This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that
| # We need the latest epel-release for a RHEL/Centos specific cloud-init | |
| wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm | |
| rpm -Uvh epel-release-6-8.noarch.rpm | |
| # After this finishes you can build an AMI that will process the user data | |
| # with cloud-init. You may also be interested in taking a look at the config | |
| # file at /etc/cloud/cloud.cfg | |
| yum install cloud-init |
A lot of times you are developing a web application on your own laptop or home computer and would like to demo it to the public. Most of those times you are behind a router/firewall and you don't have a public IP address. Instead of configuring routers (often not possible), this solution gives you a public URL that's reverse tunnelled via ssh to your laptop.
Because of the relaxation of the sshd setup, it's best used on a dedicated virtual machine just for this (an Amazon micro instance for example).
| { | |
| "AWSTemplateFormatVersion" : "2010-09-09", | |
| "Description" : "Create an EC2 instance, set up Apache, and create Route53 A records", | |
| "Parameters" : { | |
| "KeyName" : { | |
| "Description" : "Name of an existing EC2 KeyPair to enable SSH access to the instances", | |
| "Type" : "String", |
| define(['/nowjs/now.js', '/lib/jquery.js'], function() { | |
| console.log('woo, registration handler here I come!'); | |
| //called when server gives a response to our registration request | |
| now.onRegisterCallback = function(success, err) { | |
| console.log('registered as user: ' + userName); | |
| if (success) $('#myInfo').html('UserName: ' + userName); | |
| else $('#myInfo').html('Error, cannot register: ' + err); | |
| }; | |
