thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

EduardoRFS

module type T = sig
  module type S
end

module T = struct
  module type S = T
end

module type K_Bool = functor (X : T) (Y : T) -> T

Hirrolot

type term =
  | Lam of (term -> term)
  | Pi of term * (term -> term)
  | Appl of term * term
  | Ann of term * term
  | FreeVar of int
  | Star
  | Box

let unfurl lvl f = f (FreeVar lvl)

acutmore

A compile-time 4-Bit Virtual Machine implemented in TypeScript's type system. Capable of running a sample 'FizzBuzz' program.

Syntax emits zero JavaScript.

type RESULT = VM<
  [
    ["push", N_1],         // 1
    ["push", False],       // 2
 ["peek", _], // 3

kangax

/*

  A collection of tests where Flow and TypeScript might have different behavior
  Some tests are borrowed from https://github.com/vkurchatkin/typescript-vs-flow
  Some tests now have the same behavior as the new versions of Flow/TS have fixed the bugs and improved type safety

*/


/* 1. Accessing unknown properties on objects */

zerobias

16.06.2022
Дима Zerobias

01.03.2022
⛴➡️🍆

MaxGraey

const charset   = '0123456789abcdef'.split('');
const randomset = new Uint8Array(16);

export function uuid() {
  let rand = 0;
  for (let i = 0; i < 16; i++) {
    if (rand < 2) {
      rand += Math.random() * (1 << 24);
    }
    randomset[i] = rand & 0xFF;

aquigni

#!/bin/sh
cd ~/Downloads/

### Checking if Homebrew is installed:
command -v brew >/dev/null 2>&1 || {
	echo >&2 "Installing Homebrew:"
	/usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
}

### Getting wget:

zerobias

declare module 'fs-extra' {
  import type {
    createReadStream as createReadStreamType,
    createWriteStream as createWriteStreamType,
  } from 'fs'

  declare export var createReadStream: $PropertyType<
    $Exports<'fs'>,
    'createReadStream',
  >

Piterden

Array.from(document.querySelectorAll('h4')).map((el) => {
  const nextEl = el.nextElementSibling
  const tableEl = nextEl.nextElementSibling
  return `
/**${nextEl.innerText.replace(/(.{1,72}\s)\s*?/g, '\n * $1')}
 */
export type ${el.innerText} = {

` + Array.from(tableEl.children[0].children).slice(1).map((tr) => {
  const arr = Array.from(tr.children)