LightNews LightNews
lafayetteduarte.bsky.social
@lafayetteduarte.bsky.social
31 followers 160 following 22 posts
Posts Replies Media Videos
Reposted
dnsmichi.dev
Gold. 😂

www.reddit.com/r/csMajors/s...
Reddit My team's intern just found a critical bug by shitposting in our codebase Join So our summer intern (who l'm 90% sure is a professional shitposter moonlighting as a dev) just saved our entire authentication service by being, well, an absolute agent of chaos. Background: We have this legacy auth system that's been running since before TikTok existed. No one touches it. It's documented in ancient Sanskrit and COBOL comments. The last guy who understood it fully left to become a yoga instructor in Peru. Enter our intern. First week, he asks why our commit messages are so boring. Starts adding memes to his. Whatever, right? Then he begins leaving comments in the codebase like: / This function is older than me and probably pays taxes // TODO: Ask if this while loop has health insurance // Here lies Sarah's hopes and dreams (2019-2022), killed by this recursive call The senior devs were split between horrified and amused. But here's where it gets good. He's reading through the auth code (because "the commit messages here are too normal, sus") and adds this gem: Il yo why this token validation looking kinda thic though I/ fr fr no cap this base64 decode bussin // wait... hold up... this ain't bussin at all Turns out his Gen Z spider-sense wasn't just tingling for the memes. Man actually found a validation bypass that's been lurking in our code since Obama's first term. The kind of bug that makes security auditors wake up in cold sweats. The best part? His Jira ticket title: "Auth be acting mad sus rn no cap frfr (Critical Security Issue)" The worst part? We now have to explain to the CEO why "no cap frfr" appears in our Q3 security audit report. The absolute kicker? Our senior security engineer's official code review comment: "bestie... you snapped with this find ngl" I can't tell if this is the peak or rock bottom of our engineering culture. But I do know our intern's getting a return offer, if only because I need to see what he'll do to our GraphQL documentation.
January 24, 2025 at 8:27 AM
lafayetteduarte.bsky.social
Cc @felipperegazio.com spec nova pra spa..

datatracker.ietf.org/doc/draft-ie...
OAuth 2.0 for Browser-Based Applications
This specification details the threats, attack consequences, security considerations and best practices that must be taken into account when developing browser-based applications that use OAuth 2.0. D...
datatracker.ietf.org
December 31, 2024 at 10:04 PM
lafayetteduarte.bsky.social
Cc: @vepo.dev @gomex.me @rafaelponte.bsky.social
www.mdpi.com/2076-3417/14...
Studying the Efficiency of the Apache Kafka System Using the Reduction Method, and Its Effectiveness in Terms of Reliability Metrics Subject to a Copula Approach
This research envisages a system composed of three subsystems connected in series. Each subsystem comprises three units connected in parallel. For the system to function, at least one unit per subsyst...
www.mdpi.com
November 1, 2024 at 3:15 PM