An update on last week’s customer shutdown incident

An update on last week’s customer shutdown incident

On May 29, DigitalOcean customer Raisup’s account was locked, and their resources were powered down due to a false positive generated by our anti-fraud and abuse automation system. Upon a second review by a different Abuse Operations agent (nearly 29 hours after the customer responded to the second flag), the agent failed to recognize this was a false positive, and the agent fully denied access back into the account. 2019-05-30 09:49 UTC – Account is locked and powered down by the cryptocurrency mitigation three hours after the customer powers their Droplets back on when the CPU usage on the same worker Droplets spikes back to 100%.

Source: blog.digitalocean.com

DIY an almost-GHz active differential oscilloscope probe

DIY an almost-GHz active differential oscilloscope probe

I have an old Tektronix 11801B scope with two 20 GHz sampling heads with 50Ω single ended inputs that can handle signals which are 1.0V peak-to-peak so that’s what I wanted the probe output to be compatible with. Finally there’s a a 50Ω resistor (R11) for impedance matching with the output which together with the 50Ω (R12) termination at the scope input attenuates the signal by 1:2 giving a total attenuation of 1:10 for the whole probe. A – Single ended probe with one OP-amp

B – Two standard OP-amps as the first stage

C – Dual OP-amp as the first stage

D – Fully differential OP-amp as the first stage

I have had very good experiences with using Eurocircuits for PCB manufacturing before.

Source: blog.weinigel.se

“Summa de Arithmetica, Geometria, Proportioni Et Proportionalita” to be sold

“Summa de Arithmetica, Geometria, Proportioni Et Proportionalita” to be sold

MODERN CAPITALISM began among the European merchant families of the early Renaissance—the Fuggers of Augsburg, Medicis of Florence and, in Venice, one Antonio de Rompiasi, who in 1464 hired a tutor in mathematics for his three sons. With examples from dealers in butter to lemons to silk, Pacioli set out the method for tracking income and expenditure and the calculation of net profit or loss, which for the first time allowed an immediate snapshot of a firm’s financial position. Like many monumental works of 15th-century printing, Pacioli’s treatise has survived in its original form.

Source: www.economist.com

Adafruit Founder Limor Fried: Open-Source Hardware Revolution [video]

Adafruit Founder Limor Fried: Open-Source Hardware Revolution

Limor Fried is an engineer and creator of Adafruit Industries, a New York-based company that builds and sells open source hardware. She later moved to New York City to found Adafruit Industries. My stories cover a very broad spectrum – traditional Linux, data center and Free Software to contemporary emerging technologies like ‘serverless’.

Source: www.tfir.io

Can Data Be Human? The Work of Giorgia Lupi

Can Data Be Human? The Work of Giorgia Lupi

Her work, consistent with her upbringing, brings a tactile feel to computer code, and her appointment is an occasion to assess information design—a field located between graphic design and data science—and the possibilities it holds. Many people outside of the design world first encountered Lupi’s work through a side project: her year-long correspondence with the London-based data designer Stefanie Posavec, “a friendship in 52 weeks of postcards,” collected in the 2016 book “Dear Data.” Two of Lupi’s upcoming projects do, in fact, grapple with the questions of power and how data visualization might help, in different ways.

Source: www.newyorker.com

Academics and students should take blogging and social media seriously

Academics and students should take blogging and social media seriously

Blogs are now an established part of the chattersphere/public conversation, especially in international development circles, but Duncan Green finds academic take-up lacking. Before I started teaching at LSE in January, I had the impression that the academics and researchers around the school were totally social media savvy – prolific tweeters like Charlie Beckett and top blogs like LSE Impact are high up on my follow list. This piece originally appeared on the LSE International Development blog and is reposted with permission.

Source: blogs.lse.ac.uk

Vim/Neovim Arbitrary Code Execution via Modelines

Vim/Neovim Arbitrary Code Execution via Modelines

Vim before 8.1.1365 and Neovim before 0.3.6 are vulnerable to arbitrary code execution via modelines by opening a specially crafted text file. The modeline feature allows to specify custom editor options near the start or end of a file. [3]

Thus, one can trivially construct a modeline that runs code outside the sandbox:

An additional step is needed for Neovim which blacklists : [4]

Here, can be used instead, which takes a argument, too: [5]

The following modeline utilizes a fold expression to run to execute the current file, which in turn executes as a shell command:

Additionally, the Neovim-only function is vulnerable to the same approach via e.g.:

Beyond patching, it’s recommended to disable modelines in the vimrc ( ), to use the securemodelines plugin, or to disable (since patch 8.1.1366, Vim-only) to disallow expressions in modelines.

Source: github.com

The current state of self-publishing on the p2p web

The current state of self-publishing on the p2p web

Building that website was a really painful process because I was in a mode where I was learning a lot for the sake of wanting to get a job building things on the web. I think that’s a really bad creative place to be in, because I was looking at other people who I knew—looking at other people’s websites who had jobs in web development—and thinking that I had to build something that resembled what they were doing. I like to say that Beaker is a browser for people who are optimistic about the Web as a space for creation, connection, and humanity.

Source: elliott.computer

When One Protected Species Kills Another

When One Protected Species Kills Another

With this paper, researchers from the Monterey Bay Aquarium showed recovering great white shark populations are making it harder for another protected species to recover from past overexploitation: the sea otter. In the case of the great white sharks and sea otters, fixing the otter habitat may be an effective way to help otters (and other California wildlife) without hurting the sharks. “We didn’t do a lot of ecological studies before driving these wildlife populations to near-extinctions,” says Salvador Jorgenson of the Monterey Bay Aquarium, an expert on great white sharks and a coauthor on the shark and otter study.

Source: www.scientificamerican.com

Give Me a Secret Garden

Give Me a Secret Garden

We spent almost an hour there, just sitting on the old Muni platform, watching the cars go by. Before long, other kids were using the iGlasses hack and coming to the cave with us. I even smuggled in my petunias and UV lights.

Source: www.nytimes.com