May aprilandjan

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

Use _NS_4445425547 or NS🐞 for enables debuggging panel. When enabled it, a ladybug 🐞 menu appears in the app menu bar.

“4445425547” means DEBUG in Unicode table.

0x44=D
0x45=E
0x42=B
0x55=U
0x47=G

Configuring Jest Tests in GitLab CI

1. Add GitLab CI configuration file in the root

In the root of your project, add .gitlab-ci.yml with the configuration below.

image: node:latest

stages:

Hyperlinks (a.k.a. HTML-like anchors) in terminal emulators

[ Update 2020-05-31: I won't be maintaining this page or responding to comments anymore (except for perhaps a few exceptional occasions). ]

Most of the terminal emulators auto-detect when a URL appears onscreen and allow to conveniently open them (e.g. via Ctrl+click or Cmd+click, or the right click menu).

It was, however, not possible until now for arbitrary text to point to URLs, just as on webpages.

Resolving missing link to libcrypto openssl on OSX from: http://stackoverflow.com/questions/38670295/brew-refusing-to-link-openssl

brew update

brew install openssl

ln -s /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib /usr/local/lib/

ln -s /usr/local/opt/openssl/lib/libssl.1.0.0.dylib /usr/local/lib/

Here are steps to decode Electron crashReporter dump on macOS:

Download and install breakpad
Download *-symbols.zip for your Electron release
Setup a simple express app:

const app = require('express')();
const path = require('path');
const fs = require('fs');
const multer = require('multer');

	/*
	Compile:

	gcc -framework Foundation -framework AppKit screenshot.m -o screenshot
	*/

	#import <Foundation/Foundation.h>
	#import <AppKit/AppKit.h>

	int main(void) {

	// Affix

	// Alert
	export { default as CheckCircleOutline } from '@ant-design/icons/lib/outline/CheckCircleOutline';
	export { default as CloseCircleOutline } from '@ant-design/icons/lib/outline/CloseCircleOutline';
	export { default as CloseOutline } from '@ant-design/icons/lib/outline/CloseOutline';
	export { default as ExclamationCircleOutline } from '@ant-design/icons/lib/outline/ExclamationCircleOutline';
	export { default as InfoCircleOutline } from '@ant-design/icons/lib/outline/InfoCircleOutline';

	// Avatar

	import customModuleLoader = require('module');

	export class CustomModuleLoader {
	public cOptions: any = require('../tsconfig.json').compilerOptions;

	public replacePaths: any = {};

	constructor() {
	Object.keys(this.cOptions.paths).forEach(alias => {
	this.replacePaths[alias.replace(/\.?/, '(.)')] = this.cOptions.paths[alias][0].replace(/\*.?/, '$1');

	variables:
	VERSION_ID: '1.0.$CI_PIPELINE_ID'

	stages:
	- build

	build:
	image: slauta93/electron-builder-win
	stage: build
	artifacts: