This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that
| #!/bin/bash | |
| # root privilege required | |
| if cd /sys/bus/platform/drivers/ehci-platform >& /dev/null; then | |
| for dev in *.usb; do | |
| echo -n $dev > unbind | |
| echo -n $dev > bind | |
| done | |
| fi |
| package main | |
| import ( | |
| "fmt" | |
| "os" | |
| "runtime" | |
| "sync" | |
| "time" | |
| ) |
| // erpc_idl/rpc_system.erpc | |
| @output_dir("erpc_shim") | |
| @types_header("rpc_system_header.h") | |
| program rpc | |
| @group("system") | |
| interface rpc_system { |
| package main | |
| import ( | |
| "bytes" | |
| "encoding/binary" | |
| "io" | |
| "io/ioutil" | |
| ) | |
| // 手軽にnバイト読み込む関数を定義 |
| %{ | |
| // プログラムのヘッダを指定 | |
| package main | |
| import ( | |
| "os" | |
| "fmt" | |
| "strconv" | |
| "bufio" | |
| ) | |
| %} |
| #!/bin/bash | |
| cd /sys/kernel/config/usb_gadget/ | |
| mkdir -p procon | |
| cd procon | |
| echo 0x057e > idVendor | |
| echo 0x2009 > idProduct | |
| echo 0x0200 > bcdDevice | |
| echo 0x0200 > bcdUSB | |
| echo 0x00 > bDeviceClass |
Go 1.14 の主なregressionです。1.14.1で修正されると思われます。
| package main | |
| /* | |
| Golang SSHAgent Usage | |
| https://orebibou.com/2019/03/golang%E3%81%A7ssh-agent%E3%81%8B%E3%82%89%E9%8D%B5%E3%82%92%E5%8F%96%E5%BE%97%E3%81%97%E3%81%A6ssh%E6%8E%A5%E7%B6%9A%E3%81%99%E3%82%8B/ | |
| */ | |
| import ( | |
| "fmt" | |
| "golang.org/x/crypto/ssh" |
