Joshua Rogers' Scribbles
Joshua Rogers' Scribbles
Joshua Rogers
Personal blog talking about technology, travel, and life.
Latest Posts
Antiperspirant without aluminum Toothpaste without fluoride Mouthwash without antiseptic ingredients Food without salt (and don’t get me started on msg!) Food without seed oils Fat-free mayonnaise Lip balm without petroleum Hand...
Cleaner HTML-sanitizer bypass: mutation-XSS via MathML namespace confusion Reported as: Inside MathML foreign content, <style> is a raw-text element. jsoup therefore stores <img src=x onerror=...> as opaque text (a DataNode) and copies...
Person A: Have you heard about Shilajit? It increases your testosterone, your lifts will go up by 20%, and it’s legal because it falls under the category of a health supplement! I’ve been taking it with my Ashwagandha and I’ve never felt...
Design, style, and ergonomics are all high up on my interests when it comes to the world. If you’ve got something that does something amazing, that’s great. But if using it makes me want to kill myself, then you’ve failed. I’ve recently...
cJSON is probably the most widely used JSON parser in the C world. It’s vendored into ESP-IDF, into a lot of embedded firmware, and into a whole lot more server-side C. I found 33 security issues in it, using a mix of AI and some manual...
I was recently reading Max Justicz’s blog post, where he outlined how he was able to hack the unpkg.com CDN by getting the service to extract a tar file which contained: A symlink to a directory on the system, followed by a file in the...
I recently finally returned to Poland, after ~living in Taiwan for 7 months, where I was … bike riding, learning Chinese, and getting some experience in certain things that I never thought I’d do in my life. Upon my return, I decided...
This was originally written on July 10, 2020 and published on LinkedIn. I’ve decided to move the posts here for better searchability. Those that know me well, know that I am a video game history researcher, and this is just some of my...
This was originally written on September 15, 2020 and published on LinkedIn. I’ve decided to move the posts here for better searchability. Those that know me well, know that I am a video game history researcher, and this is just some of...
This was originally written on June 12, 2020 and published on LinkedIn. I’ve decided to move the posts here for better searchability. Those that know me well, know that I am a video game history researcher, and this is just some of my...
This was originally written on April 16, 2020 and published on LinkedIn. I’ve decided to move the posts here for better searchability. Those that know me well, know that I am a video game history researcher, and this is just some of my...
In my last two posts, I outlined how to clean up the right-click menu in Firefox to remove useless buttons, using either about:config or userChrome.css, respectively. One of my major complaints was that when right-clicking a link, I was...
Cleaning up right-click with userChrome.css In my previous post, I wrote about using Firefox’s about:config to cut the right-click menu from a massive 26 buttons down to just 15, decluttering the commonly used right-click menu. Freshly...
On a fresh installation of Firefox on MacOS, right-clicking an image while some text on the page is highlighted (to show as many buttons as possible) looks like so: Freshly installed Firefox, right-clicking To be blunt: holy fucking...
Today I learnt about the NS_ERROR_INVALID_CONTENT_ENCODING error (or “Content Encoding Error”) in Firefox, which started popping up in my Network tab while trying to access ChatGPT. Indeed, while having access to ChatGPT has allowed me...