thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

khalidx

The experience of using Node.JS with TypeScript, ts-node, and ESM is horrible.

There are countless guides of how to integrate them, but none of them seem to work.

Here's what worked for me.

Just add the following files and run npm run dev. You'll be good to go!

package.json

felixarntz

<?php
/**
 * Plugin Name: Server Timing Extra
 * Plugin URI: https://gist.github.com/felixarntz/63c05392dbf7d51cc7f8f4a424b1ff39
 * Description: Exposes additional Server-Timing metrics using the Performance Lab plugin's Server Timing API.
 * Requires at least: 6.1
 * Requires PHP: 5.6
 * Version: 0.1.0
 * Author: Felix Arntz
 * Author URI: https://felix-arntz.me

nemishkor

set -e

WORKDIR=/home/.aliendalvik_systemimg_patch
TMPWORKDIR="$WORKDIR/tmp"
SQUASHFS_ROOT="$TMPWORKDIR/squashfs-root"
MOUNT_ROOT="$TMPWORKDIR/systemimg_mount"
SYSTEM_IMG=/opt/alien/system.img
ORIG_IMG_FILE=orig_img_path.txt

FEDORA22_REPO=https://archives.fedoraproject.org/pub/archive/fedora/linux/releases/30/Everything/aarch64/os/Packages

felixarntz

Mini WordPress core server performance test suite

Purpose

This quick "mini test suite" allows you to easily collect server-side performance metrics for WordPress core development. It does so by utilizing the Server-Timing header.

Usage

1. Paste the code from main.php into pretty much anywhere in WordPress core, e.g. into wp-includes/default-filters.php.
2. Use code like the one in example.com around any code or a specific function that you want to record metrics for.

devinsays

<?php

namespace UniversalYums\Admin\Performance;

class OrdersList {

	/**
	 * The single instance of the class.
	 */
	protected static $instance;

devinsays

<?php
/**
 * This script will delete all `on-hold` subscriptions and their orders and users.
 * It will delete all subscriptions based on IP.
 *
 * wp eval-file delete-fraud-activity-by-ip.php 127.0.0.1
 *
 * Dry run:
 * wp eval-file delete-fraud-activity-by-ip 127.0.0.1 dry
 *

shilman

⚠️ Warning: this document is out of date.

For the most recent webpack5 instructions see MIGRATION.md.

Storybook experimental Webpack 5 support

Storybook 6.2 includes experimental Webpack 5 support. Webpack 5 brings a variety of performance improvements, as well as exciting new features like module federation. Here's a quick guide to get you going.

Intro

mcaskill

<?php
/**
 * WordPress Ajax Process Execution
 *
 * This file is a near-identical copy of {@see wp-admin/admin-ajax.php} from WordPress v6.3.0.
 *
 * Differences:
 * 1. Constant `WP_ADMIN` is set to FALSE, by default.
 * 2. WordPress action 'admin_init' is replaced with custom action 'ajax_init'.
 * 4. Custom actions hooked on 'admin_init' are not executed.

mGBUfLn9

I was drawn to programming, science, technology and science fiction
ever since I was a little kid. I can't say it's because I wanted to
make the world a better place. Not really. I was simply drawn to it
because I was drawn to it. Writing programs was fun. Figuring out how
nature works was fascinating. Science fiction felt like a grand
adventure.

Then I started a software company and poured every ounce of energy
into it. It failed. That hurt, but that part is ok. I made a lot of
mistakes and learned from them. This experience made me much, much