jon ⚝ almereyda

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

Agre, Philip E. „Conceptions of the user in computer systems design“. In CAMBRIDGE SERIES ON HUMAN COMPUTER INTERACTION, 67–106. CAMBRIDGE SERIES ON HUMAN COMPUTER INTERACTION, 1995.
- Similar to Woolgar’s studies on the topic
Agre, Philip E “Surveillance and capture: Two models of privacy”, The information society, 1994, 101-127.
- More interesting from a theoretical aspect, as Agre traces how studies of work and the subsequent implementation of these workflows in products is not a neutral act but changes the very work it analyzed.
Anderson, R. J. „Representations and Requirements: The Value of Ethnography in System Design“. Human-computer Interaction 9, Nr. 2 (1994): 151–182. https://doi.org/10.1207/s15327051hci0902_1.
- What do Designers mean when they say ‘Ethnography’: “Instead of fixing upon [Ethnographies] analytic aspects, designers have defined it as a form of data collection.”
Akrich, Madeleine. „The De-scription of Technic

	#! /usr/bin/env nu

	# See format description for `SiteSecurityServiceState.bin`:
	# https://gitlab.torproject.org/tpo/applications/tor-browser/-/blob/tor-browser-128.7.0esr-14.5-1/security/manager/ssl/data_storage/src/lib.rs#L349-353

	# Format is [checksum][score][last accessed][key][value]

	let browsers = [
	{ name: "Firefox" path: "~/.mozilla/firefox" }
	{ name: "Tor Browser" path: "~/.tor project/firefox" }

	# .config/containers/systemd/hickorydns.container
	[Container]
	ContainerName=hickorydns
	Image=docker.io/hickorydns/hickory-dns:latest
	PublishPort=53:53/udp
	UserNS=keep-id:uid=100,gid=100
	Volume=%h/hickory/etc:/etc:ro
	Volume=%h/hickory/zones:/var/named:ro
	AutoUpdate=registry
	AddCapability=NET_BIND_SERVICE

	#!/bin/bash

	## Put me in your PATH to quickly change headscale node IPs
	## Written by:
	### Engineer: Geofferey

	TESTED_VER="v0.23.0"
	TS_CIDR="100.64.0.0/10"

	if [ -z ${HEADSCALE_DB} ]; then

	import os
	import re

	# Function to generate title from filename
	def generate_title(filename):
	# Remove the extension
	base = os.path.splitext(filename)[0]
	# Remove numbers
	base = re.sub(r'\d+', '', base)
	# Replace dashes and underscores with spaces

	#!/usr/bin/env python3
	# Autogenerated Documentation For Justfiles
	# This was created to support this issue ticket https://github.com/casey/just/issues/2033#issuecomment-2278336973
	import json
	import subprocess
	from typing import Any

	# just --dump --dump-format json --unstable \| jq > test.json
	json_output = subprocess.run(
	["just", "--dump", "--dump-format", "json", "--unstable"],

	(Transcript made with HappyScribe.com)

	[ NOTE: NOT FULLY COPYEDITED ]

	https://about.flipboard.com/inside-flipboard/molly-white/

	[00:00:02.240] Welcome to Dotsocial, the first podcast to explore the
	world of decentralized social media. Each episode, host Mike McHieu
	talks to a leader in this movement, someone who sees the Fediverse's
	tremendous potential and understands that this could be the internet's

	---
	import type { Props } from "@astrojs/starlight/props";
	import Default from "@astrojs/starlight/components/Sidebar.astro";
	import { AstroError } from "astro/errors";

	// Styles and CSS logic derived from https://daisyui.com/components/collapse/

	// This Sidebar override uses the top-level items from the Starlight sidebar config to create sidebars.

	// Go through each top-level sidebar item from the Astro config to...

	0810 b' from '
	0678 b' ssh2'
	00d8 b'%.48s:%.48s():%d (pid=%ld)\x00'
	0708 b'%s'
	0108 b'/usr/sbin/sshd\x00'
	0870 b'Accepted password for '
	01a0 b'Accepted publickey for '
	0c40 b'BN_bin2bn\x00'
	06d0 b'BN_bn2bin\x00'
	0958 b'BN_dup\x00'