This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that
| #!/usr/bin/python | |
| import argparse | |
| import os | |
| import shlex | |
| import sys | |
| import tempfile | |
| import yaml | |
| config = yaml.full_load(open(os.path.expanduser("~/.config/sandbox.yml"))) |
| def decode(msg): | |
| text = "" | |
| for i in range(0, len(msg), 2): | |
| text += unrot(msg[i: i + 2], i // 2) # add position as extra parameter | |
| return text | |
| def unrot(pair, pos, key=ord('x')): | |
| if pos % 2 == 0: # "even" position => 2nd char is offset | |
| pair = pair[1] + pair[0] # swap letters in pair |
| #!/usr/bin/env bash | |
| # | |
| # Down all running Docker Compose projects | |
| # | |
| docker ps --filter "label=com.docker.compose.project" -q |\ | |
| xargs docker inspect |\ | |
| jq -r 'map( .Config.Labels ) | | |
| map({" | |
| project": ."com.docker.compose.project", |
| ServerName foo.com | |
| Protocols http/1.1 acme-tls/1 | |
| MDCAChallenges tls-alpn-01 | |
| MDCertificateAgreement accepted | |
| MDomain foo.com | |
| MDPrivateKeys RSA 4096 | |
| <VirtualHost _default_:443> | |
| ServerAdmin webmaster@foo.com |
| import requests, pickle | |
| from datetime import datetime | |
| import json, pytz | |
| import pandas as pd | |
| from influxdb import DataFrameClient | |
| login_url = "https://monitoring.solaredge.com/solaredge-apigw/api/login" | |
| panels_url = "https://monitoring.solaredge.com/solaredge-web/p/playbackData" | |
| SOLAREDGE_USER = "" # web username |
| package main | |
| import ( | |
| "fmt" | |
| "os" | |
| ) | |
| func main() { | |
| if len(os.Args) != 2 { | |
| fmt.Println("usage: spamcause gggruggvucft...") |
| deb http://deb.debian.org/debian buster main contrib non-free | |
| deb-src http://deb.debian.org/debian buster main contrib non-free | |
| deb http://deb.debian.org/debian buster-updates main contrib non-free | |
| deb-src http://deb.debian.org/debian buster-updates main contrib non-free | |
| deb http://deb.debian.org/debian buster-backports main contrib non-free | |
| deb-src http://deb.debian.org/debian buster-backports main contrib non-free | |
| deb http://security.debian.org/debian-security/ buster/updates main contrib non-free |
| import requests, pickle | |
| from datetime import datetime | |
| import json, pytz | |
| import pandas as pd | |
| from influxdb import DataFrameClient | |
| login_url = "https://monitoring.solaredge.com/solaredge-apigw/api/login" | |
| panels_url = "https://monitoring.solaredge.com/solaredge-web/p/playbackData" | |
| SOLAREDGE_USER = "" # web username |
(Et pour voir les départements les plus accueillants, c'est ici: https://gist.github.com/cerisara/928ad03cf15c77dda8897c2cf49ef27d )
