bubbleguuum

## xz-backdoor.md

      
              1 file
            
          
              62 forks
            
          
              568 comments
            
          
              1319 stars
            
          
                thesamesam
                / xz-backdoor.md
            
            
              Last active
              June 27, 2024 15:18
            
              
                xz-utils backdoor situation (CVE-2024-3094)
              
          
    FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good
faith of being accurate, but like I just said; we don't yet know everything
about what's going on.
Background

On March 29th, 2024, a backdoor was discovered in
xz-utils, a suite of software that

  
## SensitiveData.java
/*
 * Copyright (c) 2022, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

## cheat_sheet_http_client_ssl_configuration_for_java_kotlin_scala.md

      
              1 file
            
          
              1 fork
            
          
              1 comment
            
          
              37 stars
            
          
                Hakky54
                / cheat_sheet_http_client_ssl_configuration_for_java_kotlin_scala.md
            
            
              Last active
              August 18, 2022 11:56
            
              
                Cheat Sheet - Http Client SSL TLS Configuration for Java Kotlin and Scala with example http requests
              
          
    Cheat Sheet - Http Client SSL TLS Configuration for Java, Kotlin and Scala with example http requests

The examples below use the base ssl configuration found here: SSLConfig of the library: SSLContext Kickstart
Java

Apache HttpClient -> Client configuration | Example request
Apache HttpAsyncClient -> [Client configuration](https://github.com/Hakky54/mutual-tls-ssl/blob/35cba2f3a2dcd73b01fa323b99eec7777f7429bb/client/src/main/


## ac_proton.sh
# Based on https://pastebin.com/f5eUDcr0, but fixed

export WINEPREFIX=~/SteamLibrary/steamapps/compatdata/244210/pfx # change if your steam library is somewhere else

winecfg #change to windows XP -> OK
wine uninstaller # uninstall all stuff related to .NET or Mono
wget 'http://download.microsoft.com/download/9/5/A/95A9616B-7A37-4AF6-BC36-D6EA96C8DAAE/dotNetFx40_Full_x86_x64.exe'
wine ~/dotNetFx40_Full_x86_x64.exe /q
winecfg # change to Windows 7, libraries -> add "mscoree" -> pick "mscoree" from list -> clicke edit -> set to "Native (Windows)" -> click OK and OK
wget 'http://download.microsoft.com/download/9/E/6/9E63300C-0941-4B45-A0EC-0008F96DD480/NDP471-KB4033342-x86-x64-AllOS-ENU.exe'

## README.md

      
              1 file
            
          
              0 forks
            
          
              4 comments
            
          
              10 stars
            
          
                melix
                / README.md
            
            
              Last active
              June 22, 2023 20:57
            
              
                Reproducing the benchmarks of the Maven vs Gradle performance page
              
          
    Gradle vs Maven performance reproduction instructions

Install the Gradle Profiler

This page explains how to reproduce the Gradle vs Maven performance numbers yourself. For that, you need to install the Gradle profiler, a tool which will automate benchmarking
by running several builds in a row, with the appropriate options (it also runs Maven builds).
Generate the test projects

Our performance comparison uses 4 test projects:

  
## make_favicon.sh
# IE is still braindead so still use favicon.ico

convert -resize x16 -gravity center -crop 16x16+0+0 -flatten -colors 256 input.png output-16x16.ico
convert -resize x32 -gravity center -crop 32x32+0+0 -flatten -colors 256 input.png output-32x32.ico
convert output-16x16.ico output-32x32.ico favicon.ico

# Then, HTML needs to specify size="XxY" as largest size due to browser bugs

<link rel="shortcut icon" href="/favicon.ico" sizes="32x32">
	/*
	* Copyright (c) 2022, Oracle and/or its affiliates. All rights reserved.
	* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
	*
	* This code is free software; you can redistribute it and/or modify it
	* under the terms of the GNU General Public License version 2 only, as
	* published by the Free Software Foundation.
	*
	* This code is distributed in the hope that it will be useful, but WITHOUT
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	# Based on https://pastebin.com/f5eUDcr0, but fixed

	export WINEPREFIX=~/SteamLibrary/steamapps/compatdata/244210/pfx # change if your steam library is somewhere else

	winecfg #change to windows XP -> OK
	wine uninstaller # uninstall all stuff related to .NET or Mono
	wget 'http://download.microsoft.com/download/9/5/A/95A9616B-7A37-4AF6-BC36-D6EA96C8DAAE/dotNetFx40_Full_x86_x64.exe'
	wine ~/dotNetFx40_Full_x86_x64.exe /q
	winecfg # change to Windows 7, libraries -> add "mscoree" -> pick "mscoree" from list -> clicke edit -> set to "Native (Windows)" -> click OK and OK
	wget 'http://download.microsoft.com/download/9/E/6/9E63300C-0941-4B45-A0EC-0008F96DD480/NDP471-KB4033342-x86-x64-AllOS-ENU.exe'
	# IE is still braindead so still use favicon.ico

	convert -resize x16 -gravity center -crop 16x16+0+0 -flatten -colors 256 input.png output-16x16.ico
	convert -resize x32 -gravity center -crop 32x32+0+0 -flatten -colors 256 input.png output-32x32.ico
	convert output-16x16.ico output-32x32.ico favicon.ico

	# Then, HTML needs to specify size="XxY" as largest size due to browser bugs

	<link rel="shortcut icon" href="/favicon.ico" sizes="32x32">