thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

Jaskaranbir

#!/bin/bash

# ===> Set these variables first
branch="$GIT_BRANCH"
# Example: "Jaskaranbir/MyRepo"
repo_slug="$TRAVIS_REPO_SLUG"
token="$GITHUB_TOKEN"
version="$TRAVIS_TAG"

# An automatic changelog generator

Blake-

This will force a solr reindex w/o needing to clear out the /data/ directory

UPDATE accession set  system_mtime = NOW();
UPDATE agent_contact set system_mtime = NOW();
UPDATE agent_corporate_entity set system_mtime = NOW();
UPDATE agent_family  set system_mtime = NOW();
UPDATE agent_person set system_mtime = NOW();
UPDATE agent_software set system_mtime = NOW();
update archival_object set system_mtime = NOW();
update assessment set system_mtime = NOW();

Kmaschta

.PHONY: build
TAG ?=
SERVER ?= staging-server

install:
	npm install

start:
	node --require reify server.js

valeriomazzeo

#!/usr/bin/env ruby

require 'optparse'
require 'octokit'

options = {}
OptionParser.new do |opt|
  opt.on('-s', '--secret SECRET', 'GitHub access token') { |o| options[:secret] = o }
  opt.on('-r', '--repo-slug REPO_SLUG', 'Repo slug. i.e.: apple/swift') { |o| options[:repo_slug] = o }
  opt.on('-c', '--changelog-file CHANGELOG_FILE', 'Changelog path') { |o| options[:changelog_file] = o }

stisa

First suggestion:

src/
  <pkgname>.nim
tests/
docs/
<pkgname>.nimble # with srcDir = "src"

library with single module

IanHopkinson

#!/usr/bin/env python
# encoding: utf-8

import lxml.etree
import lxml.html
import requests

xml_sample = """<?xml version="1.0" encoding="UTF-8"?>
<foo:Results xmlns:foo="http://www.foo.com" xmlns="http://www.bah.com">
<foo:Recordset setCount="2">

patrickfuller

#!/bin/bash

# When SCSS is changed in a commit, this compiles and commits the affected css.
# This script assumes a project directory of the form:
#     main.scss
#     main.css
#     scss
#       |  file_1.scss
#       |  ...
#       |  file_n.scss

iangreenleaf

Rails naming conventions

General Ruby conventions

Class names are CamelCase.

Methods and variables are snake_case.

Methods with a ? suffix will return a boolean.

roachhd

EMOJI CHEAT SHEET

Emoji emoticons listed on this page are supported on Campfire, GitHub, Basecamp, Redbooth, Trac, Flowdock, Sprint.ly, Kandan, Textbox.io, Kippt, Redmine, JabbR, Trello, Hall, plug.dj, Qiita, Zendesk, Ruby China, Grove, Idobata, NodeBB Forums, Slack, Streamup, OrganisedMinds, Hackpad, Cryptbin, Kato, Reportedly, Cheerful Ghost, IRCCloud, Dashcube, MyVideoGameList, Subrosa, Sococo, Quip, And Bang, Bonusly, Discourse, Ello, and Twemoji Awesome. However some of the emoji codes are not super easy to remember, so here is a little cheat sheet. ✈ Got flash enabled? Click the emoji code and it will be copied to your clipboard.

People

😄