VirtualTam's bookmarks

1. mozilla/perf-triage - Tools used for triaging performance bugs 2024-03-31

   tags: calendar, google/mail, infrastructure/on-call, programming/javascript, programming/python

   [ permalink ]
2. oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise 2024-03-31

   tags: compression/lzma, compression/xz, linux, programming/c, programming/shell/bash, security, security/backdoor

   [ permalink ]

   • XZ Utils backdoor
   • xz/liblzma: Bash-stage Obfuscation Explained
   • /r/Linux - XZ Utils backdoor
   • Debian Bug report logs - #1068024 revert to version that does not contain changes by bad actor
   • FAQ on the xz-utils backdoor
   • LWN - A backdoor in xz
   • Everything I Know About the Xz Backdoor
3. Fixing a Bug in PyPy's Incremental GC 2024-03-28

   tags: debugging/gdb, linux/kernel, memory/garbage-collection, programming/python

   [ permalink ]
4. WebAuthn - An API for accessing Public Key Credentials 2023-06-11

   tags: cryptography/public-key-infrastructure, internet/browser, security/authentication

   [ permalink ]

   The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.

   • Guide to Web Authentication
   • Asynchronous Remote Key Generation: An Analysis of Yubico’s Proposal for W3C WebAuthn [PDF]
   • Issue 664630: Web Authentication API for Chrome
   • Bugzilla - [meta] Update WebAuthn JS API to the L1-REC spec
   • keepassxc#1870 - Feature Request: Integration with the Web Authentication API
5. Finding the “Second Bug” in glibc’s Condition Variable 2022-09-20

   tags: concurrency/threading, formal-specification/tla+, programming/c, programming/ocaml

   [ permalink ]
6. The hunt for the cluster-killer Erlang bug 2022-06-16

   tags: distributed-system, distributed-system/cluster, message-broker/kafka, programming/erlang

   [ permalink ]
7. Fixing a MongoDB Replication Protocol Bug with TLA+ - William Schultz 2022-05-31

   tags: database/mongodb, distributed, distributed-system/cluster, formal-specification/tla+, protocol

   [ permalink ]

   • https://www.youtube.com/watch?v=x9zSynTfLDE
8. The JSON License 2022-03-23

   tags: license, linux, programming/c, programming/json

   [ permalink ]

   The Software shall be used for Good, not Evil.

   • https://wonko.com/post/jsmin-isnt-welcome-on-google-code
   • https://wiki.debian.org/qa.debian.org/jsonevil
   • https://www.gnu.org/licenses/license-list.html#JSON
   • https://bugzilla.redhat.com/show_bug.cgi?id=455507
   • https://en.wikipedia.org/wiki/Douglas_Crockford#.22Good.2C_not_Evil.22
9. QWERTY altgr-weur international keyboard layout 2020-08-11

   tags: apple/macos, internationalization, keyboard, linux, microsoft/windows, user-interface

   [ permalink ]

   • https://zuttobenkyou.wordpress.com/2011/08/24/xorg-using-the-us-international-altgr-intl-variant-keyboard-layout/
   • https://bugs.freedesktop.org/show_bug.cgi?id=11753
   • https://github.com/cjuniet/altgr-weur
   • https://github.com/tjsousa/altgr-weur-mac
10. Bugs That Walk and Fly around your page 2019-10-29

    tags: bug, insect, programming/javascript, spider

    [ permalink ]

    • https://github.com/Auz/Bug
11. AWS | Enable Enhanced Networking with Elastic Network Adapters for vintage OS AMIs 2019-09-17

    tags: chroot, cloud/aws, linux, linux/debian, linux/kernel, virtualization, xen

    [ permalink ]

    Paravirtual (PV) to Hardware Virtual Machine (HVM):

    • https://stackoverflow.com/questions/24330721/amazon-ec2-how-to-convert-an-existing-pv-ami-to-hvm

    ENA support:

    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking-ena.html
    • https://forums.aws.amazon.com/thread.jspa?threadID=166135
    • https://aws.amazon.com/premiumsupport/knowledge-center/boot-error-linux-m5-c5/
    • https://bugs.centos.org/view.php?id=14107
    • https://ygrene.tech/how-to-enable-ena-support-for-aws-amis-in-5-steps-and-make-your-bamboo-remote-jobs-really-fast-f2a4254a9955

    Build Debian AMIs from scratch:

    • https://bootstrap-vz.readthedocs.io/en/master/
    • https://github.com/andsens/bootstrap-vz
    • https://www.slideshare.net/JamesBromberger/debian-cloud-building-the-debian-amis
    • https://blog.james.rcpt.to/2012/12/06/official-debian-images-on-amazon-web-services-ec2/

    Squeeze:

    • https://lists.debian.org/debian-cloud/2013/02/msg00023.html

    Wheezy:

    • https://lists.debian.org/debian-cloud/2014/10/msg00009.html
    • https://lists.debian.org/debian-cloud/2014/11/msg00000.html

    Boot to chroot:

    • https://unix.stackexchange.com/questions/85714/boot-into-a-chroot
    • https://wiki.debian.org/chroot
    • https://wiki.debian.org/Debootstrap
    • https://superuser.com/questions/384437/booting-linux-system-from-chroot-is-there-a-better-way-to-do-this/384457#384457
    • https://github.com/lemonsqueeze/boot-chroot
12. The output of Linux pipes can be indeterministic 2019-03-07

    tags: bug, hack, linux, programming/shell, programming/shell/bash, unix

    [ permalink ]

    • https://utcc.utoronto.ca/~cks/space/blog/unix/ShellPipelineIndeterminate
    • https://www.reddit.com/r/linux/comments/awx1zo/what_should_be_the_output_of_echo_red_echo_green/
    • https://news.ycombinator.com/item?id=19314681
    • https://lobste.rs/s/mb14bg/what_should_be_output_this_command_echo
13. git-bug: Distributed bug tracker embedded in Git 2018-10-22

    tags: issue, source-code-management, source-code-management/git, tracker

    [ permalink ]
14. Flickering after upgrading to kernel 4.16.0 · Issue #601 · jonls/redshift 2018-05-10

    tags: driver, graphics, light, linux, linux/archlinux, linux/kernel, screen

    [ permalink ]

    • https://forum.manjaro.org/t/new-kernel-4-16-causes-display-flashes-on-amd-r9-3xx-tonga/44302/13
    • https://bugzilla.kernel.org/show_bug.cgi?id=199407
    • https://www.reddit.com/r/archlinux/comments/7vxnam/redshift_flickering_display_after_415_kernel/
    • https://www.phoronix.com/scan.php?page=news_item&px=AMDGPU-DC-Pull-Request-4.15
    • https://github.com/jonls/redshift/issues/221
15. What is the difference between the core, full, extras and light packages for nginx? - Ask Ubuntu 2018-04-13

    tags: linux, linux/debian, linux/ubuntu, network/http-server/nginx, package

    [ permalink ]

    • https://launchpad.net/~nginx/+archive/ubuntu/stable
    • https://launchpad.net/~nginx/+archive/ubuntu/development
    • https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1262710
16. Bug Free, by Design 2018-04-02

    tags: configuration, continuous-integration, design, programming/kata, programming/object-oriented-programming, programming/testing, software-engineering/refactoring

    [ permalink ]

    • https://en.wikipedia.org/wiki/Poka-yoke
    • https://refactoring.guru/smells/primitive-obsession
    • https://blog.pragmatists.com/refactoring-from-anemic-model-to-ddd-880d3dd3d45f
    • https://github.com/martinsson/BugsZero-Kata
    • https://12factor.net/
    • https://medium.com/@kelseyhightower/12-fractured-apps-1080c73d481c
17. magnusbaeck/logstash-filter-verifier 2018-02-12

    tags: linux, observability/elastic/logstash, parser, programming/go, programming/testing

    [ permalink ]

    • https://github.com/magnusbaeck/logstash-filter-verifier/releases
    • https://discuss.elastic.co/t/testing-your-logstash-configuration/53061
    • https://discuss.elastic.co/t/logstash-configuration-file-unit-testing/88450
    • https://discuss.elastic.co/t/testing-and-benchmarking-log-collection-pipeline/42942
    • https://bugs.archlinux.org/task/56039
    • https://wiki.archlinux.org/index.php/Java
18. Who was responsible for leaking the Meltdown/Spectre story beforehand, and thus breaking the co-ordinated patched release planned for 9th-Jan between various vendors? 2018-01-08

    tags: hack, hardware, hardware/cpu, intel, linux, memory, security

    [ permalink ]

    • https://cyber.wtf/2017/07/28/negative-result-reading-kernel-memory-from-user-mode/
    • https://cyber.wtf/2018/01/05/behind-the-scene-of-a-bug-collision/
    • https://lwn.net/Articles/738975/
    • https://lwn.net/Articles/741878/
    • https://lwn.net/Articles/741882/
    • https://twitter.com/misc0110/status/948706387491786752
    • https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
19. TargetProcess - Frequently Asked Questions 2017-11-14

    tags: agile, agile/scrum, bug, management, project, tracker

    [ permalink ]

    Entities:

    • https://www.targetprocess.com/guide/working-with-entities/relations/insert-shortcut-tp-entity/
20. python - How to import a module given the full path? - Stack Overflow 2017-11-13

    tags: package, programming/python, script

    [ permalink ]

    • https://docs.python.org/3/library/importlib.html
    • https://bugs.python.org/issue21436