Cristian Magherusan-Stanciu cristim

## xz-backdoor.md

      
              1 file
            
          
              62 forks
            
          
              564 comments
            
          
              1291 stars
            
          
                thesamesam
                / xz-backdoor.md
            
            
              Last active
              May 4, 2024 09:26
            
              
                xz-utils backdoor situation (CVE-2024-3094)
              
          
    FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good
faith of being accurate, but like I just said; we don't yet know everything
about what's going on.
Background

On March 29th, 2024, a backdoor was discovered in
xz-utils, a suite of software that

  
## README.md

      
              5 files
            
          
              1 fork
            
          
              2 comments
            
          
              21 stars
            
          
                sapessi
                / README.md
            
            
              Last active
              September 17, 2021 21:32
            
              
                continuous deployment of Golang Gin application in AWS Lambda and Amazon API Gateway with CodePipeline/CodeBuild
              
          
    You can use CodePipeline and CodeBuild to create a continuous deployment/integration pipeline for serverless applications build on AWS Lambda and Amazon API Gateway. This sample application is written in Go with the Gin framework and uses the eawsy API Gateway proxy shim: https://github.com/eawsy/aws-lambda-go-net
We initially detailed our methodology in this blog post: https://aws.amazon.com/blogs/compute/continuous-deployment-for-serverless-applications/
We have used the shim technology created by eawsy to run Golang applications inside AWS Lambda (https://github.com/eawsy/aws-lambda-go-shim) and created a container that can be used with CodeBuild as part of our original pipeline template.
The container is available on DockerHub and is called sapessi/aws-lambda-go18-codebuild:latest. To use this container, simply change the Image property of the CodeBuild project environment.
The pipeline template, sample app, buildspec and SAM files are attached to this gist.

  
## aws_iam_secret_to_smtp_password.md

      
              1 file
            
          
              13 forks
            
          
              19 comments
            
          
              39 stars
            
          
                damusix
                / aws_iam_secret_to_smtp_password.md
            
            
              Last active
              April 16, 2024 08:39
            
              
                Convert AWS IAM credentials to AWS SMTP credentials
              
          
    Convert AWS IAM credentials to AWS SMTP credentials

If you do, or want to, use AWS to deploy your apps, you will end up using AWS SES via SMTP when you're launching an app that sends out emails of any kind (user registrations, email notifications, etc). For example, I have used this configuration on various Ruby on Rails apps, however, it is just basic SMTP configurations and crosses over to any framework that supports SMTP sendmail.
There are two ways to go about this:

EASY WAY: Create an SMTP user via AWS SES [http://docs.aws.amazon.com/ses/latest/DeveloperGuide/smtp-credentials.html#smtp-credentials-console]
NOT SO EASY WAY: Create an SMTP password for an existing IAM user [^^ Same link scroll down]

Luckily, you found this MD file and the NOT SO EASY WAY is suddenly copy-pasta... sudo yum....