iBotPeaches

A good deal of APIs don't pin SSL certs so MITM works for a solid amount of them.

I do really wish the era of Xbox & Halo 2 modding returned in modern times. I owe that point in time to my career choice and still believe Halo 2 was the most innovative online game of all time.

Just buying a simple tool to load game saves and you could have a soft-modded Xbox in minutes. Now consoles blow e-fuses and prevent downgrades on top of tons of other security enhancements.

Was a great read and trip back in time. Pair this with projects like Insignia launching Halo 2 support and its a great time for classic Halo 2.

I concur - I saw the React Native repo getting spammed with hundreds of similar issues/prs. So many unique usernames and such a cumbersome process to report a painfully obvious spam account. I hit the limit of open abuse reports you could have. My attempt to help was ended - I was only 4 accounts in.

Thought I would get creative and add comments to one of my existing reports of the other 10 or so spam accounts. The tickets were closed and only the main account was deleted - not the others mentioned in the ticket.

So I gave up.

Love this - I can almost imagine the convincing for other companies wasn't even needed when they realized a small binary size and comparison to competitors would net them more business. A perfect little solution for triaging issues between services and comparing solutions.

I write weekly on https://connortumbleson.com using Ghost. Started as a new years resolution I've kept just discussing what crosses my life or mind. My favorite posts:

* https://connortumbleson.com/2017/05/01/the-human-behind-the-... - being an open source maintainer

* https://connortumbleson.com/2018/02/11/stumbling-into-a-mlm-... - wandering into an MLM and researching it

* https://connortumbleson.com/2019/06/02/apktool-in-the-wild/ - finding apktool unintentional markings in a released application

> I decided to see how many commits GitHub (and git) could take before acting kind of wonky. At ~19 million commits (and counting) to master: it’s wonky.

This just doesn't seem right to me. Why? Its obvious at some point you'll harm the service. If the goal was to test it, why not try locally with git.

Was wondering when this might come out. Ghost doing it and having such success seemed like something that would spread to competitors.

Not sure of the legality of it, but I've enjoyed just recording the solar sales folks to knock on my door and turning it into a blog. I enjoy researching the claims brought forward to see how many of them I can debunk.

I submitted my own blog here, but then my intentionally configured HN timeouts locked me out. I was wondering why my little Linode was dying.

Yeah this was an incredibly odd and creepy experience that I continue to investigate here and there. I really appreciate the interviewer for letting me stay on and confront the imposter.

Well glad this was posted. Nothing like seeing you used 12 million GB and 16 million minutes and scaring everyone.

Well this time looks different than the last.

* We get a non-machine message that migrations to GitHub are temporarily disabled.

* We get an exact message that the delivery of webhooks and action kickoff is delayed.

So while there are no 500s - I just have to wait a few more minutes for builds to kick off. So at least I can still review code in the meantime.

It seems like we haven't had a non-robot status update on the status page in days since this what seems like daily occurrence. I figure at this point we'd get something of why this is happening.

I also don't appreciate our builds freezing, unable to be cancelled and then eating up hundreds of minutes.

Initial release sure, but if you are looking at the website linked that was released in 2018 and the last major release (2.6.0) was released in 2021. So don't think 2010 is accurate.

When I moved the project from Google Code to GitHub, GitHub did not allow binary downloads. So I used Bitbucket, changing the download location again after moving did not seem right. So it has just been maintained since the switch. Now in present day they are also uploaded to GitHub and another mirror I host.

This was an interesting security patch that marked the first time in my memory that updating Apache led to an immediate regression. A few hours after taking this upgrade many systems experienced such strange timeout errors. Connections were low and couldn't pinpoint the misleading behavior that looked like a slowloris attack, with no connections.

Half a day later with no resolution in research a new patch [1] was available and problem resolved.

[1] https://github.com/apache/httpd/commit/8720881b0634383145e87...

In our case, we use a mac mini solely for building mobile applications via fastlane with a self-runner. Doing that with the GitHub runner on Mac would be mega expensive. The rest of the CI/test process runs on GitHub runners.

I wonder if the signed features of GitHub would have helped here. Probably can't ask all the 3rd party contributors to setup signing commits, but it would help to spot commits not signed.

Well that was a sad article to read on a Monday morning. If this is what we've just scratched the surface on - I'm nervous to what we don't know in terms of ocean dumping.

Without a major dessert name these releases just feel smaller and not as noticeable. My Pixel upgraded this morning to 11 and just another day.

This is really cool. Just clicking around to various blogs and scanning for articles that perk my interest. It would be pretty cool for blog authors to pick like a top 3 articles or something to help me quickly gauge on top of their description.

This is amazing! Really fun to watch the example in the readme and just shows how much happens behind the scenes nearly instantly.

That was an incredible fun read. Makes me curious of the other failures in this industry if they could be explained in this detail.

Yes, so if the age is under 13 the "Google" option to signup is disabled. So you are forced to use the "Pokemon Trainer" account which I know nothing about.

It looks like its more intended for asset files like PSDs and more where Git conflict management isn't as helpful.

Still looks like GitLab EE only :(

This bug report is a great step in the direction for GitHub. As of this comment there are 3 different GitHub staff members responding and providing feedback to the CocoaPods team. From the previous "Dear GitHub" messages and responses, this seems like perfect community involvement.

Warning as someone who just did that. MySQL is EE only on Omnibus. I switched from Source (MySQL) to Omnibus only to find that MySQL was EE only.

So I had to go back to Source.

That is a tough question. I would just stick with the popular known ones out there: smali, apktool, dex2jar, jeb, jad.

Not true. You can go unzip an apk and for one resources.arsc won't be decoded, classes.dex won't be disassembled and any xml file will be in its binary axml format.

Current maintainer here. Glad to see apktool has been of use for a good deal of businesses.

Happy to answer any questions anyone might have.