thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

khalidx

The experience of using Node.JS with TypeScript, ts-node, and ESM is horrible.

There are countless guides of how to integrate them, but none of them seem to work.

Here's what worked for me.

Just add the following files and run npm run dev. You'll be good to go!

package.json

felixarntz

<?php
/**
 * Plugin Name: Server Timing Extra
 * Plugin URI: https://gist.github.com/felixarntz/63c05392dbf7d51cc7f8f4a424b1ff39
 * Description: Exposes additional Server-Timing metrics using the Performance Lab plugin's Server Timing API.
 * Requires at least: 6.1
 * Requires PHP: 5.6
 * Version: 0.1.0
 * Author: Felix Arntz
 * Author URI: https://felix-arntz.me

nemishkor

set -e

WORKDIR=/home/.aliendalvik_systemimg_patch
TMPWORKDIR="$WORKDIR/tmp"
SQUASHFS_ROOT="$TMPWORKDIR/squashfs-root"
MOUNT_ROOT="$TMPWORKDIR/systemimg_mount"
SYSTEM_IMG=/opt/alien/system.img
ORIG_IMG_FILE=orig_img_path.txt

FEDORA22_REPO=https://archives.fedoraproject.org/pub/archive/fedora/linux/releases/30/Everything/aarch64/os/Packages

felixarntz

Mini WordPress core server performance test suite

Purpose

This quick "mini test suite" allows you to easily collect server-side performance metrics for WordPress core development. It does so by utilizing the Server-Timing header.

Usage

1. Paste the code from main.php into pretty much anywhere in WordPress core, e.g. into wp-includes/default-filters.php.
2. Use code like the one in example.com around any code or a specific function that you want to record metrics for.

devinsays

<?php

namespace UniversalYums\Admin\Performance;

class OrdersList {

	/**
	 * The single instance of the class.
	 */
	protected static $instance;

devinsays

<?php
/**
 * This script will delete all `on-hold` subscriptions and their orders and users.
 * It will delete all subscriptions based on IP.
 *
 * wp eval-file delete-fraud-activity-by-ip.php 127.0.0.1
 *
 * Dry run:
 * wp eval-file delete-fraud-activity-by-ip 127.0.0.1 dry
 *

shilman

⚠️ Warning: this document is out of date.

For the most recent webpack5 instructions see MIGRATION.md.

Storybook experimental Webpack 5 support

Storybook 6.2 includes experimental Webpack 5 support. Webpack 5 brings a variety of performance improvements, as well as exciting new features like module federation. Here's a quick guide to get you going.

Intro

flexchar

#!/bin/bash

echo "Fetching cloudflare IPs"
IPS4=$(curl -s https://www.cloudflare.com/ips-v4)
# IPS6=$(curl -s https://www.cloudflare.com/ips-v6) # IPv6 is not supported by Google yet
IPS6=""
LIST=$(paste -sd',' <<<"$IPS4 $IPS6")

if [[ -n $LIST ]]; then
    echo "Got it!"

mcaskill

<?php
/**
 * WordPress Ajax Process Execution
 *
 * This file is a near-identical copy of {@see wp-admin/admin-ajax.php} from WordPress v6.3.0.
 *
 * Differences:
 * 1. Constant `WP_ADMIN` is set to FALSE, by default.
 * 2. WordPress action 'admin_init' is replaced with custom action 'ajax_init'.
 * 4. Custom actions hooked on 'admin_init' are not executed.