一份求职编码测试如何让你系统沦陷
一名软件工程师收到LinkedIn虚假招聘方的编码测试，运行代码后系统被植入RAT木马。恶意代码通过获取远程载荷，连接C2服务器后窃取SSH密钥、AWS凭证、浏览器密码和28种加密货币钱包，还能截屏、监控剪贴板。攻击者会检测VM环境以规避沙箱分析。建议用Docker或Vagrant隔离运行陌生代码，发现中招后应立即轮换密钥、改密码并重装系统。 
RSS: https://www.codedge.de/feed.xml
Holger Lösken, going by his freelance brand codedge, talking about all things code-related as well topics around social society. Find musings about programming languages, deployment, computer and digital stuff in general.
提交点赞
评论
点赞
收藏Managing secrets with SOPS in your homelab
Sealed Secrets, Ansible Vault, 1Password or SOPS - there are multiple ways how and where to store your secrets. I went with SOPS and age with my ArgoCD GitOps environment. Managing secrets in your hom...
My TrueNAS custom NAS build (2025)
Since years I have an off-the-shelf NAS and always wanted to build my own. I wanted somthing I control myself, I am independent from any vendor support, something I can modify to my needs. So I build ...
Codeberg builds on Woodpecker CI in K8s
I moved all my repositories to Codeberg and I am very happy with it. While CI/CD and heavy build jobs cannot be lifted by Codeberg for all repositories hosted, the way to go is to outsource jobs into ...
Random wallpaper with swaybg
Setting a wallpaper in Sway, with swaybg, is easy. Unfortunately there is no way of setting a random wallpaper automatically out of the box. Here is a little helper script to do that. The script is ba...
Modern messaging: Running your own XMPP server
Since a years we know, or might suspect, our chats are listend on, our uploaded files are sold for advertising or what purpose ever and the chance our social messengers leak our private data is incred...
Proton Authenticator: Don't you want diversification?
When Proton released its new authenticator in July 2025 I had mixed feelings about that. A new authenticator app although there is a bunch of viable, secure and privacy-respecting as well as well-main...
Hugo with Codeberg and BunnyCDN
While enshittification is rolling across a lot of US-based services, let’s try to host our static Hugo page with EU-based services only. Domain, deployment, CDN: we’re going back to the roots - or int... 
Moving away from Authy
One year ago Authys desktop app was shut down. Their mobile app still works, but is literally a dead train. It was about time to move to some alternative - and there are not plenty. 2FA/Mutifactor dev...
Nuxt 3: Good to know
When switching my personal website to Nuxt 3 I found myself looking and researching all the small things you need to tackle, besides the content, to make it fly. Sitemap, robots.txt, proper page title...
Auto-generate a social media image in Statamic
When writing blog posts you likely want to share your post on Twitter or any other social network to give your posts an audience. Let’s stay with Twitter for this post. While writing blog posts might ...
Run Statamic on Vercel
When Tailwindcss 2 was released I decided to give my blog a new update and also write about some more topics I had in mind. The blog ran on Hugo hosted on Netlify. While I never had issues with Netlif...
Render images in Statamics Bard
The Bard fieldtype is a beautiful idea to create long texts containing images, code samples - basically any sort of content. While I was creating my blog I was not sure how to extract images from the ...
Create proper database dumps for Magento 2
When developing a Magento2 you might be needing database dumps from time to time from the production system. Normally you either dump the complete database - which, to me, bring a lot of negative side...
Run a PHP application on AWS Fargate
Following the trend of serverless, all that hype (or not?) I was looking through the AWS services offered and stumbled upon AWS Fargate, a service that lets you run containerized applications on eithe...