thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

MoshiurRahmanFaisal

#!/bin/bash

### Step 1: Install Docker ###

    curl -fsSL https://get.docker.com -o get-docker.sh

    sudo sh get-docker.sh
    

### Step 2: Restart the Docker ###

aweffr

"""
Mac 喝水提示

crontab -e

*/30 8-22/1 * * * [your python] [script path]

- 8点到20点每半小时提示一次喝水
"""

slok

Enable profiling

Default http server

import (
    _ "net/http/pprof"
    "net/http"
)

DzeryCZ

Helm 3 is storing description of it's releases in secrets. You can simply find them via

$ kubectl get secrets
NAME                                                TYPE                                  DATA   AGE
sh.helm.release.v1.wordpress.v1                     helm.sh/release.v1                    1      1h

If you want to get more info about the secret, you can try to describe the secret

$ kubectl describe secret sh.helm.release.v1.wordpress.v1

fogfish

/*

go test -bench=. -test.benchmem=true -test.benchtime=10s

goos: darwin
goarch: amd64

BenchmarkDirectCall-12    	1000000000	         1.31 ns/op	       0 B/op	       0 allocs/op
BenchmarkInterface-12     	1000000000	         1.69 ns/op	       0 B/op	       0 allocs/op
BenchmarkHoF-12           	1000000000	         1.61 ns/op	       0 B/op	       0 allocs/op

koshatul

gpg-agent setup

Need to setup gpg-agent first, on OSX I use keychain (it also does ssh-agent)

$ brew info keychain
keychain: stable 2.8.5
User-friendly front-end to ssh-agent(1)
https://www.funtoo.org/Keychain
/usr/local/Cellar/keychain/2.8.5 (7 files, 108.5KB) *

y0ngb1n

Docker Hub 镜像加速器

国内从 Docker Hub 拉取镜像有时会遇到困难，此时可以配置镜像加速器。

Dockerized 实践 https://github.com/y0ngb1n/dockerized

1️⃣ Docker daemon 配置代理（推荐）

参考 Docker daemon 配置代理

fabiomontefuscolo

#include <getopt.h>
#include <regex.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>

void showHelp(char *biname) {
    printf("%s [-l length] [-f 'regex'] [-n]\n", biname);
    printf("    -l, --length\n");
    printf("        Password length\n");

baruch

#define DEFER_MERGE(a,b) a##b
#define DEFER_VARNAME(a) DEFER_MERGE(defer_scopevar_, a)
#define DEFER_FUNCNAME(a) DEFER_MERGE(defer_scopefunc_, a)
#define DEFER(BLOCK) void DEFER_FUNCNAME(__LINE__)(int *a) BLOCK; __attribute__((cleanup(DEFER_FUNCNAME(__LINE__)))) int DEFER_VARNAME(__LINE__)

// Usage:
/*
  void dosomething()
  {
    char* data = malloc(100);