliable, tested by thousands of largest open source organizations all around the world. It can be installed on Linux, mac OS, other flavors of Unix and Windows.

For the full list of features, you can check the Bugzilla website.

Demo

You can try Bugzilla on the test instance

Development

If you want to contribute to Bugzilla, you can fork this repo and get a local copy of it running in a few minutes using Docker with the help of the guide.

Make yourself familiar with CONTRIBUTING.md, so your PR gets quickly and swiftly through the review process.

Installation

You can use the provided docker container to set up Bugzilla, which is documented in docker/README.md.

For other ways of installing Bugzilla, refer to our installation documentation.

Documentation

Reporting Bugs

You can report bugs on the Mozilla Bugzilla

Community

jautz/kraus

2023-09-11T01:37:58Z

Determines the "floor of the day" on which my co-workers and me meet for coffee.

K.R.A.U.S.

Abstract

Determines the "floor of the day" on which my co-workers and me meet for coffee.

The acronym stands for the German phrase Kaffee-Runde auf unterschiedlichen Stockwerken.

Runtime Environment

To run this script you need Perl5 with modules CGI and AppConfig. CGI.pm has been included in the Perl distribution since Perl 5.4. Thus, on Debian derivates, this will prepare the runtime environment:

apt-get install perl libappconfig-perl

Usually you will run this script inside a webserver like Apache with mod_perl.

Debugging

You can run this script directly from the command line using the CGI module's debugging feature (see perldoc CGI section DEBUGGING for details):

./index.cgi format=raw offset=2

Finally, to find out whether the pseudo-random location selector distributes equally there is a simulation mode that prints the selections for the next days to stdout:

./index.cgi -s [default=30]

For example, this produces the number of selections for each floor in the next 500 days:

./index.cgi -s 500 | awk '{print $2}' | sort | uniq -c
 56 1
 56 2
 60 3
 69 4
 69 5
 68 6
 59 7
 64 8

Well, the distribution is far from perfect but at least this script yields reproducible results without a central storage.

theory/text-markup

2023-09-11T01:37:58Z

Parse files in many different text markup formats into HTML.

Text/Markup version 0.31

This library's module, Text::Markup, provides an single interface for parsing a large number of text markup formats and converting them to HTML. It currently supports the following markups:

Installation

To install this module, type the following:

perl Build.PL
./Build
./Build test
./Build install

Or, if you don't have Module::Build installed, type the following:

perl Makefile.PL
make
make test
make install

Dependencies

Text-Markup requires the following modules:

File::BOM 0.15
HTML::Entities
perl 5.8.1
Pod::Simple::XHTML 3.15
Text::Markdown 1.000004
Text::MediawikiFormat 1.0
Text::Textile 2.10
Text::Trac 0.10
Parse::BBCode 0.15
Text::WikiCreole 0.07

Copyright and Licence

This module is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

juzeon/fast-mail-bomber

2023-09-11T01:38:12Z

Fast, multithreading, efficient and easy-to-use mail bombing/spamming tool. Sending mails via mailman services hosted by different providers.

Fast Mail Bomber via Mailman

English | 简体中文

Fast Mail Bomber via Mailman (also FMB for short) is an email bombing/spamming tool written in php. FMB bombs the target's mailbox by sending bulk emails via mailman services hosted by different providers.

DISCLAIMER: THIS PROJECT IS FOR ACADEMIC PURPOSES ONLY. THE DEVELOPERS TAKE NO RESPONSIBILITY FOR ILLEGAL USAGE AND/OR POTENTIAL HARMS.

Requirements

PHP >= 7.2
cURL extension support

Features

Automatically get mailman servers (providers) from Shodan or import from local files.
Multithreading bombing process.
900+ built-in providers & 50,000+ built-in nodes list, providing efficiency.
Reliable exception handling mechanism.

Installation

1. Clone this project

You can use git to clone this project or download .zip file from GitHub.

git clone https://github.com/juzeon/fast-mail-bomber.git
cd fast-mail-bomber/

2. Configure

Copy config.example.php to config.php and edit it according to the annotations in the file to suit your needs.

Usage

Concept explanations:

Provider: A mailman server, which usually contains a listinfo page listing all subscription nodes. eg. http://lists.centos.org/mailman/listinfo

Node: A subscription node on a mailman server, which can be used to send subscription confirmation emails to a target. eg. http://lists.centos.org/mailman/subscribe/centos

1. (Optional) Updating Providers from Shodan & ZoomEye or a local file

# Updating providers from Shodan & ZoomEye. Set a Shodan and/or ZoomEye api key in config.php first.
php index.php update-providers

# Importing providers from a local file. There's no restriction on file format/pattern since FMB uses RegExp to match provider urls.
php index.php import-providers <filepath>

Duplicate providers will be automatically removed.

2. (Recommand) Updating Nodes from the existing provider list

# Optional. Due to various factors of different network environments, the built-in nodes may not work in your environment. So it's a good idea to delete these nodes (but not data/providers.json) and execute update-nodes on your own. Depending on the speed of your network and the size of our providers list, it may take 10~30 minutes.
rm -rf data/nodes.json data/dead_providers.json

# Getting all subscription nodes that can be used for bombing from providers.
php index.php update-nodes

# Optional. Refine only one node from each provider, which will be extracted into a different file.
php index.php refine-nodes

When getting nodes, unavailable providers previously added will be automatically added to a dead list and will not be used.

Duplicate nodes will be automatically removed.

You can also use built-in providers and nodes and skip this step.

3. Starting to bomb

php index.php start-bombing [refined] <email address>

# eg. Use all nodes to bomb an email:
php index.php start-bombing email@example.com

# eg. Use refined nodes to bomb an email:
php index.php start-bombing refined email@example.com

Successful and failed requests will be printed via console. Press CTRL+C to cease the process.

DISCLAIMER: THIS PROJECT IS FOR ACADEMIC PURPOSES ONLY. THE DEVELOPERS TAKE NO RESPONSIBILITY FOR ILLEGAL USAGE AND/OR POTENTIAL HARMS.

Testing results

I tested FMB's performance when bombing different mail providers once. Here's the results:

Proton Mail: 99.4% into Inbox, 0.6% into Spambox.

Gmail: 83.2% into Inbox, 16.8% into Spambox.

Outlook Mail: 77.1% into Inbox, 22.9% into Spambox.

163 Mail: 100% into Inbox, 0% into Spambox.

QQ Mail: 71% into Inbox, 29% into Spambox.

Zoho Mail: 0% into Inbox, 15.9% into Newsletter, 84.1% into Spambox.

Yandex Mail: 0% into Inbox, 100% into Spambox.

How to prevent being bombed

Because of the mail template used in mailman's default settings, simply add the following text as one of your mailbox's filter rule:

Mailing list subscription confirmation notice for mailing list

License

GPL v2.0

binafy/laravel-user-monitoring

2023-09-11T01:38:12Z

Monitor your user and all activity on your application

Laravel User Monitoring

Introduction

Welcome to the world of enhanced user monitoring with the groundbreaking Laravel User Monitoring package! Developed by the brilliant minds at Binafy, this innovative open-source solution is designed to empower Laravel developers and website administrators with invaluable insights into user activities.

Tracking user behavior and interactions is now made effortless, allowing you to gain a deeper understanding of your users' engagement, preferences, and pain points. With its seamless integration into Laravel projects, this package opens up a realm of possibilities, enabling you to optimize user experiences, detect bottlenecks, and make data-driven decisions for your platform's success.

Experience real-time monitoring like never before, as you access comprehensive analytics and visualize user interactions with ease. Rest assured, your users' data is handled securely, respecting privacy while giving you the tools to improve your application's performance and user satisfaction.

Whether you are building a new project or looking to enhance an existing one, "Laravel User Monitoring" is the missing piece to elevate your web applications to new heights. So, why wait? Dive into the world of intelligent user monitoring and witness the transformation of your Laravel-powered application today!

Installation

You can install the package with Composer.

composer require binafy/laravel-user-monitoring

Publish

If you want to publish a config file you can use this command:

php artisan vendor:publish --tag="laravel-user-monitoring-config"

If you want to publish migration files you can use this command:

php artisan vendor:publish --tag="laravel-user-monitoring-migrations"

For convenience, you can use this command to publish config and migration files:

php artisan vendor:publish --provider="Binafy\LaravelUserMonitoring\Providers\LaravelUserMonitoringServiceProvider"

After publishing, run the php artisan migrate command.

Usage

The Laravel-User-Monitoring, just need to use middleware, traits, etc ... and it's not hard, enjoy :)

User Configuration

You can config your user with the user-monitoring.php configuration file:

'user' => [
    /*
     * User model.
     */
    'model' => 'App\Models\User',

    /*
     * Foreign Key column name.
     */
    'foreign_key' => 'user_id',

    /*
     * Users table name.
     */
    'table' => 'users',

    /*
     * The correct guard.
     */
    'guard' => 'web',

    /*
     * If you are using uuid or ulid you can change it for the type of foreign_key.
     *
     * When you are using ulid or uuid, you need to add related traits into the models.
     */
    'foreign_key_type' => 'id', // uuid, ulid, id
],

model: If your user model exists in another place, you can change it to the correct namespace.
foreign_key: You can set the user foreign_key name, like customer_id.
table: You can write your users table name if is not `users.
guard: The correct guard that using for the user.

Foreign Key Type (UUID, ULID, ID)

If you are using uuid or ulid, you can change foreign_key_type to your correct foreign key type:

'user' => [
    ...

    /*
     * If you are using uuid or ulid you can change it for the type of foreign_key.
     *
     * When you are using ulid or uuid, you need to add related traits into the models.
     */
    'foreign_key_type' => 'uuid', // uuid, ulid, id
],

NOTE: You must write uuid or ulid or id.

Visit Monitoring

When you want to monitor all views of your application, you must follow below:

Publish the Migrations
Use VisitMonitoringMiddleware in Kernel.php, you can go to the App/Http folder and open the Kernel.php file and add VisitMonitoringMiddleware into your middleware for example:

protected $middlewareGroups = [
    'web' => [
        ...
        \Binafy\LaravelUserMonitoring\Middlewares\VisitMonitoringMiddleware::class,
    ],

    'api' => [
        // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
        \Illuminate\Routing\Middleware\ThrottleRequests::class.':api',
        \Illuminate\Routing\Middleware\SubstituteBindings::class,
    ],
];

After, you can see all pages monitoring :)

If you want to disable monitoring for specific pages you can go to user-monitoring.php that exists in the config folder and add pages into the visit_monitoring key:

'visit_monitoring' => [
    /*
     * You can specify pages not to be monitored.
     */
    'expect_pages' => [
        'home',
        'admin/dashboard',
    ],
],

Delete Visit Monitoring Records By Specific Days

You may delete records by specific days, Laravel-User-Monitoring also supports this 🤩.

First, you need to go to the user-monitoring config file and highlight the days that you want to delete:

'visit_monitoring' => [
    ...

    /*
     * If you want to delete visit rows after some days, you can change this to 360,
     * but if you don't like to delete rows you can change it to 0.
     *
     * For this feature you need Task-Scheduling => https://laravel.com/docs/10.x/scheduling
     */
    'delete_days' => 10,
],

After, you need to use Task Scheduling to fire-related command, so go to app/Console/Kernel.php and do like this:

<?php

namespace App\Console;

...
use Binafy\LaravelUserMonitoring\Commands\RemoveVisitMonitoringRecordsCommand;

class Kernel extends ConsoleKernel
{
    /**
     * Define the application's command schedule.
     */
    protected function schedule(Schedule $schedule): void
    {
         $schedule->command(RemoveVisitMonitoringRecordsCommand::class)->hourly();
    }
}

You can change hourly to minute or second, for more information you can read Schedule Frequency Options.

Turn ON-OFF

Maybe you want to turn off visit monitoring for somedays or always, you can use configuration to turn it off:

'visit_monitoring' => [
    ...

    /*
     * If you want to disable visit monitoring, you can change it to false.
     */
    'turn_on' => true,
    
    ...
]

Visit Monitoring Views

Laravel-User-Monitoring also has an amazing views that you can use it very easy, just need to go to /user-monitoring/visits-monitoring url, and enjoy:

Action Monitoring

If you want to monitor your models actions, you can use the Actionable trait in your model:

<?php

namespace App\Models;

use Binafy\LaravelUserMonitoring\Traits\Actionable;
use Illuminate\Database\Eloquent\Model;

class Product extends Model
{
    use Actionable;
}

Now when a product is read, created, updated, or deleted, you can see which users doing that.

If you want to disable some actions like created, you can use the config file:

'action_monitoring' => [
    ...
    
    /*
     * Monitor actions.
     *
     * You can set true/false for monitor actions like (store, update, and ...).
     */
    'on_store'      => false,
    'on_update'     => true,
    'on_destroy'    => true,
    'on_read'       => true,
    'on_restore'    => false,
    'on_replicate'  => false,
],

Action Monitoring Views

Laravel-User-Monitoring also has amazing views that you can use very easily, just need to go to the /user-monitoring/actions-monitoring URL, and enjoy:

Authentication Monitoring

Have you ever thought about monitoring the entry and exit of users of your application? Now you can :)
If you want to monitor users when logging in or logout of your application, you need to migrate the migrations to the config file and change true for monitoring authentication.

'authentication_monitoring' => [
    ...

    /*
     * You can set true/false for monitor login or logout. 
     */
    'on_login' => true,
    'on_logout' => true,
],

Authentication Monitoring Views

Laravel-User-Monitoring also has amazing views that you can use very easily, just need to go to the /user-monitoring/authentications-monitoring URL, and enjoy:

How to use in big projects

If you want to use Laravel-User-Monitoring is big projects, you have lots of ways, but I want to give some tips and ideas to help you:

If you have an idea for this section you can create PRs or issues to help us.

You can use this package with Cache
You can make a separate DB and connect to your project to separate monitoring and application.

Contributors

Thanks to all the people who contributed. Contributors.

Security

If you discover any security-related issues, please email binafy23@gmail.com instead of using the issue tracker.

Changelog

The changelog can be found in the CHANGELOG.md file of the GitHub repository. It lists the changes, bug fixes, and improvements made to each version of the Laravel User Monitoring package.

License

The MIT License (MIT). Please see License File for more information.

Conclusion

Congratulations! You have successfully installed and integrated the Laravel User Monitoring package into your Laravel application. By effectively logging and analyzing user activity, you can gain valuable insights that can help you improve your application's user experience and performance. If you have any questions or need further assistance, feel free to refer to the documentation or seek help from the package's GitHub repository. Happy monitoring!

SJTU-IPADS/HEDB

2023-09-12T01:34:07Z

Towards A Secure Yet Maintainable Encrypted Database

0xJs/domain_audit

2023-09-11T01:38:43Z

Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

Domain Audit

The tool is a wrapper around PowerView, Impacket, PowerUpSQL, BloodHound, Ldaprelayscan and Crackmapexec to automate the execution of enumeration and a lot of checks performed during a On-Prem Active Directory Penetrationtest. Thanks to all the authors of the original tools.

Installation & Setup

Install python 3.10 (For example from the Windows store)

git clone https://github.com/0xJs/domain_audit
cd .\domain_audit\import\
git clone https://github.com/SecureAuthCorp/impacket
cd impacket; python3 -m pip install .
cd ../;
git clone https://github.com/zyn3rgy/LdapRelayScan;
cd LdapRelayScan;
python3 -m pip install -r .\requirements.txt
cd ../../;

Make sure the path viariables in the script to the following tools are correct (if you followed the installation steps it should be)

$script:PowerView_Path = "$PSScriptRoot\import\PowerView.ps1"
$script:Powerupsql_Path = "$PSScriptRoot\import\PowerUpSQL.ps1"
$script:Impacket_Path = "$PSScriptRoot\import\impacket"
$script:BloodHound_Path = "$PSScriptRoot\import\Sharphound.ps1"
$script:GpRegisteryPolicy_Path = "$PSScriptRoot\import\GPRegistryPolicy\GPRegistryPolicy.psd1"
$script:CME_Path = "$PSScriptRoot\import\cme"
$script:LdapRelayScan_Path = "$PSScriptRoot\import\LdapRelayScan\LdapRelayScan.py"

Issue with accessing Sysvol access denied?
- To resolve this issue run gpedit.msc, go to Computer -> Administrative Templates -> Network -> Network Provider -> Hardened UNC Paths, enable the policy and click "Show" button.
- Enter * into "Value name" and enter RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0 in value.
- Enter \\*\NETLOGON into "Value name" and enter RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0 in value.
- Enter \\*\SYSVOL into "Value name" and enter RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0 in value.
If it still gives problems add the following:

reg add HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths /v "\\*\SYSVOL" /d "RequireMutualAuthentication=0" /t REG_SZ /f
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths /v "\\*\NETLOGON" /d "RequireMutualAuthentication=0" /t REG_SZ /f

Running domain_audit

Start PowerShell as Administrator
- This is required to change the DNS server to DC IP and add domain to hosts file. Otherwise some checks/executions will fail such as Impacket.

Run all checks

PS C:\Users\user\Desktop> . C:\Tools\domain_audit\domain_audit.ps1
PS C:\Users\user\Desktop> Invoke-ADCheckAll -Domain "amsterdam.bank.local" -User "john" -Password "Welcome2022!" -Server 10.0.0.3

Example output at the bottom of the page.

Run seperate checks

Some checks need the DNS And domain name in the host file. So best is to set that!

Set dns and host file

Invoke-ChangeDNS -Server 10.0.0.3 -Domain "amsterdam.bank.local"

Run a check

Invoke-ADEnum -Domain "amsterdam.bank.local" -User "john" -Password "Welcome2022!" -Server 10.0.0.3
Invoke-ADEnumTrust -Domain "amsterdam.bank.local" -User "john" -Password "Welcome2022!" -Server 10.0.0.3
Invoke-ADCheckSQL -Domain "amsterdam.bank.local" -User "john" -Password "Welcome2022!" -Server 10.0.0.3

Output

The tool will create a directory with the domain name and date on current directory or in the supplied location. In this directory there are three directories:

Data, has .csv files from domain objects, bloodhound data and some lists of objects.
Findings, has output from checks that could be something interesting or reported as a finding.
Checks, has output from checks that should be assessed manually to check ifs something to be reported.

Checks

Invoke-ADCheckAll will execute the following in order:

Collect basic data of AD objects and place them in /data/ directory in .csv format
Collect data with bloodhound - Collectionmethods all, acl and sessions in the background.
Create list of all (enabled) users, admin accounts, computers and groups in /data/
List amount of users, groups, computers, OU's, GPO's, Administrators, domain controllers and domain functional level.
Check if the amount of admins is more then 5% (High amount of admins in the domain)
Enumerate domain trusts and trusts within forst
Check if AzureAD or Azure SSO is installed
Execute a runas in a new window for the SQL checks
- Check for SQL instances in the domain
- Check if current user has access to SQL instances
  - Check if the current user is sysadmin
  - Gather database info on SQL instancees
  - Check as who the SQL instance is running
  - Check for database links as sysadmin
  - Run invoke-sqlaudit and save all data
    - Check for weak passwords
    - Check for Execute xp_dirtree and Execute xp_fileexist
Check if domain functional level is 2016
Check password policy configuration
- Check for cleartextpasswords = 1
- Check passwordlength
- Check passwordcomplexity
- Check account lockout
Check if kerberos policy configuration is changed from the defaults
Check if there is a GPO with LAPS in its name
- Check to which OU's the GPO is applied to
- Check the LAPS policy
  - Check adminaccountname
  - Check passwordcomplexity
  - Check passwordlength
  - Check passwordagedays
  - Check pwdexpirationprotection enabled
  - Check admpwdenabled
Check if there are systems with LAPS installed
- Check if there are systems where LAPS isn't installed on
If LAPS GPO found or LAPS computers found - Check if the current user can read LAPS passwords
Get all users with a description - Manually check for passwords or interesting information
- Check if the string pw, pass, ww or wachtwoord is in the description.
Get all groups with a description - Manually check for passwords or interesting information
Get all computers with a description - Manually check for passwords or interesting information
Check if there are admins with a Spn
Check if there are users with a Spn
- Kerberoast users with a Spn
Check for users with constrained delegation
Check for users with unconstrained delegation
Check for computers with constrained delegation
Check for computers with unconstrained delegation except domain controllers
Check for computers with resource based constrained delegation set
Check PASSWD_NOT_REQ attribute on users
- Checks if users has empty password
Check DONT_REQ_PREAUTH attribute on users
- AS-REP Roast users
Check DONT_EXPIRE_PASSWORD attribute on users
Check if there are users with reversible encryption
Check if there are users that use DES encryption
Check if there are domain admins with an old password
Check if the KRBTGT has a old password
Check for EOL operating systems in the AD
Check for EOS Windows 10 versions
Check for inactive computerobjects with no login or pwdlastset older then 365 days
Check for inactive users that didn't login the last 365 days
Check if all privileged users are part of the protected users groups
Check if all privileged users have the flag "This account is sensitive and cannot be delegated"
Check if there are members of the following privileged groups: Account Operators, Backup Operators, Print Operators, DNS Admins, Schema Admins
Check if there are computerobjects part of a high privileged groups
Check who can add computerobjects to the domain
- Check if this is the default authenticated users group
- Check what the ms-ds-machineaccountqouta is, if it is null(good) or not-set(bad) or another value.
Check ADIDNS
- if it contains createchild for the authenticated users group
- If wildcard record exists
Check membership of Pre-Windows 2000 Compatible Access group and if authenticated users is still member of it
Check if printspooler service is running on the DC
Check if LDAP signing is enabled, if LDAPS is configured and LDAPS binding is enabled
Check if default Exchange groups exists within the domain
- Check if there is an Exchange server and if its active
- Check for memberships in the default Exchange groups
Check for passwords in the sysvol
Check for passwords in netlogon (scripts, programs etc)
Retrieve IP adresses of all computer objects and create /24 ranges for further enumeration
- Scan the ranges for well known Windows ports + ssh and web. Create lists for each port
- Checks for SMB on accessible machines
  - Check SMBv1
  - Check signing requirement
  - Check for readable shares
  - Check for writable shares
  - Check if the webservice client is running on accessible machines
- Check Access
  - Check if the current user is local admin through SMB
  - Check if the current user can access over WINRM
  - Check if the current user can access over RDP
  - Check if the current user can access over MSSQL and is sysadmin (WIP)

TO-DO & Features

Create query for EOS Server versions?
Update queries/checks for domain admin/enterprise admins to all privileged groups.
Update queries to filter disabled users from data.
Check for old vulnerable Exchange permissions
Change privileged role function to loop and add more roles
Remove -Ping function for accessible machines and execute a portscan for specific ports using Invoke-Portscan
Check for access to discovered machines over SMB, RDP, MSSQL etc!
Find a way to audit all ACL's (Invoke-ACLScanner doesnt work well from non domain joined perspective, -ResolvGUIDS breaks!)
Add ADCS checks, but need to set this up in a LAB environment first.
Add function to skip dns change
Add dependancy options to each function

Example output Invoke-ADCheckAll

PS C:\Users\user\Desktop> . C:\Tools\domain_audit\domain_audit.ps1
PS C:\Users\user\Desktop> Invoke-ADCheckAll -Domain "amsterdam.bank.local" -User "john" -Password "Welcome2022!" -Server 10.0.0.3

[+] Running as administrator, changing DNS to 10.0.0.3 and adding 10.0.0.3 amsterdam.bank.local to host file
[+] AD Authentication for amsterdam.bank.local\john succeeded!
[+] Output will be written in C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22

---------- DATA EXPLAINED ----------
- All data is written to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\
- In this folder are three subfolders
- files in \findings\ are findings that should be reported
- files in \checks\ needs to be checked
- files in \data\ is raw data

---------- COLORS EXPLAINED ----------
White is informational text
Green means check has passed
Yellow means manually check the data
Dark Red means finding

---------- GATHERING DATA ----------
[+] Gathering data of all Users, Groups, Computerobject, GPO's, OU's, DC's and saving it to csv
[+] Gathering BloodHound data all, session and ACL in seperate PowerShell session in background

---------- BASIC ENUMERATION ----------
[W] Saving a list of all users to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\list_users.txt
[W] Saving a list of all enabled users to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\list_users_enabled.txt
[W] Saving a list of all administrators to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\list_administrators.txt
[W] Saving a list of all groups to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\list_groups.txt
[W] Saving a list of all computerobjects to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\list_computers.txt

---------- DOMAIN INFORMATION ----------
The domain functional level is: Windows 2016
In the domain amsterdam.bank.local there are:
- 27 users and 25 enabled users
- 51 groups
- 4 computers
- 4 OU's
- 2 GPO's
- 3 Administrators
- 1 Domain Controllers

---Checking if amount of admins is more then 5% of all users---
[-] There are 3 administrators, which is 11.11% of all users
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\large_amount_of_administrators.txt

---------- ENUMERATING DOMAIN TRUSTS ----------
[+] The domain amsterdam.bank.local trusts 1 domains which are:
bank.local
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\trusts.txt

[+] The trust for domain bank.local is WITHIN_FOREST, enumerating trusts
[+] The domain bank.local trusts 2 domains which are:
amsterdam.bank.local
secure.local
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\trusts.txt

---Checking if AzureAD connect is in use---
[+] AzureAD connect is not installed

---Checking if Azure SSO is in use---
[+] Azure SSO is not configured

---------- EXECUTING CHECKS ----------
[+] Executing in another window because runas is required
[+] Pleace manually supply the Password Welcome2022!
--- Running SQL checks in new window ---
Enter the password for amsterdam.bank.local\john:
Attempting to start powershell.exe -Exec bypass -NoExit Import-Module C:\Tools\domain_audit\domain_audit.ps1; Set-Variable Findings_Path -Value C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings; Set-Variable Data_Path -Value C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data; Set-Variable Checks_Path -Value C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\checks; Set-Variable OutputDirectoryCreated -Value True; Invoke-ADCheckSQL -Domain amsterdam.bank.local -Server 10.0.0.3 -User john -Password Welcome2022! -SkipPrompt as user "amsterdam.bank.local\john" ...

---Checking password policy---
[+] Passwordpolicy contains ClearTextPassword=0. Domain controller does not save passwords in cleartext
[-] Password length requirement is 7 characters
[-] PasswordComplexity is 0 (Disabled)!
[-] LockOutBadCount is 0, accounts wont be locked!
[-] ResetLockoutCount is not set
[-] LockoutDuration is not set
Writing password policy to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\passwordpolicy.txt

---Checking if there is a GPO with LAPS---
[-] There is no GPO with LAPS in their name

---Checking if LAPS is enabled on any computerobject---
[-] There are no systems where LAPS is enabled
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\laps_notenabled.txt

---Checking description field for passwords---
[-] There are 4 users that have a description, please manually check for passwords!
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\checks\description_users.txt

---Checking groups description field for interesting information---
[-] There are 45 groups that have a description, please manually check for passwords or interesting information!
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\checks\description_groups.txt

---Checking computerobjects description field for interesting information---
[+] There are no computerobjects with a description

---Checking kerberoastable administrators---
[-] There are 1 kerberoastable administrators
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\administrators_serviceprincipalname.txt

---Checking kerberoastable users---
[-] There are 2 kerberoastable users
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_serviceprincipalname.txt
[+] Requested 2 hashes, please crack with hashcat
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_kerberoast_hashes.txt

---Checking if there are users with the DONT_REQ_PREAUTH attribute---
[-] There are 2 users with the attribute DONT_REQ_PREAUTH
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_dontrequirepreath.txt
[+] Requested 2 hashes, please crack with hashcat
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_aspreproast_hashes.txt

---Checking constrained delegation users---
[-] There are 1 users that have constrained delegation enabled
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_constrained_delegation.txt

---Checking unconstrained delegation computerobjects, excluding domain-controllers---
[-] There are 1 users that have unconstrained delegation enabled
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_unconstrained_delegation.txt

---Checking constrained delegation computerobjects---
[+] There are no computerobjects with constrained delegation

---Checking unconstrained delegation computerobjects, excluding domain-controllers---
[-] There are 1 computerobjects that have unconstrained delegation enabled
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\computers_unconstrained_delegation.txt

---Checking resource based constrained delegation computerobjects---
[+] There are no computerobjects with resource based constrained delegation

---Checking if there are users with the PASSWD_NOTREQD attribute---
[-] There are 2 users with the attribute PASSWD_NOTREQD
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_passwdnotreqd.txt

---Checking for users with empty password---
[-] The password for user bank_dev is empty
[-] The password for user steve is empty

---Checking if there are users with the DONT_EXPIRE_PASSWORD attribute---
[-] There are 17 users with the attribute DONT_EXPIRE_PASSWORD
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\users_dontexpirepassword.txt

---Checking if there are users with the reversible encryption---
[+] There are no users with reversible encryption

---Checking if there are users with DES encryption---
[+] There are no users with DES encryption

---Checking if administrator accounts - that aren't disabled - have a password older then 365 days---
[+] There where no enabled administrators with a password older then 365 days

---Checking if KRBTGT account has a password older then 365 days---
[+] The password from the krbtgt is not older then 365 days

---Checking if there are EOL operating systems in the AD---
[+] There are no computerobjects in the AD that are EOL

---Checking if there are end of service Windows 10 operating systems in the AD---
[+] There are no Windows 10 computerobjects computerobjects in the AD that are End Of Service

---Checking if there are computerobjects that have no login or login/pwdlastset older then 365 days---
[+] There are no computerobjects in the AD that are inactive

---Checking if there are users that didn't login for 365 days---
[+] There are no users in the AD that are inactive (didn't login or changed their password in the last 365 days)

---Checking if members of privileged groups are part of the protected users group---
[-] There are 3 privileged users not part of the protected users group
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\administrators_notin_protectedusersgroup.txt

---Checking if members of privileged groups have the flag 'this account is sensitive and cannot be delegated'---
[-] There are 3 privileged users without the flag 'this account is sensitive and cannot be delegated' that aren't in the Protected Users group
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\administrators_delegation_flag.txt

---Checking if there are members in high privileged groups---
[+] There are no users in the Account Operators group
[+] There are no users in the Backup Operators group
[+] There are no users in the Print Operators group
[+] There are no users in the DNS Admins group
[+] There are no users in the Schema Admins group

---Checking if there are computerobjects part ofhigh privileged groups---
[+] There are no computerobjects part of a high privileged groups

---Checking who can add computerobjects to the domain---
[-] The authenticated users group(S-1-5-11) can add 10 computerobjects to the domain
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\authenticated_users_can_join_domain.txt
[W] Writing amount of computerobjects that can be joined to the domain by the object to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\checks\can_join_domain_amount.txt

---Checking if there are passwords in the SYSVOL share---
This might take a while
[+] Checking SYSVOL of DC02
[-] There might be 1 passwords in the SYSVOL of DC02. Please manually check
Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\checks\sysvol_passwords.txt

---Checking if there are passwords in the NETLOGON share---
This might take a while
[+] Checking NETLOGON of DC02
[-] There might be 1 passwords(string pass) in the NETLOGON of DC02. Please manually check
Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\checks\netlogon_passwords.txt

---Checking printspooler service on each DC---
[-] Printspooler enabled on DC02
Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\printspooler_domaincontrollers.txt

---Running LdapRelayScan---
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\domaincontrollers_ldaprelayscan.txt

---Checking for LDAP signing---
[+] One or more domain controller(s) does not require LDAP signing
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\domaincontrollers_no_ldap_signing.txt

---Checking for LDAPS binding---
[+] One or more domain controller(s) does not require LDAPS binding
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\domaincontrollers_no_ldaps_binding.txt

---Checking if exchange is used within the domain---
[+] No Exchange groups exist

---Checking which machines are reachable from current machine through ping---
[+] There are 3 computers which are reachable
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\computers_accessible.txt

---Running crackmapexec against each reachable host enumerating SMB data and shares---
[+] Crackmapexec will hang and needs a enter to continue
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\crackmapexec_reachablecomputers.txt

---Checking for hosts which have SMBV1 enabled---
[+] There are no reachable computers which have SMBV1 enabled (SMBv1:True)

---Checking for hosts without signing---
[+] There are 2 reachable computers which does not require signing (Signing:False)
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\computers_nosigning.txt

---Checking for shares with READ access---
[+] There are 4 shares the current user can READ
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\shares_read_access.txt

---Checking for shares with WRITE access---
[+] There are 1 shares the current user can WRITE to
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\shares_write_access.txt

---Running crackmapexec against each reachable host enumerating webclient service---
[+] Crackmapexec will hang and needs a enter to continue
[W] Writing all data to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\data\crackmapexec_webdav.txt

[+] There are 1 systems with the webclient service running
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\computers_webdav.txt

---------- EXECUTING SQL CHECKS ----------
---Checking MSSQL instances---
[+] Found 1 MSSQL instances
[+] Checking connection to each MSSQL instance
[-] The current user can access 1 MSSQL instances
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\SQLserver_user_has_access.txt

---Checking if the user is sysadmin on the accessible instances---
[+] The current user is not sysdmin to any SQL instances

---Checking database links for sysadmin security context---
[-] There are 1 links which run under the security context of a sysadmin user
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\SQLserver_sysadmin_on_links.txt

---Running Invoke-SQLAudit on the accessible instances---
This might take a while
VERBOSE: WEB01.amsterdam.bank.local : No named instance found.
VERBOSE: WEB01.amsterdam.bank.local : Connection Success.
VERBOSE: WEB01.amsterdam.bank.local : Checking for autoexec stored procedures...
[-] Invoke-SQLAudit found 7 issues
[W] Writing to C:\Users\user\Desktop\amsterdam.bank.local-2022-08-22\findings\SQLserver_sqlaudit.txt

Slluxx/ImPS

2023-09-11T01:38:43Z

ImPS is a wrapper module to create GUIs with PowerShell like you do with ImGui

ImPS

ImPS is a simple one-file module wrapper to use WPF components in your script without writing massive amounts of UI code or using XML layouts. It is heavily inspired by ImGUI/DearPyGui to make it as easy as possible to use while keeping the configurability.

Please have in mind that this is in active development and, while usable, should not be used in any kind of production environment.

Documentation

Click me

Comparison

Here is the code you would need to write this basic window + label:

Add-Type -AssemblyName System.Windows.Forms

$Window = New-Object System.Windows.Forms.Form
$Window.ClientSize = "285,75"
$Window.Text = "ImPS Window"
$Window.BackColor = "#ffffff"
$Window.StartPosition = [System.Windows.Forms.FormStartPosition]::CenterScreen

$Label = New-Object System.Windows.Forms.label
$Label.Text = "This is almost like ImGUI"
$Label.AutoSize=$true
$Label.Font="Verdana,8,style=Regular"
$Label.Location=New-Object System.Drawing.Point(20,20)

$Window.Controls.Add($Label)

$Window.ShowDialog()
$Window.Dispose()

Here is ImPS's code for the exact same:

using module ".\ImPS.psm1"

$ImPS = [ImPS]::new()
$window = $ImPS.add_window("ImPS Window", 285, 75)
$window.Elements.add_Label("This is almost like ImGUI", 20,20)
$window.show()

Usable Elements

Label
Button
Checkbox
ListBox (And its ListItem)
TextBox
ProgressBar
ComboBox
TableLayoutPanel

More elements will get added.

Advanced usage

ImPS is written for you to easily chain methods if desired:

$window.Elements.add_Label("My bold label", 20, 20).set_font("Verdana,8,style=Bold")
# or
$label = $window.Elements.add_Label("My italic label", 20, 40)
$label.set_font("Verdana,8,style=Italic")

Button onClick-handler work inline or as defined function:

$btn = $window.Elements.add_Button("Click me", 20, 20).onClick({
    write-host "Got clicked"
})
# or
$myfunc = { write-host "Got clicked" }
$btn = $window.Elements.add_Button("Click me", 20, 20).onClick($myfunc)

[ImPS_Window].Drawable exposes a System.Windows.Forms.Form Object, so you can combine ImPS with the normal method of creating UIs (for example if a UI element does not exist yet):

$window = [ImPS]::new("ImPS Window", 285, 200)
$objLabel = New-Object System.Windows.Forms.label
$objLabel.Location = New-Object System.Drawing.Size(7,10)
$objLabel.Size = New-Object System.Drawing.Size(130,15)
$objLabel.Text = "Enter Computer Name"
$window.Drawable.Controls.Add($objLabel)

Every UI Element by ImPS exposes its "native" Object at [Object].Drawable, which means you can change attributes even if there is no getter/setter by ImPS:

$texbox = $window.Elements.add_TextBox("password", 100, 20)
$texbox.Drawable.PasswordChar = '*'

Note: This is discouraged and should not be done. I plan on supporting the most used attribute getter/setter.

archlinux/archinstall

2023-09-11T01:39:14Z

🐫 CAMEL: Communicative Agents for “Mind” Exploration of Large Scale Language Model Society

CAMEL: Communicative Agents for “Mind” Exploration of Large Scale Language Model Society

Overview

The rapid advancement of conversational and chat-based language models has led to remarkable progress in complex task-solving. However, their success heavily relies on human input to guide the conversation, which can be challenging and time-consuming. This paper explores the potential of building scalable techniques to facilitate autonomous cooperation among communicative agents and provide insight into their "cognitive" processes. To address the challenges of achieving autonomous cooperation, we propose a novel communicative agent framework named role-playing. Our approach involves using inception prompting to guide chat agents toward task completion while maintaining consistency with human intentions. We showcase how role-playing can be used to generate conversational data for studying the behaviors and capabilities of chat agents, providing a valuable resource for investigating conversational language models. Our contributions include introducing a novel communicative agent framework, offering a scalable approach for studying the cooperative behaviors and capabilities of multi-agent systems, and open-sourcing our library to support research on communicative agents and beyond. The GitHub repository of this project is made publicly available on: https://github.com/camel-ai/camel.

Community

🐫 CAMEL is an open-source library designed for the study of autonomous and communicative agents. We believe that studying these agents on a large scale offers valuable insights into their behaviors, capabilities, and potential risks. To facilitate research in this field, we implement and support various types of agents, tasks, prompts, models, and simulated environments.

Join us (Slack, Discord or WeChat) in pushing the boundaries of building AI Societiy.

Try it yourself

We provide a demo showcasing a conversation between two ChatGPT agents playing roles as a python programmer and a stock trader collaborating on developing a trading bot for stock market.

Documentation

CAMEL package documentation pages

Installation

Install CAMEL from source with poetry (Recommended):

# Clone github repo
# For the latest code:
git clone https://github.com/camel-ai/camel.git
# Or for the stable code:
git clone -b v0.1.0 https://github.com/camel-ai/camel.git

# Change directory into project directory
cd camel

# Activate camel virtual environment
poetry shell

# Install camel from source
# It takes about 90 seconds to resolve dependencies
poetry install

# Or if you want to use "huggingface agent"
poetry install -E huggingface-agent # (Optional)

# do something with camel

# Exit the virtual environment
exit

Install CAMEL from source with conda and pip:

# Create a conda virtual environment
conda create --name camel python=3.10

# Activate camel conda environment
conda activate camel

# Clone github repo
git clone -b v0.1.0 https://github.com/camel-ai/camel.git

# Change directory into project directory
cd camel

# Install camel from source
pip install -e .

# Or if you want to use "huggingface agent"
pip install -e .[huggingface-agent] # (Optional)

Example

You can find a list of tasks for different set of assistant and user role pairs here

Run the role_playing.py script

First, you need to add your OpenAI API key to system environment variables. The method to do this depends on your operating system and the shell you're using.

For Bash shell (Linux, macOS, Git Bash on Windows):

# Export your OpenAI API key
export OPENAI_API_KEY=<insert your OpenAI API key>

For Windows Command Prompt:

REM export your OpenAI API key
set OPENAI_API_KEY=<insert your OpenAI API key>

For Windows PowerShell:

# Export your OpenAI API key
$env:OPENAI_API_KEY="<insert your OpenAI API key>"

Replace <insert your OpenAI API key> with your actual OpenAI API key in each case. Make sure there are no spaces around the = sign.

After setting the OpenAI API key, you can run the script:

# You can change the role pair and initial prompt in role_playing.py
python examples/ai_society/role_playing.py

Please note that the environment variable is session-specific. If you open a new terminal window or tab, you will need to set the API key again in that new session.

Use Open-Source Models as Backends

The basic workflow of using an open-sourced model as the backend is based on an external server running LLM inference service, e.g. during the development we chose FastChat to run the service.

We do not fix the choice of server to decouple the implementation of any specific LLM inference server with CAMEL (indicating the server needs to be deployed by the user himself). But the server to be deployed must satisfy that it supports OpenAI-compatible APIs, especially the method openai.ChatCompletion.create.

Here are some instructions for enabling open-source backends, where we use the FastChat and a LLaMA2-based model (meta-llama/Llama-2-7b-chat-hf) in the example. Please install FastChat in advance following their installation guidance.

Before running CAMEL, we should firstly launch FastChat server following the guidance on https://github.com/lm-sys/FastChat/blob/main/docs/openai_api.md. The instructions summarized below should be kept running in separate processes:

# Launch the controller
python -m fastchat.serve.controller

# Launch the model worker(s)
python3 -m fastchat.serve.model_worker --model-path meta-llama/Llama-2-7b-chat-hf

# Launch the RESTful API server
python3 -m fastchat.serve.openai_api_server --host localhost --port 8000

After observing the controller successfully receiving the heart beat signal from the worker, the server should be ready for use at http://localhost:8000/v1.
Then we can try on running role_playing_with_open_source_model.py, where each agent in this example is initialized with specifying the model_path and server_url, similar to the example code below:

system_message = # ...

agent_kwargs = dict(
    model=model_type,
    model_config=OpenSourceConfig(
        model_path="meta-llama/Llama-2-7b-chat-hf",
        server_url="http://localhost:8000/v1",
    ),
)

agent = ChatAgent(
    system_message,
    **agent_kwargs,
)

Supported Models

LLaMA2-based models
- example: meta-llama/Llama-2-7b-chat-hf
Vicuna-based models
- example: lmsys/vicuna-7b-v1.5

Data (Hosted on Hugging Face)

Dataset	Chat format	Instruction format	Chat format (translated)
AI Society	Chat format	Instruction format	Chat format (translated)
Code	Chat format	Instruction format	x
Math	Chat format	x	x
Physics	Chat format	x	x
Chemistry	Chat format	x	x
Biology	Chat format	x	x

Visualizations of Instructions and Tasks

Dataset	Instructions	Tasks
AI Society	Instructions	Tasks
Code	Instructions	Tasks
Misalignment	Instructions	Tasks

News

Released AI Society and Code dataset (April 2, 2023)
Initial release of CAMEL python library (March 21, 2023)

Citation

@misc{li2023camel,
    title={CAMEL: Communicative Agents for "Mind" Exploration of Large Scale Language Model Society},
    author={Guohao Li and Hasan Abed Al Kader Hammoud and Hani Itani and Dmitrii Khizbullin and Bernard Ghanem},
    year={2023},
    eprint={2303.17760},
    archivePrefix={arXiv},
    primaryClass={cs.AI}
}

Acknowledgement

Special thanks to Nomic AI for giving us extended access to their data set exploration tool (Atlas).

We would also like to thank Haya Hammoud for designing the logo of our project.

License

The intended purpose and licensing of CAMEL is solely for research use.

The source code is licensed under Apache 2.0.

The datasets are licensed under CC BY NC 4.0, which permits only non-commercial usage. It is advised that any models trained using the dataset should not be utilized for anything other than research purposes.

Contributing to CAMEL 🐫

We appreciate your interest in contributing to our open-source initiative. We provide a document of contributing guidelines which outlines the steps for contributing to CAMEL. Please refer to this guide to ensure smooth collaboration and successful contributions. 🤝🚀

Contact

For more information please contact camel.ai.team@gmail.com.

persimmon-ai-labs/adept-inference

2023-09-11T01:39:14Z

Inference code for Persimmon-8B

Persimmon-8B User Guide

This repo contains inference code for Persimmon-8B, the new LLM from Adept.

Downloading the Checkpoint

The model checkpoints are stored on our public OCI bucket and can be downloaded using wget. The base model is not fine-tuned and is released under an Apache 2.0 license. The chat model is fine-tuned and is released under a CC-BY-NC 4.0 license.

Base:
https://axtkn4xl5cip.objectstorage.us-phoenix-1.oci.customer-oci.com/n/axtkn4xl5cip/b/adept-public-data/o/8b_base_model_release.tar
md5sum: cd0320cba9efad9ccd18e9ec4d16ae1b

Chat:
https://axtkn4xl5cip.objectstorage.us-phoenix-1.oci.customer-oci.com/n/axtkn4xl5cip/b/adept-public-data/o/8b_chat_model_release.tar
md5sum: 663aeace07269c44e90f4e8bcd07f32a

Untar the model into its own directory via tar -xvf 8b_base_model_release.tar or tar -xvf 8b_chat_model_release.tar

The scripts are set up to expect the model folder to be placed within the code directory, but you can place it elsewhere and modify the scripts accordingly.

Building Docker

Build the docker that will include all the necessary dependencies (and then some!) using the included Dockerfile:

docker build -f docker/Dockerfile -t 'adeptdocker' .

Running Docker

Ensure that the variable MODEL_DIR in run_text_generation_server.sh is set to the location of the model directory. By default it is set to MODEL_DIR=8b_chat_model_release, which is the default name for the chat model. (For the base model, change this line to MODEL_DIR=8b_base_model_release.)

Running sh docker_launch.sh will start a model server that you can query via:

curl '<address of server>/api' -X 'PUT' -H 'Content-Type: application/json; charset=UTF-8' -d '{"prompts": ["human: Hello, how are you?\n\nadept:"], "tokens_to_generate": 128, "top_p": 0.9, "random_seed": 1234, "logprobs": false}'

Notes

The chat model is fine-tuned to expect inputs of the form: human: {prompt}\n\nadept:[^1]. To ensure best performance from this model, please use this format! You can see an example of this in the curl command above. To automatically wrap single-turn input prompts with this structure, you can modify the definition of megatron/text_generation/api.py::generate_and_post_process so that the default value for the argument process_prompts_for_chat is set to True.
We are releasing the model with tensor parallelism of 1. In this configuration, the model requires an 80GB GPU to run naively. It should be possible to fit the model on a 40GB card by removing the unused embeddings and reducing the maximum sequence length (at the top of run_text_generation_server.py).
Quantization to 8-bit or lower would make also it fit with plenty of room to spare.
We included the .vocab file so you can browse the vocabulary in plain text - this file is otherwise unused.

Citation

If you use this model in your work, please use the following BibTeX citation:

@misc{persimmon-8b,
  author = {Elsen, Erich and Odena, Augustus and Nye, Maxwell and Ta\c{s}\i{}rlar, Sa\u{g}nak and Dao, Tri and Hawthorne, Curtis and Moparthi, Deepak and Somani, Arushi},
  title = {Releasing {Persimmon-8B}},
  url = {https://www.adept.ai/blog/persimmon-8b},
  year = {2023}
}

[^1]: Subsequent inputs should have the form human: {prompt}\n\nadept: {output}\n\nhuman: {follow_up}\n\nadept:

liwenxi/SWIFT-AI

2023-09-11T01:39:14Z

Run TUIs and terminals in your browser

textual-web

Textual Web publishes Textual apps and terminals on the web.

Currently in a beta phase — help us test!

Getting Started

Textual Web is a Python application, but you don't need to be a Python developer to run it.

The easiest way to install Textual Web is via pipx. Once you have pipx installed, run the following command:

pipx install textual-web

You will now have the textual-web command on your path.

Run a test

To see what Textual Web does, run the following at the command line:

textual-web

You should see something like the following:

Click the blue links to launch the example Textual apps (you may need to hold cmd or ctrl on some terminals). Or copy the link to your browser if your terminal doesn't support links.

You should see something like this in your browser:

These Textual apps are running on your machine, but have public URLs. You could send the URLs to anyone with internet access, and they would see the same thing.

Hit ctrl+C in the terminal to stop serving the welcome application.

Serving a terminal

Textual Web can also serve your terminal. For quick access add the -t switch:

textual-web -t

This will generate another URL, which will present you with your terminal in your browser:

When you serve a terminal in this way it will generate a random public URL.

[!WARNING] Don't share this with anyone you wouldn't trust to have access to your machine.

Configuration

Textual Web can serve multiple Textual apps and terminals (as many as you like).

To demonstrate this, install Textual and clone the repository. Navigate to the textual/examples directory and add the following TOML file:

[app.Calculator]
command = "python calculator.py"

[app.Dictionary]
command = "python dictionary.py"

The name is unimportant, but let's say you called it "serve.toml". Use the --config switch to load the new configuration:

textual-web --config serve.toml

You should now get 3 links, one for each of the sections in the configuration:

Click any of the links to serve the respective app:

Slugs

Textual Web will derive the slug (text in the URL) from the name of the app. You can also set it explicitly with the slug parameter.

[app.Calculator]
command = "python calculator.py"
slug = "calc"

Terminal configuration

[!NOTE] Terminals currently work on macOS and Linux only. Windows support is planned for a future update.

You can also add terminals to the configuration file, in a similar way.

[terminal.Terminal]

This will launch a terminal with your current shell. You can also add a command value to run a command other than your shell. For instance, let's say we want to serve the htop command. We could add the following to the configuration:

[terminal.HTOP]
command = "htop"

Accounts

In previous examples, the URLs all contained a random string of digits which will change from run to run. If you want to create a permanent URL you will need to create an account.

To create an account, run the following command:

textual-web --signup

This will bring up a dialog in your terminal that looks something like this:

If you fill in that dialog, it will create an account for you and generate a file called "ganglion.toml". At the top of that file you will see a section like the following:

[account]
api_key = "JSKK234LLNWEDSSD"

You can add that to your configuration file, or edit "ganglion.toml" with your apps / terminals. Run it as you did previously:

textual-web --config ganglion.toml

Now the URLs generated by textual-web will contain your account slug in the first part of the path. The account slug won't change, so you will get the same URLs from one run to the next.

Debugging

For a little more visibility on what is going on "under the hood", set the DEBUG environment variable:

DEBUG=1 textual-web --config ganglion.toml

Note this may generate a lot of output, and it may even slow your apps down.

Known problems

You may encounter a glitch with apps that have a lot of colors. This is a bug in an upstream library, which we are expecting a fix for soon.

The experience on mobile may vary. On iPhone Textual apps are quite usable, but other systems may have a few issues. We should be able to improve the mobile exprience in future updates.

What's next?

The goal of this project is to turn Textual apps into fully featured web applications.

Currently serving Textual apps and terminals appears very similar. In fact, if you serve a terminal and then launch a Textual app, it will work just fine in the browser. Under the hood, however, Textual apps are served using a custom protocol. This protocol will be used to expose web application features to the Textual app.

For example, a Textual app might generate a file (say a CSV with a server report). If you run that in the terminal, the file would be saved in your working directory. But in a Textual app it would be served and saved in your Downloads folder, like a regular web app.

In the future, other web APIs can be exposed to Textual apps in a similar way.

Also planned for the near future is sessions. Currently, if you close the browser tab it will also close the Textual app. In the future you will be able to close a tab and later resume where you left off. This will also allow us to upgrade servers without kicking anyone off.

Help us test

Currently testing is being coordinated via our Discord server. Join us if you would like to participate.

duckdb/duckdb-r

2023-09-11T01:39:46Z

Instructional materials (course files) for the BBT4206 course (Business Intelligence II) using R. Topic: Loading Datasets.

BBT4206-R

These are course files (instructional materials) for the BBT4206: Business Intelligence II course using R.

Attribute	Value
Course Code	BBT4206
Course Name	Business Intelligence II
Semester Duration	21^st August 2023 to 28^th November 2023
Lecturer	Allan Omondi
Contact	aomondi [at] strathmore.edu

It is based on the following 9 steps of Knowledge Discovery in Databases (KDD):

Step 1: Problem Definition and Goal Setting

This involves an understanding of the problem, the requirements of the end-user for the solution to the problem, and the environment in which the KDD process will occur.

BI Project: Section 1, 3, and 14

Step 2: Data Selection

This involves discovering what data is accessible, selecting the significant data that is accessible, and then integrating all this data into one set (a dataset). It is extremely important to ensure that the data is collected ethically (informed consent), and that the data is not biased (the sample should represent the population). The entire KDD process may be unsuccessful if there are significant attributes/features missing in the dataset. This can be performed by the data engineer.

Concept: Data Engineering

Step 3: Data Cleansing and Pre-Processing

This involves describing data to better understand it. Through this understanding, outliers and noise can be removed, and missing data can be estimated (data imputation can be performed). For example, this stage can involve the correction of invalid postal codes, or the elimination of records with incorrect phone prefixes, or the removal of currency symbols, e.g., '$', ¥, '€', etc. This can be performed by the data engineer.

Lab1-LoadingDatasets.R
Lab2-ExploratoryDataAnalysis.R
Lab3-DataImputation.R

Step 4: Data Transformation

This involves finding useful features that represent the data according to the goal of addressing the problem defined. In doing so, the structure of the data and the prediction problem is exposed to data mining algorithms. Finding useful attributes/features can also be done through dimensionality reduction (identifying the most significant and uncorrelated attributes). This can be performed by a data analyst.

Lab4-ExposingtheStructureofDatausingDataTransforms.R

Step 5: Selection of the Data Mining Task

This involves deciding whether to use data mining to either predict classifications, regressions, associations, or clusters. The decision is based on the goal of the KDD process. Step 5-7 can be performed by a Machine Learning engineer and/or a data analyst.

BI Project Section 3

Step 6: Selection of the Data Mining Algorithm

Evaluate several standard algorithms on the data and shortlist the top performing algorithms to investigate further

Lab5-ControllingComputationalNuancesofAlgorithms.R
Lab6-EvaluationMetrics.R
Lab7-ModelSelection.R
Lab8-ModelPerformanceComparison.R

Step 7: Utilization of the Data Mining Algorithm

The chosen algorithm is then used to train the model. Knowledge is represented in the form of patterns and rules in a model. Algorithm tuning and ensemble methods are used at this point to get the most out of well performing algorithms.

Lab9-AlgorithmParameterTuning.R
Lab10-EnsembleMethods.R
Lab11-FinalizingtheModel.R

Step 8: Interpretation and Evaluation

The knowledge represented in the form of patterns and rules is then validated by domain experts based on the problem defined in Step 1 and the goal of the KDD process. The domain expert, in this case, DOES NOT refer to the IT practitioner who trained the model. The domain experts can include medical doctors, psychologists, economists, meteorologists, political scientists, pharmacists, etc. depending on the area under study. If the knowledge discovered is not valid, then the KDD process is repeated from Step 2 by reconsidering the attributes/features.

Step 9: Consolidation

This involves operationalizing the knowledge discovered by integrating it into an Information System (e.g., a data visualization dashboard). This step is exposed to the challenge of losing the "laboratory environment" in which the model was trained. This laboratory environment handled pre-processed, static data whereas the actual environment is based on dynamic data that can contain outliers and noise. Despite this significant challenge, the accomplishment of this step determines the effectiveness of the entire KDD process.

BI Project Section 15 and Section 16
Lab12-Plumber-API.R
Lab13-Run-Plumber-API.R
Lab14-Consume-Plumber-API-Output.R
Lab15-Consume-Plumber-API-Output.php

cedev935/shiny-python

2023-09-11T01:39:46Z

shiny

Easily build rich and productive interactive web apps in R — no HTML/CSS/JavaScript required.

Features

An intuitive and extensible reactive programming model which makes it easy to transform existing R code into a "live app" where outputs automatically react to new user input.
- Compared to event-based programming, reactivity allows Shiny to do the minimum amount of work when input(s) change, and allows humans to more easily reason about complex MVC logic.
A prebuilt set of highly sophisticated, customizable, and easy-to-use widgets (e.g., plots, tables, sliders, dropdowns, date pickers, and more).
An attractive default look based on Bootstrap which can also be easily customized with the bslib package or avoided entirely with more direct R bindings to HTML/CSS/JavaScript.
Seamless integration with R Markdown, making it easy to embed numerous applications natively within a larger dynamic document.
Tools for improving and monitoring performance, including native support for async programming, caching, load testing, and more.
Modules: a framework for reducing code duplication and complexity.
An ability to bookmark application state and/or generate code to reproduce output(s).
A rich ecosystem of extension packages for more custom widgets, input validation, unit testing, and more.

Installation

To install the stable version from CRAN:

install.packages("shiny")

Getting Started

Once installed, load the library and run an example:

library(shiny)
# Launches an app, with the app's source code included
runExample("06_tabsets")
# Lists more prepackaged examples
runExample()

For more examples and inspiration, check out the Shiny User Gallery.

For help with learning fundamental Shiny programming concepts, check out the Mastering Shiny book and the Shiny Tutorial. The former is currently more up-to-date with modern Shiny features, whereas the latter takes a deeper, more visual, dive into fundamental concepts.

Join the conversation

If you want to chat about Shiny, meet other developers, or help us decide what to work on next, join us on Discord.

Getting Help

To ask a question about Shiny, please use the RStudio Community website.

For bug reports, please use the issue tracker and also keep in mind that by writing a good bug report, you're more likely to get help with your problem.

Contributing

We welcome contributions to the shiny package. Please see our CONTRIBUTING.md file for detailed guidelines of how to contribute.

License

The shiny package as a whole is licensed under the GPLv3. See the LICENSE file for more details.

R version support

Shiny is supported on the latest release version of R, as well as the previous four minor release versions of R. For example, if the latest release R version is 4.1, then that version is supported, as well as 4.0, 3.6, 3.5, and 3.4.

leonn415/CAIN

2023-09-12T01:35:38Z

python/peps

2023-09-11T01:40:09Z

Python Enhancement Proposals

rails/execjs

2023-09-11T01:40:30Z

Ruby ♥︎ JavaScript

Opal

Opal is a Ruby to JavaScript source-to-source compiler.
It also has an implementation of the Ruby corelib and stdlib.

Community:

Code:

Sponsors:

Usage

See the website for more detailed instructions and guides for Rails, jQuery, Sinatra, rack, CDN, etc. https://opalrb.com.

Compiling Ruby code with the CLI (Command Line Interface)

Contents of app.rb:

puts 'Hello world!'

Then from the terminal

$ opal --compile app.rb > app.js # The Opal runtime is included by default
                                 # but can be skipped with the --no-opal flag

The resulting JavaScript file can be used normally from an HTML page:

<script src="app.js"></script>

Be sure to set the page encoding to UTF-8 inside your <head> tag as follows:

<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <script src="app.js"></script>
    …
  </head>
  <body>
    …
  </body>
</html>

Just open this page in a browser and check the JavaScript console.

Compiling Ruby code from Ruby

Opal.compile is a simple interface to just compile a string of Ruby into a string of JavaScript code.

Opal.compile("puts 'wow'")  # => "(function() { ... self.$puts("wow"); ... })()"

Running this by itself is not enough; you need the opal runtime/corelib.

Using Opal::Builder

Opal::Builder can be used to build the runtime/corelib into a string.

Opal::Builder.build('opal') #=> "(function() { ... })()"

or to build an entire app including dependencies declared with require:

builder = Opal::Builder.new
builder.build_str('require "opal"; puts "wow"', '(inline)')
File.binwrite 'app.js', builder.to_s # must use binary mode for writing

Compiling Ruby code from HTML (or using it as you would with inline JavaScript)

opal-parser allows you to eval Ruby code directly from your HTML (and from Opal) files without needing any other building process.

So you can create a file like the one below, and start writing ruby for your web applications.

<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <script src="https://cdn.opalrb.com/opal/current/opal.js"></script>
    <script src="https://cdn.opalrb.com/opal/current/opal-parser.js" onload="Opal.load('opal-parser')"></script>

    <script type="text/ruby">
      puts "hi"
    </script>

  </head>
  <body>
  </body>
</html>

Just open this page and check the JavaScript console.

NOTE: Although this is possible, this is not really recommended for production and should only be used as a quick way to get your hands on opal.

Running tests

Setup the project:

$ bin/setup

The test suite can be run using:

$ bundle exec rake

This will command will run all RSpec and MSpec examples in sequence.

Automated runs

A Guardfile with decent mappings between specs and lib/corelib/stdlib files is in place. Run bundle exec guard -i to start guard.

MSpec

MSpec tests can be run with:

$ rake mspec

Alternatively, you can just load up a rack instance using rackup, and visit http://localhost:9292/ in any web browser.

RSpec

RSpec tests can be run with:

$ rake rspec

Code Overview

What code is supposed to run where?

lib/ code runs inside your Ruby env. It compiles Ruby to JavaScript.
opal/ is the runtime+corelib for our implementation (runs in browser).
stdlib/ is our implementation of Ruby's stdlib. It is optional (runs in browser).

lib/

The lib directory holds the Opal parser/compiler used to compile Ruby into JavaScript. It is also built ready for the browser into opal-parser.js to allow compilation in any JavaScript environment.

opal/

This directory holds the Opal runtime and corelib implemented in Ruby and JavaScript.

stdlib/

Holds the stdlib currently supported by Opal. This includes Observable, StringScanner, Date, etc.

Browser support

Internet Explorer 11
Firefox (Current - 1) or Current
Chrome (Current - 1) or Current
Safari (Current - 1) or Current
Opera (Current - 1) or Current

Any problems encountered using the browsers listed above should be reported as bugs.

(Current - 1) or Current denotes that we support the current stable version of the browser and the version that preceded it. For example, if the current version of a browser is 24.x, we support the 24.x and 23.x versions.

12.1x or (Current - 1) or Current denotes that we support Opera 12.1x as well as the last 2 versions of Opera. For example, if the current Opera version is 20.x, then we support Opera 12.1x, 19.x and 20.x but not Opera 15.x through 18.x.

Contributors

This project exists thanks to all the people who contribute.

Versioning

Opal will broadly follow semver as a version policy, trying to bump the major version when introducing breaking changes. Being a language implementation we're also aware that there's a fine line between what can be considered breaking and what is expected to be "safe" or just "additive". Moving forward we'll attempt to better clarify what interfaces are meant to be public and what should be considered private.

Backers

Thank you to all our backers! 🙏 [Become a backer]

(The MIT License)

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

jlecour/munin_resque

2023-09-11T01:40:30Z

A few munin plugins for Resque, written in Ruby

Install

You can install those plugins wherever you want.

On my Debian systems, Munin plugins are stored in /usr/share/munin/plugins. I've installed those in my home directory and it works well.

Plugins

At the top of the plugins, the load path is altered to search for helper files in the same directory as the plugin, and in the standard plugin directory (if the MUNIN_LIBDIR environment variable is set).

resque_queues

A graph with a line for the total number of pending jobs, and a line for each queue.

resque_workers

A graph with the total number of workers and the number of active (busy) workers.

There are 2 levels :

warning = 1.5 x workers
critical = 3 x workers

For the moment, those thresholds are not configurable in plugin settings.

Helper files

plugin.rb

This file has the same purpose as plugin.sh but for Ruby scripts.

resque.rb

It provides a simple stats method, that returns a nested hash from Resque::Server web app.

oven-sh/homebrew-bun

2023-09-11T01:40:30Z

Familiarizarse con los comandos básicos de git y con la consola de rails

LAB1

Objetivos

Familiarizarse con los comandos básicos de git y con la consola de rails.

Notas

Los comandos deben ejecutarse en la consola del sistema.
Para salir de la consola de Rails se debe ejecutar quit.
La base de datos tiene monstruos y tweets.

Pasos previos

Crear cuentas

Crear una cuenta en github si no tienen una https://github.com/signup
Crear una cuenta en Gitpod. Al validar el teléfono usar +54 9 ...
Actualizar la integración de Github en Gitpod https://gitpod.io/integrations para incluir los permisos: public_repo, repo

Preparar repositorio

Forkear el repositorio del laboratorio (por ejemplo: https://github.com/I110IS/lab1/fork)
Abrir el repositorio forkeado del laboratorio en Gitpod (por ejemplo: https://gitpod.io/github.com/ruso420/lab1)
Esperar que termine la configuración del entorno

Las últimas lineas de la configuración del entorno se verán así:

Bundle complete! 14 Gemfile dependencies, 64 gems now installed.
Use `bundle info [gemname]` to see where a bundled gem is installed.

== Preparing database ==
Created database 'lab1_development'
Done.

== Removing old logs and tempfiles ==

== Restarting application server ==

Parte 1 - Git

Recomendación: Ver el estado de git después de cada paso.

Crear una nueva rama llamada "agregar-hirb"
Agregar una nueva línea con gem "hirb" al final del archivo Gemfile
Instalar la nueva gema
Agregar todos los archivos modificados para ser considerados en el siguiente commit
Crear el commit y asignarle un mensaje coherente con los cambios agregados
Pushear los cambios de la rama local a una rama en el repositorio remoto
Mergear en master/main, los cambios de la nueva rama
Pushear los cambios de la rama master/main al repositorio remoto
Verificar que la historia de la rama principal contiene el commit realizado previamente

Parte 2 - La consola de rails

Abrir la consola de Rails
Habilitar la gema Hirb con Hirb.enable
Obtener el monstruo con ID 1
Crear 3 monstruos
Obtener el último monstruo sin usar el ID
Obtener los monstruos ordenados por nombre
Actualizar al monstruo llamado Nahuelito para que se llame Voldemort
Eliminar el monstruo con ID 2
Obtener los últimos 5 tweets de Drácula ordenados por fecha de creación en orden descendente

raminfp/fuzzer-development-with-rust

2023-09-12T01:36:11Z

Write fuzzer with rust

Fuzzer Development With Rust (Basic)

Each researcher needs to be able to develop their own fuzzing tools. For this reason, I have started teaching how to develop fuzzing tools from scratch in this project so that researchers can use their own fuzzer to discover security vulnerabilities of open source tools, libraries and code that companies develop internally.

In this training, we have explained all the concepts along with examples in the rust programming language so that the desired concepts can be understood correctly.

Chapter 1. Corpus

Chapter 2. Mutation

Chapter 3. Monitor

Chapter 4. Coverage

Chapter 5. Executor

TODO - Modern Fuzzer Development With Rust (Advanced)

Happy Birthday to me (1993-09-09)

pwnwriter/kanha

2023-09-12T01:36:11Z

🦚 A web-app pentesting suite written in rust .

`Kanha` - A web-app pentesting suite written in rust 🦀

`Installation` ⦾ `Subcommands` ⦾ `Contribute`

Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and many more.

The project is inspird by mini.nvim, basically helping you to be productive with less numbers of tools(plugins) installed on your system and be unobtrusive and function as a standalone single binary out of the box.

Built from the ground up with performance, ease of use, and portability in mind in your favourite programming lang rust 💝

🧠 Philosophy

KISS - Keep things simple and stupid.
Ease - Write code that can be used elsewhere as well.
Efficiency - Optimize for performance without sacrificing readability.

🐱 Installation

🪄 Binary

You can directly download the binary of your arch and run it.

🌼 Source

git clone --depth=1 https://github.com/pwnwriter/kanha --branch=main
cd kanha
cargo build --release

Then go to release dir and ./kanha or move the binary to your any $PATH for instant access from anywhere.

🎠 Cargo

Using crates.io
```
cargo install kanha
```
Using binstall
```
cargo binstall kanha
```
Note ⚠️ This requires a working setup of rust/cargo & binstall.

🚩 METIS Linux

sudo/doas pacman -Syyy kanha

🌈 Subcommands

➊ Status :- Just return the HTTP response code of URLs

👻 Help

$ kanha status -h

Just return the HTTP response code of URLs

Usage: kanha status [OPTIONS]

  Options:
  -f, --filename <FILENAME>  A url or a file containing multiple urls
      --stdin                Reads input from the standard in
  -t, --tasks <TASKS>        Define the maximum concurrent tasks [default: 10]
  -h, --help                 Print help
  -V, --version              Print version

🦊 Screenshots

➋ fuzz :- Fuzz URLs and return the response codes

👻 Help

$ kanha fuzz -h
Fuzz URLs and return the response codes

Usage: kanha fuzz [OPTIONS] --wordlist <WORDLIST> --url <URL>

Options:
  -w, --wordlist <WORDLIST>  A file containing a list of possible wordlists
  -u, --url <URL>            Provide a url to fuzz
  -t, --tasks <TASKS>        Define the maximum concurrent tasks [default: 10]
  -h, --help                 Print help
  -V, --version              Print version

🦊 Screenshots

➌ rdns :- Reverse dns lookup

👻 Help


$ kanha rdns  -h
  Reverse dns lookup

  Usage: kanha rdns [OPTIONS] --filename <FILENAME>

  Options:
    -f, --filename <FILENAME>  a file containing a list of possible wordlists
        --stdin                Reads input from the standard in
    -h, --help                 Print help
    -V, --version              Print version

🦊 Screenshots

➍ Takeover :- Check possible subdomain takeover

👻 Help

Check possible subdomain takeover

Usage: kanha takeover [OPTIONS] --json-file <JSON_FILE>

Options:
  -j, --json-file <JSON_FILE>  A json file containing signature values of different services
  -f, --filename <FILENAME>    A file containing a list of urls
      --stdin                  Reads input from the standard in
  -h, --help                   Print help
  -V, --version                Print version

🦊 Screenshots

👐 Contributing

🪶 Recommend a new features
⭐ Give the project a star
🐎 Add new subcommand.
🧑‍🚒 Fix docx // improve code quality

Also see 👀

haylxon :- Blazingly fast tool to grab screenshots of your domain list right from terminal written in rust 🦀
httpx :- httpx is a fast and multi-purpose HTTP toolkit.
ffuf :- Fast web fuzzer written in Go

License 🔐

As always, this project is also licensed under the MIT LICENSE

scalameta/munit

2023-09-11T01:40:59Z

Scala testing library with actionable errors and extensible APIs

MUnit

Scala testing library with actionable errors and extensible APIs.

Documentation

See the website: https://scalameta.org/munit/

seata/seata.github.io

2023-09-11T01:41:17Z

Seata website

mviereck/x11docker

2023-09-11T01:41:24Z

Run GUI applications and desktops in docker and podman containers. Focus on security.

x11docker: Run GUI applications in Docker or podman containers.

Avoid X security leaks and enhance container security

Introduction

x11docker allows to run graphical desktop applications (and entire desktops) in Linux containers.

Container tools like Docker, podman and nerdctl allow to run applications in an isolated container environment. Containers need much less resources than virtual machines for similar tasks.
Docker, podman and nerdctl do not provide a display server that would allow to run applications with a graphical user interface.
x11docker fills the gap. It runs an X display server and provides it to containers. X servers can run from host or in a container of image x11docker/xserver.
Additionally x11docker does some security setup to enhance container isolation and to avoid X security leaks. This allows a sandbox environment that fairly well protects the host system from possibly malicious or buggy software.

Software can be installed in a deployable image with a rudimentary Linux system inside. This can help to run or deploy software that is difficult to install on several systems due to dependency issues. It is possible to run outdated versions or latest development versions side by side. Files to work on can be shared between host and container.

x11docker wiki provides some how-to's for basic setups without x11docker.

Docker Desktop or Docker Engine

Since a while Docker distributes a version called "Docker Desktop" that runs Docker in a QEMU VM. x11docker is not designed to support this VM based version. Instead, use x11docker with the native "Docker Engine Server version" that uses your host kernel to run containers.

If you install Docker from your distribution's repository, you'll likely get this native version.
The supported native Docker Engine package name is mostly docker.io or docker-ce, in opposite to the non-supported VM based docker-desktop package.
If you prefer podman over Docker, you don't need to care about this difference.

TL;DR

For a quick start:

Install x11docker with:

curl -fsSL https://raw.githubusercontent.com/mviereck/x11docker/master/x11docker | sudo bash -s -- --update

Install dependencies:
- Either pull image x11docker/xserver or install at least nxagent or xpra and xephyr.
Run a GUI in container with:
```
x11docker IMAGENAME [COMMAND]
```
Add options:
- --desktop for a desktop environment in image.
- --gpu for hardware acceleration.

Examples:

x11docker x11docker/xfce thunar
x11docker --desktop x11docker/xfce
x11docker --gpu x11docker/xfce glxgears

Features

Focus on security:
- Avoids X security leaks by running additional X servers.
- Restricts container capabilities to bare minimum.
- Container user is same as host user to avoid root in container.
Low dependencies:
- No obliging dependencies on host beside X and one of docker, podman or nerdctl. Recommended: nxagent and Xephyr, alternatively image x11docker/xserver.
- No dependencies inside of images except for some optional features.
Several optional features like GPU, sound, webcam and printer support.
Remote access with SSH, VNC or HTML5 possible.
Easy to use. Examples:
- x11docker x11docker/fvwm xterm
- x11docker --desktop --size 320x240 x11docker/lxde (needs nested X server Xephyr)

Supported systems

x11docker runs on Linux and (with some setup and limitations) on MS Windows. x11docker does not run on macOS except in a Linux VM.

Terminal syntax

Just type x11docker IMAGENAME [COMMAND].

Get an overview of options with x11docker --help.
- For desktop environments in image add option -d, --desktop.
- For internet access use option -I, --network.
- To run without X at all use option -t, --tty.
- Get an interactive TTY with option -i, --interactive.
- See generated container backend command (and further infos) with option --debug.
If startup fails, look at chapter Troubleshooting.

General syntax:

Usage:
To run a container on a new X server:
  x11docker IMAGE
  x11docker [OPTIONS] IMAGE [COMMAND]
  x11docker [OPTIONS] -- IMAGE [COMMAND [ARG1 ARG2 ...]]
  x11docker [OPTIONS] -- CUSTOM_RUN_OPTIONS -- IMAGE [COMMAND [ARG1 ARG2 ...]]
To run a host application on a new X server:
  x11docker [OPTIONS] --backend=host COMMAND
  x11docker [OPTIONS] --backend=host -- COMMAND [ARG1 ARG2 ...]
  x11docker [OPTIONS] --backend=host -- -- COMMAND [ARG1 ARG2 ...] -- [ARG3]
To run only an empty new X server:
  x11docker [OPTIONS] --xonly

CUSTOM_RUN_OPTIONS are just added to the docker|podman|nerdctl run command without a serious check by x11docker.

Options

Description of some commonly used feature options.

Some of these options have dependencies on host and/or in image. Compare wiki: feature dependencies.
For often used option combinations you can make shortcuts with option --preset.

Choice of X servers and Wayland compositors

If no X server option is specified, x11docker automatically chooses one depending on installed dependencies and on given or missing options --desktop, --gpu and --wayland. Most recommended are nxagent and Xephyr.

Overview of all possible X server and Wayland options.
- Hints to use option --xorg within X.
- Use option -t, --tty to run without X at all.

Desktop or seamless mode

x11docker assumes that you want to run a single application in seamless mode, i.e. a single window on your regular desktop. If you want to run a desktop environment in image, add option --desktop.

Seamless mode is supported with options --nxagent and --xpra. As a fallback insecure option --hostdisplay is possible.
Desktop mode with --desktop is supported with all X server options except --hostdisplay. If available, x11docker prefers --xephyr and --nxagent.
Special case: Single applications with a window manager (option --wm).
- If neither nxagent nor xpra are installed, but x11docker finds a desktop capable X server like Xephyr, it avoids insecure option --hostdisplay and runs Xephyr with a window manager.

Internet access

By default x11docker disables Network access for containers with --network=none because it targets best possible container isolation. To allow internet access set option -I or --network.

Shared folders, volumes and HOME in container

Changes in a running container system will be lost, the created container will be discarded. For persistent data storage you can share host directories or volumes:

Option -m, --home creates a host directory in ~/.local/share/x11docker/IMAGENAME that is shared with the container and mounted as its HOME directory. Files in container home and user configuration changes will persist. x11docker creates a softlink from ~/.local/share/x11docker to ~/x11docker.
- You can specify another host directory for container HOME with --home=DIR.
- You can specify a volume for container HOME with --home=VOLUME.
Option --share PATH mounts a host file or folder at the same location in container.
- You can also specify a volume with --share VOLUME.
- --share PATH:ro restricts to read-only access.
- Device files in /dev are supported, too.
Special cases for $HOME:
- --home=$HOME will use your host home as container home. Discouraged, use with care.
- --share $HOME will symlink your host home as a subfolder of container home.

Note that x11docker copies files from /etc/skel in container to HOME if HOME is empty. That allows to provide predefined user configurations in the image.

GPU hardware acceleration

Hardware acceleration for OpenGL is possible with option -g, --gpu.

This will work out of the box in most cases with open source drivers on host. Otherwise have a look at wiki: feature dependencies.
Closed source NVIDIA drivers need some setup and support less x11docker X server options for driver version < v470.x and Xwayland < v22.1.2.

Clipboard

Clipboard sharing is possible with option -c, --clipboard [=ARG].

Optional arguments superv and altv only provide host clipboard content to container if keys [SUPER][v] or [ALT][v] are pressed.
Optional argument oneway only transfers clipboard content from container to host.

Sound

Sound is possible with options -p, --pulseaudio and --alsa.

For pulseaudio sound with --pulseaudio you need pulseaudio on host and pulseaudio (at least the pulseaudio client libraries) in image. Compare wiki: feature dependencies.
For ALSA sound with --alsa you might need to specify a sound card with e.g. --alsa=Generic. Get a list of available sound cards with aplay -l.

Webcam

Webcams on host can be shared with option --webcam.

If webcam application in image fails, install --gpu dependencies in image. Compare wiki: feature dependencies.
guvcview needs --pulseaudio or --alsa.
cheese and gnome-ring need --init=systemd.

Printer

Printers on host can be provided to container with option --printer.

It needs cups on host, the default printer server for most linux distributions.
The container needs cups client libraries in image. Compare wiki: feature dependencies.

Language locales

x11docker provides option --lang for flexible language locale settings.

--lang without an argument sets LANG in container to same as on host. Same as --lang=$LANG
x11docker will check on container startup if the desired locale is already present in image and enable it.
If x11docker does not find the locale, it creates it on container startup. This needs some locale packages in image. Compare wiki: feature dependencies.
Examples: --lang=de for German, --lang=zh_CN for Chinese, --lang=ru for Russian, --lang=$LANG for your host locale.
For support of chinese, japanese and korean characters install a font like fonts-arphic-uming in image.
Keyboard input methods like fcitx-pinyin are possible with some container setup. Compare ticket #269.

Wayland

To run Wayland instead of an X server x11docker provides options --wayland, --weston, --kwin and --hostwayland. For further description loot at wiki: Description of Wayland options.

Option --wayland automatically sets up a Wayland environment. It regards option --desktop.
Options --weston and --kwin run Wayland compositors weston or kwin_wayland.
Option --hostwayland can run applications seamless on host Wayland desktops like Gnome 3, KDE 5 and Sway.
Example: xfce4-terminal on Wayland: x11docker --wayland x11docker/xfce xfce4-terminal

Init system

x11docker supports several init systems as PID 1 in container with option --init. Init in container solves the zombie reaping issue. As default x11docker uses tini in/usr/bin/docker-init. Also available are systemd, SysVinit, runit, OpenRC and s6-overlay. elogind is supported, too. Look at wiki: Init systems in Docker.

DBus

Some desktop environments and applications need a running DBus system daemon and/or DBus user session. DBus options need dbus in image.

use --dbus to run a DBus user session daemon.
A DBus system daemon will be started automatically with init systems systemd, openrc, runit and sysvinit (option --init).
- It is also possible to run a DBus system daemon with --dbus=system without advanced init systems. However, this causes trouble in some cases and is not recommended in general.
use --hostdbus to connect to host DBus user session.
use --share /run/dbus/system_bus_socket to share host DBus system socket.

Container runtime

It is possible to run containers with different backends following the OCI runtime specification. Docker's default runtime is runc. You can specify another one with option --runtime=RUNTIME. Container runtimes known and supported by x11docker are:

runc: Docker default.
nvidia: Specialized fork of runc to support nvidia/nvidia-docker images.
crun: Fast and lightweight alternative to runc with same functionality.
oci: Runtime reported in #205, no documentation found. Handled by x11docker like runc.
sysbox-runtime: Based on runc, aims to enhance container isolation. Support is experimental yet. Needs Sybox>=0.5.0 and kernel version >=5.12.

Using different runtimes is well tested for rootful Docker, but not for other backend setups.

Example: possible runtime configuration in /etc/docker/daemon.json:

{
  "default-runtime": "runc",
  "runtimes": {
    "crun": {
      "path": "/usr/local/bin/crun",
      "runtimeArgs": []
    },
    "nvidia": {
      "path": "nvidia-container-runtime",
      "runtimeArgs": []
    },
    "sysbox-runc": {
      "path": "/usr/bin/sysbox-runc"
    }
  }
}

Backends other than docker

x11docker supports container tools Docker, podman and nerdctl with option --backend=BACKEND in rootful and rootless mode. Supported --backend arguments: docker podman nerdctl host

Container backends:

By default x11docker tries to run docker.
- To change the default --backend=docker to another one like --backend=podman, create a default file for --preset.
Recommended for rootful container backend: docker or podman
Recommended for rootless container backend: podman
- Only podman allows option --home in rootless mode yet.
- Only podman provides useful file ownerships with option --share in rootless mode yet.
--backend=nerdctl is experimental yet. It supports rootful and rootless mode. nerdctl is in heavy development stage.

Other supported backends that are in fact no containers:

--backend=host runs a host application on a new X server. No containerization is involved.

Preconfiguration with --preset

For often used option combinations you might want to use option --preset FILENAME to have a command shortcut. FILENAME is a file in ~/.config/x11docker/preset or in /etc/x11docker/preset containing some x11docker options.

Example multimedia: Create a file ~/.config/x11docker/preset/multimedia:
```
--gpu
--webcam
--printer
--pulseaudio
--clipboard
--share ~/Videos
--share ~/Music
```
Use it like: x11docker --preset=multimedia jess/vlc

Example deepin desktop: Instead of long command

x11docker --desktop --init=systemd --gpu --pulseaudio --home -- --cap-add=IPC_LOCK -- x11docker/deepin

you can create a file ~/.config/x11docker/preset/deepin containing the desired options and even the image name:

--desktop 
--init=systemd
--gpu
--pulseaudio
--home
-- 
--cap-add=IPC_LOCK
-- 
x11docker/deepin

Run with: x11docker --preset=deepin

Default preset for all x11docker sessions

You can create a default preset file that is applied on all x11docker sessions. You can think of it as a configuration file for x11docker.

Example: To always use podman instead of docker, create a file with name default in ~/.config/x11docker/preset or in /etc/x11docker/preset with content:
```
--backend=podman
```
This will cause x11docker to always use podman instead of docker unless specified otherwise in the x11docker command.

The same way you can specify other and more options as default, e.g. --homebasedir=/my/containerhome/path. Note that a local user default file will supersede a system wide default file.

Security

Scope of x11docker is to run containerized GUI applications while preserving and improving container isolation. Core concept is:

Runs a second X server to avoid X security leaks.
- This in opposite to widespread solutions that share host X socket of display :0, thus breaking container isolation, allowing keylogging and remote host control. (However, x11docker provides this with fallback option --hostdisplay).
- Authentication is done with MIT-MAGIC-COOKIE, stored separate from file ~/.Xauthority.
Creates container user similar to host user to avoid root in container.
- You can also specify another user with --user=USERNAME or a non-existing one with --user=UID:GID.
- Disables possible root password and deletes entries in /etc/sudoers.
  - If you want root permissions in container, use option --sudouser that allows su and sudo with password x11docker.
- If you want to use USER specified in image instead, set option --user=RETAIN. x11docker won't change container's /etc/passwd or /etc/sudoers in that case. Option --home won't be available.
Reduces container capabilities to bare minimum.
- Sets run option --cap-drop=ALL to drop all capabilities. Most applications don't need them.
- Sets run option --security-opt=no-new-privileges.
- These restrictions can be disabled with x11docker option --cap-default or reduced with --sudouser, --newprivileges.

That being said, the default docker capabilities and the seccomp/SELinux/apparmor profiles are set up well to protect the host system. Nonetheless, x11docker follows the principle of least privilege. Containers should not have capabilities or privileges that they don't need for their job.

Security weaknesses

Possible SELinux restrictions are degraded for x11docker containers with run option --security-opt label=type:container_runtime_t to allow access to new X unix socket. A more restrictive solution is desirable. Compare: SELinux and Docker: allow access to X unix socket in /tmp/.X11-unix
A possible user namespace remapping setup is disabled to allow options --home and --share without file ownership issues.
- This is less an issue because x11docker already avoids root in container.
- Exception: User namespace remapping is not disabled for --user=RETAIN.
x11docker provides several different X server options. Each X server involved might have its individual vulnerabilities. x11docker only covers well-known X security leaks that result from X11 protocol design.
- An additional security layer for most supported X servers is set up if image x11docker/xserver is available. It will be used automatically in most cases if available. Enforce its usage with option --xc=yes.

Options degrading container isolation

x11docker shows warning messages in terminal if chosen options degrade container isolation. Note that x11docker does not check custom DOCKER_RUN_OPTIONS.

Most important:

--hostdisplay shares host X socket of display :0 instead of running a second X server.
- Danger of abuse is reduced providing so-called untrusted cookies, but do not rely on this.
- If additionally using --gpu or --clipboard, option --ipc=host and trusted cookies are enabled and no protection against X security leaks is left.
- If you don't care about container isolation, x11docker --hostdisplay --gpu is an insecure but quite fast setup without any overhead.
--gpu allows access to GPU hardware. This can be abused to get window content from host (palinopsia bug) and makes GPU rootkits like keyloggers possible.
--pulseaudio and --alsa allow catching audio output and microphone input from host.

Rather special options reducing security, but not needed for regular use:

--sudouser allows su and sudo with password x11dockerfor container user. If an application somehow breaks out of container, it can harm your host system. Allows many container capabilities that x11docker would drop otherwise.
--cap-default disables x11docker's container security hardening and falls back to default container capabilities as provided by the backends docker, podman or nerdctl. If an application somehow breaks out of container, it can harm your host system.
--init=systemd|sysvinit|openrc|runit allow some container capabilities that x11docker would drop otherwise. --init=systemd also shares access to /sys/fs/cgroup. Some processes will run as root in container. If a root process somehow breaks out of container, it can harm your host system. Allows many container capabilities that x11docker would drop otherwise.
--hostdbus allows communication over DBus with host applications.

Sandbox

Container isolation enhanced with x11docker allows to use containers as a sandbox that fairly well protects the host system from possibly malicious or buggy software. Though, no sandbox solution in the wild can provide a perfect secure protection, and Docker even with enhanced security settings from x11docker is no exception.

Using x11docker as a sandbox is not intended to run obviously evil software. Rather use it as:

Compatibility environment to run software that is hard or impossible to install on host due to dependency issues.
Development environment to collect libraries, compiler and so on to keep the host clean.
Development environment to mitigate damage caused by unexpected/buggy behaviour.
Security layer for software that may be malicious in worst case. Examples: Internet browser with enabled javascript, or wine with MS Windows applications.

x11docker already restricts process capabilities. You can additionally restrict access to CPU and RAM with option --limit. As default --limit restricts to 50% of available CPUs and 50% of currently free RAM. Another amount can be specified with --limit=FACTOR with a FACTOR greater than zero and less than or equal one.

For more custom fine tuning have a look at Docker documentation: Limit a container's resources.

WARNING: There is no restriction that can prevent the container from flooding the hard disk storing the container or in shared folders.

Security and feature check

To check container isolation and some feature options use image x11docker/check and try out with several options.

An insecure setup is x11docker --hostdisplay --gpu x11docker/check. It fairly well demonstrates common X security leaks.
Add options like --pulseaudio --alsa --webcam --clipboard --printer to check their functionality.

Installation

Note that x11docker is just a bash script without library dependencies. Basically it is just a wrapper for X servers and container backends docker, podman and nerdctl. To allow advanced usage of x11docker abilities have a look at chapter Dependencies.

Installation from distribution repositories

x11docker is available as a package in some distributions.

Stable releases:

Latest git master/beta version:

Much thanks to the maintainers who decided to provide these packages! There are some hints for packaging x11docker in the wiki.

Manual installation

Installation options

As root you can install, update and remove x11docker in system directories to be available system-wide:

x11docker --install : install x11docker from current directory. (Useful to install from an extracted zip file or a cloned git repository.)
x11docker --update : download and install latest release from github.
x11docker --update-master : download and install latest master version from github.
x11docker --remove : remove all files installed by x11docker.
- Note: This does not remove ~/.local/share/x11docker where it stores persistent files of option --home.
x11docker --remove-oldprefix : Before version 7.6.0 x11docker installed itself into /usr/bin. Now it installs into /usr/local/bin. Use --remove-oldprefix to remove /usr/bin installations.

To see the difference between current and coming updated version, you can use optional argument diff for --update and --update-master. Example: x11docker --update-master=diff will show you the code changes from your current installation to latest master/beta version without installing it.

Installed files

What the installation does (just for information):

Copies script x11docker to /usr/local/bin.
Installs icon x11docker.png below /usr/share/icons using xdg-icon-resource.
Copies documentation README.md, CHANGELOG.md and LICENSE.txt to /usr/local/share/doc/x11docker.
Stores man page for x11docker in /usr/local/share/man/man1/x11docker.1.gz.

Shortest way for first installation:

For systems using sudo:

curl -fsSL https://raw.githubusercontent.com/mviereck/x11docker/master/x11docker | sudo bash -s -- --update

Directly as root:

curl -fsSL https://raw.githubusercontent.com/mviereck/x11docker/master/x11docker | bash -s -- --update

Minimal installation

You can run x11docker from an arbitrary location with bash x11docker or ./x11docker. For minimal system-wide installation make x11docker executable with chmod +x x11docker and move it to /usr/local/bin (or another location in PATH). Other files than script x11docker itself are not essential.

Installation on MS Windows

x11docker can run natively on MS Windows electively in one of:

Further information at wiki: x11docker on MS Windows.

Deinstallation

You can remove x11docker with x11docker --remove. That will remove the files listed above. It will also remove ~/.cache/x11docker and stop all running x11docker containers. x11docker will not remove:

Files and folders for persistent data storage with option --home. These are:
- ~/.local/share/x11docker where persistent data is stored.
- Softlink ~/x11docker that points there.
Folders you might have created yourself for x11docker:
- ~/.local/share/x11docker
- ~/.config/x11docker

Dependencies

x11docker can run with standard system utilities without additional dependencies on host or in image.

As a core it only needs bash and one of docker, podman or nerdctl to run containers on X.
x11docker also needs an X server. x11docker can automatically use image x11docker/xserver that provides most optional x11docker dependencies and several X servers and Wayland compositors so you won't need to install them on host.
- If you prefer to install dependencies on host:
  - The recommended base commands are: nxagent Xephyr weston Xwayland xdotool xauth xinit xclip xhost xrandr xdpyinfo. Some of them are probably already installed.
  - See wiki: Dependencies - Recommended base for a package list matching your distribution.

Dependencies in image:

Some feature options have additional dependencies on host and/or in image. This affects especially options --gpu, --printer and --pulseaudio.
Compare wiki: feature dependencies.

Troubleshooting

For troubleshooting run x11docker in a terminal. x11docker shows warnings if something is insecure, missing or going wrong. Also it shows notes if options don't work and fallbacks are used. It might give hints to fix some issues.

Core checks

1. Make sure your x11docker version is up to date with x11docker --update (latest release) or x11docker --update-master (latest beta).

2. Carefully read the regular x11docker messages. Often they already give a hint what to do.

Use option -D, --debug to see some internal messages.
Use option -v, --verbose to see full logfile output.
You can find the latest dispatched logfile at ~/.cache/x11docker/x11docker.log.

3. Try another X server option.

Some applications fail with fallback option --hostdisplay. Add --clipboard to disable some security restrictions of --hostdisplay.
If that does not help, install additional X servers. The most stable and reliable option is --xephyr.

Privilege checks

Some applications need more privileges or capabilities than x11docker provides by default. One attempt is to allow several privileges until the setup works. Than reduce privileges to find out which are needed indeed. (Note the -- in the following commands, do not miss them).

1. Adding privileges:

Try x11docker --cap-default IMAGENAME
Try x11docker --cap-default --ipc=host --network=host IMAGENAME
Try x11docker --cap-default --ipc=host --network=host --share /run/udev/data:ro -- --cap-add ALL --security-opt seccomp=unconfined --security-opt apparmor=unconfined --privileged -- IMAGENAME

2. Reducing privileges:

Drop options one by one in this order: --privileged --security-opt apparmor=unconfined --security-opt seccomp=unconfined --cap-add ALL --share /run/udev/data:ro --network=host --ipc=host --cap-default. Only leave options that are needed to keep the setup working.
Option --cap-default might already be enough. It allows default container capabilities as docker|podman|nerdctl would do on themself.
- You can just stop debugging and reducing here if you like to.
- You can try to reduce --cap-default. Partially remove additional options to find out which one(s) are needed:
  - First try x11docker --newprivileges -- IMAGENAME
  - Than try and reduce: x11docker --newprivileges -- --cap-add=SETPCAP --cap-add=MKNOD --cap-add=AUDIT_WRITE --cap-add=CHOWN --cap-add=NET_RAW --cap-add=DAC_OVERRIDE --cap-add=FOWNER --cap-add=FSETID --cap-add=KILL --cap-add=SETGID --cap-add=SETUID --cap-add=NET_BIND_SERVICE --cap-add=SYS_CHROOT --cap-add=SETFCAP -- IMAGENAME
--cap-add ALL should not be considered to be a solution.
- Drop capabilities from following command to find the one(s) you need: x11docker --cap-default -- --cap-add=SYS_MODULE --cap-add=SYS_RAWIO --cap-add=SYS_PACCT --cap-add=SYS_ADMIN --cap-add=SYS_NICE --cap-add=SYS_RESOURCE --cap-add=SYS_TIME --cap-add=SYS_TTY_CONFIG --cap-add=AUDIT_CONTROL --cap-add=MAC_OVERRIDE --cap-add=MAC_ADMIN --cap-add=NET_ADMIN --cap-add=SYSLOG --cap-add=DAC_READ_SEARCH --cap-add=LINUX_IMMUTABLE --cap-add=NET_BROADCAST --cap-add=IPC_LOCK --cap-add=IPC_OWNER --cap-add=SYS_PTRACE --cap-add=SYS_BOOT --cap-add=LEASE --cap-add=WAKE_ALARM --cap-add=BLOCK_SUSPEND --cap-add=AUDIT_READ -- IMAGENAME
- Many of these capabilities are rather dangerous and should not be allowed for a container. Especially to mention is SYS_ADMIN.
Option --privileged should not be considered to be a solution. Basically it allows arbitrary access to the host for container applications.
- Likely you need to share a device file in /dev, e.g. something like --share /dev/vboxdrv.
--ipc=host and --network=host severely reduce container isolation. Better solutions are desirable.

3. Open a ticket to ask for possibilities how to optimize the privilege setup.

Other checks

1. Container user: By default x11docker sets up an unprivileged container user similar to your host user.

The image may have a USER specification and be designed for this user.
- Check for a USER specification in image with docker inspect --format '{{.Config.User}}' IMAGENAME
- You can enable this predefined user with --user=RETAIN
The container might need a root user. Try with --user=root, maybe add --cap-default.

2. Init and DBus

A few applications need a DBus user daemon. Install dbus in image and try option --dbus.
A few applications need systemd and/or a running DBus system daemon. Install systemd in image and try option --init=systemd.

3. Architecture check of host OS and image

The image may not be built for the architecture of your host OS. (ie. Image is built for amd64 but your OS runs on arm, e.g. on a RaspBerry PI). With a mismatch the container will quit unexpectedly & x11docker may emit the error dockerrc(): Did not receive PID of PID1 in container.
- You can check the image architecture with docker inspect --format {{.Architecture}} IMAGENAME.
- You can check the host architecture with uname -m.
- For further information and multi-arch setups look at wiki: Multi-arch setups with QEMU.

Contact

Feel free to open a ticket if you have a question or encounter an issue.

Issues

If reporting an issue:

Have a look at chapter Troubleshooting.
Most times it makes sense to store the --verbose output (or ~/.cache/x11docker/x11docker.log) at pastebin.com.
- Personal information in the logfile is mainly the user name (also in paths) and some hardware and system information.

Contributing

If you want to contribute to x11docker, please open a ticket before creating a pull request. Often it is possible to accomplish desired tasks with already available options. Note that x11docker is considered to be stable and changes other than bug fixes are less likely to be merged. In general new features are not intended.

Support

Please open a ticket if you need support. Please note that x11docker is a non-commercial project maintained in free time. I'll help where I can, but there is no organisation behind x11docker that can provide large scale support.

Donation

If you like to make a donation: Thank you! :) Please have a look at my sponsor site.

Instead of sponsoring me, you can as well spend some money to Galsan Tschinag in Mongolia (Wikipedia). One of his great projects is the afforestation of Mongolia. A donation account in Germany is provided by Förderverein Mongolei e.V..

Förderverein Mongolei e.V.
IBAN DE7261290120 0394 3660 00
BIC GENODES1NUE
Volksbank Kirchheim-Nürtingen

I personally know some of the people behind this. I assure that they are trustworthy and have a great heart and soul and do a good thing.

Examples

Some x11docker image examples with desktop environments can be found on docker hub. A special one to check features and container isolation is x11docker/check.

Docker does not provide automated builds for free anymore, so the images are becoming outdated. Instead of pulling them, rather build them locally with x11docker option --build.

Some x11docker Dockerfiles are provided at https://github.com/mviereck?tab=repositories; look for repositories beginning with dockerfile-x11docker. You can build locally from these Dockerfiles with x11docker option --build. Example:

x11docker --build x11docker/fvwm

Single applications

Application	x11docker command
Xfce4 Terminal	`x11docker x11docker/xfce xfce4-terminal`
GLXgears with hardware acceleration	`x11docker --gpu x11docker/xfce glxgears`
Kodi media center with hardware acceleration, Pulseaudio sound and shared `Videos` folder. For setup look at ehough/docker-kodi.	`x11docker --gpu --pulseaudio --share ~/Videos erichough/kodi`.
XaoS fractal generator	`x11docker patricknw/xaos`
Telegram messenger with persistent `HOME` for configuration storage	`x11docker --home xorilog/telegram`
Firefox with shared `Download` folder and internet access.	`x11docker -I --share $HOME/Downloads -- --tmpfs /dev/shm -- jess/firefox`
Tor browser	`x11docker -I jess/tor-browser`
Chromium browser with restricted resource usage	`x11docker -I --limit -- jess/chromium --no-sandbox`
VLC media player with shared `Videos` folder and Pulseaudio sound	`x11docker --pulseaudio --share=$HOME/Videos jess/vlc`
GNU Octave Scientific Programming Language built for arm & arm64	`x11docker aptman/dbhi:bionic-octave octave`

Desktop environments

Desktop environment (most based on Debian)	x11docker command
Cinnamon	`x11docker --desktop --gpu --init=systemd --cap-default x11docker/cinnamon`
deepin (website) (3D desktop from China)	`x11docker --desktop --gpu --init=systemd -- --cap-add=IPC_LOCK -- x11docker/deepin`
Enlightenment (based on Void Linux)	`x11docker --desktop --gpu --runit x11docker/enlightenment`
Fluxbox (based on Debian, 87 MB)	`x11docker --desktop x11docker/fluxbox`
FVWM (based on Alpine, 22.5 MB)	`x11docker --desktop x11docker/fvwm`
Gnome 3	`x11docker --desktop --gpu --init=systemd x11docker/gnome`
KDE Plasma on X	`x11docker --desktop --gpu --init=systemd x11docker/kde-plasma`
KDE Plasma on Wayland	`x11docker --kwin --wayland x11docker/kde-plasma plasmashell`
KDE Plasma as nested Wayland compositor	`x11docker --gpu --init=systemd -- --cap-add SYS_RESOURCE -- x11docker/kde-plasma startplasma-wayland`
Lumina (website) (based on Void Linux)	`x11docker --desktop x11docker/lumina`
LiriOS (based on Fedora)	`x11docker --desktop --gpu lirios/unstable`
LXDE	`x11docker --desktop x11docker/lxde`
LXDE with wine and PlayOnLinux and a persistent `HOME` folder to preserve installed Windows applications, and with Pulseaudio sound.	`x11docker --desktop --home --pulseaudio x11docker/lxde-wine`
LXQt	`x11docker --desktop x11docker/lxqt`
Mate	`x11docker --desktop x11docker/mate`
Trinity (website) (successor of KDE 3)	`x11docker --desktop x11docker/trinity`
Xfce	`x11docker --desktop x11docker/xfce`

Adjust images for your needs

For persistent changes of image system adjust Dockerfile and rebuild. To add custom applications to x11docker example images you can create a new Dockerfile based on them. Example:

# xfce desktop with VLC media player
FROM x11docker/xfce
RUN apt-get update && apt-get install -y vlc

Screenshots

More screenshots are stored in screenshot branch

x11docker --desktop x11docker/lxqt

x11docker --desktop x11docker/lxde-wine

x11docker --desktop --gpu --init=systemd -- --cap-add=IPC_LOCK --security-opt seccomp=unconfined -- x11docker/deepin

Frogging-Family/nvidia-all

2023-09-11T01:41:24Z

Hourly updated domains blacklist 🚫 https://get.domainsblacklists.com/blacklist.txt

Domains Blacklist

"Building a service on top of a regularly updated blacklist can provide immense value, not only for individual internet users but also for businesses and cybersecurity professionals. Whatever service you choose to build, ensure it's user-friendly, reliable, and secure."

Access the Blacklist

DOWNLOAD or use this up-to-the-minute blacklist as your source:

Quick Access

https://get.domainsblacklists.com/blacklist.txt

https://github.com/fabriziosalmi/blacklists/releases/download/latest/blacklist.txt

Compatibility

Works seamlessly with:

Windows, Mac, Linux via the uBlock Origin browser extension
IPhone (Safari + DNS) via AdGuard Pro for IOS
Android via AdGuard Pro for Android
PiHole and AdGuard Home DNS filtering applications
Squid proxy
Firewalls like nftables and WAF like OPNsense
DNS servers like BIND9

Features

Hourly Updates: Stay protected against emerging threats
Comprehensive Coverage: Aggregated from the most frequently updated blacklists (more info)
Broad Compatibility: Works across browsers, firewalls, proxies, and more
Robust Security: Protect against phishing, spam, scams, ads, trackers, bad websites and more
Whitelist Capability: Have more control over what you allow
Local Mirror: Set up easily using the Docker image

Whitelist submissions

Submit one or more domains for whitelisting

Why This Blacklist?

I'm passionate about digital security, and this project is a testament to that commitment. I use this blacklist daily through a series of devices (smartphone, laptop, TV, IoT), allowing me to continually test and refine it. This ensures it remains effective across a range of applications and devices.

Quick use

Currently, the most convenient way to utilize these blacklists on desktop and laptop computers is through the uBlock Origin browser extension. You can import the list as a custom blacklist, which allows you to override any blocked websites instantly and browse freely.

I'm also conducting tests on the iPhone using the free version of AdGuard Pro for IOS. I've added the blacklist as a custom list, and the performance has been quite satisfactory.

For comprehensive protection, I've set up the following configuration:

Client -> uBlock Origin Browser Extension -> Squid Proxy -> DNS Filtering via AdGuard/Pi-Hole -> Upstream DNS on a VPS with the same blacklist loaded

Sincerily the most valuable tester is my wife, a P1 Incindent is instantly raised on some failure ^_^

This setup enables me to examine various behaviors and make daily adjustments to the whole project.

Project Aims

Always Current: Continuously updated domain and subdomain listings from reviewed sources
Optimized Retrieval: Minimize the need for external requests
Infrastructure Security: Enhance protection across your entire digital environment

Always Updated

This blacklist benefits from multiple sources. Custom lists added to increase the overall security. Check my blacklists reviews for more informations.

Optimized Retrieval

Fetch the entire blacklist with one simple wget command:

wget https://get.domainsblacklists.com/blacklist.txt

Boost Your Infrastructure's Security

From mobile devices to servers and applications, the DNS-level domain blocking significantly boosts security and speed. Implementing the blacklist can reduce bandwidth consumption up to 30% based on tests across millions of requests.

For domains you prefer accessible, simply whitelist them. For instance, selectively whitelist graph.facebook.com without compromising on overall security.

Detailed Documentation

Please check documentation for PiHole, AdGuard Home and Squid implementations.

Contribute

Propose additions or removals to the blacklist
Enhance blacklist or whitelist processing
Dive into statistics and data analytics

Credits

This project owes its existence to numerous dedicated blacklist creators such as:

and many more.

For a full list, check the complete blacklists URLs.

Currently testing

Domain blacklist checker
Search API

curl -s -H "User-Agent: DomainsBlacklists" -X POST -H "Content-Type: application/json" -d "{\"domains\": [\"$DOMAIN\"]}" https://check.domainsblacklists.com/check_domain

Telegram Bot blacklist checker
Notification (Teams via webhook, e-mail, ntfy) if blacklisted
Firefox extension site checker
Search API Docker image
Resolving ip addresses to fqdns (ip blacklists, CrowdSec and more)

Roadmap

Could be nice if some missions will be achieved:

Check the web for more blacklists to be aggregated when possible
Whitelist content can be improved
Adult and newly registered domains are a huge challenge to manage on separate aggregated blacklists, postponed..
IP blacklists integration (get FQDNs from blacklisted IPs and provide a custom FQDN list to include in the main one)
Domain ranking insights is a topic, should be a fail and learn initiative
Improve documentation and website UX (especially for non techie users)
Fix and learn from everything

sebastiancarlos/yas-bdsm

2023-09-12T01:36:54Z

Yet Another Stow-Based Dotfiles System Manager

YAS-BDSM (Yet Another Stow-Based Dotfiles System Manager)

This dotfiles folder was bootstrapped, managed, and whipped into submission by YAS-BDSM.

Features

YAS-BDSM is a minimal, UNIX-based, cross-platform, hierarchical dotfiles manager.

Our core principles and safewords are:

Minimal dependencies: Only Bash and GNU Stow.
Minimal code: Around 300 lines of code. You can read it all in a few minutes.
Symlink-based: Don't be a simp; Symlinks in your home folder are the ultimate way to organize your dotfiles.
Cross-platform: With built-in platform detection, you can install your dotfiles on Linux and MacOS.
Hierarchical directory structure: Who's your daddy? The base directory. Then the dotfiles in either the linux or macos folder will be installed too. (A tertiary hierarchy for Linux distros is planned for a future release.)
Colorful CLI interface: Taste the rainbow, m**er.
Self-contained: The entire system is in a single folder, making it easy to clone and install. The yas-bdsm executable is right next to your dotfiles.
Non-destructive: Your existing dotfiles will not be touched unless you explicitly beg YAS-BDSM to do so.
Keep your boots on: YAS-BDSM pushes the symlinks and gets out of the way. It's up to you to handle version control for your dotfiles.

Installation

Prerequisites

Install GNU Stow
- MacOS: brew install stow
- Linux: sudo apt-get install stow
- Arch (btw): sudo pacman -S stow

Install YAS-BDSM

Clone YAS-BDSM: git clone https://github.com/sebastiancarlos/yas-bdsm
Go into your new dotfiles directory: cd yas-bdsm
Run ./yas-bdsm
- Or, if you want to truly submit to YAS-BDSM, add it to your path with make install and then run yas-bdsm.
Be a good boy and follow the instructions.

File Structure

- yas-bdsm
  - base/    (cross-platform dotfiles)
  - linux/   (linux-only dotfiles)
  - macos/   (macOS-only dotfiles)
  - yas-bdsm (executable)
  - Makefile

Technical Details

YAS-BDSM is a folder structure and a shell script on top of GNU Stow (a symlink manager). It works like this:

Put your dotfiles into the base, linux, and macos folders as needed.
Run ./yas-bdsm install, which will detect your platform and create symlinks in your home directory pointing to the dotfiles. This is done with GNU Stow, which also creates folders as needed.
If your dotfiles change in any way, run ./yas-bdsm install again to sync the changes to your home folder.

The `yas-bdsm` command

Usage: yas-bdsm [-h/--help] [install|restore-backup|eject]

       -h/--help: Show this help message

       install:        Install or sync the dotfiles as symlinks in your home folder.
       restore-backup: Restore the backup of your dotfiles created by install.
       eject:          Replace the symlinks in your home folder with hard copies.

Best practices

When using YAS-BDSM, its dotfile folders are the source of truth. Your home directory contains only symlinks.

This implies the following:

If you want to edit a dotfile...

Do it as usual: vim ~/.config/some-dotfile. It will follow the symlink and edit the source file.

If you want to add, delete, or move dotfiles...

You will need to do it in the source folder, and then run yas-bdsm install to sync the changes. The symlinks for the deleted file will be removed from your home folder.

If you want dotfiles in your home folder that are not managed by YAS-BDSM...

You can do it. YAS-BDSM won't touch them. If you want, you can add them to YAS-BDSM later.

FAQ

1. Should I store my dotfiles in an online repo?

Yas. That way, it's easy to install your dotfiles in any new system with internet access.

We recommend a private repo. If you want to use a public repo, set up a .gitignore file to avoid exposing your sensitive bits.

2. What if there is a conflict between dotfiles in `base` and `linux`?

The dotfiles in linux will override the dotfiles in base with the same name.

3. What if there is a conflict between yas-bdsm's dotfiles and my home folder?

The first time you run yas-bdsm install, it will ask you to back up your current dotfiles that conflict with those to be installed. If you accept, a backup folder will be created in the yas-bdsm folder, which can be restored to your home directory at any time by running yas-bdsm restore-backup.

4. Is Windows supported?

Patience, my corporate slave. That feature will be added soon. But, as this is a UNIX tool, it will only support WLS.

5. Should I put most of my dotfiles in `base`?

Yas! We believe that overriding files by platform should be kept to a minimum, to ease maintainability.

Indeed, we suggest that Bash scripts within dotfiles perform platform detection by themselves at runtime and use conditional statements.

Dotfiles are lightweight, so there's no harm in installing extra dotfiles that the platform doesn't need if that eases maintainability. It is better to ask forgiveness than permission!

6. How does the eject system work?

You can think of yas-bdsm eject as your safeword. It will turn all your symlinked dotfiles in your home folder into full-fledged files. Then you are on your own.

7. Why not YADM?

I don't particularly appreciate that it wraps around git. YAS-BDSM lets you handle version control as you please.

8. Why not chezmoi?

Because I'm not a gopher, I'm an old-school UNIX-head.

Honestly, chezmoi is a nice library but I wanted something minimal. Do you want to add templates, compilation, or encryption? Be my guest! You can put whatever you wish inside of YAS-BDSM as long as everyone is having a good time.

9. Why use GNU Stow?

I used Stow to save a little bit of development time. Stow already comes with good verbose logging, fails with error message if conflicts are detected, and removes dead symlinks on update. Basically, it was convenient to build on top of something that I didn't have to debug. I might remove it at some point.

10. Can I change the folder name to something safe for work like "dotfiles"?

Yes.

11. Is this repo a joke?

Yes, but it's also my daily driver for dotfiles. Feel free to use it (or get used by it).

code-423n4/2023-09-centrifuge

2023-09-11T01:42:08Z

Cyfrin/2023-09-ditto

2023-09-11T01:42:08Z

serge-chat/serge

2023-09-11T01:42:34Z

A web interface for chatting with Alpaca through llama.cpp. Fully dockerized, with an easy to use API.

Siam11651/cse326-project

2023-09-11T01:42:34Z

yarspirin/TagCloud

2023-09-11T01:42:42Z

TagCloud 🏷️: A flexible SwiftUI package for creating customizable tag clouds in iOS apps.

EECS-151/fpga_labs_fa23

2023-09-11T01:42:59Z

adamesalles/statistical-inference

2023-09-12T01:38:19Z

Repository for sharing related contents and ta session notes during the Statistical Inference course at EMAp in 2023.

Statistical Inference - EMAp 2023

Visit the website.

Staff:

Professor PhD. Philip Thompson
Teaching Assistant Eduardo Adame
Teaching Assistant Ezequiel Braga

Our TA sessions will be held every Friday from 9h20 to 11h in the room 307.

We highly recommend you to check the prof. Luiz Max's course repository.

News

Aug/23: During this month, classes will be lectured by prof. Rodrigo Targino while prof. Philip is recovering from a medical procedure. We hope prof. Philip has a good recovery.

Exercises

wojtask/clrs4e-solutions

2023-09-12T01:38:19Z

Solutions to exercises and problems from "Introduction to Algorithms", Fourth Edition by Thomas H. Cormen, Charles E. Leiserson, Ronald L. Rivest and Clifford Stein

Introduction to Algorithms, Fourth Edition — solutions to exercises and problems

Overview

The goal of this project is to provide solutions to all exercises and problems from Introduction to Algorithms, Fourth Edition by Thomas H. Cormen, Charles E. Leiserson, Ronald L. Rivest and Clifford Stein. My intention is to ensure, first and foremost, the rock solid correctness and completeness of the provided content, its technical elegance, as well as its consistency with the textbook material. In order to achieve such reliability, I spend a lot of time evolving and revising the solutions, not only in terms of content, but also in terms of terminology, wording, and typography. I pay attention to providing optimal algorithms, which are then implemented and thoroughly tested, and to illustrate operations and examples with accurate pictures, consistent with the style of the textbook.

It should be noted that the textbook's authors also provide selected solutions — the document can be downloaded from the textbook's website. Additionally, other authors publicly host their solutions on the web, though majority of those that I found are for the third edition of the textbook:

However, none of the above sources cover all exercises, especially when compared to the fourth edition that adds significant number of new exercises. Also, I noticed that certain solutions are not of the highest quality, e.g., some of them are incorrect, incomplete, or just far from elegance. Nevertheless, these pieces of work were sources of inspiration for me, and showed different approaches and perspectives. When relying on the ideas from them, I always aimed to rework the solutions by introducing necessary fixes and improvements, or just polishing them.

The solutions here often refer to the material presented in the textbook, so familiarity on at least a current chapter is required. In many solutions, you will also find references to other tasks, especially when a given task uses the result of another in its own solution. In general, later solutions sometimes rely on the earlier ones by referencing the relevant exercises. Thus, in early chapters one can observe a somewhat greater focus on details, and in later chapters more cross-references to exercises where those details have already been discussed.

I keep an eye on errors or inaccuracies in exercises and problems or the material they directly rely on, and highlight them in short notes before the solution of the affected exercise. On the other hand, I refer to the textbook's errata — if it includes a certain correction, I assume that the bug has already been fixed.

As I stressed earlier, I pay special attention to ensuring the correctness of the algorithms and data structures operations. To maximize my confidence, I implement and test each pseudocode or algorithm description that I provide in the solutions, as well as those that are provided in the textbook. I chose Python as a programming language, because of its popularity and its syntax similar to that used in pseudocodes. The counterpart project with implementations is available here.

The list of provided algorithms.

Detailed project's conventions.

History

The origins of the project date back to 2005, when I started solving exercises by pen and paper, during studying algorithms as a preparation for participating in the Polish Olympiad in Informatics. I was relying on the Polish translation of the textbook's second edition, titled Wprowadzenie do algorytmów, and my solutions were in Polish as well. In 2009 I started rewriting them in LaTeX. The document has evolved since then, with changes involving numerous fixes, improved page layout and styling, as well as open sourcing it on GitHub as CormenSol. At the beginning the pictures were drawn in MetaPost, before having been rewritten to PGF/TikZ in 2016. In 2012 I started implementing algorithms, first in C++, then in Java, before finally settling on Python in 2017, and I open sourced the implementations as CormenPy. Since initiating the project, the textbook got updated to the third edition in 2009, then to fourth edition in 2022. Having solved Chapters 1-17 and Appendices A-C from the — now outdated — second edition, I decided to freeze both CormenSol and CormenPy, and shift my attention to adapt the solutions for the fourth edition, while translating them to English — the process I refer to as migration.

The work on the current project began on January 1, 2023.

Progress

Part I	Part II	Part III	Part IV	Part V	Part VI	Part VII	Part VIII

Roadmap

Add project's documentation (you are reading it now), create issues and milestones, setup document's stub, suggest page layout and styling.
Migrate the CormenSol solutions from Appendices A-C. Add solutions to the modified and new exercises and problems along the way.
Add solutions to Appendix D, previously missing in the second edition, completing Part VIII (release 0.1).
Migrate the CormenSol solutions from Chapters 1-17 and the corresponding CormenPy implementations. Add solutions and implementations to modified and new exercises and problems along the way.
- Complete Part I (release 0.2).
- Complete Part II (release 0.3).
- Complete Part III (release 0.4).
- Complete Part IV (release 0.5).
- Complete Chapter 17 from Part V.
Add solutions and implementations to Chapters 18-35.
- Complete Part V (release 0.6).
- Complete Part VI (release 0.7).
- Complete selected chapters from Part VII (release 0.8).
- Complete Part VII (release 0.9).
Finalize the document (release 1.0).

Building

To compile the project locally you need TeXLive 2021 or newer. On Ubuntu the minimal required set of packages can be installed with:

sudo apt install texlive-pstricks texlive-latex-extra texlive-fonts-extra latexmk

Additionally, you need to install the MathTime Professional II Lite fonts. Since the fonts are not available in the standard TeXLive distribution, you will need to install them using the provided script:

chmod +x util/install_fonts.sh && sudo util/install_fonts.sh

Once the environment is prepared, you can compile the document to PDF by running the following command:

latexmk -pdf -file-line-error -halt-on-error -interaction=nonstopmode clrs4e-solutions.tex

Contributions

Again, a significant effort has been made to ensure that each solution is thoroughly checked. However, if you have found an error of any kind, or you can improve an existing solution in any way, I will be grateful for your feedback or help. Each exercise and each subproblem has its own issue in this repository, named and categorized appropriately. Please avoid duplicating these issues, rather search for the right one, and leave a comment, or even better — create a pull request with your suggestions. Authors of significant contributions will be credited in the document.

Together let's make this the most complete, reliable and consistent set of solutions to the iconic CLRS!

— Krzysztof Wojtas

tlaplus/DrTLAPlus

2023-09-12T01:38:33Z

Dr. TLA+ series - learn an algorithm and protocol, study a specification

deepfence/ThreatMapper

2023-09-11T01:43:36Z

Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

🎉 Announcing ThreatMapper v2

ThreatMapper - Runtime Threat Management and Attack Path Enumeration for Cloud Native

Deepfence ThreatMapper hunts for threats in your production platforms, and ranks these threats based on their risk-of-exploit. It uncovers vulnerable software components, exposed secrets and deviations from good security practice. ThreatMapper uses a combination of agent-based inspection and agent-less monitoring to provide the widest possible coverage to detect threats.

With ThreatMapper's ThreatGraph visualization, you can then identify the issues that present the greatest risk to the security of your applications, and prioritize these for planned protection or remediation.

Learn more about ThreatMapper in the product documentation.
See ThreatMapper running in the live demo sandbox.

When to use ThreatMapper

ThreatMapper carries on the good 'shift left' security practices that you already employ in your development pipelines. It continues to monitor running applications against emerging software vulnerabilities, and monitors the host and cloud configuration against industry-expert bnechmarks.

Use ThreatMapper to provide security observability for your production workloads and infrastructure, across cloud, kubernetes, serverless (Fargate) and on-prem platforms.

Planning your Deployment

ThreatMapper consists of two components:

The ThreatMapper Management Console is a container-based application that can be deployed on a single docker host or in a Kubernetes cluster.
ThreatMapper monitors running infrastructure using agentless Cloud Scanner tasks and agent-based Sensor Agents

The Management Console

You deploy the Management Console first, on a suitable docker host or Kubernetes cluster. For example, on Docker:

# Docker installation process for ThreatMapper Management Console

wget https://github.com/deepfence/ThreatMapper/raw/release-2.0/deployment-scripts/docker-compose.yml
docker-compose -f docker-compose.yml up --detach

Once the Management Console is up and running, you can register an admin account and obtain an API key.

Cloud Scanner tasks

ThreatMapper Cloud Scanner tasks are responsible for querying the cloud provider APIs to gather configuration and identify deviations from compliance benchmarks.

The task is deployed using a Terraform module. The ThreatMapper Management Console will present a basic configuration that may be deployed with Terraform, or you can refer to the expert configurations to fine-tune the deployment (AWS, Azure, GCP.

Sensor Agents

Install the sensor agents on your production or development platforms. The sensors report to the Management Console; they tell it what services they discover, provide telemetry and generate manifests of software dependencies.

The following production platforms are supported by ThreatMapper sensor agents:

Kubernetes: ThreatMapper sensors are deployed as a daemonset in the Kubernetes cluster, using a helm chart.
Docker: ThreatMapper sensors are deployed as a lightweight container.
Amazon ECS: ThreatMapper sensors are deployed as a daemon service using a task definition.
AWS Fargate: ThreatMapper sensors are deployed as a sidecar container, using a task definition.
Bare-Metal or Virtual Machines: ThreatMapper sensors are deployed within a lightweight Docker runtime.

For example, run the following command to start the ThreatMapper sensor on a Docker host:

docker run -dit \
  --cpus=".2" \
  --name=deepfence-agent \
  --restart on-failure \
  --pid=host \
  --net=host \
  --privileged=true \
  -v /sys/kernel/debug:/sys/kernel/debug:rw \
  -v /var/log/fenced \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v /:/fenced/mnt/host/:ro \
  -e USER_DEFINED_TAGS="" \
  -e MGMT_CONSOLE_URL="---CONSOLE-IP---" \
  -e MGMT_CONSOLE_PORT="443" \
  -e DEEPFENCE_KEY="---DEEPFENCE-API-KEY---" \
  deepfenceio/deepfence_agent_ce:2.0.0

On a Kubernetes platform, the sensors are installed using helm chart

Next Steps

Visit the Deepfence ThreatMapper Documentation, to learn how to get started and how to use ThreatMapper.

Get in touch

Thank you for using ThreatMapper. Please feel welcome to participate in the ThreatMapper Community.

Deepfence Community Website
Got a question, need some help? Find the Deepfence team on Slack
Got a feature request or found a bug? Raise an issue
Read the documentation in the Deepfence ThreatMapper Documentation
productsecurity at deepfence dot io: Found a security issue? Share it in confidence
Find out more at deepfence.io

Security and Support

For any security-related issues in the ThreatMapper project, contact productsecurity at deepfence dot io.

Please file GitHub issues as needed, and join the Deepfence Community Slack channel.

License

The Deepfence ThreatMapper project (this repository) is offered under the Apache2 license.

Contributions to Deepfence ThreatMapper project are similarly accepted under the Apache2 license, as per GitHub's inbound=outbound policy.

jbilcke-hf/ai-comic-factory

2023-09-11T01:43:36Z

Generate comic panels using a LLM + SDXL. Powered by Hugging Face 🤗

title: AI Comic Factory emoji: 👩‍🎨 colorFrom: red colorTo: yellow sdk: docker pinned: true app_port: 3000

AI Comic Factory

Running the project at home

First, I would like to highlight that everything is open-source (see here, here, here, here).

However the project isn't a monolithic Space that can be duplicated and ran immediately: it requires various components to run for the frontend, backend, LLM, SDXL etc.

If you try to duplicate the project, you will see it requires some variables:

LLM_ENGINE: can be either "INFERENCE_API" or "INFERENCE_ENDPOINT"
HF_API_TOKEN: necessary if you decide to use an inference api model or a custom inference endpoint
HF_INFERENCE_ENDPOINT_URL: necessary if you decide to use a custom inference endpoint
RENDERING_ENGINE: can only be "VIDEOCHAIN" for now, unless you code your custom solution
VIDEOCHAIN_API_URL: url to the VideoChain API server
VIDEOCHAIN_API_TOKEN: secret token to access the VideoChain API server

Please read the .env default config file for more informations. To customise a variable locally, you should create a .env.local (do not commit this file as it will contain your secrets).

-> If you intend to run it with local, cloud-hosted and/or proprietary models you are going to need to code 👨‍💻.

The LLM API (Large Language Model)

Currently the AI Comic Factory uses Llama-2 70b through an Inference Endpoint.

You have three options:

Option 1: Use an Inference API model

This is a new option added recently, where you can use one of the models from the Hugging Face Hub. By default we suggest to use CodeLlama 34b as it will provide better results than the 7b model.

To activate it, create a .env.local configuration file:

LLM_ENGINE="INFERENCE_API"

HF_API_TOKEN="Your Hugging Face token"

# codellama/CodeLlama-7b-hf" is used by default, but you can change this
# note: You should use a model able to generate JSON responses,
# so it is storngly suggested to use at least the 34b model
HF_INFERENCE_API_MODEL="codellama/CodeLlama-7b-hf"

Option 2: Use an Inference Endpoint URL

If you would like to run the AI Comic Factory on a private LLM running on the Hugging Face Inference Endpoint service, create a .env.local configuration file:

LLM_ENGINE="INFERENCE_ENDPOINT"

HF_API_TOKEN="Your Hugging Face token"

HF_INFERENCE_ENDPOINT_URL="path to your inference endpoint url"

To run this kind of LLM locally, you can use TGI (Please read this post for more information about the licensing).

Option 3: Fork and modify the code to use a different LLM system

Another option could be to disable the LLM completely and replace it with another LLM protocol and/or provider (eg. OpenAI, Replicate), or a human-generated story instead (by returning mock or static data).

Notes

It is possible that I modify the AI Comic Factory to make it easier in the future (eg. add support for OpenAI or Replicate)

The Rendering API

This API is used to generate the panel images. This is an API I created for my various projects at Hugging Face.

I haven't written documentation for it yet, but basically it is "just a wrapper ™" around other existing APIs:

The hysts/SD-XL Space by @hysts
And other APIs for making videos, adding audio etc.. but you won't need them for the AI Comic Factory

Option 1: Deploy VideoChain yourself

You will have to clone the source-code

Unfortunately, I haven't had the time to write the documentation for VideoChain yet. (When I do I will update this document to point to the VideoChain's README)

Option 2: Use another SDXL API

If you fork the project you will be able to modify the code to use the Stable Diffusion technology of your choice (local, open-source, your custom HF Space etc)

Notes

It is possible that I modify the AI Comic Factory to make it easier in the future (eg. add support for Replicate)

Ironclad/rivet

2023-09-11T01:43:36Z

AI agent and prompt chaining IDE and library

Rivet

Download | Website | Documentation

Rivet, the IDE for creating complex AI agents and prompt chaining, and embedding it in your application.

Report Bug · Request Feature · Disussions · Chat

Have a question? Need some help? Check out the Rivet Discord server!

About Rivet

Rivet Application

Rivet is a desktop application for creating complex AI agents and prompt chaining, and embedding it in your application.

Rivet currently has LLM support for:

Rivet has embedding/vector database support for:

Rivet also supports these additional integrations:

Audio Transcription from AssemblyAI

For more information on how to use the application and all of its capabilities, see the documentation!

Rivet Core

For more information on using Rivet Core, see the Rivet Integration Getting Started page and the related API documentation.

Rivet core is available on NPM as @ironclad/rivet-core. Rivet node is available as @ironclad/rivet-node. Documentation for each is available on the Rivet website.

Getting Started

Prebuilt Binaries

Latest downloads

All Releases

Check out the releases page for all available releases.

Running from Source

See CONTRIBUTING.md for information on building and running Rivet from source.

Contributing

All types of contributions are welcome - from code to documentation, bug reports, user experience feedback, and new feature suggestions!

Take a moment to read through the CONTRIBUTING.md file for help with setting up your development environment, and how to get started contributing to Rivet.

We use the All Contributors bot to recognize all our contributors, so every contribution is acknowledged. See the Contributors section below for everyone!

Code of Conduct

The Rivet project is welcome to all contributors, and as such, we have a Code of Conduct that all contributors must follow.

Troubleshooting

If you have any other questions on using Rivet, or have any other ideas, feel free to open a discussion!

Contributors ✨

Thanks goes to these wonderful people (emoji key):

_{Andy Brenneke} 💻 🤔 🔬 ⚠️ 🔧 👀 💬 🧑‍🏫	_{Cai GoGwilt} 💻 💼 🤔 🚧 📣 👀 🐛	_{Teddy Coleman} 💻 🐛	_{Todd Berman} 💻 🐛	_{Andrew Rothwell} ✅ 📖	_{Dominic Cooney} 🤔 🐛	_{Ankur Goyal} 📖 💻
_{Scott Bessler} 💡 💻 🐛	_{Brandon Hong} 💻 🐛	_{Niels Swimberghe} 💻	_{Terence C} 💻	_{Thomas Brodahl} 🎨	_{Justin Kwok} 🐛	_{Zhang Yi Jiang} 📖
_{Michael Kuc} 💻	_{Ikko Eltociear Ashimine} 📖

This project follows the all-contributors specification. Contributions of any kind welcome!

luban-agi/Awesome-Domain-LLM

2023-09-11T01:25:47Z

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

liuyuan-pal/SyncDreamer

2023-09-11T01:25:47Z

A collection of phishing samples for researchers and detection developers.

Visualize-ML/Book1_Python-For-Beginners

2023-09-12T01:21:47Z

Book_1_《编程不难》 | 鸢尾花书：从加减乘除到机器学习；已文件还会经过至少两轮修改，改动会很大，大家注意下载最新版本。请多提意见，谢谢

fuh/vimrc

2023-09-12T01:39:16Z

minimal .vimrc for c/c++ developers

frappe/builder

2023-09-11T01:44:09Z

Modern website builder for modern web pages

Nekogram/files

2023-09-11T01:44:09Z

Landing page for the greatest Mastodon server of them all

cardonabits/haxo-hw

2023-09-11T01:44:48Z

Haxophone, an electronic musical instrument that resembles a saxophone

What is a haxophone

A haxophone is an electronic musical instrument that resembles a saxophone. It is designed to be an inexpensive and fully customizable travel saxophone. You will never get the same expressiveness or depth of sound of a real saxophone. But with a haxophone you should be able to play alone or with friends wherever you might be. The mechanical keys and unique ergonomics give it a different kind of satisfying feel.

https://user-images.githubusercontent.com/676181/133919454-f654cb48-cca9-4b6e-bcb5-27de6ea2deb8.mp4

The design is fully open, software and hardware. This means that you can make it your own, from changing the type of key switches to making your own note and instrument mappings.

Project Goals

Goals

Build a travel saxophone that is fun and satisfying to play.
Build an instrument with the same fingering as a saxophone so that muscle memory developed on the haxophone is directly transferrable to your main horn.
Keep the cost low, below $100 USD.
Easy to manufacture.
Keep the design simple, sturdy and repairable to minimize maintenance cost. Using widely available and battle-tested mechanical keys from computer keyboards is one example of this principle in use.
Fully hackable and customizable.

Non-Goals

A haxophone is not designed to be a saxophone replacement.

How does it work?

The haxophone is designed as a HAT (Hardware Attached on Top) for the Raspberry Pi family of single-board computers.

The haxophone HAT is a special type of keyboard laid out in the same way as saxophones are. It also includes a mouthpiece and a pressure sensor to detect breath intensity. The HAT also includes an audio amplifier so it does not rely on the amplifier that is built into the Raspberry Pi 3 and Raspberry Pi 4. Because of that, the HAT will also work with the least expensive of the Pi's, the Raspberry Pi Zero.

The software that runs on the Raspberry Pi is:

haxo-rs: This is the driver that detects key presses, breath and converts it into notes. It's written in Rust, and compiled on the Raspberry Pi into a native application.
fluidsynth: This is the synthesizer software that will convert notes into sounds.

Mechanical Design

In order to keep costs down, the HAT PCB (printed circuit board) is an integral part of the physical structure of the Haxophone. This means that key switches, thumb rests, mouthpiece and the Raspberry Pi are all attached directly to the PCB. The side keys (left palm and right knuckle keys) are mounted on smaller PCBs and attached to the main PCB via right angle metal brackets. This smaller PCBs are detachable pannels from the design. This brings down the manufacturing cost.

For improved ergonomics, a few parts are designed to be 3D printed. These are the mouthpiece neck, the left thumb rest, and the right thumb rest, that also incorporates a strap hook. The source 3D models for those parts are included in the repository.

Electrical Design

The haxophone hat is comprised of three subsystems: a keyboard, a pressure sensor and an audio amplifier.

Keyboard

The keyboard is organized as a 3x8 matrix. The diagram below shows the mapping from saxophone keys to keyboard column/row values.

Note that due to PCB size constraints, a design decision was made to not include a high F# key. This key is not present in all saxophones, as that note can be played using alternate fingerings with other keys. The most common mappings of the high F# are already configured on the haxophone. If you are used to a less common configuration, the software is easy to extend.

Also note that at the moment the matrix is not completely used: keys (col 0, row 7) and (col 2, row 3) are unused.

Audio Amplifier

The haxophone HAT includes an audio amplifier and a 3.5mm mini-jack. This allows connecting the haxophone to headphones or to an external amplifier.

Pinout

The diagram below shows how the HAT connects to the Raspberry Pi. The keyboard matrix uses discrete GPIOs, the pressure sensor uses I2C and the audio amplifier, I2S.

You can refer to the diagram below from Raspberry Pi Spy if you need to locate those pins on the Raspberry Pi header.

Tools/Stack

The circuit board is designed with awesome Kicad.

All 3D models are designed with Freecad, the open source 3D parametric modeler.

The code is written in Rust just for the pleasure and reliability of it.

Software

See haxo-rs for details about the software.

Manufacturing

The circuit boards were manufactured by JLPCB, who also assembled the surface mount parts.

Bill of Materials

The table below shows the main parts required to build a full Haxophone. Prices are rough estimates based on purchases made for prototypes. Shipping costs or taxes not included.

Qty	Part Description	Manufacturer	MPN	Supplier	Estimated cost USD (at quantity 5)
1	Partially-assembled Haxo HAT PCB (small SMD parts populated)	N/A	N/A	Several	$15
1	Differential pressure SMD sensor	NXP	MPXV7007DP	Arrow	~~$10~~ Post-Covid: $24
1	Set of 3D printed parts	N/A	N/A	Several	$4
1	30cm Food grade Silicon Tube ID:3mm/OD:6mm	JUNZHIDA	N/A	Amazon	$2
22	Tactile-feedback 5-pin mechanical switches	Cherry MX	MX-Brown	Banggood	$11
22	Keycaps For Mechanical Keyboards	Many options!			$10
2	4-pin 0.1in Pin Header Con Right Angle	Samtec	TSW-102-25-T-D-RA	Arrow	$2
2	4-pin 0.1in Pin Socket Con Straight	TE Connectivity	215309-2	Arrow	$2
1	40-pin 0.1in Pin Header Connector	TE Connectivity	2-535542-0	Arrow	$2
6	Mounting Bracket L-shape	Keystone	612	Mouser	$1.5
18	4-40 1/4 screws and nuts stainless	Keystone	9900, 4694	Mouser	$1
4	M2/7mm machine screws flat head stainless	Master-Carr	92010A003	Master-Carr	$0.5
3	7/16in aluminum spacers	Fascomp	FC1636-440-A	Mouser	$1
1	Sax Mouthpiece + Reed	N/A	N/A	N/A	Bring your own (but optional)
1	Neck Strap	N/A	N/A	N/A	Bring your own (but optional)
1	Raspberry Pi Zero	Broadcom	Raspberry Pi Zero	Many	$5
1	16 GB SD Card	Many	N/A	Many	$6
~~Total~~					~~$73~~ (Pre-Covid)
Total					$97 (Post-Covid)

Assembly Instructions

See Assembly Guide

TODO list

If you would like to help claim one of the open issues or create a new one for yourself. If you prefer to stay in software land, head out to the software issues.

License and Contributions

See License. We'll gladly accept contributions via Pull Requests. Contributions are accepted under the same License of the project, as captured in github's terms of service.

If you plan to contribute a major feature or improvement, consider posting your proposed design as an issue before implementing it.

Acknowledgements

Ben Gonzales has been a great source of inspiration and encouragement. His midi-Sax is a great project worth checking out.

erasmus-without-paper/ewp-specs-api-iias

2023-09-11T01:44:48Z

Specifications of EWP's Interinstitutional Agreements API.

Interinstitutional Agreements API

Summary

This document describes the Interinstitutional Agreements API. This API allows partners to compare their copies of interinstitutional Erasmus+ mobility agreements with each other, which makes it easier to spot errors. This API is complementary with the Interinstitutional Agreements Approval API where HEIs can approve agreements they exchange via the IIAs API.

Introduction

As part of the EWP project, we have thoroughly discussed many options of how to design the functionality of synchronizing IIAs between different HEIs. The IIAs API is the final result.

Features

It is distributed. Agreements (IIAs) are stored and hosted only by the institutions involved in these agreements. If the institutions use the IIA Manager (part of the Dashboard), their agreements are stored in the Dashboard repository.
All partners are equal. There is no "master" of the agreement. Since all partners of a single IIA are allowed to serve their copies of this IIA, therefore multiple conflicting copies of a single IIA may exist in the network. These conflicts are not resolved by the system itself, but our APIs allow partners to discover such conflicts early (so that they may fix them by themselves).
No history of changes. This API will serve only a single copy of the agreement (with no history of previous versions). This copy should be the copy which is currently in use by the HEI which is serving the API.

Important rules

Electronic versions of IIAs should model their former paper equivalents in a straightforward manner.
Two HEIs sign one or several IIAs with one or several cooperation conditions.
Specifications support IIAs with many cooperation conditions and each node in the network must be able to handle such IIAs to achieve this goal.
Both copies of the same IIA stored in both partners' systems must be presented to each other as exactly one IIA having the same number of corresponding cooperation conditions.
Partners should exchange identifiers of their copies of the IIA to match these copies respectively in their systems.
Regardless of whether a field is mandatory in the API, if it is present in the IIA of one HEI it is highly recommended having it in the matched IIA of the partner HEI.
Providers are free to implement their local solutions to best support the needs of their customers but under the condition that the general principle expressed in the points above is maintained.
Termination of an IIA, which has been mutually approved, should be treated as an agreement modification if any exchanges already took place. Otherwise, it should be treated as termination of the whole agreement.
To modify an IIA which has been mutually approved, HEIs SHOULD take a snapshot of the last approved version to be able to revert to it if they don't conclude a new approved version of the agreement.
An IIA that has not been mutually approved can be deleted by removing it from the EWP network. Such IIA MUST not be present in any of the IIA endpoints and an IIA CNR MUST be sent (see CNR client part section). An IIA can be removed from the EWP network only if it is permanently deleted. Identifiers of the deleted objects MUST NOT be reused for new IIAs.

Fact sheet information

If you compare our IIA XSDs to the official IIA template from the European Commission, for years 2021-20[29], you may notice that many fields seem to be missing in our XSDs. This is because we have decided to include many fields in the Institutions API and the Factsheet API instead. That is why both of the mentioned APIs MUST be implemented to use this API.

Based on the official IIA template from the European Commission for years 2021-20[29], we follow the following rules:

General information that is part of Higher Education Institutions’ profile and made publicly available to students is part of the Institutions API (and - in some cases - Organizational Units API) and the Factsheet API. The general information can be updated without formal approval of the partner.
Data on the terms of agreement that needs to be approved by both partners is part of this API. The approval is done in the IIAs Approval API.

Business requirements and processes

Business requirements and processes document clarifies the requirements for the technical solutions developed under EWP and in the local implementation that should adequately support the business processes related to the approval of IIAs at Higher Education Institutions.

IIA hash calculation

As of IIA version 7 each agreement contains an iia-hash element that replaces the conditions-hash element used in previous versions of this API.

To calculate the new hash an IIA get response XML has to be transformed using the appropriate XSLT template provided:

You can test these transformations using the provided Java class

You may need to find the right XSLT processor for these templates to work. For Java Saxon-HE-9.5.1-8.jar processor works, the previous versions fail. For more details please go to XSLT kit resources.

Security

This version of this API uses standard EWP Authentication and Security, Version 2. Server implementers choose which security methods they support by declaring them in their Manifest API entry.

Endpoints and functionality to be implemented

Server implementers MUST:

Implement the get endpoint.
Implement the index endpoint.
Implement the stats endpoint
Put the URLs of these endpoints in their manifest file, as described in manifest-entry.xsd.

The details on each of these endpoints are described on separate pages of this API specification (use the links above).

Implementers also MUST implement a Notification Sender for Interinstitutional Agreement objects. That means that an EWP host will try to deliver notifications to all Interinstitutional Agreement CNR APIs implemented throughout the EWP Network whenever related agreement objects are updated.

Data model entities involved in the response

IIA
IIA Partner
Cooperation Condition
Coordinator
Person

fulcrum-so/ziggy-pydust

2023-09-11T01:45:04Z

A toolkit for building Python extensions in Zig.

GitHub 1C Enterprise Daily Trending

ziglang/zig

PPSSPP - a fast and portable PSP emulator

What's new in 1.16

What's new in 1.15.4

What's new in 1.15.3

What's new in 1.15.2

What's new in 1.15.1

What's new in 1.15

Adhoc support

ckolderup/postmarks

AppleJuice

Apple BLE Proximity Pairing Message Spoofing

🔴 Disclaimer

Updates

Flipper Zero

To install it now, follow the guide below from the Xtreme Firmware page to clone and compile the current dev build that contains the Apple BLE Spam app.

ESP-32

Android

About This Project

Hardware Requirements

Installation Instructions

Clone the Main Repo

Install dependencies

Dependencies requiring manual installation

Install requirements

Execute scripts without sudo

Reboot Machine

Usage

Before running the script, check that your Bluetooth adapter is connected and showing as hci0

Available options

Examples

Credit

Ironclad/rivet

Rivet

Download | Website | Documentation

About Rivet

Rivet Application

Rivet Core

Getting Started

Prebuilt Binaries

Latest downloads

All Releases

Running from Source

Contributing

Code of Conduct

Troubleshooting

Contributors ✨

statichunt/geeky-astro

nixcon/2023.nixcon.org

Xilinx/meta-kria

cedev935/OpenChat

AnnulusGames/MagicTween

Magic Tween

Overview

Table of Contents

Features

Performance

Samples

Setup

Requirement

Install

Basic Usage

Extension Methods

Classification

Tweening Custom Value

Avoiding Allocations

Tween Control

Getting Tween Information

Adding Settings

SetEase

SetLoops

SetPlaybackSpeed

SetDelay

SetIgnoreTimeScale

SetRelative

SetInvert

SetId

SetLink

SetAutoPlay

Execute scripts without `sudo`

Before running the script, check that your Bluetooth adapter is connected and showing as `hci0`