Daily Edition · Page 4

THE DAILY INDEX

Technology, AI, software, security, crypto and business

GENERAL

TLDR Web Dev

1 BUG, $50,000+ IN BOUNTIES, HOW ZENDESK INTENTIONALLY LEFT A BACKDOOR IN HUNDREDS OF FORTUNE 500 COMPANIES

A 15-year-old bug hunter discovered a vulnerability in Zendesk's email collaboration feature that allowed attackers to access customer support tickets from any company using the service. This exploit was initially dismissed by Zendesk's bug bounty program as "out of scope," but subsequent public disclosure of the vulnerability forced Zendesk to take action. The bug hunter then discovered a second, more serious exploit that could allow attackers to gain access to private Slack workspaces using Zendesk, which was fixed later.

NODE.JS, PIPES, AND DISAPPEARING BYTES

Piping large amounts of JSON data from a Node.js command to another command results in truncated output. The issue stems from the asynchronous nature of Node.js's `process.stdout.write` when writing to a pipe on POSIX systems. When the pipe buffer is full, `process.stdout.write` returns false, and further writes are blocked until the pipe is read. The solution involves subscribing to the `drain` event of the `process.stdout` stream to resume writing after the pipe has been filled.

3 CAREER PRINCIPLES THAT GOT ME TO DIRECTOR AT GOOGLE

A former Google director shares three career principles that helped her achieve five promotions in ten years: Glue, Grit, and Friction. Glue refers to the less glamorous tasks that are vital for team success but might not be directly promotable. Grit is a commitment to pursuing long-term goals despite challenges and viewing failures as opportunities for learning. Friction represents the gap between reality and the ideal state. It must be overcome to show a force multiplier effect.

TLDR IndexPage 4