The 15-Year Layover (2003)

The 15-Year Layover (2003)

Once upon a time, before facts were eroded by dreams, before the man destroyed and re-created himself, he had been a boy named Merhan Karimi Nasseri, happily living with five siblings in the oil-rich south of Iran. While he grieved, his mother notified him that she was not his real mother, that he was, in fact, the bastard son of an affair between his father and a Scottish woman, perhaps from Glasgow, who had worked as a nurse for the Anglo-Iranian Oil Company. Merhan would leave Iran to study abroad in England, where he would receive a monthly stipend.

Source: www.gq.com

Scientists are setting a forest on fire and studying it with drones

Scientists are setting a forest on fire and studying it with drones

Starting in July, the National Oceanic and Atmospheric Administration (NOAA) and NASA plan to fly research planes over more than a dozen naturally occurring wildfires in the region, collecting data on how smoke plumes rise from a blaze. (The US National Science Foundation funded research flights over about 20 wildfires that summer, to study how the smoke chemistry evolved over time; those data are still being analysed.) Just as meteorologists have improved their predictions of severe weather in recent decades, fire scientists are now trying to improve their predictions of how smoke spreads so that people can prepare themselves, says Susan Prichard, a forest ecologist at the University of Washington in Seattle.

Source: www.nature.com

Docker is vulnerable to a symlink-race attack

Docker is vulnerable to a symlink-race attack

CVE-2018-15664: docker (all versions) is vulnerable to a symlink-race attack From: Aleksa Sarai

Date: Tue, 28 May 2019 14:25:13 +1000

There is no released Docker version with a fix for this issue at the time of writing. sh, I get a <1% chance of hitting the race condition (my attack script is quite dumb, it's possible with better timing you'd be able to hit the race window much more effectively). [1]: [2]: [3]: [4]: [5]: [6]: — Aleksa Sarai Senior Software Engineer (Containers) SUSE Linux GmbH CVE-2018-15664: docker (all versions) is vulnerable to a symlink-race attack Aleksa Sarai (May 27)

Source: seclists.org

Almost One Million Vulnerable to BlueKeep Vuln (CVE-2019-0708)

Almost One Million Vulnerable to BlueKeep Vuln (CVE-2019-0708)

A lot of others are Windows machines, sometimes vulnerable and sometimes not, but for some reason return errors sometimes. Thus, out of 7.6-million devices that respond to port 3389, we find 3.5-million that reliably talk the Remote Desktop protocol, of which 0.9-million are vulnerable, and the rest are not. However, others are likely ISPs with Windows machines moving around from one IP address to another, so that continued rescans are going to get distorted results rather than cleaning up the previous results.

Source: blog.erratasec.com

25% of Americans say they worry about money ‘all the time’

25% of Americans say they worry about money ‘all the time’

Americans are feeling mostly good about their finances, according to data recently published by analytics firm Gallup. About 56% describe their current financial situation as “good” or “excellent,” the data shows, which is an increase of 10% from 2015 and the highest score since 2002. It’s worth noting that of the respondents who feel good about their finances, a majority tend to have higher household incomes, own stocks and be college-educated, and as a result, are “more likely than their counterparts to rate their own financial situation positively,” Gallup says.

Source: www.cnbc.com

Ask HN: DB wizards of HN, how do I represent a hierarchy in RDBMS?

Ask HN: DB wizards of HN, how do I represent a hierarchy in RDBMS?

The way I can represent this in RDBMS is by creating tables for each class, Pet, Animal, Cat and Dog. This way I am able to represent the hierarchy of Animal, Dog and Cat. My only concern is that the Animal table will grow rapidly as more pets and animal types are added and will be a performance issue.

Source: news.ycombinator.com

Broken by default: why you should avoid most Dockerfile examples

Broken by default: why you should avoid most Dockerfile examples

When it’s time to package up your Python application into a Docker image, the natural thing to do is search the web for some examples. Learn more about best-practices Docker images for Python. At that point rebuilding the image will switch to a different version of Python, which might break the software: a minor change in your code can lead to a deploy that breaks production.

Source: pythonspeed.com

Scene Report from the Chernobyl Zone

Scene Report from the Chernobyl Zone

Surreptitiously crossing the Uzh river at 2am, with the full moon starting to set low on the horizon, the first thing that strikes you about the Chernobyl Exclusion Zone is the sound of it. With only days to stop it, Alexei Ananenko, Valeri Bezpalov, and Boris Baranov went into the ruins of the plant, knowingly facing almost certain death from that level of radiation exposure, to release valves that would drain 5 million gallons of water. When the firefighters from the first night, before they understood that this was not just a fire, showed up at the hospital sick and suffering from radiation burns, the medical staff there knew that they must have been severely contaminated, but they stayed and treated them anyway, potentially exposing themselves to the same fate.

Source: moxie.org

Huawei’s Ace in the Hole: Undersea Cables

Huawei’s Ace in the Hole: Undersea Cables

TOKYO — While the U.S. is pressuring allies to help keep Huawei Technologies out of 5G cellular networks, the Chinese giant is quietly advancing in the global market for one of the most critical components of telecom infrastructure: undersea cables. But last September, Huawei surprised industry executives in Japan, the U.S. and Europe by completing a 6,000 km trans-Atlantic cable linking Brazil with Cameroon. Specifically, on top of Japan, the U.S. and Australia, cables connected to NATO members should be off-limits to Huawei.

Source: asia.nikkei.com

Blackbird SR-71 Flight Manual

Blackbird SR-71 Flight Manual

For the first time, the SR-71 Flight Manual is available online. No copyright is asserted for the content that is presented on this web site from the SR-71 Flight Manual. The Table of Contents below is as how it appears in the actual flight manual, but has been presented in web form for easy access to the manual’s content.

Source: www.sr-71.org