thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

Jesse-Sawa

import { ContractKit, newKit } from "@celo/contractkit";
import { Contract } from "web3-eth-contract";
import {
  ESCROW_CONTRACT,
  FA_CONTRACT,
  ODIS_PAYMENTS_CONTRACT,
} from "./constants";

// STAGING (private testnet)
const STAGING_RPC = "http://127.0.0.1:8545";

ww9

Blogging with Gist

Gist simplicity can turn blogging into a liberating experience.

Pros	Cons
✅ Free, simple, fast, hassle-free	❌ Image upload in comments only
✅ Tagging	❌ No post pinning
✅ Search	❌ Doesn't look like a blog
✅ Revisions	❌ Unfriendly URLs

seanh

User Stories

Reading list

• [Mark Shead: Creating Good User Stories][Mark Shead]
• [GOV.UK Service manual: Writing user stories][GOV.UK]
• [Mike Cohn's blog posts about user stories][Mike Cohn]
• [Mike Cohn: User Stories Applied (book)][User Stories Applied]

santisbon

Enter this in the search box along with your search terms:

Get all gists from the user santisbon.
user:santisbon

Find all gists with a .yml extension.
extension:yml

Find all gists with HTML files.
language:html

joshbuchea

Semantic Commit Messages

See how a minor change to your commit message style can make you a better programmer.

Format: <type>(<scope>): <subject>

<scope> is optional

Example

cferdinandi

# Terminal Cheat Sheet

pwd         # print working directory
ls          # list files in directory
cd          # change directory
~           # home directory
..          # up one directory
-           # previous working directory
help        # get help
-h          # get help

jonschlinkert

Markdown cheatsheet

(Also see [remarkable][], the markdown parser created by the author of this cheatsheet)

Table of contents

• Standard features
  • Headings
  • Paragraphs

• Breaks

MohamedAlaa

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname

chitchcock

Stevey's Google Platforms Rant

I was at Amazon for about six and a half years, and now I've been at Google for that long. One thing that struck me immediately about the two companies -- an impression that has been reinforced almost daily -- is that Amazon does everything wrong, and Google does everything right. Sure, it's a sweeping generalization, but a surprisingly accurate one. It's pretty crazy. There are probably a hundred or even two hundred different ways you can compare the two companies, and Google is superior in all but three of them, if I recall correctly. I actually did a spreadsheet at one point but Legal wouldn't let me show it to anyone, even though recruiting loved it.

I mean, just to give you a very brief taste: Amazon's recruiting process is fundamentally flawed by having teams hire for themselves, so their hiring bar is incredibly inconsistent across teams, despite various efforts they've made to level it out. And their operations are a mess; they don't real