
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Filr turns Flickr into a storage engine. Very useful now that everyone gets 1TB for free :)
npm install filr-cli -g
This will put the filr
bin in your path.
First, create an app at http://www.flickr.com/services/apps/create/ and take note of your consumer keys.
# Add your keys
filr --auth CONSUMER_KEY CONSUMER_SECRET
Alternatively, manually create a .filr
file in your $HOME
folder, containing a json object with the consumer_key
and consumer_secret
keys:
// these are fake keys, obviously
{
"consumer_key": "f0d87f09a8sd7f8a08f7a",
"consumer_secret": "8f7dsa807fa98"
}
Complete the OAuth flow to obtain access tokens. Filr will attempt to open a browser for you, just enter the resulting PIN on the prompt that follows. Tokens are persisted to $HOME/.filr
as token
and token_secret
.
filr my_file1.txt my_file2.txt
Each file will be uploaded as a separate image. Resulting images are set to private so they won't show on your public photostream.
The encode/decode functionality is exposed as
filr --encode radiohead.mp3 radio.png
filr --decode radio.png radiohead.mp3
Files are encoded as hex strings and saved as a tEXt chunk inside the PNG, so the actual image could be anything. Flickr preserves the original data intact in the "Original" size.
Unfortunately this method is very wasteful, resulting in file sizes 2-4x the original. PNG does support "zEXt" chunks which are compressed using zlib, but the libraries being used here don't. Even better (and more cool) would be to save data in the image itself as seen here.
There is probably a restriction on chunk sizes that will cause this to break on larger files, I have only tested up to 15mb.
git clone gh:ricardobeat/filr.git
cd filr
npm install
Run cake watch
(or npm run watch
if you don't have coffeescript globally installed) to continuously build the coffee-script source.
FAQs
Store data as images and upload to Flickr for 1TB free storage!
The npm package filr-cli receives a total of 0 weekly downloads. As such, filr-cli popularity was classified as not popular.
We found that filr-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.