arianvp

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

ample-samples

-- Utility functions for matrix.dot
local function dotScalar1dVector(scalar, v1)
	local outputVector = {}
	for i = 1, #v1, 1 do
		outputVector[i] = v1[i] * scalar
	end
	return matrix(outputVector)
end

local function dotScalar2dVector(scalar, v1)

sancar

And upgradable read write lock for go

UpgradableRWMutex is an enhanced version of the standard sync.RWMutex. It has the all methods sync.RWMutex with exact same semantics. It gives more methods to give upgradable-read feature.

The new semantics for upgradable-read are as follows:

• Multiple goroutines can get read-lock together with a single upgradable-read-lock.
• Only one goroutine can have a write-lock and no read-lock/upgradable-read-lock can be acquired in this state.

cpursley

PostgreSQL is Enough

• Simplify: move code into database functions
• Just Use Postgres for Everything
• Just use Postgres
• PostgreSQL is the worlds’ best database
• Postgres is eating the database world
• Hacker News discussion

Background and Cron Jobs

kconner

macOS Internals

Understand your Mac and iPhone more deeply by tracing the evolution of Mac OS X from prelease to Swift. John Siracusa delivers the details.

Starting Points

How to use this gist

You've got two main options:

tgross

#!/usr/bin/env bash
set -euo pipefail

help() {
    cat <<EOF
vmctl [COMMAND] [ARGS]

Launch firecracker VMs from configuration templates with networks
managed by CNI. VM configuration is stored in $VM_CONFIG_DIR
and network configuration is stored in $NET_CONFIG_DIR

thibaultcha

The Nginx code style asks for a specific alignment of variables declarations that is strainuous to manually enforce:

size_t                    slen;
uint32_t                  hash;
ngx_int_t                 rc;
const u_char             *p;
ngx_shm_zone_t           *shm_zone;
ngx_slab_pool_t          *shpool;
ngx_rbtree_node_t        *node, *sentinel;
ngx_ssl_session_t *sess;

ayende

#include "stdafx.h"
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <openssl/ssl.h>
#include <openssl/err.h>
#include <uv.h>

#define DEFAULT_PORT 7000
#define DEFAULT_BACKLOG 128

everilae

from sqlalchemy.ext.compiler import compiles
from sqlalchemy.dialects import plugins
from sqlalchemy.dialects.mysql.json import JSONIndexType, JSONPathType
from sqlalchemy.engine import CreateEnginePlugin

from sqlalchemy.sql.elements import BinaryExpression
from sqlalchemy.sql import sqltypes
from sqlalchemy.sql.operators import \
    json_getitem_op, \
    json_path_getitem_op

AtulKsol

1. pg_dump is a nifty utility designed to output a series of SQL statements that describes the schema and data of your database. You can control what goes into your backup by using additional flags.
   Backup: pg_dump -h localhost -p 5432 -U postgres -d mydb > backup.sql

   Restore: psql -h localhost -p 5432 -U postgres -d mydb < backup.sql

   -h is for host.
   -p is for port.
   -U is for username.
   -d is for database.