Ivan Kozik

I see the same on Ubuntu 14.04: ``` # nodejs nodeqt-demo.js nodejs: /home/at/.node-gyp/0.10.30/src/node_object_wrap.h:61: static T* node::ObjectWrap::Unwrap(v8::Handle) [with T = QApplicationWrap]: Assertion `handle->InternalFieldCount() > 0' failed. zsh: abort nodejs nodeqt-demo.js ```

Ah, it needs a `.bind()`: see https://github.com/arturadib/node-qt/pull/29

I see that `LessSafeKey::open_in_place_separate_tag` landed in https://github.com/briansmith/ring/commit/2896a014de94d670a6913156c9f31d8de8a2323b and it is much appreciated.

I have just noticed that `COMP`, `DEFL`, `DOCL`, and `INFO` also run `Code.eval_string` on attacker-provided input, so disabling `EVAL` is not enough either. ``` alchemist-server:master# rg eval_string lib/api/comp.exs 32: aliases:...

The DNS rebinding attack happens in the *browser*: e.g. domain.com is first 1.2.3.4 and is then swapped to 127.0.0.1, hitting your local server.

@LucasPickering if you're using PostgreSQL, I believe you can do ```rust use sqlx::postgres::PgPoolOptions; let pg_pool = PgPoolOptions::new() .after_connect(|conn| Box::pin(async move { conn.execute("SET default_transaction_isolation TO 'repeatable read'").await?; Ok(()) })) .connect(&uri).await?; ```

I have problems with the openssl crate as well on NixOS. I can either get fast linking with `lld` or working `openssl` linking, but not both. Edit: I just noticed...

Maybe take a look at https://github.com/libimobiledevice-win32/libimobiledevice (note: I have not tested this)

It does not make any sense to detect nicks in the middle of messages: I'm in a channel with a bot named `the`. Every "the" is highlighted. This is nonsense....

I believe wpull and ludios_wpull do this if `psutil` is installed (`psutil>=2.0,