Flatpak Doesn't Work in Ubuntu 25.10, But a Fix is Coming
Read more of this story at Slashdot.
UK waves £750M supercomputer contract at HPC builders
The British government is putting out feelers to industry ahead of the procurement process for the country's most powerful supercomputer, set to begin next year.…
Parents of England star Jude Bellingham and his brother Jobe split: Couple end marriage as 'silver fox' father ex-policeman Mark grows close to a divorced mum-of-two
'I saw Victoria Beckham's look of terror when Parky quizzed her on her anorexia on TV during toxic 2000s WAG years and I broke down in tears because I endured the same thing' reveals LIZZIE CUNDY
Taylor Swift brings Caitlin Clark to cheer on Travis Kelce and the Chiefs... hours before 'big announcement' on GMA
Trump shuts down reporter mid-interview aboard Air Force One
HUGO DUNCAN: Pension tax raid is an attack on workers
Face of B&Q shoplifter who stole taps worth £16,000 from Essex stores
Teen boy punched to the ground and kicked at Pitsea Railway Station
A stock market crash may be just around the corner - this is how I'm protecting myself, says RACHEL RICKARD STRAUS
Essex actor could return to popular The Inbetweeners in potential new series
Record number of millennials become landlords - despite struggling to get on the housing ladder themselves
CodeSOD: The File Transfer
SQL Server Integration Services is Microsoft's ETL tool. It provides a drag-and-drop interface for describing data flows from sources to sinks, complete with transformations and all sorts of other operations, and is useful for migrating data between databases, linking legacy mainframes into modern databases, or doing what most people seem to need: migrating data into Excel spreadsheets.
It's essentially a full-fledged scripting environment, with a focus on data-oriented operations. The various nodes you can drag-and-drop in are database connections, queries, transformations, file system operations, calls to stored procedures, and so on. It even lets you run .NET code inside of SSIS.
Which is why Lisa was so surprised that her predecessor had a "call stored procedure" node called "move file". And more than that, she was surprised that the stored procedure looked like this:
if (@doDelete = 1) begin set @cmdText = 'mv -f ' + @pathName + @FileName + @FileExt + ' ' + @pathName + 'archive\' + @FileName + @FileExt + '.archive' end else begin set @cmdText = 'cp -f ' + @pathName + @FileName + @FileExt + ' ' + @pathName + 'archive\' + @FileName + @FileExt + '.archive' end insert into #cmdOutput exec @cmdResult = master.dbo.xp_cmdshell @cmdTextThis stored procedure was called from SSIS, which again, I want to stress, has the functionality to do this without calling a stored procedure. But this approach offers us a few unique "advantages".
First, it requires xp_cmdshell be enabled. This particular stored procedure is disabled by default, since it allows a user inside of SQL Server to invoke shell commands. Microsoft disables this by default, because it's a gaping security hole. Any security scanning tool you may run against your server will call it out as a big red flag. You're one SQL Injection attack away from an old rm -rf /.
Which, speaking of rm, you'll note the command strings they build to execute. mv and cp. Now, SQL Server can run on Linux, but this instance wasn't. No, the person responsible for this stored procedure also installed GNU Core Utils on Windows, just so they could have mv and cp to invoke from this stored procedure. Even better, they didn't document this dependency, so the first time someone tried to migrate the database to new hardware, this functionality broke and no one knew why.
At least the migration gave them a chance to update their SSIS packages to use the "File Transfer Task" instead of this stored procedure. But don't worry, there were plenty of other stored procedures using xp_cmdshell.
How Margaret Thatcher 'held the late Queen in awe' but the Palace 'slightly looked down on her', royal author claims
Police drop bombshell after ending the search for little Gus after he vanished without a trace
'What's the weather like up there?' Britain's tallest Tory opens up about bullying, getting discounts on custom-made clothes and the jokes he hears daily
The desirable Essex area where more homes keep being built
'Broken' mother of Nova music festival victim kills herself in second suicide linked to massacre in just two days
California Will Stop Using Coal as a Power Source Next Month
Read more of this story at Slashdot.