Łukasz Tshipenchko tshipenchko

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

If you'd like to keep up-to-date with Chrome from unstable but otherwise want to run a stable NixOS release you can do the following:

Create a file /etc/nixos/unstable.nix:

{ config, pkgs, ...}:
let
  baseconfig = { allowUnfree = true; };
  unstable = import <nixos-unstable> { config = baseconfig; };
in {

how to leverage oracle's temping offers

free tier limits

The limits of the free tier say that you can create up to 4 instances.

x2 x86 instances (2core/1g)
x2 ampere instances (with 4core/24g spread between them)
200GB total boot volume space across all intances (minimum of 50G per instance)

create your account

Easy Installation docker

Init installtion & add user to docker group (not recommanded for prod usage)

curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
sudo usermod -aG docker $USER

Sanity check

Requirements

maim
xclip

Set-up

Set this on your i3 config file ~/.i3/config

# Screenshots

download

wget https://docs.broadcom.com/docs-and-downloads/raid-controllers/raid-controllers-common-files/8-07-14_MegaCLI.zip

or

curl -LO https://docs.broadcom.com/docs-and-downloads/raid-controllers/raid-controllers-common-files/8-07-14_MegaCLI.zip

	value=`cat selected_audio_output.txt`

	if [ -z "$value" ]
	then
	value=0
	fi

	if [ $value -eq 0 ]
	then
	sudo hda-verb /dev/snd/hwC0D0 0x16 0x701 0x0001 // move output to speaker dac

	[Desktop Entry]
	Name=Feh
	Name[en_US]=feh
	GenericName=Image viewer
	GenericName[en_US]=Image viewer
	Comment=Fast Imlib2-based Image Viewer
	Exec=bash -c "feh -. --start-at ./$(realpath --relative-to=$(dirname %f) %f)"
	Terminal=false
	Type=Application
	Icon=feh