nobkd

Log4J CVE Advisory

The Problem

Log4J has a feature called Java Naming and Directory Interface (shortened to JNDI in this document), which allows a Java program to reach out to an external source to gather data.
If you put a section of text containing ${jndi:query} into the log, the Log4J library will try to resolve the query.
This can be combined with the Lightweight Directory Access Protocol (LDAP) to connect to a remote server.

However, because JNDI is built for retrieving data, and JNDI is a Java program, if you put a JNDI query using LDAP into a log, it will connect to the given site, download a file, and then execute it.
This is called Remote Code Execution.

Backup android app, data included, no root needed, with adb

Note: This gist may be outdated, thanks to all contributors in comments.

adb is the Android CLI tool with which you can interact with your android device, from your PC

You must enable developer mode (tap 7 times on the build version in parameters) and install adb on your PC.

Don't hesitate to read comments, there is useful tips, thanks guys for this !

How to use `<details>` `<summary>` expandable content on GitHub with Markdown

Firstly, what is <details> <summary>?

The HTML Details Element (<details>) creates a disclosure widget in which information is visible only when the widget is toggled into an "open" state. A summary or label can be provided using the <summary> element. https://developer.mozilla.org/en-US/docs/Web/HTML/Element/details.

Example

type StringBool = "true"|"false";


interface AnyNumber { prev?: any, isZero: StringBool };
interface PositiveNumber { prev: any, isZero: "false" };

type IsZero<TNumber extends AnyNumber> = TNumber["isZero"];
type Next<TNumber extends AnyNumber> = { prev: TNumber, isZero: "false" };
type Prev<TNumber extends PositiveNumber> = TNumber["prev"];

	#!/usr/bin/env -S bash -xeuo pipefail

	set -xeuo pipefail

	pkg install pacman patchelf \
	which time ldd tree

	echo
	echo

	{
	// build123d CodeCAD speedmodeling snippet by Jern
	//
	// This was specifically designed for use with TooTallToby's modeling challenges, but applicable for
	// all CodeCAD modeling, but customize as desired for your own needs. This provides:
	// 1. A file template that reduces the time necessary to "just start coding/modeling"
	// 2. Shortcuts like "?ebds + TAB" that creates a BuildSketch + extrude block
	//
	// recommended to bind "Snippets: Fill file with Snippet" to e.g. CTRL + ALT + N
	// recommended to bind "Jupyter: Restart Kernel" to e.g. CTRL + ALT + /

	{
	"recommendations": [
	"aaron-bond.better-comments",
	"adrieankhisbe.vscode-ndjson",
	"johnsoncodehk.vscode-tsconfig-helper",
	"rbuckton.deoptexplorer-vscode",
	"helixquar.randomeverything",
	"WallabyJs.quokka-vscode",
	"bierner.comment-tagged-templates",
	"alexcvzz.vscode-sqlite",

	"""An atomic, thread-safe incrementing counter."""

	import threading


	class AtomicCounter:
	"""An atomic, thread-safe incrementing counter.

	>>> counter = AtomicCounter()
	>>> counter.increment()

	<?xml version="1.0"?>
	<!DOCTYPE profile>
	<profile
	xmlns="http://www.suse.com/1.0/yast2ns"
	xmlns:config="http://www.suse.com/1.0/configns">
	<general>
	<mode>
	<confirm config:type="boolean">false</confirm>
	<second_stage config:type="boolean">false</second_stage>
	</mode>