thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

reduz

During the past days, this great article by Sam Pruden has been making the rounds around the gamedev community. While the article provides an in-depth analysis, its a bit easy to miss the point and exert the wrong conclusions from it. As such, and in many cases, users unfamiliar with Godot internals have used it points such as following:

• Godot C# support is inefficient
• Godot API and binding system is designed around GDScript
• Godot is not production ready

In this brief article, I will shed a bit more light about how the Godot binding system works and some detail on the Godot

kj800x

preface: Posting these online since it sounds like these notes are somewhat interesting based on a few folks I've shared with. These are semi-rough notes that I basically wrote for myself in case I ever needed to revisit this fix, so keep that in mind.

I recently bought an LG ULTRAGEAR monitor secondhand off of a coworker. I really love it and it's been great so far, but I ran into some minor issues with it in Linux. It works great on both Mac and Windows, but on Linux it displays just a black panel until I use the second monitor to go in and reduce the refresh rate down to 60 Hz.

This has worked decent so far but there's some issues:

• It doesn't work while linux is booting up. The motherboards boot sequence is visible just fine, but as soon as control is handed over to Linux and I'd normally see a splash screen while I'm waiting for my login window, I see nothing.
• It doesn't work on the login screen. This would be fine if login consistently worked on my second screen, but I need to manually switch

postspectacular

// $ node
// Welcome to Node.js v20.5.1.
// Type ".help" for more information.

const { barChartHStr, lineChartStr } = await import("@thi.ng/text-canvas");
const { adsr, osc, modOsc, rect, saw, sin, tri } = await import("@thi.ng/dsp");

// display line plot of 100 samples from an amplitude-modulate sine oscillator
console.log(lineChartStr(20, modOsc(sin, 0.01, 0, osc(sin, 0.2)).take(100)));
//                     ╭╮   ╭╮                                              ╭╮   ╭╮

kconner

macOS Internals

Understand your Mac and iPhone more deeply by tracing the evolution of Mac OS X from prelease to Swift. John Siracusa delivers the details.

Starting Points

How to use this gist

You've got two main options:

tonyallan

python3 lispytest.py
python3 lispy.py factorial.lsp

Source pages are:

• https://norvig.com/lispy.html
• https://norvig.com/lispy2.html

dbrookman

#!/usr/bin/env bash

# Builds mpv & mpv.app on Apple silicon Macs.
# Run this script from the root directory of the mpv repo.

# if anything fails, gtfo
set -ex

meson setup build
meson compile -C build

JustinGrote

using namespace System.Collections
using namespace System.Management.Automation
using namespace System.ComponentModel.DataAnnotations
using namespace System.Runtime.Serialization
class MandatoryProperties {
	MandatoryProperties([IDictionary]$properties) {
		$this.GetType().GetProperties([System.Reflection.BindingFlags]'Instance,Public') | ForEach-Object {
			$propertyName = $PSItem.Name
			[bool]$isOptional = $PSItem.GetCustomAttributes([OptionalFieldAttribute], $true).count -gt 0
			if (

Ciantic

/**
 * Get offset relative to selector (or window)
 *
 * @param {HTMLElement} el
 * @param {string|undefined} selector if not give, assumes root most (window)
 */
function offsetRelativeTo(el, selector) {
	let offsetTop = el.offsetTop;
	let offsetLeft = el.offsetLeft;
	let offsetParent = el.offsetParent;

calicoday

// Dev switch for loading prev state or force canned eg.
let activateSaveState = true;
let showParseCount = true;

// Prelim sample input, drawn from the cli/src/tests/query_test.rs (as-is, excess space).
const eg = {
  lang: 'javascript',
  code: `
            class Person {
                // the constructor