thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

carlosonunez

FROM alpine:3.18 as base
ENV ESSENTIAL="tar sh"
ENV DEPS="ugit git fzf tput nl cut bash sed awk tr env xargs"

RUN apk add --no-cache \
    bash \
    coreutils \
    git \
    ncurses \
    ncurses-terminfo \

cpursley

PostgreSQL is Enough

• Simplify: move code into database functions
• Just Use Postgres for Everything
• Just use Postgres
• PostgreSQL is the worlds’ best database
• Postgres is eating the database world
• Hacker News discussion

Background and Cron Jobs

rain-1

Purpose

Bootstrap knowledge of LLMs ASAP. With a bias/focus to GPT.

Avoid being a link dump. Try to provide only valuable well tuned information.

Prelude

Neural network links before starting with transformers.

bureado

Conceptual SBOM model for an APT-based Linux distribution

This is a draft of an entirely exploratory learning exercise to generate SBOMs from first principles that can accompany an APT-based Linux distribution, which in this context is either a disk or a container image obtained from any source including runtime instances, packaged images, debootstraps, etc. Input and comments welcome: Twitter and also on the CNCF, CycloneDX, CDF, Sigstore and other Slacks.

Status

Here's the current version of the output (SPDX) which features:

• Identifying information for the primary component (at this time, the debian:latest container image)
• purl identifiers for each binary package in the image

frezbo

{
  "ignition": {
    "version": "2.1.0"
  },
  "storage": {
    "files": [
      {
        "filesystem": "root",
        "path": "/etc/modules-load.d/iscsi_tcp.conf",
        "mode": 420,

mschwaig

{ config, pkgs, lib, ... }:

{
  # This sway config is mostly based on https://nixos.wiki/wiki/Sway
  # which integrates sway with systemd in the style described here
  # https://github.com/swaywm/sway/wiki/Systemd-integration
  # and the replies in https://github.com/NixOS/nixpkgs/issues/57602
  # with some individual packages added/removed and using sddm as the display manager.
  #
  # Take care to start the correct target as described by the sway proejct wiki.

suapapa

package main

import (
	"encoding/binary"
	"fmt"
	"os"
	"os/signal"
	"time"

	"github.com/gordonklaus/portaudio"

samuelsmal

Steps

1. connect kobo to your device
2. open a file browser and navigate to the mounted kobo folder
3. navigate to the hidden folder .kobo/Kobo
4. open the file Kobo eReader.conf
5. navigate to the section [FeatureSettings], if it doesn't exist, create it.
6. add the line ExportHighlights=true and save
7. disconnect the device
8. now you can long press on a book and export the note file into a .txt file which will be saved alongside your books. to get it connect your ereader.

CRTified

VFIO Setup on NixOS

Disclaimer: Nobody else tested my setup so far, so this is a "works on my machine" scenario. I am not responsible for anything you break on your machine (although I'd not expect much harm).

Hardware

My system has the following hardware:

• Board: ASRock X570 Pro4