Aggregator

Mark Bellingham and his wife Denise, credited with masterminding the careers of their talented sons, are bringing their marriage of more than two decades to an end.

Lizzie watched as Victoria, 51, revealed for the very first time in her Netflix documentary that she has battled the illness for most of her life.

Swift has spent the week on a promotional tour for her new album, The Life of a Showgirl, but still made it back in time to watch Kelce and Co take on the Detroit Lions on Sunday night.

Burns drew Trump's ire after a series of questions regarding tariffs on China and how they would affect relations with President Xi Jinping.

One of the common misconceptions about pension tax is that any increase in the amount the Exchequer takes will only be felt by rich retirees.

He would regularly throw stolen items over the garden centre fence to his accomplice

Police want to speak to this man in connection to the assault

On paper it looks like I've discovered the perfect investment strategy. The value of my portfolio is up a stonking 20 per cent this year - and that's on top of a 21 per cent return the year before.

The coming-of-age sitcom, which was originally broadcast between 2008 and 2010, follows the misadventures of Will MacKenzie, Simon Cooper, Neil Sutherland and Jay Cartwright.

Three-quarters of shareholders in new buy-to-let businesses this year were born between 1981 and 1996.

SQL Server Integration Services is Microsoft's ETL tool. It provides a drag-and-drop interface for describing data flows from sources to sinks, complete with transformations and all sorts of other operations, and is useful for migrating data between databases, linking legacy mainframes into modern databases, or doing what most people seem to need: migrating data into Excel spreadsheets.

It's essentially a full-fledged scripting environment, with a focus on data-oriented operations. The various nodes you can drag-and-drop in are database connections, queries, transformations, file system operations, calls to stored procedures, and so on. It even lets you run .NET code inside of SSIS.

Which is why Lisa was so surprised that her predecessor had a "call stored procedure" node called "move file". And more than that, she was surprised that the stored procedure looked like this:

if (@doDelete = 1) begin set @cmdText = 'mv -f ' + @pathName + @FileName + @FileExt + ' ' + @pathName + 'archive\' + @FileName + @FileExt + '.archive' end else begin set @cmdText = 'cp -f ' + @pathName + @FileName + @FileExt + ' ' + @pathName + 'archive\' + @FileName + @FileExt + '.archive' end insert into #cmdOutput exec @cmdResult = master.dbo.xp_cmdshell @cmdText

This stored procedure was called from SSIS, which again, I want to stress, has the functionality to do this without calling a stored procedure. But this approach offers us a few unique "advantages".

First, it requires xp_cmdshell be enabled. This particular stored procedure is disabled by default, since it allows a user inside of SQL Server to invoke shell commands. Microsoft disables this by default, because it's a gaping security hole. Any security scanning tool you may run against your server will call it out as a big red flag. You're one SQL Injection attack away from an old rm -rf /.

Which, speaking of rm, you'll note the command strings they build to execute. mv and cp. Now, SQL Server can run on Linux, but this instance wasn't. No, the person responsible for this stored procedure also installed GNU Core Utils on Windows, just so they could have mv and cp to invoke from this stored procedure. Even better, they didn't document this dependency, so the first time someone tried to migrate the database to new hardware, this functionality broke and no one knew why.

At least the migration gave them a chance to update their SSIS packages to use the "File Transfer Task" instead of this stored procedure. But don't worry, there were plenty of other stored procedures using xp_cmdshell.

[Advertisement] Keep all your packages and Docker containers in one place, scan for vulnerabilities, and control who can access different feeds. ProGet installs in minutes and has a powerful free version with a lot of great features that you can upgrade when ready.Learn more.

Today would have been Margaret Thatcher's 100th birthday. The Iron Lady was the most marmite of British politicians conjuring up feelings of admiration amongst some and deep disdain among others.

Police will launch a new search for missing four-year-old boy Gus at the family's Outback station tomorrow.

Only time will tell whether James McAlpine stands head and shoulders (and head and shoulders again) above the political opposition, but last week his height made him the unexpected star.

Its one of Essex's most sought after places to live

Yelena Giler, 56, (pictured) mother of Slava Giler, who was murdered at the Nova music festival, died by suicide on Thursday, just two days after the second anniversary of the massacre.

An anonymous reader shared this excerpt from a Los Angeles Times newsletter: One of the most consequential moments in California's drive to beat back climate change will take place next month. The state will stop receiving electricity from the Intermountain Power Plant in Central Utah, meaning our reliance on coal as a source of power will essentially be over... [T]he U.S. got nearly half its electricity from coal-fired plants as recently as 2007. By 2023, that figure had dropped to just 16.2%. California drove an even more dramatic shift, getting just 2.2% of its electricity from coal in 2024 — nearly all of it from the Intermountain plant. Operators plan to cut off that final burst of ions next month. "And with improved technology to store power, the change has been made without the power shortages that dogged the state up until 2020..."

Read more of this story at Slashdot.

A rogue surgeon who harmed patients in a series of botched operations has pocketed around £1million of pension payments since fleeing the country.

The changes could have a big impact

A sick theory about Gus Lamont, 4, who went missing in the Australian outback, has spread online but the image which sparked the update was AI generated.