InsideReCaptcha
mini_racer
InsideReCaptcha | mini_racer | |
---|---|---|
5 | 4 | |
1,002 | 583 | |
- | 0.7% | |
0.0 | 7.2 | |
about 5 years ago | 24 days ago | |
Python | JavaScript | |
- | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
InsideReCaptcha
-
Discussion Thread
Google: implements an entire obfuscated VM with its own bytecode inside Javascript for their CAPTCHAs so that people cannot cheat it
-
YouTube-dl has a JavaScript interpreter written in 870 lines of Python
While they likely wouldn't do a zero-day, their JS files, particularly for automated captchas, do push the boundaries of whatever JS engine they're executed inside. See https://github.com/neuroradiology/InsideReCaptcha#the-analys... and note that this analysis is 8 years old. While there's minimal risk if you're either using a full-fledged modern JS engine or a limited-subset interpreter like the OP, an older or non-optimized spec-compliant JS engine might hit pathological performance cases and result in you DOSing yourself.
- Why you can't secure a React Native (or any frontend) application
-
Get DCR onto a faucet by voting on this strawpoll for Autofaucet
So people voting for DCR are not allowed to protect their privacy with VPNs, must reveal their real IP address, and must allow proprietary, obfuscated, sophisticated Google reCAPTCHA to fingerprint the heck out of their devices.
- Installed new UDM Pro; Google thinks we are robots now
mini_racer
-
Ask HN: What side projects landed you a job?
Some years ago I was on a shitty job - not technically, but the company turned out to be inhumane - at a Ruby shop, and on the side I was toying with mini_racer and I just upgraded to some macOS beta where it failed to build. A shitty +1-1 hack† for a compiler flag later and it was back flying.
A month later I received a cold email from a CTO to chat a bit about that PR, turns out they were using mini_racer heavily and forked it for their own purpose, and also created PyMiniRacer for the Python side of things. Next thing I know I got hired. Two years later the company got acquired.
Of course conditionally adding a compiler flag wasn't what got me hired per se, it only got my profile noticed. Probably side projects such as porting go by example to Ruby by implementing a ~1:1 CSP channel API[1], an Electron desktop client for Mattermost basically on a dare[2], ex mode for the Atom editor so that I could have that frackin' `:w`[3], leveraging Blocks to bolt on object-oriented-ness onto C because "closures are a poor man's object"[4], or reverse-engineering the Xbox One USB gamepad and writing a kext to turn it into a HID device on macOS from scratch on a lonely 7+h train ride with passengers judgementally staring at me sideways[4] probably contributed to it a bit.
My takeaway: luck is when preparation meets opportunity; but don't to side projects to get hired, because if you don't get hired then that time is lost. Rather, of all things, scratch your itch, have fun, embrace whatever quirkiness you fancy; no one can take that away from you.
[0]: https://github.com/rubyjs/mini_racer/commit/2086db1bbf2b5de4...
[1]: https://github.com/lloeki/normandy
[2]: https://github.com/lloeki/matterfront
[3]: https://github.com/lloeki/ex-mode
[4]: https://github.com/lloeki/cblocks-clobj/blob/master/main.c
[5]: https://github.com/lloeki/xbox_one_controller
-
YouTube-dl has a JavaScript interpreter written in 870 lines of Python
Cue libv8-node+mini_racer from which PyMiniRacer was born. It is non-trivial but not as hard as one might think.
The most painful part is the libv8 build system and Google tooling, which makes it an absolute PITA for libv8 consumers that are not Chrome.
This is why the libv8 gem was atrocious to keep up to date and to build for several platforms, and why libv8-node was born, because the node build system and source distribution are actually sane.
Disclaimer: worked at Sqreen, now maintainer of libv8-node and collaborator of mini_racer
https://github.com/sqreen/PyMiniRacer
https://github.com/rubyjs/mini_racer
https://github.com/rubyjs/libv8-node
-
Rendering markdown with Markdoc in Rails
Eventually, we’ll want to call this JavaScript from a Rails controller using ExecJS or MiniRacer or some similar tool. None of the Ruby-to-JavaScript gems I found were sophisticated enough to know how to load npm modules with common.js or ES module syntax, so my solution is to just build the JavaScript with a watcher and have that run as part of bin/dev.
-
Anyone having issues with M1Pro?
https://github.com/rubyjs/mini_racer/issues/190 has some info an then this PR: https://github.com/rubyjs/mini_racer/pull/210 that has been merged. Hope that all helps!
What are some alternatives?
quickjs - Thin Python wrapper of https://bellard.org/quickjs/
execjs - Run JavaScript code from Ruby
libv8-node - Package libv8 from Node
PyMiniRacer - PyMiniRacer is a V8 bridge in Python.
pyduktape - Embed the Duktape JS interpreter in Python
markdoc-rails - Example of rendering markdown using Markdoc with Ruby on Rails
tube-get - A tube-site downloader
markdoc - A powerful, flexible, Markdown-based authoring framework.
youtube-dl - Command-line program to download videos from YouTube.com and other video sites