Max Kratz maxkratz

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

Automatically include link to current git commit/SHA in compiled LaTeX pdf

This code lets you include an automatically updating link in a LaTeX compiled document that points to the last commit in the branch currently checked out in the repository where the .tex file used to compile the documents is saved. This allows you to track exactly which version of your .tex file was used to generate a given PDF.

Using Git you can then go back to the exact code used when compiling any saved or printed version of your document you find, no matter how long ago it was compiled. The commit SHA (the unique commit ID) will automatically update each time there is a new commit

Generating SSH keys with Arq

Tested with Arq 5.

I encountered some issues trying to add my existing SSH key pairs with Arq. I saw errors like:

[path to key]: Key 'OPENSSH' is not supported.

or

99% of the information in this guide is taken from here: https://golb.hplar.ch/2019/01/expose-server-vpn.html I've added some stuff and changed some things to suit my needs.

A much easier method would be to follow: Routing Plex traffic through an SSH Tunnel

Both solutions work, however I've had better success with Wireguard.

Make sure your VPS is KVM. I've used both BuyVM and ServerCheap and have had good results.

Expose a server behind CG:NAT via Wireguard

Preparing Ubuntu 18.04LTS as an OpenCL development platform:

With OpenCL, the installable client drivers (ICDs) are normally issued with the accelerator's device drivers, namely:

The NVIDIA CUDA toolkit (and the device driver) for NVIDIA GPUs.
AMD's RoCM for GCN-class AMD hardware.
Intel's beignet and the newer Neo compute runtime.

The purpose of the installable client driver model is to allow multiple OpenCL platforms to coexist on the same platform. That way, multiple OpenCL accelerators, be they discrete GPUs paired with a combination of FPGAs and integrated GPUs can all coexist.

This configuration is provided AS-IS and as an example/reference for those who do not find a working configuration for themselves. It is not always kept up to date and no support is provided.

Assuming:

Your Matrix domain: example.org
Your TURN domain (arbitrary): turn.example.org
Your Public IP: 1.2.3.4
Your Private IP for the box hosing the services: 10.11.12.13
A shared secret between synapse and coturn: ThisIsASharedSecret-ChangeMe
You want Firefox compatiblity (TURNS only is not supported)

	#!/usr/bin/env bash
	#
	# Certbot Nginx Reload
	#
	# Let's Encrypt Certbot post hook command for Nginx which checks the updated
	# configuration files and reloads the server if everything validates.
	#
	# Author : Justin Hartman <[email protected]>
	# Version : 1.0.1
	# License : MIT <https://opensource.org/licenses/MIT>

	# For recent versions of Ubuntu:
	- https://www.pugetsystems.com/labs/hpc/ubuntu-22-04-server-autoinstall-iso/

	# Docs:
	- https://wiki.ubuntu.com/FoundationsTeam/AutomatedServerInstalls
	- https://wiki.ubuntu.com/FoundationsTeam/AutomatedServerInstalls/ConfigReference
	- https://cloudinit.readthedocs.io/en/latest/topics/datasources/nocloud.html
	- https://discourse.ubuntu.com/t/please-test-autoinstalls-for-20-04/15250/53

	# Download ISO Installer:

	#!/usr/bin/php
	<?php

	if(!function_exists('curl_init')) {
	die('cURL not available!');
	}

	// check if there are every required arguments
	if (count($argv) < 4) {
	echo('USAGE: ' . $argv[0] . ' <URL> <TOKEN> <ROOM ALIAS\|ID>');

	#!/usr/bin/env bash

	### Bash Environment Setup
	# http://redsymbol.net/articles/unofficial-bash-strict-mode/
	# https://www.gnu.org/software/bash/manual/html_node/The-Set-Builtin.html
	# set -o xtrace
	set -o errexit
	set -o errtrace
	set -o nounset
	set -o pipefail