Today's entry in "Wow, that's a Bullshit CVE": https://www.exploit-db.com/exploits/46386

Basically, if you evaluate remote user input as code, the remote user can execute code. *shockedpikachuface*

I would like to point out that CVEs define publicly known vulnerabilities in publicly released software packages. So if the guy/gal wants to publicly release their "example code" as a software package, they could get a CVE for *that*. But not for the code eval function they misused.

THIS is the moment I've been waiting for!
I've always wanted a "solar skin" on my car. Or even on my backpack, with a USB port inside for charging my devices.

Four decades ago the only available candidate was amorphous semiconductors that you can put on a flexible substrate: look up Sharp and Ovonics for those. The (big) problems:
1. the efficiency sucked;
2. the semiconductors degraded under solar UV exposure.

It was frustrating.
But no more!

https://www.solarpowerportal.co.uk/oxford-scientists-ultra-thin-solar-cell-27-energy-efficiency/

NEW RESEARCH PAPER OUT! In this paper, @grimalkina and I explore how #code review anxiety is maintained and exacerbated to develop a model of code review anxiety. We also go a step further to develop and test the effectiveness of a cognitive-behavioral intervention for code review anxiety, so that we can reduce code review anxiety in an evidence-based and empirically-supported way (because science > vibes): https://osf.io/preprints/psyarxiv/8k5a4

@seresearchers #SoftwareEngineeering #developers

1/6