André Wendt awendt

Readling list

original description on OSS Security ML: backdoor in upstream xz/liblzma leading to ssh server compromise
Ars Technica: Backdoor found in widely used Linux utility targets encrypted SSH connections
Ars Technica: What we know about the xz Utils backdoor that almost infected the world
🇩🇪 Heise: Die xz-Hintertür: Das verborgene Oster-Drama der IT
🇩🇪 Heise: xz-Attacke: Hintertür enträtselt, weitere Details zu betroffenen Distros
Wired: [The Mystery of ‘Jia Tan,’ the XZ Backdo

Data conversion scripts

This is a collection of scripts to convert data from one format to another.

CSV to JSON

What? Turns CSV into JSON Why? JSON is nicer to navigate and query using jq or fx How?

This document is a DRAFT — please leave comments.

A beginner-friendly way of interactively creating config files

Whenever you're trying some new project, you'll likely have to configure something.

This mostly uses one of the following approaches:

Copy the sample config file the project provides, understand the properties and change them
RTFM to find out how to create the config file out of thin air

I asked this on Twitter

Gibt es eigentlich englische Parteiprogramme für die #agh16? Frage für Menschen, die wegen EU-Herkunft Wahlunterlagen erhalten haben.
— André “Andr�” Wendt (@awendt) August 25, 2016

Here are the links I received (in the order I received them):

Original post: Dear Github

Reactions:

	// ==UserScript==
	// @name Lambda Console: Rewrite links to Lambda monitoring tab
	// @description When listing Lambda functions, this rewrites all function links to go straight to the "Monitoring" tab
	// @version 6
	// @grant none
	// @match https://.console.aws.amazon.com/lambda/home
	// ==/UserScript==

	// Copied from https://stackoverflow.com/a/61511955/473467
	function waitForElm(selector) {

	import * as http from "node:http";

	const PORT = 8000;

	// source: https://developer.mozilla.org/en-US/docs/Learn/Server-side/Node_server_without_framework
	http
	.createServer(async (req, res) => {
	const statusCode = parseInt(req.url.slice(1));
	res.writeHead(statusCode, { "Content-Type": "application/json" });
	res.end("{}");

	gem 'devise_saml_authenticatable'

	generate 'devise:install'

	initializer 'devise.rb', <<-CODE
	Devise.setup do \|config\|
	# ==> Configuration for :saml_authenticatable

	# You can support multiple IdPs by setting this value to a class that implements a #settings method which takes
	# an IdP entity id as an argument and returns a hash of idp settings for the corresponding IdP.

	gem 'activerecord', '3.2.19'
	require 'active_record'
	require 'minitest/autorun'
	require 'logger'
	gem 'aasm', '4.0.8'
	require 'aasm'

	# Ensure backward compatibility with Minitest 4
	Minitest::Test = MiniTest::Unit::TestCase unless defined?(Minitest::Test)

	<!doctype html>
	<html class="no-js locale-en-gb aut11">
	<head>
	<meta charset="utf-8" />

	<title>Terms of use - Flattr.com</title>

	<link href="/favicon.ico" rel="shortcut icon" />
	<link rel="apple-touch-icon" href="/_img/icons/ios-icon.png" />