News for hackers. Stuff that matters.

scragg

How is this an RCE? The only way I can think of exploiting this is having access to the code. You can "exploit" JSON.parse with the same methodology. Perhaps if someone was using a serializer that uses eval but that shouldn't be a vuln in jsonwebtoken but in the library that passes user input into eval.
Re:What Kind of Problem Is Climate Change? on Monday September 30, 2019 @11:34AM (#21116431)
Here is a larger timescale. Headings link to charts.

https://www.aoml.noaa.gov/hrd/tcfaq/E11.html

Re:What Kind of Problem Is Climate Change? on Monday September 30, 2019 @10:48AM (#21115918)
I think the point of bringing up hurricane Dorian is the size/strength. It's not unique by itself but cat 4/5's are at an upward trend[1]. Also take a look at hurricane Barry[2] this year. It's a disturbance that came out of the continental US, became a hurricane in the gulf, and came back to strike the US.

[1] https://www.gfdl.noaa.gov/wp-content/uploads/pix/user_images... [2] https://en.wikipedia.org/wiki/Hurricane_Barry_(2019)#/media/...

Re:California approves $768M for electric vehicles on Friday June 01, 2018 @03:51PM (#17209422)
Not true, Texas wind. 75k EV miles already. To clarify, you can choose your energy source (at least choose who gets the money for your consumption).
Some people are so cynical of information that doesn't fit their beliefs they end up spreading lies.
Re:Chevrolet Bolt EV Is the 2017 Motor Trend Car of the Year on Tuesday November 15, 2016 @09:59AM (#12958497)
It's simple, if the made this car look good they would never keep up with demand.
> As taxpayers are only 15 percent

Only because they are very successfully at monetizing their content which was originally bootstrapped by tax and donations. After this exclusive deal that percentage may drop further.

They did this with the 40kwh option when they first offered the S. They didn't produce this battery and shipped a 60kwh battery that was software limited to 40kwh. I had a 40 on order and was delighted by this. I got the speed of a 60 for free and also not charging your battery to capacity can increase it's longevity. Plus, this gave me or future owners the option to unlock if they wished (I never did).

I think this is fair for when they transition to larger packs. You will get upset customers if you introduce a larger pack right after they bought the smaller. This gives customers the option to upgrade in that transition period.

Also, I noticed a comment:

"Are they hoping some people are going to buy the upgrade when they’re about to out of juice".

It doesn't work like that, you pay to unlock the extra capacity which needs to be charged. When your battery is depleted it won't matter.

Isn't recaptcha just a checkbox now?
Re:Venmo Five Years Ago on Wednesday October 21, 2015 @02:42PM (#10427583)
Square Cash definitely has acute UI. ;)
Re:Flirting with Elixir on Thursday October 15, 2015 @02:57PM (#10395189)
My good friend's company is hiring engineer(s) with Elixir knowledge if anyone is interested. https://discordapp.com/company#join
Re:Android Wear now works with iPhones on Monday August 31, 2015 @02:27PM (#10148253)
What is the watch that is featured in the picture?
Re:When HHVM doesn't work quite right on Tuesday July 21, 2015 @02:56PM (#9924800)
Sweet, I am going to borrow your health check script. I can't wait until official packaged support for the ZMQ extension.
"username or password incorrect" does not imply that the username was correct or incorrect. The system is saying one or both fields are incorrect.
Re:0h h1 – A little logic game on Thursday November 13, 2014 @03:07PM (#8603724)
Try flipping the horizontally adjacent blocks
Re:OVH servers exploited through shellshock on Monday November 10, 2014 @12:47PM (#8584990)
Actually if they detect a server is compromised, they will put your server in a FTP only data recovery mode and usually the only way to get your server back is to do a fresh install of the OS. Luckily OS reloads are fast and provisioning dedicated servers takes minutes.
Re:Ask HN: What (side) projects are you working on? on Wednesday November 05, 2014 @10:07AM (#8562058)
Realms Wiki: http://realms.io - Git based Markdown wiki inspired by Gollum with side by side preview like Ghost/Stackeditor. Also support for collaboration via Firepad/TogetherJS

Backend: Python, Flask, Dulwich Frontend/Editor: Bootstrap 3, Handlebars, Ace

Re:Tim Cook Speaks Up on Thursday October 30, 2014 @01:06PM (#8534254)
Older. Negative experiences with younger people were just ignorant and probably did not intend harm. Some older folks will say things with pure hate and complete disregard to our feelings. I understand when Cook mentions the empathy you gain when being a part of a minority. I get anxious when walking into a restaurant that I am unfamiliar with. I think to myself... are we are going to be welcome here, is someone going to say something, what should I do if that happens etc. I've never had these feelings the first 25 years of my life.

On the other hand, there were occasions complete strangers (usually older) have said very nice things to us in public. These positive experiences greatly out number the negative.

Re:Tim Cook Speaks Up on Thursday October 30, 2014 @10:32AM (#8533123)
I am a white male married to a black female with 2 mixed kids living in Texas. While we haven't experienced much bigotry our way, it has happened. The first time I was filled with disbelief and shortly after rage while my wife (then gf) cried.

Our lives would be different if we were born a generation ago. Thank you MLK and Tim Cook.

Re:Tim Cook Speaks Up on Thursday October 30, 2014 @10:18AM (#8533038)
I also saw their new "And You" ad on broadcast TV which features a gay couple getting married. https://www.youtube.com/watch?v=TRmgMe2STL0
Re:The Happy Ending Problem [video] on Tuesday October 28, 2014 @12:11PM (#8521710)
I think brute force could be used to prove him wrong (if his conjecture is incorrect). However, it won't be enough to prove correct.
Re:The man with the golden blood on Wednesday October 22, 2014 @12:42PM (#8493510)
Just say keep the money, altruism restored.
Re:Android 5.0 Lollipop on Wednesday October 15, 2014 @12:55PM (#8459714)
Physically, the Nexus 7 is just over 2 inches (51.4mm) larger diagonally then the Nexus 6.
Re:Nexus 6 on Wednesday October 15, 2014 @12:24PM (#8459357)
The Nexus 5 is still available, which I hope they keep refreshing and maintaining its price point. But yea, Moto G, or E for anything cheaper is the way to go.
Re:CDC confirms first Ebola case diagnosed in US on Tuesday September 30, 2014 @10:21PM (#8392497)
People can be exposed to Ebola virus from direct physical contact with body fluids like blood, saliva, stool, urine, sweat etc. of an infected person and soiled linen used by a patient.

--WHO

Re:CDC confirms first Ebola case diagnosed in US on Tuesday September 30, 2014 @08:32PM (#8392227)
Sorry, I will spread complacency like yourself... that will make it all go away.
Re:CDC confirms first Ebola case diagnosed in US on Tuesday September 30, 2014 @08:31PM (#8392225)
A private room? Lucky to get a bed in the hallway in some of these hospitals.
Re:CDC confirms first Ebola case diagnosed in US on Tuesday September 30, 2014 @05:57PM (#8391564)
We should be cautious and prepared for Ebola and not assume we can contain it. We use isolation chambers and a massive team of doctors in special rooms at the CDC just to take care of 2 people. I take a look at the hospitals in DFW and I doubt they can properly contain a handful of cases concurrently.
> we finally got an agreement from the administration to release how many times we had national security orders on Apple. And in a six month period, and we had to release a range, because they won’t let us say the exact number, it’s between zero and 250. That’s the lowest number you can quote. Zero to 250.

So does anyone else think this might be a bad number (being so low)? If the NSA had access to everything, wouldn't you expect the official requests for data to be low and not because Apple doesn't store data or it's all encrypted anyway as Cook implies.

Yes, I will create a Dockerfile and upload an image to the hub.

Older »