The Little Book of Semaphores

Free book explaining synchronization patterns, semaphores, and classic concurrency problems used in exploitation, OS internals, and race condition research.

https://greenteapress.com/wp/semaphores/

#Concurrency #RaceCondition

Wow so it turns out I was right, Javascript is a gross language that is impossible to read for anybody who isn't already familiar with its syntax.

I come from C/C++ and Python land when it comes to network request stuff, and I'm accustomed to code just executing one line after another. I can get used to the async stuff, but it's pretty damn frustrating that VS Code doesn't even have any indications to tell you when a function is going to be async or not.

There's also seemingly no immediately clean way to just say "don't continue, everything after this is going to rely on the result of this function".

Maybe I'm just bitching because I don't understand how await and Promises work.

#webdev #JS #html #async #raceCondition #programming

Single-endpoint Race Conditions
This vulnerability is an example of a Race Condition, specifically a single-endpoint Race Condition. The root cause was a flawed implementation of concurrent requests, where the application did not ensure proper synchronization of operations. This led to a scenario where a malicious user could submit a request before the first request was processed, resulting in the server treating the second request as the first, due to the order of operations being manipulated. The researcher discovered this by sending concurrent requests through a tool like Burp Suite and observing the server's response. The technical details involve a window of opportunity for manipulating the sequence of requests, leading to unintended consequences. This vulnerability could potentially lead to data corruption, unauthorized access, or privilege escalation. The researcher was awarded a bounty of $300 for the finding. To remediate, enforce proper synchronization of concurrent requests and validate the order of operations to prevent race conditions. Key lesson: Proper synchronization is crucial when handling concurrent requests to prevent race conditions. #BugBounty #Cybersecurity #WebSecurity #RaceCondition #ConcurrentRequests

https://infosecwriteups.com/single-endpoint-race-conditions-7a3879c09e79?source=rss------bug_bounty-5

Knock knock
Race condition
Who’s there?

(Credit: Ian Coldwater)

#Dev #Development #Jokes #RaceCondition

How to Stop Double Writes With INSERT Then UPDATE

Race conditions can create duplicate rows.

#mysql #upsert #racecondition #howto #duplicates #concurrency

https://www.youtube.com/watch?v=_yRoFSaJ8h0

Here is a blog entry describing how the good old deposit/withdraw #RaceCondition occurred in real life. As many lecturers, I use this example in my lectures, so next time this gives me an opportunity to talk about the ethical aspects of such a discovery.

https://blog.z.org/the-day-the-house-lost/

Watching #claude troubleshoot a #racecondition between #docker Containers is really fun to watch as the Code behaves Different every time it's run

"the REAL issue is..."

🤣🤣🤣

#vibecoding #AI #ki #grok #copilot #gemini #sloperator

Invoice Sequence Race Lock

Guarantee unique invoice numbers under heavy load.

#php #python #invoices #locking #racecondition #payments #reliability #backendsafety #performance #viralcoding

https://www.youtube.com/watch?v=MFqdIc3_nSk