Aggregator

Nicola Peltz appeared to take a 'swipe' at the Beckham family in a cryptic Instagram post on Tuesday amid their escalating feud.

Hello and welcome to Daily Mail Sport's World Cup Breakfast from day 14 at the tournament - your one-stop shop for everything you've missed overnight in North America.

Gretchen's company recently got purchased by Initech. Specifically, they were bought for their dev team, of all things. They had a few software products that were high performers, and Initech wanted that secret sauce. They bought the company, and then split the dev team up and migrated the developers to new products.

That actually worked out okay for Gretchen, most of the time. For a few projects, the dev team was given some requirements and a free hand to figure out how to deliver them. They were free to reuse code that existed or rewrite entirely, based on their own judgement. They were free to pick the tools they wanted to use, and the results worked out well.

But there were some projects that… were a different story. After those successes, Gretchen got moved onto a project that was 90% firefighting. The app had code like this:

req.body.externalId = !!req.body.externalId ? req.body.externalId + "" : "";

How's that for some null handling.

The whole thing can't run on a version of NodeJS newer than 14: a version that last got an update in 2023.

"The code follows no conventions," Gretchen writes, "there's no logging."

exports.create = (req, res) => { logger.debug('creating new staffClient'); logger.debug(req.body) // let staffClient = new StaffClient({}); // // run through and create all fields on the model // for(var k in req.body) { // if(req.body.hasOwnProperty(k)) { // staffClient[k] = req.body[k]; // } // } StaffClient.query().insert(req.body) .returning('*') .then(staffClient => { if(staffClient) { res.send({success: true, staffClient}) } else { res.send({ success: false, message: "Could not save StaffClient"}) } }); }

Now, you may say to yourself, "What do you mean there's no logging? I see it right there!" There is a logger utility class, and do you know what it prints when you call logger.debug("some message")? It prints DEBUG.

This code handles an HTTP request, and stuffs the body of the request into the database; here's hoping that it's a well formed request. Somebody's got a lot of faith in their front end. WHat's interesting about this one is they've tried two different ways of copying the request object into the database, the first one focusing on making sure they only copied non-inherited properties, and the second just YOLOing the data into the database.

Now, this particular segment goes through their ORM to write data into the database. But not all the code does that. Many places write data through direct SQL, and guess what happens there: SQL injection vulnerabilities.

You may also notice that this function doesn't do any authorization checks, which is fine, that should be configured in the middleware. Should be- but isn't. Most endpoints have no authorization checks at all. Even the endpoints that do, like their admin API, have copies of the same endpoint with no authentication configured.

.comment { border: none; } [Advertisement] Keep all your packages and Docker containers in one place, scan for vulnerabilities, and control who can access different feeds. ProGet installs in minutes and has a powerful free version with a lot of great features that you can upgrade when ready.Learn more.

The Three Lions endured a frustrating afternoon in Boston, where they failed to break the deadlock against the resilient Africans despite boasting almost 80 per cent possession.

Last week, with barely a whimper of protest, Britain was cut off from the most powerful technology on the planet - and consigned, I fear, to a future as a defenceless, third-rate power.

David looked hopeful at the start of the game as he cheered on the Three Lions with his pal David Gardner. But the legend put his head in his hands throughout the game as England suffered through.

Temperatures across Essex could result in tropical nights with temperatures as high as 28C at 11pm, the Met Office has said.

Temperatures across Essex could result in tropical nights with temperatures as high as 28C at 11pm, the Met Office has said.

Several schools are closed, trains are cancelled and bin collections are suspended as red and amber extreme heat weather warnings are in place across Essex today.

Several schools are closed, trains are cancelled and bin collections are suspended as red and amber extreme heat weather warnings are in place across Essex today.

Unexplained GSM-R failure at Deutsche Bahn caused confusion and delay

A resident said his neighbours had been 'driven off' by the price hike

An anonymous reader quotes a report from The Guardian: A tech sell-off shook global markets on Tuesday as attention turned away from developments in the US war with Iran and toward the future of AI companies and chipmakers that have driven stock markets to record highs. The tech-heavy Nasdaq index closed 2.2% lower on Tuesday. The S&P 500 was also down by Tuesday afternoon, dropping 1.43% while the Dow remained steady. All three major US indices have hit record highs this year, riding off a rush of funding to support AI technology and infrastructure. Nasdaq is up 10% for the year, while the Dow jumped 6% so far this year, breaching past 51,000 points, and the S&P 500 is up 7.3%. But some economists have warned that the influx of AI spending is a bubble reminiscent of the dot-com bubble that burst in the early 2000s. Seven tech companies make up 30% of the S&P 500's value. The heavy reliance on a single industry and a few key companies has some investors wondering if it's a matter of when, not if, there will be a burst. Those concerns have been heightened by signals from the Federal Reserve last week that it may increase interest rates, and therefore the cost of borrowing, in order to tackle rising inflation. Alphabet fell 5% on Monday. SpaceX plunged 16%. The selloff also spread to Asia, with South Korea's benchmark dropping 10% as SK Hynix and Samsung Electronics each lost more than 12%, while Japan's Nikkei 225 declined 3.5%.

Read more of this story at Slashdot.

More than 1.5million people have at least £100,000 saved in their Isa. However, if you leave it in cash, it may lose value over time due to inflation.

The damage can have a 'devastating' impact on wildlife

Five ISPs and plenty of users await their fate

A councillor has told a council meeting that it is 'intimidating' and 'it’s not very nice'

An energy mega-project in the Essex countryside has opened its doors to mark its move into full operational life.

Ocean rower Dawn Smith BEM is taking on a historic world-first challenge with an unsupported crossing of the North Atlantic from Canada to Burnham.

EDEN CONFIDENTIAL: They're both billionaires but their stylistic differences could scarcely be more striking.