mastodon.ie

Michael RoweCompletely refactored my server. Registration API working fine, put APN still not working. Sigh <a href="https://mstdn.social/tags/apple" class="mention hashtag" rel="nofollow noopener" target="_blank">#apple</a> <a href="https://mstdn.social/tags/developer" class="mention hashtag" rel="nofollow noopener" target="_blank">#developer</a> <a href="https://mstdn.social/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a>

The Curious GuyIntroducing node-cmd-exec for Node.js! 🎉Run shell commands like a pro, async or sync, Promises & callbacks supported, zero dependencies.Unleash the full power of Node.js scripting! 🌟 Star the repo - your support means a lot!🔗 npm: <a href="https://www.npmjs.com/package/node-cmd-exec" rel="nofollow noopener" translate="no" target="_blank">https://www.npmjs.com/package/node-cmd-exec</a> 🔗 GitHub: <a href="https://github.com/DhanushNehru/node-cmd-exec" rel="nofollow noopener" translate="no" target="_blank">https://github.com/DhanushNehru/node-cmd-exec</a>❤ + 🔁 Like + RT for reach.<a href="https://mastodon.social/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a> <a href="https://mastodon.social/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a> <a href="https://mastodon.social/tags/developer" class="mention hashtag" rel="nofollow noopener" target="_blank">#developer</a> <a href="https://mastodon.social/tags/npm" class="mention hashtag" rel="nofollow noopener" target="_blank">#npm</a> <a href="https://mastodon.social/tags/like" class="mention hashtag" rel="nofollow noopener" target="_blank">#like</a> <a href="https://mastodon.social/tags/technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#technology</a> <a href="https://mastodon.social/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#ai</a> <a href="https://mastodon.social/tags/ChatGPT" class="mention hashtag" rel="nofollow noopener" target="_blank">#ChatGPT</a> <a href="https://mastodon.social/tags/technews" class="mention hashtag" rel="nofollow noopener" target="_blank">#technews</a>

ReynardSecA grumpy ItSec guy walks through the office when he overhears an exchange of words.Dev0: Hey, this isn't working, I hate containers... Dev1: Maybe just add the --privileged flag!ItSec: Just… no. Simply no. No privileged mode - the grumpy fellow interjects as he walks away.Dev0: Jesus, fine - no privileged mode. Dev1: Okay, but… why?Here's why (one, simple example): Docker's --privileged flag lifts almost all restrictions from your container - exactly the opposite of --cap-drop=ALL. Let's demo the difference. 1) Start two containers. docker run -itd --privileged --name ubuntu-privileged ubuntu docker run -itd --name ubuntu-unprivileged ubuntu2) Inspect /dev in the unprivileged container.docker exec -it ubuntu-unprivileged bash ls /dev exitYou'll only see a limited set of devices. No disk access. 3) Now inspect /dev in the privileged container.docker exec -it ubuntu-privileged bash ls /dev/dev/sda exposed! Sometimes you may see /dev/mapper when LVM is in place. Then "apt update && apt install -y lvm2" and "lvscan" may help during next phase. 4) Exploitation part (inside the privileged container) - simply mount /dev/sda to any writable path in container.mkdir /tmp/whatever mount /dev/sda1 /tmp/whatever5) You can now enumerate - and access - the Docker host's logical volume.ls -la /tmp/whatever6) If you wish, you can even chroot into the host:chroot /tmp/whatever /bin/bashThe moral of the story is to avoid privileged mode, because in the event of an incident (e.g. an attacker compromising an app running inside a container), you significantly increase the likelihood of successful lateral movement from the container to the Docker host - and from there into the rest of your infrastructure.Usually the grumpy guy means well. He just doesn't know how to explain it properly.<a href="https://infosec.exchange/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devops</a> <a href="https://infosec.exchange/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a> <a href="https://infosec.exchange/tags/webdev" class="mention hashtag" rel="nofollow noopener" target="_blank">#webdev</a> <a href="https://infosec.exchange/tags/java" class="mention hashtag" rel="nofollow noopener" target="_blank">#java</a> <a href="https://infosec.exchange/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/php" class="mention hashtag" rel="nofollow noopener" target="_blank">#php</a> <a href="https://infosec.exchange/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a>

🦠Toxic Flange (Gurjeet)🔬⚱️🌚Ugh 2:40 am and I just wanna figure out the best way to make a simple a <a href="https://infosec.exchange/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a> / <a href="https://infosec.exchange/tags/express" class="mention hashtag" rel="nofollow noopener" target="_blank">#express</a> app. Mostly to learn it as a back end service but for uploading files to or cobble together a simple API.. Spent all night just pursuing mangafire/mangadex instead. Dummy.

Frontend DogmaNode.js Is Growing Up: 3 Major Releases That Changed the Game, by <a href="https://mas.to/@hackernoon" class="u-url mention" rel="nofollow noopener" target="_blank">@hackernoon</a>:<a href="https://hackernoon.com/nodejs-is-growing-up-3-major-releases-that-changed-the-game" rel="nofollow noopener" translate="no" target="_blank">https://hackernoon.com/nodejs-is-growing-up-3-major-releases-that-changed-the-game</a><a href="https://mas.to/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a> <a href="https://mas.to/tags/history" class="mention hashtag" rel="nofollow noopener" target="_blank">#history</a>

Ben HardillOK, who decided that in``` for (const index in array) {...} ```index should be a string and not an number?<a href="https://bluetoot.hardill.me.uk/tags/NodeJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NodeJS</a>

Frontend DogmaProposal—Shift Node.js to Annual Major Releases and Shorten LTS Duration, by @rafaelgss.dev:<a href="https://github.com/nodejs/Release/issues/1113" rel="nofollow noopener" translate="no" target="_blank">https://github.com/nodejs/Release/issues/1113</a><a href="https://mas.to/tags/discussions" class="mention hashtag" rel="nofollow noopener" target="_blank">#discussions</a> <a href="https://mas.to/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a>

HackerNoonA technical overview of Node.js versions 22, 23, and 24 detailing key ECMAScript updates, native Web APIs, performance enhancements, and security improvements. <a href="https://hackernoon.com/nodejs-is-growing-up-3-major-releases-that-changed-the-game" rel="nofollow noopener" translate="no" target="_blank">https://hackernoon.com/nodejs-is-growing-up-3-major-releases-that-changed-the-game</a> <a href="https://mas.to/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a>

Greg Slepak<a class="hashtag" href="https://crib.social/tag/javascript" rel="nofollow noopener" target="_blank">#JavaScript</a> developers: do not use `npx`, ever. Use <a class="u-url mention" href="https://fosstodon.org/@deno_land" rel="nofollow noopener" target="_blank">@deno_land</a>'s `deno run` instead with appropriate sandboxing flags. Example: <a href="https://github.com/okTurtles/chel/pull/58/files" rel="nofollow noopener" target="_blank">https://github.com/okTurtles/chel/pull/58/files</a> <a class="hashtag" href="https://crib.social/tag/nodejs" rel="nofollow noopener" target="_blank">#nodejs</a> <a class="hashtag" href="https://crib.social/tag/npx" rel="nofollow noopener" target="_blank">#npx</a> <a class="hashtag" href="https://crib.social/tag/infosec" rel="nofollow noopener" target="_blank">#infosec</a> <a class="hashtag" href="https://crib.social/tag/security" rel="nofollow noopener" target="_blank">#security</a>

Socket🚨 New Threat Research: We uncovered 4 malicious packages (3 on npm, 1 on PyPI) with 56,000+ downloads, all delivering surveillance malware capable of keylogging, screen capture, and webcam access.Here’s what we found: <a href="https://socket.dev/blog/surveillance-malware-hidden-in-npm-and-pypi-packages" rel="nofollow noopener" translate="no" target="_blank">https://socket.dev/blog/surveillance-malware-hidden-in-npm-and-pypi-packages</a> <a href="https://fosstodon.org/tags/NodeJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NodeJS</a> <a href="https://fosstodon.org/tags/JavaScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#JavaScript</a> <a href="https://fosstodon.org/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a>

Socket🚨 A critical vulnerability in the widely used npm form-data package could allow HTTP Parameter Pollution, potentially impacting millions of projects. The package sees 100M+ downloads weekly.Details → <a href="https://socket.dev/blog/critical-vulnerability-in-popular-npm-form-data-package" rel="nofollow noopener" translate="no" target="_blank">https://socket.dev/blog/critical-vulnerability-in-popular-npm-form-data-package</a> <a href="https://fosstodon.org/tags/NodeJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NodeJS</a> <a href="https://fosstodon.org/tags/JavaScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#JavaScript</a>

SocketBun 1.2.19 introduces isolated installs for monorepos, smarter package management, and 5x faster Bun.sql. 🎉 Congrats to <a href="https://hachyderm.io/@jarredsumner" class="u-url mention" rel="nofollow noopener" target="_blank">@jarredsumner</a> and all the <a href="https://bird.makeup/users/bunjavascript" class="u-url mention" rel="nofollow noopener" target="_blank">@bunjavascript</a> contributors: <a href="https://socket.dev/blog/bun-1-2-19-adds-isolated-installs-for-better-monorepo-support" rel="nofollow noopener" translate="no" target="_blank">https://socket.dev/blog/bun-1-2-19-adds-isolated-installs-for-better-monorepo-support</a> <a href="https://fosstodon.org/tags/NodeJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NodeJS</a>

HackerNoonIs Node.js really as slow as it has been portrayed by competitors? <a href="https://hackernoon.com/myth-vs-reality-real-world-runtime-performance-of-nodejs-deno-and-bun" rel="nofollow noopener" translate="no" target="_blank">https://hackernoon.com/myth-vs-reality-real-world-runtime-performance-of-nodejs-deno-and-bun</a> <a href="https://mas.to/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a>

Bardnet"Hours after we reported on the npm phishing campaign using the typosquatted npnjs.com site, we’re now seeing the first major fallout: popular npm packages, including eslint-config-prettier and eslint-plugin-prettier, were compromised" <a href="https://icosahedron.website/tags/eslint" class="mention hashtag" rel="nofollow noopener" target="_blank">#eslint</a> <a href="https://icosahedron.website/tags/npm" class="mention hashtag" rel="nofollow noopener" target="_blank">#npm</a> <a href="https://icosahedron.website/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a><a href="https://socket.dev/blog/npm-phishing-campaign-leads-to-prettier-tooling-packages-compromise" rel="nofollow noopener" translate="no" target="_blank">https://socket.dev/blog/npm-phishing-campaign-leads-to-prettier-tooling-packages-compromise</a>

Socket🚨 npm phishing alert! Attackers are sending emails from spoofed support@npmjs.org addresses linking to a typosquatted clone site (npnjs.com) to steal credentials. This attack is designed to hijack npm accounts. <a href="https://socket.dev/blog/npm-phishing-email-targets-developers-with-typosquatted-domain" rel="nofollow noopener" translate="no" target="_blank">https://socket.dev/blog/npm-phishing-email-targets-developers-with-typosquatted-domain</a> <a href="https://fosstodon.org/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a> <a href="https://fosstodon.org/tags/JavaScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#JavaScript</a>

Joe Lanmanfor hot reloading changes, the govuk prototype kit uses nodemon on the back end, and browsersync on the front end. Is this an old way to do it? I get the impression vite can do both but I'm not entirely sure from the docs.<a href="https://hachyderm.io/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a> <a href="https://hachyderm.io/tags/javascript" class="mention hashtag" rel="nofollow noopener" target="_blank">#javascript</a> <a href="https://hachyderm.io/tags/webdev" class="mention hashtag" rel="nofollow noopener" target="_blank">#webdev</a>

Frontend DogmaModern Node.js Patterns for 2025, by (not on Mastodon or Bluesky):<a href="https://kashw1n.com/blog/nodejs-2025/" rel="nofollow noopener" translate="no" target="_blank">https://kashw1n.com/blog/nodejs-2025/</a><a href="https://mas.to/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a> <a href="https://mas.to/tags/softwaredesignpatterns" class="mention hashtag" rel="nofollow noopener" target="_blank">#softwaredesignpatterns</a> <a href="https://mas.to/tags/esm" class="mention hashtag" rel="nofollow noopener" target="_blank">#esm</a> <a href="https://mas.to/tags/apis" class="mention hashtag" rel="nofollow noopener" target="_blank">#apis</a> <a href="https://mas.to/tags/testing" class="mention hashtag" rel="nofollow noopener" target="_blank">#testing</a> <a href="https://mas.to/tags/asynchronicity" class="mention hashtag" rel="nofollow noopener" target="_blank">#asynchronicity</a> <a href="https://mas.to/tags/streaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#streaming</a> <a href="https://mas.to/tags/workerthreads" class="mention hashtag" rel="nofollow noopener" target="_blank">#workerthreads</a> <a href="https://mas.to/tags/dx" class="mention hashtag" rel="nofollow noopener" target="_blank">#dx</a> <a href="https://mas.to/tags/monitoring" class="mention hashtag" rel="nofollow noopener" target="_blank">#monitoring</a> <a href="https://mas.to/tags/deploying" class="mention hashtag" rel="nofollow noopener" target="_blank">#deploying</a> <a href="https://mas.to/tags/errors" class="mention hashtag" rel="nofollow noopener" target="_blank">#errors</a>

洪民憙 (Hong Minhee)Upyo 0.2.0 Release Notes <a href="https://hackers.pub/@hongminhee/2025/upyo-020" rel="nofollow noopener" translate="no" target="_blank">https://hackers.pub/@hongminhee/2025/upyo-020</a>

Felipe 🐁Updates are here!<a href="https://nodejs.org/en/blog/vulnerability/july-2025-security-releases" rel="nofollow noopener" translate="no" target="_blank">https://nodejs.org/en/blog/vulnerability/july-2025-security-releases</a><a href="https://hachyderm.io/tags/software" class="mention hashtag" rel="nofollow noopener" target="_blank">#software</a> <a href="https://hachyderm.io/tags/dev" class="mention hashtag" rel="nofollow noopener" target="_blank">#dev</a> <a href="https://hachyderm.io/tags/node" class="mention hashtag" rel="nofollow noopener" target="_blank">#node</a> <a href="https://hachyderm.io/tags/nodejs" class="mention hashtag" rel="nofollow noopener" target="_blank">#nodejs</a> <a href="https://hachyderm.io/tags/JavaScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#JavaScript</a> <a href="https://hachyderm.io/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Ducky FellaIs your company looking for a keen self-hoster with plenty of <a href="https://cupoftea.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> experience? I grew up with <a href="https://cupoftea.social/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> and have picked up many skills along the way including <a href="https://cupoftea.social/tags/React" class="mention hashtag" rel="nofollow noopener" target="_blank">#React</a>, backend JavaScript (<a href="https://cupoftea.social/tags/NodeJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NodeJS</a>) and <a href="https://cupoftea.social/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a>. My current obsession is monitoring all the things with <a href="https://cupoftea.social/tags/Grafana" class="mention hashtag" rel="nofollow noopener" target="_blank">#Grafana</a>, <a href="https://cupoftea.social/tags/PRTG" class="mention hashtag" rel="nofollow noopener" target="_blank">#PRTG</a> and <a href="https://cupoftea.social/tags/Prometheus" class="mention hashtag" rel="nofollow noopener" target="_blank">#Prometheus</a>. I’m based in the UK but open to primarily English-speaking roles in Germany, too. Currently wrapping up my Advanced Software Development degree but eager to continue learning! Boosts appreciated :D<a href="https://cupoftea.social/tags/GetFediHired" class="mention hashtag" rel="nofollow noopener" target="_blank">#GetFediHired</a>

Recent searches

Search options

Administered by:

Server stats:

#nodejs

Recent searches

Search options

Administered by:

Server stats:

NodeJs

#nodejs