stories

Weird S3 List Permission

2 minute read Published: 2021-06-20

S3's file storage system employs a flat namespace architecture, where all objects are stored as key-value pairs without hierarchical folders. While most interfaces simulate folder hierarchies using / as a path delimiter, this abstraction can introduce security risks when designing access policies for list operations.

Browser Scratch File Editor

1 minute read Published: 2020-07-22

Developers often require ephemeral scratch files for temporary note-taking during workflow without the overhead of context switching. To address this need, a browser-native text editor solution leverages data URLs to create lightweight, on-the-fly text editors.

Linux Input Injection Through Unusual Methods

2 minute read Published: 2020-07-18

For people familiar with Unix philosophy, ["Everything is a file"][everyting_is_file] is a common phrase. Rarely do we get a case to use it in practice. This is one of those cases.