thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

nobkd

from get_info import save_infos
from get_imgs import save_imgs

if __name__ == '__main__':
    pth = 'xkcd_save'

    save_infos(pth)
    print()
    save_imgs(pth)

CodeIter

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe\shell\open\command]

tmatz

Build android app on termux

1. install termux

install termux from F-Droid.

2. setup termux

apt update

vankesteren

module Adamopt

# This is a module implementing vanilla Adam (https://arxiv.org/abs/1412.6980).
export Adam, step!

# Struct containing all necessary info
mutable struct Adam
  theta::AbstractArray{Float64} # Parameter array
  loss::Function                # Loss function
  grad::Function                # Gradient function

zoonderkins

## Updated on June 16 2020
## Blahdns xiaomi blacklist.txt
## Tested from Taiwan, Japan, Singapore IP (Mi Home, Mifit app)

tp.hd.mi.com
api.ad.xiaomi.com
data.mistat.india.xiaomi.com
data.mistat.xiaomi.com
app-analytics-us.huami.com
app.chat.global.xiaomi.net

ckolumbus

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FirefoxPortable.exe\shell\open\command]
@="C:\\PortableApps\\FirefoxPortable\\FirefoxPortable.exe"

AndresReyesDev

Useful Chrome chrome://flags tweaks (Also for Firefox)

A list of tweaks in Chrome (Chromium) that enable hidden or upcoming features and are not editable from the main settings page.

Since I don't follow the tweaks by bugs, I am not always sure, what version of Chromium actually shows them. Therefore, I recommend using at least Beta version of the browser, if not Dev or Canary.

How to enable

1. Open chrome://flags (browser://flags on Yandex, vivaldi://flags on Vivaldi, etc.)
2. Search for the hashtag title
3. Set the recommended setting

hagemann

function slugify(string) {
  const a = 'àáâäæãåāăąçćčđďèéêëēėęěğǵḧîïíīįìıİłḿñńǹňôöòóœøōõőṕŕřßśšşșťțûüùúūǘůűųẃẍÿýžźż·/_,:;'
  const b = 'aaaaaaaaaacccddeeeeeeeegghiiiiiiiilmnnnnoooooooooprrsssssttuuuuuuuuuwxyyzzz------'
  const p = new RegExp(a.split('').join('|'), 'g')

  return string.toString().toLowerCase()
    .replace(/\s+/g, '-') // Replace spaces with -
    .replace(p, c => b.charAt(a.indexOf(c))) // Replace special characters
    .replace(/&/g, '-and-') // Replace & with 'and'
    .replace(/[^\w\-]+/g, '') // Remove all non-word characters

joshbuchea

Semantic Commit Messages

See how a minor change to your commit message style can make you a better programmer.

Format: <type>(<scope>): <subject>

<scope> is optional

Example