Discover gists

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

Pure ESM package

The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.

This means you have the following choices:

Use ESM yourself. (preferred)
Use import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.
If the package is used in an async context, you could use await import(…) from CommonJS instead of require(…).
Stay on the existing version of the package until you can move to ESM.

robots.txt file controls what pages of your allplications gets crawled by the serach engine bots. As part of robots.txt file we can allow or disallow single pages or directories within the application.

robots.txt file lives in the root folder of your application. A simple, static solution in Rails would be, to put a robots.txt file into you /public folder in your rails app but then you can't dynamically set the content of this file.

If you want a different file for staging and production server or want some dynamic routes in your robots.txt, then you need to generate this file with rails. Make sure you remove/rename robots.txt from /public folder.

	Команды в Git Bash консоли
	clear — Очистить консоль

	Навигация
	pwd — Показать текущий каталог
	ls - Показать файлы в данной папке, кроме скрытых
	ls -f — Показать файлы в данной папке, включая и скрытые
	cd c:/ — Перейти в конкретный каталог
	cd - — Вернуться назад
	cd .. — Выйти на 1 уровень вверх

	Install VMWare Workstation PRO 17 (Read it right. PRO!)
	Also, these keys might also work with VMWare Fusion 13 PRO. Just tested it.

	Sub to me on youtube pls - PurpleVibe32
	if you want more keys - call my bot on telegram. @purector_bot (THE BOT WONT REPLY ANYMORE) - Or: https://cdn.discordapp.com/attachments/1040615179894935645/1074016373228978277/keys.zip - the password in the zip is 102me.
	---
	This gist can get off at any time.
	PLEASE, DONT COPY THIS. IF YOU FORK IT, DONT EDIT IT.
	*If you have a problem comment and people will try to help you!
	*No virus

	#!/usr/bin/env bash

	# Abort sign off on any error
	set -e

	# Start the benchmark timer
	SECONDS=0

	# Repository introspection
	OWNER=$(gh repo view --json owner --jq .owner.login)

	# Based on this answer: https://stackoverflow.com/a/61859561/1956278

	# Backup old data
	Rename-Item -Path "./data" -NewName "./data_old"

	# Create new data directory
	Copy-Item -Path "./backup" -Destination "./data" -Recurse
	Remove-Item "./data/test" -Recurse
	$dbPaths = Get-ChildItem -Path "./data_old" -Exclude ('mysql', 'performance_schema', 'phpmyadmin') -Recurse -Directory
	Copy-Item -Path $dbPaths.FullName -Destination "./data" -Recurse

	using UnityEngine;
	#if UNITY_EDITOR
	using UnityEditor;
	#endif

	[System.Serializable]
	public class SceneObject
	{
	[SerializeField]
	private string m_SceneName;

	using System.Collections.Generic;
	using UnityEngine;
	using UnityEngine.UIElements;
	using UnityEngine.EventSystems;
	using UnityEngine.Rendering;

	namespace Katas.Experimental
	{
	public class WorldSpaceUIDocument : MonoBehaviour, IPointerMoveHandler, IPointerUpHandler, IPointerDownHandler,
	ISubmitHandler, ICancelHandler, IMoveHandler, IScrollHandler, ISelectHandler, IDeselectHandler, IDragHandler