30 March 2024

8 links · Saturday

Filippo Valsorda (@filippo.abyssdomain.expert)

I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission. The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It's RCE, …

Actionable Interview Tips – Dev Leader Weekly 37

Welcome to another issue of Dev Leader Weekly! In this issue, I discuss the second of a 3-part series with a focus on actionable interview tips!

We are under DDoS attack and we do nothing

Modern, native SQL client with intuitive GUI tools to create, access, query & edit multiple relational databases: MySQL, PostgreSQL, SQLite, Microsoft SQL Server, Amazon Redshift, MariaDB, CockroachDB, Vertica, and Redis.