Hey there. 👋 Novice homebrewing is great. Losing temperature during the mash isn't. This post is all about keeping temps with small batch sizes and stainless steel mash tuns. I did what my partner calls a "tiny science" and collected data on my stock pot, and how
TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access token. Upgrade to versions 4.4.0, 5.0.0.rc2 or later The Problem Any OAuth application that uses public/non-confidential authentication
Software Description Doorkeeper is a Ruby gem that makes it easy to introduce OAuth 2 provider functionality to a Rails or Grape application. Depending on how a developer uses the gem, they may allow any registered user to create OAuth client applications in their software. CVSSv3 Base Score: 7.6
There comes a time where regardless of your unit testing you have errors in production. But, alas, the exception isn't in your controller itself but the view! There has been a quick and dirty way of getting the full stack trace in console for a while but it
TL;DR: Once a user successfully provides a valid OTP, that OTP can be replayed for the duration of the timestep. Upgrade to version 2.0.0 or higher. The Problem Devise-Two-Factor implements RFC 6238 which defines a way to provide what is commonly known as Two-Factor
TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access token. Upgrade to version 4.1.1, 3.1.1, or 2.2.3 The Problem Doorkeeper implements OAuth 2.0 access & refresh
Update (May, 2017): AOSP has written a FORMAT.md document that is more up-to-date than this article. It will likely be the living document for detailing how animation works in Android. This article is kept for posterity. So you're an Android wizz and want to further
TL;DR you can download the RL Grime screensaver I build here (Mac OS X only) RL Grime's music video For some reason my brain absolutely loves looping over this same song over and over again. It's called Core by RL Grime and the visuals are
If this post is greek to you, take a look at my Ember CLI and Content Security Policy (CSP) blog post. Earlier this month, I had the opportunity to speak at the Toronto EmberJS Meetup, a monthly meeting at Pharmacy (pictured above), about Ember CLI and Content Security Policy. I
As of Ember CLI v0.0.47 there is now built-in support for Content Security Policy in our apps! WTF is a CSP? It's a beautiful defence against XSS attacks. You simply send a HTTP header in server your response. A example policy would be: Content-Security-
I had the opportunity to help my employer, FreshBooks, implement a responsible disclosure policy. As it turns out, it's very difficult to offer a PGP key while maintaining trust, security, and convenience. In this post I hope to outline the struggles, the roadblocks, and practical strategy surrounding PGP