This is a variant of the time of check to time of use (TOCTOU) problem, specifically with the “docker cp” command, which copies files to and from containers. After the full path has been resolved, the resolved path is passed around a bit and then operated on a bit later (in the case of ‘docker cp’ it is opened when creating the archive that is streamed to the client),” Sarai said in his advisory on the problem. “The most likely case for this particular vector would be a managed cloud which let you (for instance) copy configuration files into a running container or read files from within the container (through “docker cp”),,” Sarai said via email.

The company’s training courses offer customers a way to track how many employees open the phishing email tests and how many fall for the lure. Rohyt Belani, CEO of Leesburg, Va.-based security firm Cofense (formerly PhishMe), said anti-phishing education campaigns that employ strongly negative consequences for employees who repeatedly fall for phishing tests usually create tension and distrust between employees and the company’s security team. Cofense provides a phish reporting system and encourages customers to have their employees flag suspected phishing attacks (and tests), and Belani said those employee reports can often stymie real phishing attacks.

Last week, the Boring Company won a $48.6 million bid to design and build a “people mover” beneath the Las Vegas Convention Center. “Las Vegas is known for disruption and for reinventing itself,” Tina Quigley, the chief executive officer of the Regional Transportation Commission of Southern Nevada, said when the partnership between the Boring Company and the Las Vegas Convention and Visitors Authority (LVCVA) was announced in March. Digging a $49 million electric-car-tunnel to avoid walking from one end of a convention center to the other might sound zany for other places, but it’s par for the course in Las Vegas, a city that is unusually open to building flashy new stuff and blowing it up later.

This website runs on a solar powered server located in Barcelona, and will go off-line during longer periods of cloudy weather. However, this limied energy storage became problematic as the days got shorter. This set-up would keep the website online during one or two days of bad weather, after which it will go off-line.

And OpenAI found this model to be SO good that they did not release the fully trained model — which some say is against their founding motto of making AI open to all — due to their “concerns about malicious applications of the technology”. Open AI says, “We can also imagine the application of these models for malicious purposes, including the following (or other applications we can’t yet anticipate):

Generate misleading news articles

Impersonate others online

Automate the production of abusive or faked content to post on social media

Automate the production of spam/phishing content”

“But Is This Model REALLY That Good?” Open AI has cherry-picked and published a few more samples on their blog post — Better Language Models and their Implications.

Built on top of all this is also a language service which uses all the type information TypeScript has to provide powerful editor functionality like code completions, find-all-references, quick fixes, and refactorings. This regression was serious not just because it led to much higher build times for TypeScript code, but because editor operations for both TypeScript and JavaScript users became unbearably slow. Thanks to Wenlu Wang (GitHub user @Kingwl), TypeScript supports a useful new refactoring to extract types to local type aliases.

Yesterday Rebecca posted our investment rationale for Outschool, a company that offers real time group classes taught largely by very experienced K12 teachers over live video. Outschool can exist with excellent unit economics for the students, teachers, and company because there is a market of almost 2.5mm students in the US who need to learn things like Algebra, European History, Biology, etc, and will pay to do so. But the Outschool model, because of the scale it has reached in the homeschooling market, is driving down the cost of learning these subjects and can and does replace the high cost tutorial market for a number of families already.

A few months ago, we introduced Lightning Web Components, a new JavaScript framework that leverages the web standards breakthroughs of the last five years. Today, we are excited to announce the open sourcing of the Lightning Web Components framework, allowing developers to contribute to the roadmap and to use the same framework whether they are building applications on Salesforce or on any other platform. Today, we are excited to announce the open sourcing of the Lightning Web Components framework, allowing developers to contribute to the roadmap, learn the framework at a deeper level by exploring the source code, and use the same JavaScript framework whether they are building on Salesforce or any other platform.

It was an email on my phone from AppFigures (a service that tracks downloads and revenue for app developers). Research shows that the subtitle field is one of the most important elements of App Store search ranking. The new representative gave me the same response:

At this point, it occurs to me that Apple probably receives a ton of complaints about search rankings.

This website runs on a solar powered server located in Barcelona, and will go off-line during longer periods of cloudy weather. However, this limied energy storage became problematic as the days got shorter. This set-up would keep the website online during one or two days of bad weather, after which it will go off-line.