Sasha Goloshchapov ferrata

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

Chromium on Vercel (serverless)

This is an up-to-date guide on running Chromium in Vercel serverless functions in 2022. What you will read below is the result of two days of research, debugging, 100+ failed deployments, and a little bit of stress.

Getting started

Step 1: Install dependencies

Use chrome-aws-lambda that comes with Chromium pre-configured to run in serverless, and puppeteer-core due to the smaller size of Chromium distributive.

Semantic Commit Messages

See how a minor change to your commit message style can make you a better programmer.

Format: <type>(<scope>): <subject>

<scope> is optional

Example

101 Rx Samples in C#

This was taken from http://rxwiki.wikidot.com/101samples, because I wanted to be able to read it more comfortable with syntax highlighting.

Here's the unedited original, translated to Github Markdown glory:

101 Rx Samples - a work in progress

	import org.assertj.core.api.Assertions.assertThat
	import org.junit.jupiter.api.Test
	import kotlin.reflect.KClass
	import kotlin.reflect.full.isSuperclassOf

	/*
	Marker interface. Anything that's a message can be sent across the wire.
	*/
	interface Message

	function Show-Notification {
	[cmdletbinding()]
	Param (
	[string]
	$ToastTitle,
	[string]
	[parameter(ValueFromPipeline)]
	$ToastText
	)

	using System;
	using System.Collections.Generic;
	using System.Text;
	using Microsoft.CodeAnalysis;
	using Microsoft.CodeAnalysis.Text;

	namespace SourceGeneratorSamples
	{
	[Generator]
	public class HelloWorldGenerator : ISourceGenerator

	# Authored my Maxfan http://github.com/Maxfan-zone http://maxfan.org
	# This is used to convert tikz code into svg file and load in you jekyll site
	#
	# Install:
	#
	# 1. Copy this file in your _plugins/ directory. You can customize it, of course.
	# 2. Make sure texlive and pdf2svg are installed on your computer.
	# 3. Set path to pdf2svg in _config.yml in "pdf2svg" variable
	#
	# Input:

	async void Main()
	{
	Console.WriteLine ("Before Using");
	await Async.Using(new Test(), t =>
	{
	Console.WriteLine ("In Using body");
	throw new Exception("Oops");
	});
	Console.WriteLine ("After Using");
	}