# re Published articles for re. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Minimizing the length of regular expressions, in practice DevFeed: [Minimizing the length of regular expressions, in practice]() Original publisher: [Read original article]() Author: Khan Academy Published: 2016-05-23T22:00:00Z Content type: tutorial Language: en Sources: [Khan Academy]() Topics: [Algorithms, Complexity](), [Regular expression](), [Programming](), [cloud-infrastructure]() Tags: [algorithms](), [cdn](), [configuration](), [engineering](), [google](), [hosting](), [infrastructure](), [news](), [re](), [repository](), [software-engineering]() ### AI overview Craig Silverstein explains how Khan Academy needed a compact regular expression to distinguish static URLs from dynamic URLs for CDN routing. The article describes why simple patterns were unsuitable, reports that a naive generated expression reached 402,025 characters, and introduces a second approach that reduced the length to 2,400 characters. ### Source excerpt By Craig Silverstein The problem Software engineering interviews tend to be full of "algorithms" questions, because they're easy ... Read more ## TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering DevFeed: [TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2025-12-17T23:00:00Z Content type: article Language: en Sources: [evilsocket]() Topics: [Reverse Engineering](), [Vulnerabilities](), [Security](), [Embedded Systems](), [Android](), [Amazon Web Services]() Tags: [ai](), [ai-assisted-reverse-engineering](), [android](), [assembly](), [aws](), [china](), [cve](), [cve-2025-14299](), [cve-2025-14300](), [cve-2025-8065](), [cybersecurity](), [embedded-devices](), [embedded-systems](), [exploit](), [firmware](), [ghidra](), [ghidramcp](), [hardcoded-credentials](), [integer-overflow](), [iot](), [iot-security](), [memory](), [mips](), [privacy](), [re](), [reverse-engineering](), [reversing](), [security](), [security-research](), [security-vulnerabilities](), [tapo-c200](), [tapo-camera](), [tp-link](), [tplink](), [vulnerability-research]() ### AI overview This article describes an AI-assisted reverse-engineering investigation of TP-Link Tapo C200 camera firmware. The author reports finding several security vulnerabilities affecting about 25,000 devices directly exposed on the internet, and discusses the tools and process used. ### Source excerpt Hi friends and welcome to the last post for this year! Whenever someone asks me how to get started with reverse engineering, I always giv ## Repeater Strike: manual testing, amplified DevFeed: [Repeater Strike: manual testing, amplified]() Original publisher: [Read original article]() Author: Gareth Heyes Published: 2025-07-15T13:46:37Z Content type: article Language: en Sources: [PortSwigger Research]() Topics: [Testing](), [Vulnerabilities](), [Artificial Intelligence](), [Extension](), [Regular expression](), [JSON](), [API keys](), [Java]() Tags: [ai](), [ai-models](), [extension](), [json](), [parameter](), [re](), [security](), [testing](), [vulnerabilities]() ### AI overview This article introduces Repeater Strike, an AI-powered Burp Suite extension that automates vulnerability hunting from Repeater traffic. It analyzes requests and responses, generates regular expressions, scans proxy history for related IDOR and similar vulnerabilities, and validates findings before creating reusable Strike Rules. ### Source excerpt Manual testing doesn't have to be repetitive. In this post, we're introducing Repeater Strike - a new AI-powered Burp Suite extension designed to automate the hunt for IDOR and similar vulnerabilities ## Configure Karabiner on macOS with Kotlin DevFeed: [Configure Karabiner on macOS with Kotlin]() Original publisher: [Read original article]() Author: Kaushik Gopal Published: 2025-05-17T20:23:40Z Content type: tutorial Language: en Sources: [Kaushik Gopal's Site]() Topics: [Kotlin](), [macOS](), [configuration](), [JSON](), [TypeScript]() Tags: [configuration](), [dsl](), [how-to](), [json](), [keyboard](), [kotlin](), [macos](), [open-source](), [productivity](), [re](), [repo]() ### AI overview This tutorial introduces karabiner-kt, a Kotlin-based DSL for managing Karabiner keyboard configurations on macOS. It addresses the difficulty of maintaining large karabiner.json files and shows how Kotlin rules can generate the JSON consumed by Karabiner. ### Source excerpt If you're obsessed with productivity hacks, you've probably heard of Karabiner - the ultimate tool for keyboard customization on macOS. But maintaining Karabiner's config is a pain. In this post I'll show you a simpler, Kotlin-powered way to wrangle your Karabiner setup, so you don't have to wrestle with massive, unwieldy JSON. On Karabiner ## Here's the gist: Karabiner lets you intercept any keystroke and remap it to... well, pretty much anything. Want to turn Caps Lock into a Hyper key? Make your keyboard launch confetti? It's all possible. Take the classic usecase: remap Caps Lock to Hyper (⌘⌥⌃⇧) when held, Escape when tapped. That's easy to do but just scratches the surface. With Karabiner, you can build many more customizations that supercharge your workflow. Maintaining that karabiner.json ## I was watching a video by Max Stoiber where he uses Raycast1 & Karabiner. But what struck me was how he customized and maintained his karabiner setup. Karabiner runs off a single .json config file. But that .json configuration can become unwieldy and difficult to manage, as your rules grow in complexity. For example: I require a ~2700 line .json for all my hacks. It's impossible to maintain it as pure json. Max uses TypeScript to maintain his rules -which then compiles down to a .json file- that Karabiner can consume. I really like this approach. If you read my previous blog post, I also ran into a very similar problem and used goku, which in turn used the very esoteric and terse edn format. I like TypeScript over edn but you know what I'd like even better? Kotlin! So on a ✈ ride back home, I decided to whip up karabiner-kt. I'm really happy with my solution. Kotlin affords a much more pleasant DSL than most other2 languages. Here's what a Karabiner rule looks like in Kotlin : karabinerRule { description = "Right Cmd -> Ctrl (Enter alone)" mapping { fromKey = RightCommand toKey = RightControl toKeyIfAlone = KeyCode.ReturnOrEnter forDevice { identifiers = DeviceIdentifier.A ## ESP-Knob: A multifunctional smart controller with the ESP32-H2 DevFeed: [ESP-Knob: A multifunctional smart controller with the ESP32-H2]() Original publisher: [Read original article]() Author: John Lee Published: 2025-03-27T10:37:17Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [ESP32](), [Hardware](), [Embedded Software Dev](), [interoperability](), [Home Assistant](), [Matter](), [Espressif]() Tags: [battery](), [ble](), [ble-adv](), [ble-hid](), [ble-mesh](), [blog](), [debugging](), [esp32](), [esp32-h2](), [espressif](), [firmware](), [hardware](), [home-assistant](), [matter](), [re](), [usb](), [zigbee]() ### AI overview The article introduces Espressif's ESP-Knob, a multifunctional smart controller powered by the ESP32-H2. It describes support for Home Assistant and wireless protocols including BLE-HID, Thread, Matter, ESP-BLE-MESH, and Zigbee, along with its push-rotary control, magnetic base, and battery or USB power options. ### Source excerpt This article provides an overview of the ESP-Knob, its features, and functionality. It also details the hardware design and outlines the firmware framework that supports its operation. ## Espressif SoCs and LCD screens: trends and solutions DevFeed: [Espressif SoCs and LCD screens: trends and solutions]() Original publisher: [Read original article]() Author: John Lee Published: 2024-09-30T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [Espressif](), [Internet of things](), [human computer interaction](), [real-time](), [Esp Rainmaker](), [Matter](), [Bluetooth]() Tags: [blog](), [bluetooth](), [connectivity](), [display](), [ecosystem](), [esp-idf](), [esp-rainmaker](), [esp32-p4](), [espressif](), [interface](), [iot](), [lcd](), [mipi](), [re](), [real-time](), [rgb]() ### AI overview This article examines Espressif SoCs that support different LCD driver interfaces for smart home, smart security, industrial, and other applications. It discusses requirements such as performance, low power consumption, compact design, user interaction, and wireless connectivity, along with Espressif development resources and the ESP-RainMaker platform. ### Source excerpt In today's rapidly evolving IoT landscape, LCD screens have become indispensable components of smart devices, providing real-time information and facilitating user interaction. As the demand for higher performance, lower power consumption, and more compact designs grows, it is crucial to choose the right technology to drive LCD screens. This article explores a number of Espressif SoCs that support different LCD driver interfaces, suitable for smart home, smart security, and other applications. ## Firebase App Hosting: Environments & deployment settings DevFeed: [Firebase App Hosting: Environments & deployment settings]() Original publisher: [Read original article]() Author: Julia Reid; Tony Huang Published: 2024-09-12T00:00:00Z Content type: release Language: en Sources: [Firebase Blog]() Topics: [Firebase](), [Deployment](), [hosting](), [configuration](), [Serverless](), [CI/CD](), [Server-side rendering](), [GitHub]() Tags: [app-hosting](), [ci-cd](), [configuration](), [deployment](), [environment-variables](), [firebase](), [github](), [hosting](), [re](), [server-side-rendering](), [serverless](), [ssr](), [updates](), [web]() ### AI overview Firebase App Hosting now supports environment-specific apphosting.yaml configuration files, allowing different environment variables and runtime settings for environments such as production and staging. New deployment settings also let users disable automatic rollouts and change the live branch and root directory. ### Source excerpt News, tutorials, and updates from the Firebase team. ## Reverse Engineering the Apple MultiPeer Connectivity Framework DevFeed: [Reverse Engineering the Apple MultiPeer Connectivity Framework]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2022-10-20T11:05:13Z Content type: tutorial Language: en Sources: [evilsocket]() Topics: [Reverse Engineering](), [Protocol (disambiguation)](), [Python](), [client](), [Network](), [Framework]() Tags: [apple](), [cybersecurity](), [facetime](), [framework](), [ice](), [ios](), [iphone](), [logic-pro](), [mac](), [macos-security](), [mcpeer](), [mcpeerid](), [mdns](), [mpc-framework](), [multipeer](), [multipeerconnectivity](), [network](), [network-packets](), [network-protocol](), [ospf](), [proprietary-protocol](), [protocol-reversing](), [python](), [re](), [reverse-engineering](), [stun](), [tcp](), [undocumented](), [wireshark]() ### AI overview A reverse-engineering investigation of Apple's undocumented Multipeer Connectivity Framework. The article examines its custom TCP protocol, documents network packets, and describes a Python proof-of-concept client that discovers servers, establishes connections, and exchanges application data. It also reports parser vulnerabilities and discusses session spoofing. ### Source excerpt Some time ago I was using Logic Pro to record some of my music and I needed a way to start and stop the recording from an iPhone, so I found about Logic Remote and was quite happy with it. After the session, the hacker in me became curious about how the tools were communicating with each other, so I quickly started Wireshark while establishing a connection and saw something that tickled my curiosity even more: some of the data, such as the client and server names, were transmitted in cleartext on what it seemed a custom (and as typical of Apple, undocumented) TCP protocol ("stevie" being the hostname of my Mac): Using lsof confirmed that this was indeed the communication between the client phone and Logic listening on port 56076: Initially I tought this was just some Logic Pro specific protocol and very lazily started looking into it, without much success mostly due to lack of motivation given the very limited scope of the research. After a while I tweeted asking if anyone had ever seen anything like it. @isComputerOn pointed out that this looked a lot like a protocol that has been partially reversed and presented by Alban Diquet back in 2014. Unfortunately, however brilliant, this research covers the protocol at a very high level and doesn't really document the packets, their fields and how to establish a connection from anything but a client using the Apple framework. However, this helped me a lot in two ways: first it helped me realize this was not just Logic Pro specific, but that it was part of the Multipeer Connectivity Framework, and gave me a few hints about the general logic of the protocol itself. With renewed curiosity and motivation then I jumped into this rabbit hole and managed to reverse engineer all network packets. This allowed me to write a Python proof of concept client that automatically discovers any MPC servers, initializes the connection and succesfully exchanges application specific data packets. Moreover, while sending crafted packets and at ## Three Teleport Features: Portable Credentials, Session Replay Bookmarks, and Multiple Proxy Addresses DevFeed: [Three Teleport Features: Portable Credentials, Session Replay Bookmarks, and Multiple Proxy Addresses]() Original publisher: [Read original article]() Author: info@goteleport.com (Steven Martin) Published: 2021-12-30T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [session replay](), [Command-line interface](), [ssh](), [Playback](), [proxy](), [Kubernetes](), [screen](), [audit]() Tags: [blog](), [credentials](), [features](), [kubernetes](), [playback](), [re](), [recording](), [ssh](), [web]() ### AI overview This article describes three Teleport features: using portable short-lived certificate files for SSH and Kubernetes access, bookmarking session replays in the web console, and using multiple proxy addresses. ### Source excerpt This blog talks about 3 little-known features of Teleport including portable credentials, bookmarking session replays, and multiple proxy addresses. ## The Stateless Tech Tree: reGenesis Edition DevFeed: [The Stateless Tech Tree: reGenesis Edition]() Original publisher: [Read original article]() Author: Griffin Ichiba Hotchkiss Published: 2020-08-25T00:00:00Z Content type: opinion Language: en Sources: [Ethereum Foundation Blog]() Topics: [Ethereum](), [Network](), [data]() Tags: [dht](), [efficiency](), [encoding](), [ethereum](), [network](), [re](), [research-development](), [smart-contract](), [snapshots](), [state](), [stateless](), [structure](), [switching]() ### AI overview The article revises Ethereum 1.x's Tech Tree around reGenesis and other milestones that could provide a more attainable mid-term step toward Stateless Ethereum. It also discusses static state networks, code merkleization, binary trie state representation, and the transition challenges involved. ### Source excerpt This week we're revising the Tech Tree to reflect some new major milestones to Ethereum 1.x R&D that are not quite a complete realization of Stateless Ethereum, but much more reasonably attainable in the mid-term. The most significant addition to the tech tree is Alexey's reGenesis proposal. This is far... ## Automating mobile app releases for iOS and Android at Badoo DevFeed: [Automating mobile app releases for iOS and Android at Badoo]() Original publisher: [Read original article]() Author: saliery (Badoo) Published: 2020-07-02T13:36:17Z Content type: tutorial Language: ru Sources: [Badoo EN](), [Badoo RU]() Topics: [iOS](), [App](), [Google Play](), [LineageOS]() Tags: [android](), [app](), [app-store](), [badoo](), [devops](), [fastlane](), [google-play](), [ios](), [re](), [release](), [release-engineering](), [teamcity]() ### AI overview A Badoo release engineer describes the company's automation of iOS and Android app releases. The process automates app-store metadata uploads and enables employees involved in the process to release applications in a few clicks; the release-engineering team reported saving about 830 hours in 2019. ### Source excerpt Всем привет! Меня зовут Михаил Булгаков (нет, не родственник), я работаю релиз-инженером в Badoo. Пять лет назад я занялся автоматизацией релизов iOS-приложений, о чём подробно рассказывал в этой статье. А после взялся и за Android-приложения. Сегодня я подведу некоторые итоги: расскажу, к чему мы пришли за это время. Long story short: любой причастный к процессу сотрудник может зарелизить хоть все наши приложения на обеих платформах в несколько кликов -- без головной боли, больших затрат времени, регистрации и СМС. Так, наш отдел релиз-инженеров за 2019 год сэкономил около 830 часов. За подробностями -- добро пожаловать под кат! Читать дальше -> ## Amazon RDS Proxy makes it easier to use SQL in Serverless DevFeed: [Amazon RDS Proxy makes it easier to use SQL in Serverless]() Original publisher: [Read original article]() Author: Alex DeBrie Published: 2019-12-03T00:00:00Z Content type: article Language: en Sources: [Serverless Blog]() Topics: [Amazon RDS](), [Serverless](), [SQL](), [Databases]() Tags: [amazon-rds](), [applications](), [aws](), [aws-lambda](), [cloud-computing](), [faas](), [function-as-a-service](), [infrastructure-as-code](), [news](), [post](), [proxy](), [re](), [relational-databases](), [release](), [serverless](), [serverless-architecture](), [serverless-framework](), [sql]() ### AI overview Amazon RDS Proxy is presented as addressing a major objection to using relational databases in serverless applications by making SQL easier to use in serverless environments. ### Source excerpt The release of the Amazon RDS Proxy at re:Invent removes one of the main objections to using relational databases in serverless applications. Read this post to understand why. ## All the Serverless announcements at re:Invent 2018 DevFeed: [All the Serverless announcements at re:Invent 2018]() Original publisher: [Read original article]() Author: Alex DeBrie Published: 2018-11-27T00:00:00Z Content type: news Language: en Sources: [Serverless Blog]() Topics: [Serverless](), [Amazon Web Services](), [.NET Conf]() Tags: [announcements](), [aws](), [aws-lambda](), [cloud-computing](), [faas](), [function-as-a-service](), [infrastructure-as-code](), [news](), [re](), [serverless](), [serverless-architecture](), [serverless-framework](), [updates]() ### AI overview This article compiles serverless announcements and updates from AWS re:Invent 2018 and says it will be updated live during the week. ### Source excerpt Not at AWS re:Invent? That's ok; we're compiling all the most important serverless announcements and updates. Updating live all week. ## AWS re:Invent serverless virtual hackathon announced DevFeed: [AWS re:Invent serverless virtual hackathon announced]() Original publisher: [Read original article]() Author: Thom Crowe Published: 2018-11-26T00:00:00Z Content type: release Language: en Sources: [Serverless Blog]() Topics: [Hackathon](), [Amazon Web Services](), [Serverless]() Tags: [aws](), [aws-lambda](), [cloud-computing](), [culture](), [faas](), [function-as-a-service](), [hackathon](), [infrastructure-as-code](), [re](), [serverless](), [serverless-architecture](), [serverless-framework]() ### AI overview The article announces a special-edition virtual hackathon focused on serverless development for AWS re:Invent. The event is virtual and open to remote participation. ### Source excerpt We're closing out #NoServerNovember with a special-edition virtual hackathon for AWS re:Invent. Participate from anywhere, win cool prizes. ## Frameworkless JavaScript Part 3: One-Way Data Binding DevFeed: [Frameworkless JavaScript Part 3: One-Way Data Binding]() Original publisher: [Read original article]() Author: Jack Tarantino Published: 2018-02-26T00:43:11Z Content type: tutorial Language: en Sources: [Jacopo Tarantino]() Topics: [JavaScript](), [Vanilla JavaScript](), [data](), [Document Object Model (DOM)](), [proxy](), [React](), [Angular](), [Ember]() Tags: [angular](), [callback](), [code](), [developers](), [ember](), [javascript](), [re](), [react]() ### AI overview A tutorial on implementing one-way data binding in frameworkless JavaScript using native APIs, the DOM, ES6 Proxy objects, and callbacks. It explains how to update DOM content when data changes and works toward reusable node and proxy constructors. ### Source excerpt This article is one in a series about writing client-focused JavaScript without the help of libraries and frameworks. It's meant to help developers remember that they can write good code on their own using nothing but native APIs and methods. For more, check out the original article on writing small ## The Serverless guide to AWS re:Invent 2017 DevFeed: [The Serverless guide to AWS re:Invent 2017]() Original publisher: [Read original article]() Author: Andrea Passwater Published: 2017-11-09T00:00:00Z Content type: tutorial Language: en Sources: [Serverless Blog]() Topics: [Serverless](), [Amazon Web Services]() Tags: [2017](), [aws](), [aws-lambda](), [cloud-computing](), [faas](), [function-as-a-service](), [guide](), [infrastructure-as-code](), [lambda](), [news](), [re](), [serverless](), [serverless-architecture](), [serverless-framework]() ### AI overview A suggested track for attending AWS re:Invent 2017 and learning about serverless and Lambda. ### Source excerpt Going to re:Invent 2017? Here's our suggested track for getting the most info on serverless and Lambda. ## Talking re:Invent & the Latest Serverless Framework Features in the Dec. 8th Office Hours Live Video Recording DevFeed: [Talking re:Invent & the Latest Serverless Framework Features in the Dec. 8th Office Hours Live Video Recording]() Original publisher: [Read original article]() Author: Stefanie Monge Published: 2016-12-15T00:00:00Z Content type: article Language: en Sources: [Serverless Blog]() Topics: [serverless framework](), [Serverless]() Tags: [aws](), [aws-lambda](), [cloud-computing](), [faas](), [function-as-a-service](), [infrastructure-as-code](), [news](), [re](), [recap](), [serverless](), [serverless-architecture](), [serverless-framework](), [video]() ### AI overview A Serverless Office Hours video recaps Lambda announcements from re:Invent and answers questions about the latest Serverless Framework features. ### Source excerpt Developer Evangelist David Wells & Core Framework Engineer Eslam Hefnawy recap Lambda announcements from re:Invent and answer questions in the 2nd edition of Serverless Office Hours. ## Serverless News from AWS re:Invent 2016: Recap and Significance DevFeed: [Serverless News from AWS re:Invent 2016: Recap and Significance]() Original publisher: [Read original article]() Author: Nick Gottlieb Published: 2016-12-05T00:00:00Z Content type: news Language: en Sources: [Serverless Blog]() Topics: [Serverless](), [Amazon Web Services]() Tags: [aws](), [aws-lambda](), [cloud-computing](), [faas](), [function-as-a-service](), [infrastructure-as-code](), [news](), [re](), [recap](), [serverless](), [serverless-architecture](), [serverless-framework]() ### AI overview A recap of serverless news from AWS re:Invent 2016 and why the announcements matter. ### Source excerpt A recap of serverless news from AWS re:Invent 2016 & why it matters. ## CRITICAL UPDATE Re: DAO Vulnerability DevFeed: [CRITICAL UPDATE Re: DAO Vulnerability]() Original publisher: [Read original article]() Author: Vitalik Buterin Published: 2016-06-17T13:20:23Z Content type: release Language: en Sources: [Ethereum Foundation Blog]() Topics: [Ethereum](), [vulnerability](), [Exploit](), [Transactions]() Tags: [ethereum](), [fork](), [formal-verification](), [protocol-announcements](), [re](), [transactions](), [verification](), [vulnerability]() ### AI overview The DAO was exploited through a recursive calling vulnerability that allowed an attacker to drain ether into a child DAO. The article states that the vulnerability affected the DAO specifically, not Ethereum itself, and proposes a software fork to prevent withdrawals from the DAO and its children after a specified block. ### Source excerpt An attack has been found and exploited in the DAO, and the attacker is currently in the process of draining the ether contained in the DAO into a child DAO. The attack is a recursive calling vulnerability, ## Weak Learning, Boosting, and the AdaBoost algorithm DevFeed: [Weak Learning, Boosting, and the AdaBoost algorithm]() Original publisher: [Read original article]() Published: 2015-05-18T09:00:00Z Content type: tutorial Language: en Sources: [Jeremy Kun]() Topics: [Algorithm](), [Learning]() Tags: [algorithm](), [better](), [boosting](), [classification](), [distribution](), [efficiently](), [function](), [learner](), [learning](), [models](), [number](), [pac-learning](), [re](), [runtime]() ### AI overview This article introduces learning models in the context of Probably Approximately Correct (PAC) learning and compares the usual PAC model with weak PAC learning. It explains that weak learning requires accuracy only slightly better than random guessing and states that weak and strong learning are equivalent. ### Source excerpt When addressing the question of what it means for an algorithm to learn, one can imagine many different models, and there are quite a few. This invariably raises the question of which models are "the same" and which are "different," along with a precise description of how we're comparing models. We've seen one learning model so far, called Probably Approximately Correct (PAC), which espouses the following answer to the learning question: