Julio J. j3j5

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

58 bytes of CSS to look great nearly everywhere

When making this website, i wanted a simple, reasonable way to make it look good on most displays. Not counting any minimization techniques, the following 58 bytes worked well for me:

main {
  max-width: 38rem;
  padding: 2rem;
  margin: auto;
}

#Converting SPSS files to csv with PSPP#

Install and open PSPP Use the File menu to open your file (it probably has a .sav extension) Go to File>New>Syntax to open PSPP's command line window

Enter:

	"""
	This is a small python script to clear up old gitlab build artifacts.

	There are 3 variables you should modify:
	* base_url: path to your gitlab
	* access_token: your personal access token to make gitlab api calls
	* delete_everything_older_than: configure the timedelta as you wish

	!!IMPORTANT!!
	By default this script does only make dry-runs and does not actually delete any files!

	Mute these words in your settings here: https://twitter.com/settings/muted_keywords

	ActivityTweet
	generic_activity_highlights
	generic_activity_momentsbreaking
	RankedOrganicTweet
	suggest_activity
	suggest_activity_feed
	suggest_activity_highlights
	suggest_activity_tweet

	Add the following in .zshrc:

	...
	plugins=(osx git zsh-autosuggestions zsh-syntax-highlighting zsh-nvm docker kubectl)
	...

	### Fix slowness of pastes with zsh-syntax-highlighting.zsh
	pasteinit() {
	OLD_SELF_INSERT=${${(s.:.)widgets[self-insert]}[2,3]}
	zle -N self-insert url-quote-magic # I wonder if you'd need `.url-quote-magic`?

	<?php

	require_once __DIR__.'/relative/path/to/PrettierPHPFixer/File';

	return PhpCsFixer\Config::create()
	->registerCustomFixers([
	(new PrettierPHPFixer()),
	])
	->setRules([
	'Prettier/php' => true,

	import json
	from urllib.request import urlopen
	from collections import namedtuple

	class Estación(namedtuple('Estación', 'nombre estación id')):
	ARTIGAS = 16
	RIVERA = 235
	MELO = 160
	SALTO = 239
	YOUNG = 293

	# filter by request host header
	varnishlog -q 'ReqHeader ~ "Host: example.com"'

	# filter by request url
	varnishlog -q 'ReqURL ~ "^/some/path/"'

	# filter by client ip (behind reverse proxy)
	varnishlog -q 'ReqHeader ~ "X-Real-IP: .*123.123.123.123"'

	# filter by request host header and show request url and referrer header

	client
	dev tun
	comp-lzo
	auth-user-pass
	# remote-cert-tls server
	server-poll-timeout 10
	auth-nocache
	auth-retry interact
	verb 1
	remote openvpn.getcloakvpn.com 443 udp