thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

curtishall

1/10/2024 - I have linked a slightly newer version, still out of date, but I need to test newer versions to make sure there is no configuration changes.

Some users report having to comment out the following, your mileage may vary:

readBufferSize, runOnPublish, runOnPublishRestart, runOnRead, runOnReadRestart

ATAK users change the observer URL in UAS Tool to point to 554 (or whatever port you decide to use)

Download the latest rtsp-simple-server (0.17.13)

kstevenson722

How to Setup NextCloud on TrueNAS

• Install Plugin

• Create DataSet

  • Stop plugin
    1. The plugin needs to be stopped before you attach a dataset
    2. Go to storage and add dataset
    3. Set permissions on new dataset
       • User as www
       • Uncheck other permissions
• Check owner and group to rwx

svx

#!/bin/sh
# based on https://gist.github.com/ipedrazas/9c622404fb41f2343a0db85b3821275d

# delete all evicted pods from all namespaces
kubectl get pods --all-namespaces | grep Evicted | awk '{print $2 " --namespace=" $1}' | xargs kubectl delete pod

# delete all containers in ImagePullBackOff state from all namespaces
kubectl get pods --all-namespaces | grep 'ImagePullBackOff' | awk '{print $2 " --namespace=" $1}' | xargs kubectl delete pod

# delete all containers in ImagePullBackOff or ErrImagePull or Evicted state from all namespaces

petrsvihlik

// This script shows how to use M language (Power Query Formula Language) 
// to read data from GitHub API v4 using a POST request.
// This can come in handy when building PowerBI reports that utilize GraphQL endpoints for loading data.

let
    vUrl = "https://api.github.com/graphql",
    vHeaders =[
			#"Method"="POST",
			#"Content-Type"="application/json",
			#"Authorization"="Bearer <your_personal_token_here>"

massich

#!/bin/sh

# This script installs Intel's Math Kernel Library (MKL) on Travis (both Linux and Mac)
#
# In .travis.yml, add this:
#
#  - curl -fsSkL https://gist.githubusercontent.com/massich/caa7d8806ac08282f93cea00f247b8e0/raw > install_mkl.sh && source ./install_mkl.sh
#
# Note:
# This script requires the openmeeg's travis tools from https://gist.github.com/massich/f382ec0181ce6603b38208f9dec3e4d4

fearblackcat

Solution to the golang tour's concurrency exercise testing for equivalent binary trees.

Compare with similiar solution presented in golangbootcamp's concurrency chapter.

---

There can be many different binary trees with the same sequence of values stored at the leaves. For example, here are two binary trees storing the sequence 1, 1, 2, 3, 5, 8, 13.

skabber

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>method</key>
	<string>app-store</string>
	<key>teamID</key>
	<string>XXXXXXXXXX</string>
	<key>uploadBitcode</key>
	<true/>

iaincollins

/**
 * Append data to a Google Spreadsheet
 *
 * You will need a file called '.env' with the following values:
 * 
 * - GOOGLE_ID (Google oAuth Client ID)
 * - GOOGLE_SECRET (Google oAuth Client Secret)
 * - GOOGLE_REFRESH_TOKEN (Google oAuth Refresh Token)
 * - GOOGLE_SPREADSHEET_ID (Google Spreadsheet ID)
 *

arniebradfo

<h1>Angular 2 Recursive List</h1>
<ul>
  <ng-template #recursiveList let-list>
    <li *ngFor="let item of list">
      {{item.title}}
      <ul *ngIf="item.children.length > 0">
        <ng-container *ngTemplateOutlet="recursiveList; context:{ $implicit: item.children }"></ng-container>
      </ul>
    </li>
  </ng-template>