This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that
| #!/bin/bash | |
| # Colors | |
| RED='\033[0;31m' | |
| GREEN='\033[0;32m' | |
| NO_COLOR='\033[0m' | |
| BLUE='\033[0;34m' | |
| YELLOW='\033[0;33m' | |
| NO_COLOR='\033[0m' |
Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.
$ python -m SimpleHTTPServer 8000
Peter Naur's classic 1985 essay "Programming as Theory Building" argues that a program is not its source code. A program is a shared mental construct (he uses the word theory) that lives in the minds of the people who work on it. If you lose the people, you lose the program. The code is merely a written representation of the program, and it's lossy, so you can't reconstruct
Let's say you want to access the application shared preferences in /data/data/com.mypackage.
You could try to run adb shell and then run-as com.mypackage
( or adb shell run-as com.mypackge ls /data/data/com.mypackage/shared_prefs),
but on a production release app downloaded from an app store you're most likely to see:
run-as: Package 'com.mypackage' is not debuggable
| // Run code in Browser Console after enabling chrome debugging -- | |
| // about:config => devtools.chrome.enabled => true | |
| // https://developer.mozilla.org/docs/Tools/Browser_Console | |
| try { | |
| var tabPromise = SyncedTabs._internal.getTabClients(); | |
| tabPromise.then((arrDevices) => { | |
| if (arrDevices && arrDevices.length > 0){ | |
| // Generate a string with the format of a bookmark export file | |
| var d, e, out = '<!DOCTYPE NETSCAPE-Bookmark-file-1>\n<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8">\n<TITLE>Bookmarks</TITLE>\n<H1>Bookmarks Menu</H1>\n<DL><p>\n'; | |
| const escapeHtmlEntities = function(aText){return (aText || '').replace(/&/g, '&').replace(/</g, '<').replace(/>/g, '>').replace(/"/g, '"').replace(/'/g, ''')}; |
| <!DOCTYPE html> | |
| <html lang="de"> | |
| <head> | |
| <meta charset="utf-8" /> | |
| <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1, user-scalable=no" /> | |
| <title>.</title> | |
| <link rel="stylesheet" type="text/css" media="print" href="print.css" /> | |
| </head> | |
| <body> |
| -- Not my code: originally from https://redd.it/3t6s7k (author deleted; failed to ask for permission). | |
| -- Only tested on Windows. Date is set to dd/mmm/yy and time to machine-wide format. | |
| -- Save as "mpvhistory.lua" in your mpv scripts dir. Log will be saved to mpv default config directory. | |
| -- Make sure to leave a comment if you make any improvements/changes to the script! | |
| local HISTFILE = (os.getenv('APPDATA') or os.getenv('HOME')..'/.config')..'/mpv/mpvhistory.log'; | |
| mp.register_event('file-loaded', function() | |
| local title, logfile; |
These are my notes on instaling NixOS 16.03 on a Lenovo ThinkPad X1 Carbon (4th generation) with an encrypted root file system using UEFI.
Most of this is scrambled from the following pages: