Docker (all versions) is vulnerable to a symlink-race attack

Docker (all versions) is vulnerable to a symlink-race attack

CVE-2018-15664: docker (all versions) is vulnerable to a symlink-race attack From: Aleksa Sarai

Date: Tue, 28 May 2019 14:25:13 +1000

There is no released Docker version with a fix for this issue at the time of writing. sh, I get a <1% chance of hitting the race condition (my attack script is quite dumb, it's possible with better timing you'd be able to hit the race window much more effectively). [1]: [2]: [3]: [4]: [5]: [6]: — Aleksa Sarai Senior Software Engineer (Containers) SUSE Linux GmbH CVE-2018-15664: docker (all versions) is vulnerable to a symlink-race attack Aleksa Sarai (May 27)

Source: seclists.org

It’s the middle of the night. Do you know who your phone is talking to?

It’s the middle of the night. Do you know who your phone is talking to?

Other trackers pay the app makers, squeezing value out of our data to target ads. Three more trackers help DoorDash monitor app performance — including one called Segment that routes onward data including your delivery address, name, email and cell carrier. Apple offers a privacy setting called “Limit Ad Tracking” (sadly off by default) which makes it a little bit harder for companies to track you across apps, by way of a unique identifier for every iPhone.

Source: www.washingtonpost.com

Huawei’s Android Replacement OS Will Launch in June

Huawei’s Android Replacement OS Will Launch in June

Huawei’s home-grown operating system – code-named HongMeng – that’s set to replace Android once the Huawei ban from Google comes into full effect, will not be commercially rolled out next month, contrary to what TechRadar Middle East was told by a Middle East head for the firm. All applications that work with Android are expected to work with this new OS without any need for further customization, Elshimy claims, adding that users will be able to download apps from the Huawei AppGallery. Whether all apps available via Google’s Play Store will also feature in Huawei’s store remains to be seen, as we’ve seen numerous operating systems before (Windows Phone, BlackBerry OS etc) fail to match the volume of Google’s and Apple’s app store offerings.

Source: www.techradar.com

Depth of Field

Depth of Field

a distance function, that yields the distance between and ; a function, , which interpolates between and ; a function, , that yields random numbers between and ; and

With the previous definitions in mind, you can draw all the lines, , in your graph structure using the following method: Sample a fixed number of times, or according to the length of . One thing to keep in mind is that this method doesn’t really require you to work in 3D space. The sampling might as well happen in 2D, and the sampling radius, , described above, could be any number different functions.

Source: inconvergent.net

Olark (YC W09) Is Hiring a Remote Partner Marketing Manager Who Loves Small Biz

Olark (YC W09) Is Hiring a Remote Partner Marketing Manager Who Loves Small Biz

lark is bootstrapped and profitable, and our entire founding team is made up of second-time entrepreneurs. We can’t wait to hear what you’ll bring to the team. We are looking for smart and talented individuals who want to contribute to our team and product in a big way.

Source: www.olark.com

Rust has chosen syntax for async/await

Rust has chosen syntax for async/await

It closes the discussion because it makes it difficult for people who disagree to acknowledge that this problem is real while also arguing that we should hold a different balance of the cost, which makes it still the preferable choice. This decision has been justified well and reflects the “consensus weighting” of the different costs among the members of the language team. There are a few further clarifications regarding some conversations that have arisen in the discussion the last few weeks:

I’m working actively on drafting a stabilization report to propose stabilizing a minimum viable version of async/await in the 1.37 release of Rust.

Source: boats.gitlab.io

Testing MatrixDS capabilities on different languages and tools

Testing MatrixDS capabilities on different languages and tools

Here’s a gist of that notebook, that you can find in the MatrixDS project:
Testing started my data science career on R. It’s a great tool for doing data analysis, data cleaning, plotting and much more. This is the code for doing that:
library(g2r)g2(iris, asp(Petal.Length, Petal.Width, color = Species)) %%
fig_point() %%
plane_wrap(planes(Species))And you’ll get:
In the code you change:
aes – asp
geom_point() – – plane_wrap(planes(Species))I’m still wondering why they didn’t use the same API but’s it’s a very cool project. Let’s Julia :) (sounds weird)
When you launch it, you can open or create any Python or Julia notebook:
This is the notebook I created for testing Julia capabilities for data science:
Here I tested some libraries like DataFrames, Gadfly, Queryverse, Vega for plotting and more :)

Source: towardsdatascience.com

The Atomic Soldiers: U.S. Veterans, Used as Guinea Pigs, Break the Silence

The Atomic Soldiers: U.S. Veterans, Used as Guinea Pigs, Break the Silence

In Knibbe’s film, some of these atomic veterans break the forced silence to tell their story for the very first time. Knibbe said he has spoken with more than 100 U.S. atomic veterans, all of whom share similar stories of the government’s intransigence. “Most of the atomic veterans didn’t even know the oath of secrecy was lifted,” Knibbe said.

Source: www.theatlantic.com

Make School Hard Again

Make School Hard Again

As the conversation around higher ed has increasingly come to focus on inclusivity and maximizing graduation rates, elite universities have reacted by eliminating their core curricula, dumbing down the requirements that remain, or providing so many degree options that a student of average ability at an average school could be placed in most top liberal arts colleges and still survive (albeit, perhaps, in the lowest quartile of his class). Who would more likely win admission to a top school: the wealthy world-traveler with prestigious extracurriculars (and a parent willing to donate a tidy sum to the university’s endowment), or the scrappy straight-A student who spends his summers working for minimum wage to help cover his tuition? The combined SAT verbal and math result for the lowest-scoring student is often comparable to that of the average score at an elite school.

Source: reason.com

Canada might hold Mark Zuckerberg in contempt of parliament

Canada might hold Mark Zuckerberg in contempt of parliament

Facebook Inc CEO Mark Zuckerberg is all set to face contempt vote in Canada. Facebook CEO Mark Zuckerberg and COO Sheryl Sandberg has decided to defy summonses from Canada’s Parliament and skip a hearing this week on how Silicon Valley impacts privacy and democracy. In place of Zuckerberg and Sandberg, Facebook plans to send its head of public policy for Facebook Canada and its director of public policy to this hearing, which will be attended by lawmakers from at least 10 countries.

Source: gimtae.com