⨑ MOOD::2

↻ HABIT [[◶ Trackers]] [Sketching::] [Exercise::✅] [Read::] [Personal Work::] [Nutrients and Water::✅]

\Thursday, April 04, 2024

📅 Daily Questions

🌜 Last night, after work, I

🙌 One thing I'm excited about right now is

🚀 One+ thing I plan to accomplish today is

• [ ]

👎 One thing I'm struggling with today is

📝 Ephemeral Notes

• #til2024 XZ Backdoor
  • XZ utils is a utility that compress and decompressing streams that is included in many linux distros
  • There is a popular library that uses this and is maintained by a single maintainer called liblzma which some distros will patch their sshd library with
    • This contained a backdoor that can only be intercepted by a private key
    • The backdoor was obfuscated and hidden in the tarballs of the liblzma library as a test file
  • Discovered by a software engineer benchmarking postgres and accidentally saw that ssh was taking more resources than expected and tracked down this backdoor

Notes created today

List FROM "" WHERE file.cday = date("2024-04-04") SORT file.ctime asc

Notes last touched today

List FROM "" WHERE file.mday = date("2024-04-04") SORT file.mtime asc

created: 2023-01-16 11:50