Wojciech Krawczyk wojtekk

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

If you want to add a link, comment or send it to me
Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great resources

Royce Williams list sorted by vendors responses Royce List
Very detailed list NCSC-NL
The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List

Migrate GitHub issues with comments and labels to Jira

Set up the environment

Instal Deno. It's a secure runtime for JavaScript and TypeScript.
Generate a personal access token for GitHub. And save it to ~/.github-oauth. You can use the following command to save it:
```
echo generated_github_personal_access_token_goes_here > ~/.github-oauth
```

Run Docker Compose as a Docker CLI plugin

Just a quick fun experiment to try to make docker-compose work as a Docker CLI plugin

docker/cli#1534 CLI Plugins Design
docker/cli#1564 Basic framework for writing and running CLI plugins

To use it (assuming you have docker compose installed):

download a and install nightly build of the docker cli (linux macOS)

Configure S3 filesystem support for Spark on OSX

Homebrew installed Spark 1.6.x

Install hadoop to get the required jars (brew install hadoop)
Create a spark-env.sh (cp /usr/local/Cellar/apache-spark/1.6.1/libexec/conf/spark-env.sh.template /usr/local/Cellar/apache-spark/1.6.1/libexec/conf/spark-env.sh)
Set HADOOP_CONF_DIR in spark-env.sh (export HADOOP_CONF_DIR=/usr/local/Cellar/hadoop/2.7.2/libexec/etc/hadoop/)
Add the required jars to the SPARK_CLASSPATH in spark-env.sh

Overview

This is a bash script that will automatically turn your wifi off if you connect your computer to an ethernet connection and turn wifi back on when you unplug your ethernet cable/adapter. If you decide to turn wifi on for whatever reason, it will remember that choice. This was improvised from this mac hint to work with Yosemite, and without hard-coding the adapter names. It's supposed to support growl, but I didn't check that part. I did, however, add OSX notification center support. Feel free to fork and fix any issues you encounter.

Most the credit for these changes go to Dave Holland.

Requirements

Mac OSX 10+
Administrator privileges

I wanted to figure out the fastest way to load non-critical CSS so that the impact on initial page drawing is minimal.

TL;DR: Here's the solution I ended up with: https://github.com/filamentgroup/loadCSS/

For async JavaScript file requests, we have the async attribute to make this easy, but CSS file requests have no similar standard mechanism (at least, none that will still apply the CSS after loading - here are some async CSS loading conditions that do apply when CSS is inapplicable to media: https://gist.github.com/igrigorik/2935269#file-notes-md ).

Seems there are a couple ways to load and apply a CSS file in a non-blocking manner:

	# see https://www.topbug.net/blog/2013/04/14/install-and-use-gnu-command-line-tools-in-mac-os-x/

	# core
	brew install coreutils

	# key commands
	brew install binutils
	brew install diffutils
	brew install ed --default-names
	brew install findutils --with-default-names

	function computeHttpSignature(config, headerHash) {
	var template = 'keyId="${keyId}",algorithm="${algorithm}",headers="${headers}",signature="${signature}"',
	sig = template;

	// compute sig here
	var signingBase = '';
	config.headers.forEach(function(h){
	if (signingBase !== '') { signingBase += '\n'; }
	signingBase += h.toLowerCase() + ": " + headerHash[h];
	});

	{
	"name": "file-upload",
	"version": "1.0.0",
	"description": "File Upload test case",
	"main": "server.js",
	"dependencies": {
	"hapi": "^8.0.0-rc8",
	"joi": "^5.0.2"
	},
	"devDependencies": {

	var Hapi = require('hapi');
	var stream = require('stream');

	// Create a server
	var server = Hapi.createServer('localhost', 8000);

	// Add a route
	server.route({
	method: 'GET',
	path: '/hello',