Hello everyone. It’s time to write a report on my adventures in code.
β οΈ But first: a major security hole was discovered in Next.js. And unlike most vulnerabilities I read about but don’t understand how to actually exploit π€π …this one is simple and clear: you write “skip authorization” in the Header, and it gets skipped π«‘π. The Next.js library is popular, and many people use it. Statistics are in the screenshot. Those who use Next.js need to install the update urgently.
Last week, I spent 18 hours on various software projects during my free time:
-
14 hours π personal website, which I wrote about in my
previous post. Development has taken longer than I initially
anticipated. I’m trying to take my time with it.
- On the personal website, I am currently setting up SQLite for data storage. Itβs going slowly. And honestly, I’m not sure if SQLite is actually needed there. But since I wanted it so badly, I have to finish it π
-
2 hours π setting up the Orange Pi. Here, the ext4 file
system broke again after a power outage in my apartment.
- I need to make the system automatically repair files after a crash, but how to do that is the question. My previous attempts to set up auto-correction were unsuccessful. This time, I used a different approach. I hope it worked this time β we’ll find out after the next power outage π
- 2 hours π spent studying backup software. The programs are called rclone and rustic. Both of them are written in Go, and both seemed complex and strange to me. Rclone cannot properly sync between NTFS and exFAT, and rustic saves the full path to the file every time. And what if I move my files to a different folder? π€ππ It’s unclear.