gchq-7703

Joined 8 years ago

Karma

Submissions

Member since

Oct 11

Recent submissions

CyberChef has been around for many years now, which definitely helps. It also has no plans for monetization and runs entirely locally, so there's no chance of a 'rug pull'. It was a long journey to the current ~800k monthly users though. I suspect it was just time and place, as opposed to any technical reasons.

Comment · 2 years ago

There's a lot of CyberChef hosted domains that aren't hosted by GCHQ. It's open source, so they're doing nothing wrong, but we can't provide assurances about the code on those sites. The official URL is https://github.com/gchq/CyberChef.

Comment · 2 years ago

Example recipe to do it for you:

    https://gchq.github.io/CyberChef/#recipe=To_Upper_case('All')To_Base32('A-Z2-7%3D')

It looks like 'cryptii' also appears to do all processing client-side.

Comment · 2 years ago

CyberChef supports offline usage, just save the page!

If you want a "quick" way to add a bunch more operators, all of ours are available via the 'cyberchef' NPM package[0] and the license permits embedding into other applications.

[0] https://github.com/gchq/CyberChef/wiki/Node-API

Comment · 2 years ago

This was released March 2019 as part of the RSA conference[0]

[0] https://www.rsaconference.com/Library/presentation/USA/2019/...

Comment · 2 years ago

I'll pop them a message, assuming you haven't found their contact details already. :)

Comment · 2 years ago

It uses a combination of magic bytes (like the `file` command), entropy analysis and character frequency detection to determine whether an output is likely to be of interest to the user.

The file type mechanism is written here[0]. There's a list of all signatures we detect here[1]. The magic implementation is here[2].

[0] https://github.com/gchq/CyberChef/blob/master/src/core/lib/F... [1] https://github.com/gchq/CyberChef/blob/master/src/core/lib/F... [2] https://github.com/gchq/CyberChef/blob/master/src/core/lib/M...

Comment · 3 years ago

I don't believe that's true. Consider this infinite generator:

    async function* infinite() {
      while (1) {
        yield 'example'
      }
    }

    (async function () {
      for await (const value of infinite()) {
        console.log(value)
      }
    })()

If the generator was consumed all at once, this would never print (because the generator is infinite). `for await... of` should only consume a single step of the stream / generator at a time. It's just syntactic sugar for the usual calls to .next() and etc. See the docs here[0]

[0] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...

Comment · 3 years ago

We use both Dependabot and CLA Assistant on one of our projects. It's an easy setting in CLA Assistant to whitelist Dependabot, although it did catch us out in the beginning.

Comment · 3 years ago

This is from the same person who made SponsorBlock[0] for YouTube, which strips in-video advertising and sponsored segments.

[0] https://addons.mozilla.org/en-GB/firefox/addon/sponsorblock/

Comment · 3 years ago

Interesting. What makes you want to switch to the file system? I wrote one for a project[0] a while back (for MongoDB) and it didn't seem like the database introduced too much complexity. I didn't write the implementation from scratch, but the couple hundred lines of code were easy to reason about.

[0] https://github.com/gchq/Bailo/tree/main/lib/p-mongo-queue

Comment · 3 years ago

> If thse are DIV what they hell are you setting tabindex — a value for focusable elements — on them for?

Seems to be because in the original example each of the divs have an 'onClick' assigned to them, so 'tabindex' is the right way to make them focusable by a keyboard user.

          <v-list-item @click="method">
            <v-list-item-title>Option 1</v-list-item-title>
          </v-list-item>

Comment · 3 years ago

This is possible with a single `tsconfig.json` change[0]. This is also the default mode if you've set the 'strict' flag.

[0] https://www.typescriptlang.org/tsconfig#noImplicitAny

Comment · 3 years ago

False positives / false negatives are important to note. It is likely that they're saying that out of 100,000 scanned files, 10,000 to 20,000 will not include child sexual abuse.