chilts

var request = require('request');
var unzip   = require('unzip');
var csv2    = require('csv2');

request.get('http://s3.amazonaws.com/alexa-static/top-1m.csv.zip')
    .pipe(unzip.Parse())
    .on('entry', function (entry) {
        entry.pipe(csv2()).on('data', console.log);
    })
;

rverton

/*
* (un)comment correct payload first (x86 or x64)!
* 
* $ gcc cowroot.c -o cowroot -pthread
* $ ./cowroot
* DirtyCow root privilege escalation
* Backing up /usr/bin/passwd.. to /tmp/bak
* Size of binary: 57048
* Racing, this may take a while..
* /usr/bin/passwd overwritten

Panakotta00

Unreal Engine Asset Diff/Merge-Tool with Git!

Since unreal engines assets are binary encoded classical text based git diff/merge tools will give up on merge conflicts of unreal assets. But fear not! You can setup your git environment to actually be able to diff/merge these .uasset files by using already built-in functionallity of the unreal editor!

Creating the PowerShell-Script

First of all do we have to create a small PowerShell-Script that copies the diff files into temporary files and to convert relative paths to absolute ones.

GeneralSadaf

Activities no longer require boosts to unlock. Activities except Watch Together are locked behind Nitro. Kept boost levels for prosperity.

Stable versions

Application ID	Application name	Boost level	Max participants
755600276941176913	YouTube Together(Old)	0	Unlimited
880218394199220334	Watch Together(New)	0	Unlimited
755827207812677713	Poker Night	1	25
773336526917861400	Betrayal.io	0	Unlimited
814288819477020702	Fishington.io	0	Unlimited
832012774040141894	Chess In The Park	1	Unlimited

thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

HarmfulBreeze

Tested working on Fedora Workstation 39, 40, 41, 42, and 43.

(Commands prefixed with a # should be run as the root user or with sudo. Commands prefixed with a $ should be run as a regular/unprivileged user.)

1. # dnf install xrdp (with Xorg session support: # dnf install xrdp xorgxrdp)
2. If using GNOME: # $EDITOR /etc/pam.d/xrdp-sesman and comment and uncomment the appropriate lines.
3. If using Xfce: $ echo startxfce4 > $HOME/.xsession and $ chmod +x $HOME/.xsession.
4. Optionally, rename the shared drives mount: # $EDITOR /etc/xrdp/sesman.ini and set FuseMountName=shared-drives
5. # $EDITOR /etc/xrdp/xrdp.ini and set:

• port=vsock://-1:3389 ([Globals] section)