thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

mitchcurtis

#! /bin/bash

# ~/Dropbox/dev/scripts/cmake/clean-rebuild-qt-cmake-linux.sh

set -e
set -o pipefail

topLevelSourceDir=$1
topLevelBuildDir=$2
configPath=$3

mitchcurtis

#!/bin/bash

usageExample="Usage: cd ~/dev/qt-dev/qtdeclarative && git fetch && git reset --hard origin/dev && cd .. && qt-git-sync-to.sh qtdeclarative HEAD"

if [ -z "$1" ]; then
    echo "module argument not supplied"
    echo $usageExample
    exit 1
fi

romkatv

# Runs "$@" in a subshell with the caller's options, sets reply=(stdout stderr)
# and returns the status of the executed command. Both stdout and stderr are
# captured completely, including NUL bytes, incomplete UTF-8 characters and
# trailing LF, if any.
#
# Example:
#
#   % zsh-run-command ls -d ~ /garbage
#   % printf 'status: %s\nstdout: %s\nstderr: %s\n' $? "${(q+)reply[@]}"
#   status: 2

divi255

import logging

def rust_emit_log(*args):
    # Override from Rust with pyfunction
    pass

class RustLogHandler(logging.Handler):

    def emit(self, record):
        msg = f'{record.name}: {record.getMessage()}'

tmccombs

XDG Default Applications

Introduction

The freedesktop.org MIME Applications Associations specification specifies how to determine which application should open a file by default.

jfcherng

This gist will no longer be updated as the changelog will be on the official website.

• Sublime Text/Merge Official Discord chat server: https://discord.gg/D43Pecu
• Sublime Text/Merge 中文 Telegram 交流群組： https://t.me/sublime_tw

Converted via https://domchristie.github.io/turndown

About Sublime Text 4

leoetlino

void action::ItemAmiiboCreateFromDropTable::doSpawn(const sead::SafeString& drop, BaseProcHandle* procHandle, const Vec3* additionalPosOffset)
{
  if (!drop)
    return;

  const bool isImportant = ActorInfoData::sInstance->hasTagByName(drop.c_str(), Tag_Important);
  if (isImportant && GameDataMgr::sInstance && GameDataMgr::sInstance->getFlagBool("IsGet_" + drop))
    return;

  if ( sead::SafeStringBase<char>::findIndex(drop, "GameRomHorse") != -1 )

MikeDacre

Renewing the GPG Key

The point is to renew the core signing key, encryption key, and authentication key, and to create a set of subkeys to be used on devices without access to the GPG card.

The encryption key should not 'expire' ever, as it is needed for communication, the same is true for the parent key, which should never be anywhere other than the card and the veracrypt container. We give them an expiration date anyway, so that if something happens and I can't renew them, they eventually become invalud.

cypok

UPD: задачи и решения переехали:

• пост на habrahabr.ru на русском
• post at excelsiorjet.com/blog in English