joonas.fi

Some software think that clipboard daemon is not running

2

xfce4-screenshooter shows "Copy to the clipboard" button only if it thinks a clipboard manager is running (screenshot is with xfce4-clipman running):  When I'm running `$ ./clipcatd --no-daemon` (with default...

https://github.com/xrelkd/clipcat/releases/tag/v0.5.0 ```console $ tar -xzf clipcat-v0.5.0-x86_64-unknown-linux-gnu.tar.gz gzip: stdin: not in gzip format tar: Child returned status 1 tar: Error is not recoverable: exiting now $ file clipcat-v0.5.0-x86_64-unknown-linux-gnu.tar.gz clipcat-v0.5.0-x86_64-unknown-linux-gnu.tar.gz: POSIX tar...

Twitter: hitting rate limits - "429 Too Many Requests"

2

I'm running `$ timeliner -twitter-replies -twitter-retweets get-latest twitter/joonas_fi`: ``` 2019/11/30 16:36:03 [ERROR][twitter/joonas_fi] Getting latest: getting items from service: processing tweet from API: processing tweet 123: making item from tweet that...

Twitter: aborts if media download yields "403 Forbidden", e.g. removed by copyright claim

4

Here's the Tweet: https://twitter.com/janl/status/1113015555064201216 Error message: ``` 2019/11/30 18:04:02 [ERROR][twitter/joonas_fi] Getting latest: getting items from service: processing tweet from API: processing tweet 1113180316510957568: making item from tweet that this tweet...

Issues found by static analysis

4

Tasks: * [x] Send PR for most clear issues * [x] Have the above PR be merged * [ ] Agree on a lint rule set * [ ] Fix...

Use fs.FS for filesystem access

2

Go's new FS interface is pretty cool, I've used in quite a few projects to serve files embedded into the binary, to do overlayFS-like stuff (merge multiple directories as one)...

JWT not rejected when audience claim present but not specified by verifying party

1

[Spec](https://tools.ietf.org/html/rfc7519#section-4.1.3): > Each principal intended to process the JWT MUST > identify itself with a value in the audience claim. If the principal > processing the claim does not identify...

Audience parsing doesn't reject unexpected items

1

Because there's no `default:` branch erroring out, I could smuggle any valid JSON there, like `true`, `false`, `null`, any number or an object. https://github.com/kataras/jwt/blob/1639fcff96f82f7ff118fcff6e1fbd0e01754f2c/claims.go#L69 They'll simply be discarded. I don't...

Unnecessary custom base64 implementation

2

Go has [RawStdEncoding](https://pkg.go.dev/encoding/base64#pkg-variables) which makes this unnecessary: https://github.com/kataras/jwt/blob/1639fcff96f82f7ff118fcff6e1fbd0e01754f2c/token.go#L247 Not trying to nitpick here, rather I think security-wise it's dangerous as a concept to mutate untrusted input data before it's fed...