Thank God

From CVE-2024-3094 XZ Backdoor: All you need to know:

Fortunately, the malicious code was discovered quickly by the OSS community and managed to infect only two of the most recent versions of the package, 5.6.0 and 5.6.1, which were released within the past month.

Sat Apr 06 19:45:51 [bash:5.2.15 jobs:0 error:0 time:0]
$ xz --version
xz (XZ Utils) 5.4.1
liblzma 5.4.1

New computer ‘trail’

I have built a new computer ‘trail‘ out of my old workstation ‘tradition‘. I was able to do this because I migrated the VirtualBox VMs that were running on ‘tradition’ over to QEMU/KVM VMs now running on ‘lore‘.

My new computer ‘trail’ is setup as the recording workstation for the “booth” in my studio. This is good because now I can record at 4K in the booth!

I don’t use Windows much these days but this new studio workstation runs Windows 11 Pro. I haven’t used software RAID on Windows before but for this workstation I setup a RAID1 mirror using 2x 2TB NVMe drives. I was able to configure the block size for the NTFS file system so I picked 2MB (which was the maximum) as this RAID array will only be for storing video recordings (which are huge files).

How to Remove Old and Useless Drivers in Windows

I had a problem where I needed to delete a device driver that had been installed so that I could install a replacement. I found How to Remove Old and Useless Drivers in Windows and the process was roughly:

  • Win + X: Windows PowerShell (Admin)
  • Win + X: Device Manager
  • View -> Show hidden devices

You can then look for the old driver and remove it.

BIOS settings for ‘verve’

I went hunting in the BIOS for ‘verve‘ which has a ASUS PRIME B550M-A motherboard and I found I needed to change two settings.

The first setting was Advanced -> CPU Configuration -> SVM Mode = Enabled. This enables AMD-V and allows the CPU to function in a hypervisor.

The second setting was Advanced -> Onboard Devices Configuration -> USB power delivery in Soft Off state (SS) = Disabled. This fixes the problem with the power button not working as discussed here: Earth leakage hack.

Running notepad.exe as Administrator

Man, back on Windows for my new studio computer ‘verve‘. Needed to figure out how to edit C:\Windows\System32\drivers\etc\hosts and that was certainly more difficult than it needed to be.

In the end I used “Method 3” over here to add an “Open in Notepad (Admin)” item to my shell context menu:

  • Open regedit
  • Navigate to: HKEY_CLASSES_ROOT\*\shell
  • Add a new key ‘runas’ under ‘shell’
  • Change (Default) to: Open with Notepad (Admin)
  • Add a new key ‘command’ under ‘runas’
  • Change (Default) to: notepad %1