Fix GCR reference

@kyessenov Unfortunately, the tests on travis don't actually test the change (the tests are skipped).
Also we don't run those tests on our jenkins either. @bshaffer Can you add configurations to our jenkins or travis to run those tests?

I'll run the tests locally for now. Looks like the Deployment Tests need to be updated for the latest endpoints version anyway.

I was able to deploy container-engine.yaml without any issues except for some usability ones I've filed bugs for! This can be merged once the tests pass.

@bshaffer
The test looks good overall. Can you loosen the assert a bit? https://github.com/GoogleCloudPlatform/php-docs-samples/pull/283#discussion_r93542060

LGTM


C-sharp-operations fails with fragmentNames.map is not a function

Which packages are impacted by your issue?
@graphql-codegen/c-sharp-operations
Describe the bug
This issue also reproduces in https://the-guild.dev/graphql/codegen where if you choose the C# operations, it will fail with e.map is not a function, which I guess is the same error, but with a minified script.
Is there a known version combination where the c-sharp-operations plugin worked?
Your Example Website or App
https://the-guild.dev/graphql/codegen
Steps to Reproduce the Bug or Issue
The failing example in the website is a good reproduction.
Expected behavior
As a user, I expect the "hello world" example to succeed
Screenshots or Videos
No response
Platform

OS: Windows
NodeJS: 18.16.1
graphql version: various
@graphql-codegen/c-sharp-operations version(s): 2.3.1

Codegen Config File
No response
Additional context
No response

This is a duplicate of #92


⚠ ClamAV has degraded performance

In f513f8c, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 77 ms

Resolved: ClamAV performance has improved in c85def6 after 542 days, 10 hours, 1 minute.


Could not find xdg-icon-resource

hi guys i have this Problem can somebody help me ?
sorry for my bad english& thank you
root@Mohammad:~# dpkg -i Brackets.Release.1.11.64-bit.deb
dpkg: error: cannot access archive 'Brackets.Release.1.11.64-bit.deb': No such file or directory
root@Mohammad:~# dpkg -i '/root/Downloads/Brackets.Release.1.11.64-bit.deb'
(Reading database ... 340019 files and directories currently installed.)
Preparing to unpack .../Brackets.Release.1.11.64-bit.deb ...
Unpacking brackets (1.11.0-17525) over (1.11.0-17525) ...
Setting up brackets (1.11.0-17525) ...
xdg-icon-resource: size argument must be numeric
Try 'xdg-icon-resource --help' for more information.
Processing triggers for menu (2.1.47+b1) ...
Processing triggers for hicolor-icon-theme (0.17-1) ...
root@Mohammad:~#

i have the same problem bro someone can fix it? plz help

@markreznor Thank-you so much! It worked! I too had problem launching it in Kali Rolling.

If i use "brackets -i --no-sandbox" My settings dont get saved :( Anyone has a solution?

root@kali:~/Downloads# dpkg -i Brackets.Release.1.14.64-bit.deb
Selecting previously unselected package brackets.
(Reading database ... 398509 files and directories currently installed.)
Preparing to unpack Brackets.Release.1.14.64-bit.deb ...
Unpacking brackets (1.14.0-17740) ...
Setting up brackets (1.14.0-17740) ...
xdg-icon-resource: size argument must be numeric
Try 'xdg-icon-resource --help' for more information.
Processing triggers for menu (2.1.47+b1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
what does this mean:xdg-icon-resource :size argument must be numeric
my brackets is not starting?


run lint, test and examples in parallel

Is there any reason these need to run in sequence?

superseded by #875


Create build matrix for test suite

Description:

Testing Travis config with build matrix with different iOS and Devices.

Risk:

Medium

Do these jobs run in parallel? If not, I'd only test in the smallest and biggest devices

Do these jobs run in parallel? If not, I'd only test in the smallest and biggest devices

According to the build matrix docs they do :)


Should HTTP server.address and server.port prioritize Host header over virtual host name?

Since one of the motivations for these attributes on the server side:

server.address
server.port
url.path
url.query
url.scheme

is to reconstruct the original URL, does it make sense to prioritize capturing server.address and server.port from the Host header instead of the current state of prioritizing the virtual host name?
(and since we have more clarity on these being logical attributes now, and since we can introduce more lower-level attributes to capture virtual host name / port in the future as needed)
here's the current definition of server.address (as captured on the server side):
https://github.com/open-telemetry/semantic-conventions/blob/b127e121b9b458e83a0fee8a32f7eb6721912951/model/http-common.yaml#L70-L80

IMHO: No, they should not. Unfortunately, the host header often contains bogus content, and it can be captured separately in http.request.header.host.

Agree with @Oberon00. Reverse proxies don't always preserve the original host header (and custom configuration can put anything there).
In my mental model, since the "primary server name" is essentially user-configurable, this is the way for users to force server.address to be something they want.
Something we should probably do:

change "The primary server name of the matched virtual host" to something like "Explicit user configuration (if provided) or a primary server name"
add "Original host used by the client such as host component of Forwarded header, X-Forwarded-Host or similar" to come 3rd before Host header

WDYT?

One thing that just occured to me: server.address is also used as metric attribute for HTTP server metric. A bad Host header could easily cause a cardinality explosion there. So that is a no-go also for that reason I believe. https://opentelemetry.io/docs/specs/otel/metrics/semantic_conventions/http-metrics/#metric-httpserverduration

A bad Host header could easily cause a cardinality explosion there.

this discussion led me to a similar worry, let me know if you think #401 is sufficient

Explicit user configuration (if provided) or a primary server name

are you thinking instrumentation configuration? do we need to mention that? or is this important enough to include something like "instrumentation SHOULD provide configuration"

Closing this issue, I think the original question has been answered, and there are follow-up issues and PRs for the other discussion items:

#408
#414
#401


fix typo

I have found a typo in the tasks/main.yml. So I have fixed that.

wrong: Systen
correct: System

@googlebot I signed it!


ValidationError.path

When Zod throws a validation error, specify where in the schema that error occurred. Can be very helpful for large schemas.
Split off from #14.

<EMAIL_ADDRESS>includes vastly improved error handling through the introduction of the ZodError class.
Check out the Errors section of the Readme for details 🤙


[WIP][SPARK-41100][INFRA] Upgrade Ubuntu to latest

What changes were proposed in this pull request?
Upgrade ubuntu version on runners in github actions from 20.04 to latest
Why are the changes needed?
"Ubuntu 22.04 is now generally available on GitHub-hosted runners. To use it now, simply add runs-on: ubuntu-22.04 in your workflow file. Otherwise, our recommendation is to use ubuntu-latest, which currently utilizes Ubuntu 20.04 but will begin running on Ubuntu 22.04 in the near future."
Does this PR introduce any user-facing change?
No.
How was this patch tested?
Pass GA

@Yikun

I think we should upgrade to 22.04 when github action ubuntu-latest point to 22.04, rather than use the ubuntu-latest directly, to reduce the potential impacts of OS upgrade breaking change.
You could try to use ubuntu-22.04 in this PR, once latest upgrade we can merge then.

https://github.com/gregrahn/tpcds-kit/issues/57

Can one of the admins verify this patch?

@Yikun
GitHub Actions: Larger Runners using Ubuntu-latest label will now use Ubuntu-22.04

Looks like only tpcds test has some impact, After tpcds bug fixed, we can switch then.
I think Ubuntu 20.04  will also have good supported before Apr 2025.
https://ubuntu.com/about/release-cycle
also cc @HyukjinKwon

Yes, I will close this PR for now.


PEITS parameter file is missing some things

The .parameters output file contains too many outputs to work with PEITS. Added in bc5c7a04af27d5eb1a1a850cd535a3a65da5c4a4 this was done to have a log of the inputs used. However, PEITS is very picky about what can be in this parameters file so these extra lines need to be removed or commented out.
The .parameter file for PEITS needs to look like this output of dune_exporter :
##### Parameters for NN2016_Tank #####
# no. elements: 4535578 # no. nodes: 805844 #

fem.io.macroGrid: NN2016_Tank.dgf

electrode.use_node_assignment: false

electrode.positions: ../data/electrode_positions_NN2016_Tank

electrode.nodes: ../data/electrode_nodes_TA052_meters
surface.coordinates: ../data/surface_coordinates_TA052_precise

ground.hsquared: 1.5e-5
groundposition.x: 0.012778597804854869
groundposition.y: -0.134296297966862405
groundposition.z: 0.461560081236734254

fem.assign_conductivities: false

this would avoid having to load the mesh into matlab and rewrite the dgf.
Currently the function  save_parameters writes everything in the parameters map to a file.
Either the .parameter file should comment out all the unnecessary entries, or the meshing parameters should be written to a separate log file.

Fixed in https://github.com/EIT-team/Mesher/commit/e8178a5080864f5731544c0f5b64d4374d50b984


No checkpoint data available

What means body.action === 'close' in challenge.repository?
private middleware(body: ChallengeStateResponse) {
    if (body.action === 'close') {
      this.client.state.checkpoint = null;
      this.client.state.challenge = null;
    } else {
      this.client.state.challenge = body;
    }
  }

I have IgNoCheckpointError: No checkpoint data available in some accounts. But I don't understand and can't find how to fix this.

Show the code example to reproduce

Standard login
await ig.simulate.preLoginFlow();
return ig.account.login(account.username, account.password);

Catch:
if (e instanceof IgCheckpointError) {
    await ig.challenge.auto(true); <--- exception here
    account.checkpoint = ig.state.checkpoint; //save in db to use in future
    account.appCookie = await ig.state.serializeCookieJar();
}

IgNoCheckpointError: No checkpoint data available
at State.get challengeUrl [as challengeUrl] (/home/artem/app/node_modules/instagram-private-api/dist/core/state.js:73:19)
at ChallengeRepository.state (/home/artem/app/node_modules/instagram-private-api/dist/repositories/challenge.repository.js:8:36)
at ChallengeRepository.auto (/home/artem/app/node_modules/instagram-private-api/dist/repositories/challenge.repository.js:56:24)

Also sometimes get this error in preLoginFlow():
IgResponseError: POST /api/v1/qe/sync/ - 400 Bad Request; No ID given

You can imagine checkpoint as a wall, that won't let you into a beautiful instagram world. There is a text on this wall, that requires you to pass a chellenge with uniq id.
So, in order to pass a challenge, you need the checkpoint first.
instagram-private-api centrally catches checkpoint errors and writes it into the state. But if you are trying to pass a challenge in fresh IgApiClient instance you will get  IgNoCheckpointError, because there is no checkpoint in state.
So you must ensure there is checkpoint in your state.

it is the same state in login and in catch.

If so there may be 2 ways.

There is a bug in library
Something wrong with your account
For me challenge.auto() is working. I don't have enough time now to debug what is going on, i hope community will help you here.

@dilame I am having same issue, many accounts work fine. But in some account it gets stuck in checkpoint. I have rotating proxy.
When I try to login it give checkpoint but when I reset checkpoint it give no checkpoint error.
Please check.

{
"message": "challenge_required",
"challenge": {
"url": "https://i.instagram.com/challenge/2351642412/KMQya0Xted/",
"api_path": "/challenge/2351642412/KMQya0Xted/",
"hide_webview_header": true,
"lock": true,
"logout": false,
"native_flow": true
},
"status": "fail",
"error_type": "checkpoint_challenge_required"
}

I can assume this bug happens when we have no choice, just field to enter the code. Like this


Fix call to openapicmd in docs

openapicmd read produces YAML output by default. The example in the docs is about using this output as a JSON import in JS - so obviously we have to generate JSON instead of YAML.

Nice catch @bkis !


Command for autoscaling environments

The autoscale command allows to enable, disable autoscaling, or set the desired capacity for an environment. It also displays a summary or the full details of the current settings.
Example:
$ cplus autoscale staging 2
{
  "MinSize": 1,
  "MaxSize": 2,
  "DesiredCapacity": 2,
  "InstanceCount": 1,
  "Suspended": false
}

Even though set-desired-capacity might not be the best way to do manual scaling, I'm merging this because of the on and off options. Those two are the ones which we'll use most of the times anyway and the rest we can change when we have a better understanding of how this should work.


Do not remove SUID bits for chrome-sandbox

Assumptions have changed for chrome-sandbox to have suid bits. This
PR ensures those bits are not removed if set.

What problem was it causing, and has this PR been tested?


fix: render aria props correctly

close #124

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 97.32%. Comparing base (8cadb34) to head (79cf4cf).

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #240      +/-   ##
==========================================
+ Coverage   97.15%   97.32%   +0.17%
==========================================
  Files           8        8
  Lines         281      299      +18
  Branches       38       46       +8
==========================================
+ Hits          273      291      +18
- Misses          7        8       +1
+ Partials        1        0       -1

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


deleting columns

There doesn't seem to be a way to remove the entire column.  Would be nice to have this functionality.

Hi @dberansky, did you take a look at the cheatsheet? You'll see there's a tablr:delete-column  command for that purpose.


Adding image for node 12.13.0 and Chrome 90 / Firefox 88

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Going to close this image as it's over a year old. If you still need this image you can generate a new one using one of these scripts: https://github.com/cypress-io/cypress-docker-images/blob/master/package.json#L12-L14


IPV6 support

Could you squash the commits please and work on the formatting? :)
And we need to increase the test coverage again to make it mergeable (https://coveralls.io/builds/27330188).
I will look more closely at the code hopefully in the next few days :).


Offset plug from edge of element?

There may be an easy way to do this; if so, my apologies.
I'd like to find a way to offset a plug from its target element by an arbitrary amount of pixels.  I see that you can set the x,y coords relative to element but without knowing which side or point the plug will be at there's not a way to find which direction the offset should be in.

When startSocket/endSocket is auto (default), the closest side is chosen automatically.
Do you mean that you want to get the chosen side?

No I mean instead of this:

I want to be able to set an offset of, say 10px:

pointAnchor attachment  allows to set the offset.
x and y options specify coordinates relative to the element.

Right but I would need to know the side first. If the anchor point was on the right it would be
x: 10px, y: 50%

When startSocket/endSocket is auto (default), the closest side is chosen automatically.
Do you mean that you want to get the chosen side?

Yes, getting the chosen side would work.

Does the "offset" you said mean the near direction always?
In other word, do you want to make a gap between the element and the arrow?
So, do you want to do this?:
https://jsfiddle.net/wf76eqk2/

Yes that's perfect! Thank you!

😄
One more example of several ways.
It's more simple, easy and more high performance (less elements), maybe.
https://jsfiddle.net/owdtb3uy/


Works in MacOS with a different path designation

Hi, great work, at least in MacOS, the path to glsl_shader_mame0 must be different:
/Users/---insert username---/---insert path to mame folder---/mame/glsl/mame-psgs
And great performance as a lightweight shader!
(MacMini M1 and mame 246)

Thank you very much for the info @estefan3112 . I'll add this issue to the README so other users can benefit from the info you provided.


Add info for aws cloud provider

Related issues:

https://github.com/rancher/rancher-docs/issues/763
https://github.com/rancher/rancher/issues/41840

Fixes https://github.com/rancher/rancher-docs/issues/814

@kinarashah is this related to https://github.com/rancher/rancher-docs/issues/814?

@kinarashah if the AWS out of tree stuff is tied to the v2.8 release, we should make this PR target the v2.8 branch instead of main.

@martyav , updated the description to link to proper issues.
Please note that @kinarashah is out for the next few weeks so please direct questions to me.
Meanwhile, on the branch should we be targeting https://github.com/rancher/rancher-docs/tree/2023-Q4-2.8x then?

Closing in favor of https://github.com/rancher/rancher-docs/pull/844.


Incirle of Triangle Calculator

fix #5129
Describe the changes you've made
A clear and concise description of what you have done to successfully close your assigned issue. Any new files? or anything you feel to let us know!
Checklist:

[x] My code follows the style guidelines of this project.
[x] I have performed a self-review of my own code.
[x] I have commented my code, particularly in hard-to-understand areas.
[x] I have made corresponding changes to the documentation.
[x] My changes generate no new warnings.

Screenshots

Original
Updated

original screenshot
updated screenshot

@AnkitaKataria22 any updates ? if you need any kind of help then feel free to ask but try to do the task within given deadline :)

@AnkitaKataria22


Add Vagrantfile for Debian Linux

We're testing most of the others now, but it would be beneficial to have a Debian variant in the test setup in order to find any Ubuntu/Debian differences given that we have a few Debian systems around now

Update: @Willsparker has hit issues trying to add the ansible 2.4 PPA onto the Debian VM


bump dependencies

Applied mkpr on package.json
/tmp/mkpr.sh

Pull Request Test Coverage Report for Build<PHONE_NUMBER>1
Details

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 93.139%

Totals

Change from base Build<PHONE_NUMBER>7:
0.0%

Covered Lines:
510

Relevant Lines:
539

💛  - Coveralls


fix: augment hash for CSS files to prevent chromium erroring by loading previous files

Description
fixes #18038
augmentChunkHash is only called for chunks and not for assets. So I had to change the content to change the hash.

/ecosystem-ci run


[v0.16.4] Trigger staging cli release for 0.16.4

Issue #, if available:
Description of changes:
Testing (if applicable):
Documentation added/planned (if applicable):
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

/approve


📖 Update extension upgrade tutorial doc

With the addition of the CRD Upgrade Safety preflight check, our existing example of upgrading argocd from 0.5.0 to 0.6.0 no longer serves as a good example. This commit changes the example to use an update from 0.2.0 to 0.2.1 which no longer fails the CRD Upgrade check, and also doesn't violate our restriction on automatic upgrades between minor versions with a major version of 0.
I haven't made all necessary changes yet, specifically the last example output isn't updated yet. Wanted some input on using 0.2.0 and 0.2.1 before I finished up everything.
Addresses #1459

Description

Reviewer Checklist

[ ] API Go Documentation
[ ] Tests: Unit Tests (and E2E Tests, if appropriate)
[ ] Comprehensive Commit Messages
[ ] Links to related GitHub Issue(s)

Should we change the ClusterExtension sample argocd manifest to match our docs at version 0.2.0 or 0.2.1? Or is it good enough to make these docs examples just work and leave the manifest alone at 0.6.0?

Admonition added at the beginning of the tutorial with the v0.2.0 manifests.
Admonition added at the very end explaining the possible discrepancy in last-applied-configuration depending on if you applied a new yaml file or used patch/edit to upgrade the ClusterExtension.

@trgeiger makes senes. Should we revert / partially revert docs/getting-started/olmv1_getting_started.md here in that case? Or do you think it is still valuable to have these changes?

I will revert for this PR, yeah. Best to leave it alone and address it directly elsewhere.
I did just notice something else, though--with the example 0.2.0 manifest that I added, when I apply that to a cluster my kubectl get clusterextension argocd -o yaml now includes this bit:
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""

What is that from?

I organized each step of the tutorial into "example" admonitions with clearer titles for the code blocks and admonition blocks. I think this should improve the overall organization and formatting of the doc. It should be ready for final review now.


Quetion about acquiring Image

When I try to get images from your simulation, I run into some problems.  In the file 3D-Diffusion-Policy/diffusion_policy_3d/env/adroit/rrl_local/rrl_multicam.py of DP3，I found a bug you marked that needs to be fixed：
def get_stacked_pixels(self): #TODO fix it
     assert len(self._frames) == self._num_frames
     stacked_pixels = np.concatenate(list(self._frames), axis=0)
     return stacked_pixels

When I tried to print out the pixels here, I found that the pixels of each frame have been fixed, which means that each frame outputs exactly the same image.
Likewise, in another part of this file, when I print the image, it outputs the same pixels that repeat in every frame：
        else:
            if not self.test_image:
                for cam in self.cameras : # for each camera, render once
                    img = self._env.env.sim.render(width=self.width, height=self.height, mode='offscreen', camera_name=cam, device_id=0) # TODO device id will think later
                    # img = img[::-1, :, : ] # Image given has to be flipped
                    if self.channels_first :
                        img = img.transpose((2, 0, 1)) # then it's 3 x width x height
                    # we should do channels first... (not sure why by default it's not, maybe they did some transpose when using the encoder?)
                    #img = img.astype(np.uint8)
                    # img = Image.fromarray(img) # TODO is this necessary?
                    imgs.append(img)

Can I ask for your solution or reference suggestions for the above problems? Because if the above problems are not solved, every picture shown in the demo is actually duplicate content.
Looking forward to your reply！

Hi, thank you for your interest.
I think we only use one camera, so there is only one image here that is being used.  (I am not sure why you got repeated frames.)


Make out of memory topic clearer

There was some confusion from users on whether or not they could set max-old-space themselves or not.

Is everybody okay with this?


VS code not being updated but only gives notification to update each time.

VSCode Version: 1.22.1 (950b8b0d37a9b7061b6f0d291837ccc4015f5ecd)
OS Version: macOS High Sierra v 10.13.3

whenever I open vs code. it gives notification on right bottom side to update it with 2 buttons
Restart Visual Studio Code to apply the latest update.

Update Now | Later | Release Notes

and when I click on Update Now , and restart ( note it never reopen automatically) and it again gives the same notifications message.
means it's not getting updated at all. why is this happening? and how to fix this?
Note: I have not disabled any extension . and also do not alter any vs code update related settings.

Can you run ps ax | grep Code while Code is running and show me the result?

Surprisingly it's being updated automatically now. I have disabled one of the extension but don't remember which one. Note that I have already checked with ps ax  and there was no process running for Code


Update machine-learning-recommendation-api-documentation.md

Internal link to Advanced topics was not correct.

Hi @LuisCabrer, I'm your friendly neighborhood Azure Pull Request Bot (You can call me AZPRBOT). Thanks for your contribution!

It looks like you're working at Microsoft (luisca). If you're full-time, we DON'T require a contribution license agreement.

If you are a vendor, or work for Microsoft Open Technologies, DO please sign the electronic contribution license agreement. It will take 2 minutes and there's no faxing! https://cla.azure.com.

TTYL, AZPRBOT;


Not having proper coloring for main bar , sidebar

should have proper user interface to attract more users

you can assign me and i can make it more user friendly


English version

Feature request - Localization support

Yeah, this is a possibility. I had plans to do a separate english site with domain etc.
I only need to come up with a good domain name and do some coding/translating and it should be quite fine.
This is in my radar.


Highlighted two paragraph

in iOS highlighted from one paragraph is working fine but when I select from the 2 paragraph its is not working properly

Yes, this is a known bug since #37 there is a discussion there about it.

Disclaimer: I am closing GH Issues on this project, I don't work full time on it and I haven't been able to update that recently if you would like to help to maintain that and to push the development of this project forward, just reach me out or open a PR and we can discuss it there.


Double values in translation files

medium, small, POSITION, bedroom
Some may better be kept with a prefix, like medium and small for the monsters. This affects most translations as well.

Merged into Brynhildr for next release


Fix dotnet CI

Just update actions/setup-dotnet and we're done

Coverage remained the same at 86.234% when pulling 1cc5e442568c62bcf1a332733717d34c7f3ae7b0 on maxisoft-patch-setup-dotnet-ci into 8e49b28fd2320ae3fd00d45dc89e64d77a0816c4 on dev.


Failed to connect to inapps.appsflyer.com/:::443

Report
Plugin Version
6.3.20
On what Platform are you having the issue?
Android
What did you do?
Launch application and init sdk via
appsFlyer.initSdk({     devKey: ****,     isDebug: false, });
What did you expect to happen?
AppsFlyer successfully connect to server
What happened instead?
AppsFlyer log error about problem with connection
There are our two Sentry reports

Error: Failed to connect to inapps.appsflyer.com/:::443

Error: Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443

Please provide any other relevant information.
We have hundreds error events in our sentry reports. This error started two months ago. Also we have no more full statistic in our AppsFlyer dashboards.

Facing same issue our in production application.

Hi all,
This issue looks related to internet connection issues.
This is usually a networking problem on the device itself and not so related to the SDK specifically. It seems this is a DNS issue, it unable to resolves the hostname to the proper IP address and that's why the IP is not assigned (<IP_ADDRESS>).

Hi @ge-af :wave:
I would agree with your conclusion, but actually this issue wasn't a problem for our ~20k users project 3 month ago. We were using v6.2.60 that time and keeping the dependency up-to-date since then. Now, this report is always on top of the Sentry / Firebase / whatever else bug tracking system table. Furthermore:

This issue looks related to internet connection issues.

The app is used to send multiple HTTP requests during the start time, including the appsflyer initialization and conversion data retrieval. It works OK, but produces these failed to connect errors for some reason.
Please investigate, since several bug tracking systems has limited amount of trackable errors in its free plans, meaning the smaller projects may suffer from such type of issues. Thank you.

Hi @artyorsh
Thanks for your valuable feedback!
I'm checking it again with our R&D and DevOps teams to see if there were any changes on our side regarding any DNS or Server issues that may have started in the last few weeks/months.
Can you please notice if there is something specific regarding the users who gets this networking errors (if possible) - Any specific regions/countries or any specific Android OS versions this is coming from?
If possible also to list of possible exception occurrences of this error (SSLException, SSLHandshakeException, etc.) that may be visible under any Analytics provider (Sentry, Firebase Crashlytics, etc.) and I'll forward it to our R&D team to further investigate.

Thank you for the quick response @ge-af

Any specific regions/countries

The app is limited to run in Germany.
I'm not sure the error report can be informative in this case, since its stack trace doesn't show anything interesting. However, see the link. This one was reported ~30k times during last 3 months.
I can't be sure it could be related to the region since I also see the error occurs also in Belarus in our dev environment. See report. In some occurencies it's reported with Unable to resolve host "inapps.appsflyer.com": No address associated with hostname message.

any specific Android OS versions

It's mostly reported on Android. Unfortunately, there is no specific OS version where this issue occurs. On iOS however I may suppose that it is reported with a different message. Supposedly, Network failure.
There is one more interesting report I found while reviewing the whole error table (Android 9, Samsung SM-G950F): https://sentry.io/share/issue/e0e217226eaa450597a82a85af101709
I'll check these errors in detail to see if I can find anything else from there.

Hi @artyorsh
We tried to test it from Belarus and Germany and got the DNA resolution and everything is working on our side.
Do you have any way to identify which ISP/Mobile carriers are being used by the users with those faulty errors? If so, we can continue to try and take it with AWS Support.

Hi I'm also facing this issue mostly
Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443
Unable to resolve host "inapps.appsflyer.com": No address associated with hostname
Error: com.appsflyer.sdk.network
My app resides on Indonesia, some of them using wifi broadband or mobile... It looks like the DNS not propagated properly on some ISP.
Here some ISP/Mobile Carriers from my IP Tracing
PT Telkom Indonesia (Major Mobile Provider in Indonesia)
PT Data Buana Nusantara
Biznet Networks
PT Indosat (Major Telco In Indonesia)
PT Gayatri Lintas Nusantara
PT. Eka Mas Republik
Non Indonesia ISP
The University of Edinburgh
The experiences are not consistent because some of user (our tester) with the ISP mentioned above did not experience the error. It really looks like a unfinished/unproper DNS propagation
Cheers

I would not agree to close this issue. We have the same in Sentry logs
It started to appear a year ago. And now we have 223k error events in Sentry logs about that.
Right now we're using version 6.3.50 with RN 0.60.5
The most OS appeared is Android, few on iOs
Users mostly from US

I was facing same issue on react-native 0.62.2 and react-native-appsflyer 6.4.0 in South Korea.
Sentry shows 2 different message like others.

Unable to resolve host "inapps.appsflyer.com": No address associated with hostname
Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443

I still don't know what's causing that issue but it seems changing targetSdkVersion to 30 dramatically lowered the occurence of this error.

We also see this issue happening sometimes, on both platforms, Android and iOS.
We believe this is due to a network error.
Question: is the sdk supposed to work in offline mode? Suppose I'm offline, track some events, then return to the app in an hour with stable network connection. Will appsflyer re-submit the failed events?

We also see this issue happening sometimes, on both platforms, Android and iOS. We believe this is due to a network error.
Question: is the sdk supposed to work in offline mode? Suppose I'm offline, track some events, then return to the app in an hour with stable network connection. Will appsflyer re-submit the failed events?

Agree with you: there is network issue.
I have another question: should this affect on my App or not ? I believe - NOT

Which is the network issue exactly?
Because on our logs our app is able to do a codepush update, and fetch from our API mutliple times with 200 status responses before getting this error or this other one:
error: Unable to resolve host "inapps.appsflyer.com": No address associated with hostname,

We're seeing multiple variations of this at really high rates which can't really be explained by internet connectivity issues as the error is preceded by successful requests to other APIs in our case.
Variations we're seeing:
Unable to resolve host "inapps.appsflyer.com": No address associated with hostname
Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443
Failed to connect to inapps.appsflyer.com/:::443

Confirm the issue.
Should be reopened
Error: Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443

"react-native-appsflyer": "^6.5.20"

Same issue for me too.
Error: Failed to connect to inapps.appsflyer.com/:::443
Because of this issue events are not reflected on the AppsFlyer dashboard.
I am using
"@ionic-native/appsflyer": "^5.16.0",
"cordova-plugin-appsflyer-sdk": "^6.3.0",
Did not see any resolution for this anywhere. Is this issue closed?

Olá a todos,
Esse problema parece relacionado a problemas de conexão com a Internet. Isso geralmente é um problema de rede no próprio dispositivo e não está relacionado especificamente ao SDK. Parece que este é um problema de DNS, incapaz de resolver o nome do host para o endereço IP adequado e é por isso que o IP não é atribuído (<IP_ADDRESS>).
would it be possible to check if the user has internet before the error is triggered?
I'm having the same problem.

Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443

Hi all,
This issue looks related to internet connection issues. This is usually a networking problem on the device itself and not so related to the SDK specifically. It seems this is a DNS issue, it unable to resolves the hostname to the proper IP address and that's why the IP is not assigned (<IP_ADDRESS>).

would it be possible to check if the user has internet before the error is triggered?
I'm having the same problem.
Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443

I have checked that Segment is using the correct App IDs and AppsFlyer devkey but also getting 1000s of these errors, all other network requests are fine 🤔

@ge-af does SDK have retry mechanism for this?

@ge-af would it be possible to keep this issue open until it has been fixed (and then close it)?

Hello, please revert on this issue, a large number of our users  are also facing this (~ 200K events with ~60K users impacted)
We have found no correlation with Devices, OS, OS versions, manufacturers, and others.
Can we check on AppsFlyer's end how many such requests are failing
Different error messages that we are getting:
java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

    Failed to connect to inapps.appsflyer.com/:::443

    Unable to resolve host "inapps.appsflyer.com": No address associated with hostname

    failed to connect to inapps.appsflyer.com/<IP_ADDRESS> (port 443) from /<IP_ADDRESS> (port 45040) after 10000ms

Sure, here is the rewritten answer with the addition of "finally a solve my problem":
Hi,
I'm having the same issue as you. I contacted support and they said that the Connection error 443 is most likely an issue with the internet connection. This is usually a networking problem on the device itself. The device on which the test is performed doesn't have a valid internet connection, or the request fails due to DNS issues.
They also said that they have seen cases where the network prevents connecting to the AppsFlyer server. Please check the network connection/VPN connection (if using) and make sure that Adblocker or Firewall is not preventing access.
Here are some additional steps you can try:
Restart your device.
Check your internet connection.
Disable any Adblockers or Firewalls.
Try using a different browser.
Try using a different device.
If you are still having problems, please contact support again.
Finally, a solve my problem! I was able to fix the issue by disabling my Adblocker. I hope this helps you as well.

We also connected with the AppsFlyer team for the same issue. And were able to reproduce it using any Adblocker.
However, this was not a fatal issue for us (App did not crash and the user wasn't blocked in any way), hence we suppressed the issue at our end

Issue, is still there for a specific device. I don't know how the IP or DNS is not valid to get the response of:
Failed to connect to zf8phv-cdn-settings.appsflyersdk.com/:::443

Same issue here, has there been any update @ge-af? TIA

Is there anything new about this problem ? Its 2024 and it seems that problem is still here.
Framework: React native
Appsflyer version: 6.9.2
Error:
"Unable to resolve host \"inapps.appsflyer.com\": No address associated with hostname"
"Failed to connect to inapps.appsflyer.com/<IP_ADDRESS>:443"

Its still the same scenario. App is doing several API requests at the same time as AppsFlyer SDK inicialization. All other requests are OK (200) except appsflyer one. Our sentry is full of these errors. Hundreds per day. Is there any new solution we can try ?
I don't want accept the answer that it is a network issue. As i said - ALL other requests are fine. There is no retry mechanism ? so it will try to reach the url few times and after that it will fire the error? Or can we somehow suppress the error? Make it warning only.
Thank you

Why is this closed? My Sentry looks awful because of this. I think it's only present on Androids. Don't know if users have adblock or something else that blocks appsflyersdk.com but this issue should not be closed...


Removed Boost.Signals from Getting Started documentation

Updated the Getting Started documentation to reflect that Boost.Signals is no longer part of Boost.

Hey Nevin - not master

Will open a new PR for develop branch


Update controller.bar.js

#5557
https://codepen.io/kurkle/pen/PXYmpW
This breaks some tests, so not quite sure if this is preferred behavior.

@kurkle I think there is maybe nothing to fix here (see this comment)

@simonbrunel, I agree. There could be a use case for this PR too, but I do not have one. This would also need quite a bit of fiddling, to be merge quality - so I'll close it.


After python project switch, find file popup won't close

What did you expect to happen?
After opening a python project "SPC p p" the usual popup appears to select a file from the project. when selecting a python file, the cursor moves to the file buffer.
What actually happened?
When selecting a python file, the cursor moves to the file buffer (as expected) but instead of closing, the find-file popup is replaced by an LSP "mspyls is analyzing" message before returning to a reopened active find-file minibuffer.
Any subsequent key presses are stuck in the minibuffer which seems unable to close--I can open any other project files the way I normally would (navigating to the filename and pressing RET) but the minibuffer never closes.
If I click the file buffer the cursor will update, but I can't close the minibuffer window.
System information:

((emacs
  (version . "26.3")
  (features . "XPM TIFF GIF PNG SOUND GSETTINGS GLIB NOTIFY FREETYPE XFT ZLIB TOOLKIT_SCROLL_BARS GTK2 X11 XDBE XIM THREADS")
  (build . "Feb 17, 2020")
  (buildopts "--with-jpeg=no --with-gnutls=no")
  (windowsys . batch)
  (daemonp))
 (doom
  (version . "2.0.9")
  (build . "HEAD -> develop, origin/develop, origin/HEAD a426b7350 2020-02-24 20:55:45 -0500")
  (dir . "~/.doom.d/"))
 (system
  (type . gnu/linux)
  (config . "x86_64-pc-linux-gnu")
  (shell . "/bin/bash")
  (uname . "Linux 4.14.165-133.209.amzn2.x86_64 #1 SMP Sun Feb 9 00:21:30 UTC 2020 x86_64")
  (path "~/.pyenv/shims" "~/.pyenv/bin" "~/.emacs.d/bin" "~/.pyenv/shims" "~/.pyenv/bin" "~/.emacs.d/bin" "/usr/local/bin" "/usr/bin" "/bin" "/sbin" "/usr/local/sbin" "/usr/sbin" "~/.local/bin" "~/bin" "/usr/local/libexec/emacs/26.3/x86_64-pc-linux-gnu"))
 (config
  (envfile . envvar-file)
  (elc-files . 0)
  (modules :completion company (ivy +fuzzy +prescient) :ui deft doom doom-dashboard fill-column hl-todo hydra indent-guides modeline nav-flash ophints treemacs vc-gutter vi-tilde-fringe window-select workspaces :editor (evil +commands +everywhere) file-templates fold (format +onsave) multiple-cursors parinfer rotate-text snippets word-wrap :emacs (dired +ranger +icons) electric (ibuffer +icons) vc :term eshell shell :checkers (syntax +childframe) :tools docker ein (eval +overlay) (lookup +docsets) lsp macos magit rgb terraform :lang data emacs-lisp latex markdown (org +dragndrop +present) (python +ipython +pyenv +lsp) rest (sh +fish) :app calendar :config (default +bindings +smartparens))
  (packages . "<(void-function sp-point-in-string)>")
  (unpin "n/a")
  (elpa "n/a")))

With e220549 this issue should be resolved. Let me know if that isn't the case and I'll reopen it. Thanks for bringing it to my attention!

That fixed it! Thank you so much. I'm beyond impressed with how quickly you took care of this -- I went to the bathroom and came back and it was fixed lol


Is TitanDB dead?

I noticed that the documentation and home page of Titan now redirect to a closed, enterprise-only version provided by DataStax. Also, there haven't been commits to this repo since June. Am I correct to assume that the open-source version of Titan is no longer being maintained?
With both the author of Titan and the author of Gremlin now being employees of DataStax it looks like there's little interest in maintaining a free and open community for Graph databases in general, let alone Titan. This kind of monopoly is what kills innovation and has historically killed great products like CouchDB/CouchBase.
What's going on?

Update from mailing list:

Our mistake.  We were taking down the old Aurelius corporate site which contained very outdated information on a now defunct company and the documentation ended up going away with it.  The pages http://s3.thinkaurelius.com/docs/titan/1.0.0/  and http://titan.thinkaurelius.com should no longer re-direct to the DataStax Graph landing page.  Sorry.
cheers

This was previously asked in #1328
The titan11 branch is the latest. It would help if the project switched to that so that people can at least see commits from this year.

titan11 may be the latest, but it looks pretty stale.

@vlad-alexandru-ionescu @mamoit
TitanDB is retired, there is is a new project called JanusGraph which is now part of the Linux foundation. It starts with the foundations of TitanDB and has more interest and backing then before.
http://janusgraph.org/
https://opensource.googleblog.com/2017/01/janusgraph-connects-past-and-future-of-titan.html

Thanks for having JanusGraph!


including sample data and compute report

Description
Adding the GIRK coordinates and trajectories as Sample Data and including a brief compute report.
Notable points that this PR has accomplished.

[x] Sample data.

from ufcc.sampledata import GIRK

print(GIRK.coordinates)  ## absolute path to the data/coordinates.gro file
print(GIRK.trajectory)  ## absolute path to the data/trajectory.xtc file

TODOS

[ ] Include a compute report.

Status

[ ] Ready to go

Codecov Report

Merging #16 (9dba9a6) into main (e3f431f) will decrease coverage by 0.67%.
The diff coverage is 0.00%.


Standardize flag manifest property name format

The multi-word properties in the flag manifest are using snake case, but we may want to consider using camel case. This would match what was used in flagd and follows the Google JSON style guide.

@anghelflorinm what do you think about this?

https://github.com/open-feature/codegen/pull/19/files


Support pasting images when using VS Code with WSL

Congratulations for making this extension. This makes Markdown a lot more powerful and productive.
Feature description
The paste image from clipboard is amazing, however it does not work when using VS Code with WSL. The problematic behavior from Office Viewer is similar to that from this other extension and it has been fixed. Please implement this fix in Office Viewer as well. I am using Windows 10.
Context details
I am using VS Code to update the Git repo behind GitHub Wiki pages. Some document names have unsupported characters for naming Windows files so I had to move to WSL to see all the files. However, this breaks the paste image from Windows clipboard.
Self assignment
Is there a guideline on how to contribute to this project? I would like to work on this feature.

The extension that solves the problem only works for Markdown editor. In addition, Office Viewer grabs the paste system event instead of that extension. However, that extension also has CTRL + ALT + V as pasting command that Office Viewer does not grab, but it can only be used withing the built-in Markdown editor.

I second this request, as I'm unable to paste an image into a markdown document when using the WSL Remote Extension.


Question: Why are meat and veggieCoordinator wrapped with @Published?

First of all thank you for sharing the Coordinator pattern on using SwiftUI!
I would like to know why did you wrap the meat and veggieCoordinator inside HomeCoordinator with @Published?
I tried to remove it and everything seems to work just fine.
I would like to know what I am missing

Hey @hydro1337x
The @Published might not be needed for this specific case, but it is necessary, if updates to veggieCoordinator/meatCoordinator occur from the Model side of your app rather than direct user interaction. Let's assume that upon tapping a button, you would like to load some data and after that, you want to change the veggieCoordinator. Of course, you would need to make that change from the main thread, but it would not automatically trigger a rerun of SwiftUI to check for differences to the UI.
In our example, we do not have such a case, but setting @Published still makes sense, since we might change the Model logic without considering that we need to add @Published then.


OCR0048: Enhance Synthetic Page Images with Augmentation Libraries

Description:
Develop a Python script to apply augmentations to synthetic page images using various libraries. Users can select their preferred augmentations from a predefined list. The script will enhance the existing synthetic page images by applying the selected augmentations. The main goal is to create diverse and realistic training images to improve the OCR dataset.
Resources:
1)Synthetic Page Image: https://github.com/OpenPecha/SynthImage
2)Augmentation Libraries:

Albumentations
Augraphy

List of Augmentation using Albumentations:

Blur

Blur
Median Blur
Motion Blur

Flip

Vertical Flip
Horizontal Flip

Grid Distort
Hue_Saturation
Perspective
Random Rain
Random Shadow
Rusting
Solarize
Sun flare
Transpose

List of Augmentation using Augraphy:

BadPhotoCopy
InkBleed
PaperTexture
DirtyRollers
LowInk
LineDegradation
Scribbles
WaterMark
Scratches

Implementation:

Sythetic Page Image

Albumentation Augmentation:
Perspective Augmentation

Median Blur Augmentation

Shadow Augmentation

Sun Flare

Augraphy Albumentation Example:

@jim-gyas I would rather make each augmentation a separate module like you have done with distrotion and deformation. selection of with augmentation is common to all augmentation.

Transpose Augmentation:

Problem in Line Extraction for Transpose Augmentation:

After Solving the problem:

Input Synthetic Page Image:

Augraphy Augmentation:
Bad Photo Copy Augmentation:

Dirty Rollers Augmentation:

Ink Bleed Augmentation:

Scribble Augmentation:

Page Texture Augmentation:


Surface CORS errors in public API

The most common app developer problem we see is app developers not setting CORS headers properly on their manifest file.
We should surface this error in the public api so that the browser can display it during authentication: https://github.com/blockstack/blockstack-browser/issues/1217

This was done with #497.


[SCB-1508] Added the gRPC onGetServerMeta method for getting Alpha configuration, Simplify Omega configuration

Omega does not require the alpha.feature.akka.enabled=true to enabled the state machine mode

Coverage decreased (-0.09%) to 80.596% when pulling c7224dc814491d3c5a4fa9a7092743122dc072a7 on coolbeevip:SCB-1508 into cc5b236ff1412605742a1158faa7ffc4b80fa6a1 on apache:master.


Note that PK columns cannot be nullable

Jira: CT-XXX
KBC: XXX
Before asking for review make sure that:
Checklist

[x] New client method(s) has tests
[x] Apiary file is updated

Release

[x] I gave the PR a proper label:

major (BC break)
minor (new feature)
patch (backwards compatible fix)
no release (just test changes)

kdesi jsem se o tom bavil s Tomisem, ze to nemame nikde v api docs

je tam validace


Fix regression with bottle URLs in brew info JSON output

[x] Have you followed the guidelines in our Contributing document?
[x] Have you checked to ensure there aren't other open Pull Requests for the same change?
[x] Have you added an explanation of what your changes do and why you'd like us to include them?
[ ] Have you written new tests for your changes? Here's an example.

[x] Have you successfully run brew typecheck with your changes locally?
[x] Have you successfully run brew tests with your changes locally?

This PR is to fix a bug in this previous PR:
https://github.com/Homebrew/brew/pull/11092
With bottles not hosted on GitHub (e.g. third-party taps and their own hosting solutions), the output from brew info --json=v1 <formula> has incorrect values for the bottle file URLs. Example:
...
    "bottle": {
      "stable": {
        "rebuild": 0,
        "root_url": "https://<domain>/homebrew/bottles",
        "files": {
          "catalina": {
            "cellar": "/usr/local/Cellar",
            "url": "https://<domain>/homebrew/bottles/",
            "sha256": "..."
          }
        }
      }
    },
 ...

This still should function correctly for the GitHub case due to the function it is calling having a special conditional specifically for the GitHub case:
https://github.com/Homebrew/brew/blob/d81a047544c431ab733f21d8ebd028a44341bfa6/Library/Homebrew/software_spec.rb#L456

Thanks so much for your first contribution!  You rock, @chrisayoub!


Fix invalid rule counters

This is my attempt to fix https://github.com/robbertkl/docker-ipv6nat/issues/29.

Hi, thanks for your contribution. Unfortunately, I don't think this is the right fix just yet: see my comment on #29. I'll close this for now so that discussion will continue there.


Using Stream.resource to safe wrap getting a free worker

Tested. Closing it because it doesn't make sense.


Clicking on "... is following you" notification should bring you to their profile

See Issue #240.


⚠ Rumah123 has degraded performance

In bcb9cf4, Rumah123 (https://www.rumah123.com) experienced degraded performance:

HTTP code: 504
Response time: 20976 ms

Resolved: Rumah123 performance has improved in e77810b.


Incorrect PDF reference link

When I tried to open the reference to the Hutton paper on higher order functions, instead a document from website in Brasil was served via the link in the page:
http://www.agu.gov.br/page/download/index/id/11184731
Clearly not what I was expecting ... although I accept that it may have been no less intelligible to me than your intended file! :)

Oh .. GREAT tutorial btw :+1:


[SPARK-21884][SQL][BRANCH-2.2] Fix StackOverflowError on MetadataOnlyQuery

What changes were proposed in this pull request?
This PR aims to fix StackOverflowError in branch-2.2. This happens when OptimizeMetadataOnlyQuery returns LocalRelation with partition informations without materializations, e.g. for Data source tables (Parquet/ORC) or Hive table stored by Parquet with convertMetastore.
master branch has the same logic, but it doesn't throw StackOverflowError due to the other differences.
scala> spark.version
res0: String = 2.2.0   // 2.2.1-SNAPSHOT is the same.

scala> sql("CREATE TABLE t_1000 (a INT, p INT) USING PARQUET PARTITIONED BY (p)")
res1: org.apache.spark.sql.DataFrame = []

scala> (1 to 1000).foreach(p => sql(s"ALTER TABLE t_1000 ADD PARTITION (p=$p)"))

scala> sql("SELECT COUNT(DISTINCT p) FROM t_1000").collect
java.lang.StackOverflowError
  at java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1522)

How was this patch tested?
Pass the Jenkins with a new test case.

Test build #81278 has started for PR 19094 at commit 07126f7.

Test build #81278 has finished for PR 19094 at commit 07126f7.

This patch passes all tests.
This patch merges cleanly.
This patch adds no public classes.

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/81278/
Test PASSed.

Hi, @lianhuiwang and @hvanhovell .
Could you review this PR? When this was introduced at 2.1.0, there was no problem.
When the underlying classes of fsRelation.location.listFiles changed in 2.2.0, this happens.

https://github.com/apache/spark/pull/18686
My fix resolves your issue, right?

Thank you!

I close this issue. Thank you again.


[TensorBoard] Redesign TensorBoard Integration

The following tasks will be done with new design:

submit-job-v2 plugin
job-detail page
job-submission page

https://github.com/microsoft/pai/issues/2095

https://github.com/microsoft/pai/issues/3122

user has to write the path/to/lgodir at least twice (one for tensorboard command, the other for checkpoint writing). Why not use something like parameters?
Another benefit is user could easily get logdir of a completed job. The tensorboard would be closed when training is done, but it is quite common to see the logs after. It would be helpful if we can start a tensorboard command given only a job name (in web portal or cli)


fix: timestamping

This PR adds a sanity check on timstamp value against the signing time: timestamp value should always be bounded after the signing time.
This is to say, one cannot timestamp a signature before the signature itself been created. If it happens, fail the verification.

Do we need to account for clock skew such as when the local system clock runs faster than the timestamp server??

Do we need to account for clock skew such as when the local system clock runs faster than the timestamp server??

This change has been tested with several public tsa servers, such as digicert and globalsign.
Since we cannot tell the difference between a clock skew and an intentionally manipulated local system clock, we should fail the verification on both cases following the secure by default practice.
In addition, this check also covers the scenario where the signer generates a Notary Project compliant signature using another tool and send it to tsa for timestamping later on, then attach the signature themselves. When verifying such signature envelopes in Notation, we expect the tsa timestamp to be later than the signing time as well.
@priteshbandi


static assert in SpecialMatrix::value_with_len_()

I feel like I walked into one of your deliberate traps here.
I hit this error in building Adept-2 using an IAR toolchain / cmake, in method SpecialMatrix::value_with_len_()
Type value_with_len_(const Index& j, const Index& len) const {
  ADEPT_STATIC_ASSERT(false, CANNOT_USE_VALUE_WITH_LEN_ON_ARRAY_OF_RANK_OTHER_THAN_1);
  return 0;
}

File SpecialMatrix.h, line 1548 (version 2.1.1 release / tar)
This assertion is obviously unconditionally false. So not surprisingly, I get it during build time.
This code is not seemingly conditionally compiled either, although I will admit I didn't track every #ifdef in the file.
Totally removing the method fixes this build issue, so I guess this method is a base class refinement?
Changing the condition to true obviously also fixes the build issue.
So how should I be dodging this trap without making changes to the code?

I get this error while trying to compile file minimize_levenberg_marquardt.cpp
FAILED: third_party/adept-2.1.1/CMakeFiles/adept.dir/adept/minimize_levenberg_marquardt.o
C:\PROGRA~1\IARSYS~1\EMBEDD~1.2\arm\bin\iccarm.exe --c++ --silent E:\Projects\xxx\third_party\adept-2.1.1\adept\minimize_levenberg_marquardt.cpp -DARM_MATH_CM4 -DSTM32F415xx -DSTM32_THREAD_SAFE_STRATEGY=2 -DTX_INCLUDE_USER_DEFINE_FILE -DUSE_FULL_LL_DRIVER -DUSE_HAL_DRIVER -IE:\Projects\xxx\third_party\adept-2.1.1\include -r --cpu=Cortex-M4 --fpu=VFPv4_sp -e --endian=little --guard_calls --no_size_constraints -Ohs --debug --libc++ --no_rtti --dependencies=ns third_party\adept-2.1.1\CMakeFiles\adept.dir\adept\minimize_levenberg_marquardt.o.d -o third_party\adept-2.1.1\CMakeFiles\adept.dir\adept\minimize_levenberg_marquardt.o

        ADEPT_STATIC_ASSERT(false, CANNOT_USE_VALUE_WITH_LEN_ON_ARRAY_OF_RANK_OTHER_THAN_1);
        ^
"E:\Projects\xxx\third_party\adept-2.1.1\include\adept\SpecialMatrix.h",1548  Error[Pe135]:
          class "adept::SpecialMatrix<Type, Engine,
          IsActive>::value_with_len_(int const &, int const &)
          const::ERROR_CANNOT_USE_VALUE_WITH_LEN_ON_ARRAY_OF_RANK_OTHER_THAN_1"
          (declared at line 1548) has no member "STATIC_ASSERTION_HAS_FAILED"
ninja: build stopped: subcommand failed.

Could you please tell me your platform and compiler? Is the problem when you just compile the adept code, or when you compile it into other software?  This line has been here forever so it's surprising you get this problem if you are just compiling the adept package.
The idea of this function is to enable arrays to be indexed with other arrays or with the Matlab-like adept::end object, for example A(end) or A(range(3,end-2)). In this case, the "end" object does not yet know the size of the array that it is indexing - deeper within the implementation, this is worked out, and passed to indexing objects as the second argument of a value_with_len_ call. Now the point is that you can only index a dimension of an array with either a scalar or a one-dimensional array. Since a SpecialMatrix is two dimensions, you can only have called value_with_len_ if you used a SpecialMatrix to index an array. This would be an error, which is why it should always fail to compile.  Are you able to provide me the line of the user-level code that induces this compile-time failure?

The target platform is an STM32 ARM Cortex-M4 processor.
But the host platform on which be build the ELF file is Windows 10. The x-compilation process is facilitated by the IAR toolchain.
We're only just at the evaluating stage of the Adept-2 library.
To that end, all I am building so far is the adept-2.1.1/test/test_misc.cpp file from your repository.

I've not used the IAR toolchain.  What happens if you compile Adept simply by using ./configure then make on the target platform?  Your failure message implies it failed in compiling minimize_levenberg_marquardt.cpp, which is part of the Adept library - it presumably didn't get on to test_misc.cpp if it couldn't compile the library first.  Would be good to know the line of minimize_levenberg_marquardt.cpp where the problematic code occurs.

This may help. I have enabled the "header context" option on the IAR compiler.
Now it prints the sequence of #includes between the source file being compiled and the header file where the error was found.
It also helpfully mentions the preprocessor path it chose.
FAILED: third_party/adept-2.1.1/CMakeFiles/adept.dir/adept/Minimizer.o
C:\PROGRA~1\IARSYS~1\EMBEDD~1.2\arm\bin\iccarm.exe --c++ --silent E:\Projects\xxx\third_party\adept-2.1.1\adept\Minimizer.cpp -DARM_MATH_CM4 -DSTM32F415xx -DSTM32_THREAD_SAFE_STRATEGY=2 -DTX_INCLUDE_USER_DEFINE_FILE -DUSE_FULL_LL_DRIVER -DUSE_HAL_DRIVER -IE:\Projects\xxx\third_party\adept-2.1.1\include -r --header_context --cpu=Cortex-M4 --fpu=VFPv4_sp -e --endian=little --guard_calls --no_size_constraints -Ohs --debug --libc++ --no_rtti --dependencies=ns third_party\adept-2.1.1\CMakeFiles\adept.dir\adept\Minimizer.o.d -o third_party\adept-2.1.1\CMakeFiles\adept.dir\adept\Minimizer.o

        ADEPT_STATIC_ASSERT(false, CANNOT_USE_VALUE_WITH_LEN_ON_ARRAY_OF_RANK_OTHER_THAN_1);
        ^
"E:\Projects\xxx\third_party\adept-2.1.1\include\adept\SpecialMatrix.h",1548  Error[Pe135]:
          class "adept::SpecialMatrix<Type, Engine,
          IsActive>::value_with_len_(int const &, int const &)
          const::ERROR_CANNOT_USE_VALUE_WITH_LEN_ON_ARRAY_OF_RANK_OTHER_THAN_1"
          (declared at line 1548) has no member "STATIC_ASSERTION_HAS_FAILED"
          preprocessing context:
            in #if at line 16
            included from
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept/reduce.h", line 44
            in #if at line 36 of
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept/reduce.h"
            included from
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept_arrays.h", line 18
            in #if at line 11 of
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept_arrays.h"
            included from
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept/Optimizable.h", line 14
            in #if at line 11 of
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept/Optimizable.h"
            included from
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept/Minimizer.h", line 14
            in #if at line 11 of
                      "E:\Projects\xxx\third_party\adept-2.1.1\include\a
                      dept/Minimizer.h"
            included from
                      "E:\Projects\xxx\third_party\adept-2.1.1\adept\Min
                      imizer.cpp", line 13
ninja: build stopped: subcommand failed.

I've not used the IAR toolchain. What happens if you compile Adept simply by using ./configure then make on the target platform? Your failure message implies it failed in compiling minimize_levenberg_marquardt.cpp, which is part of the Adept library - it presumably didn't get on to test_misc.cpp if it couldn't compile the library first. Would be good to know the line of minimize_levenberg_marquardt.cpp where the problematic code occurs.

The target platform is an embedded ARM chip. It has no OS until we "burn" that into the chip.
We can only build on the host platform. Running ./configure in Windows 10 is therefore pointless (plus: unsupported).

Well, you're right about it building fine on Linux. With your instructions and with my cmake set-up.
But it shouldn't (surely?). There is some smoke and mirrors going on here.
If I change the method to:
Type value_with_len_(const Index& j, const Index& len) const {
  static_assert(false);
  return 0;
}

Then the build fails.
So why does it not fail with your static assertion macro?
After all, it passes false unconditionally. So the struct CANNOT_USE_VALUE_WITH_LEN_ON_ARRAY_OF_RANK_OTHER_THAN_1 does not "get" the type STATIC_ASSERTION_HAS_FAILED.

I think the issue is with compiler behaviour.  What we want is a compile-time error to be thrown if this function is called.  The tricky thing is that a compile-time error is thrown if the function is compiled. If the function takes template arguments then this is easier since we know that the function can only be compiled if the template arguments are known, which can only occur if the function is actually called somewhere in the code. If the function takes no template arguments then it appears it may be compiled whenever the class is instantiated depending on compiler, although I don't know why my version of static assert (written to be compatible with C++98) works while C++11's static_assert does not.
It would be reasonable in this case for you to simply replace my static assert line with
throw invalid_operation("Cannot use a SpecialMatrix to index another array" ADEPT_EXCEPTION_LOCATION);
i.e. to replace the compile-time check with a run-time check.

Yeah, I get it now.
The build process should only assert if the code is actually reachable. In our case SpecialMatrix::value_with_len_() it is not reachable and we should not be statically asserting.
Your static assert works, and I would not suggest you change it.
But just FYI, static_assert() got fixed in g++13 to do what yours does. See this MRE on Compiler Explorer.
(drop the gcc version down to 12.3 to see the original problem reappear)
Purely in theory, you could do away with yours and replace it with static_assert().
But that puts a requirement on the user to update their toolchain to gcc 13 or later.
I accept your suggestion to replace those static assertions that offend the IAR compiler with a runtime assertion or exception instead.

Afterthought....
Seeing as SpecialMatrix::value_with_len_() is not a virtual function, completely removing it is a form of static assertion too.
If it were to be erroneously called we'd have a compiler error, albeit a different one.


Org blocks

The Org Blocking API is the same as the User Blocking API, so I basically just copied commit 8413595a3c5071addef14d679cc51a8c35e54f44 and added the org parameter.
Also: I just found (not surprising) that API supports pagination when listing the block users. So, I added page and per_page params.
https://developer.github.com/v3/orgs/blocking/

Awesome, thanks!

That's great news! It's been working great so far! LMK when you publish so I can remove the temp reference to my branch.

Should be published as 9.2.0 now.


NETOBSERV-701 Cardinality panel: Namespaces listed twice

forgot to remove a push so it was pushing twice

/lgtm
thanks !


Upgrade all deps

Hmm, looks like the builds are failing here

Looks like typescript errors, possibly from the typescript upgrade. I'm guessing they should be pretty easy to run through and fix - @seawatts lemme know if you hit any puzzlers and need a hand.

Closing this PR since it's now conflicting and tests are failing, but these upgrades are more than welcome @seawatts, so feel free to reopen once you've fixed the issues, gotten tests passing, and have rebased off master.


Cut settings_org → stream_edit import

(73, 30) → (71, 29).

For the first commit, I think settings_data is where we've been putting that sort of function.

Putting it in settings_data would result in a cycle settings_data ↔ stream_data, unless stream_data.stream_privacy_policy_values were moved.

Oh I think those _values objects should go to settings_config.js -- that's where we've been collecting structures of that form and I think I'd be happy for the stream-specific settings to live there too.

Okay, did that shuffle.

Cool, merged, thanks @andersk!


[SignIn] 404 after filling out auth code

Non-issue, was just another case where I forgot to update Creds.cs.


Resolve minimist audit errors for all libraries

Regenerate package-locks and fix npm audit warnings for minimist version <=1.2.5.

Codecov Report

Merging #4624 (47c4202) into dev (2b71bda) will not change coverage.
The diff coverage is n/a.

Flag
Coverage Δ

*Carryforward flag

msal-angular
96.39% <ø> (ø)

Carriedforward from 2b71bda

msal-browser
87.80% <ø> (ø)

Carriedforward from 2b71bda

msal-common
85.08% <ø> (ø)

msal-core
82.67% <ø> (ø)

Carriedforward from 2b71bda

msal-node
82.20% <ø> (ø)

msal-node-extensions
76.03% <ø> (ø)

Carriedforward from 2b71bda

msal-react
92.46% <ø> (ø)

Carriedforward from 2b71bda

node-token-validation
83.41% <ø> (ø)

*This pull request uses carry forward flags. Click here to find out more.


Why do you use sum(decode_lengths) to as the count to update losses and topkaccuracies?

Hi,
I am wondering why you use the sum(decode_lengths), which to me, means the total number of tokens in the batch, as the counts to update the loss metrics?
Isn't the batch size be more appropriate?
Thanks a lot

Hi, I did this because the loss is computed for each token and then averaged by the total number of tokens in the batch.
Both of these tensors have sum(decode_lengths) rows. Therefore, in this line, the loss computed has been averaged by sum(decode_lengths).
Similarly, the accuracy too is calculated for sum(decode_lengths) tokens.

Hi @sgrvinod , regarding [https://github.com/sgrvinod/a-PyTorch-Tutorial-to-Image-Captioning/blob/b3b82636f7decb261865b92854a4741652dc413a/train.py#L179](this line), does the pack_padded_sequence(), does the pytorch version 0.4.1 returns only one PackedSequence object? I am seeing an error on this line, have you experienced anything similar? Thanks
Traceback (most recent call last):
File "train.py", line 127, in train
scores, _ = pack_padded_sequence(scores, decode_lengths, batch_first=True)
ValueError: too many values to unpack (expected 2)

For a fix see issue #75


Add global slot to GraphQL

Would be a useful addition to add global_slot to the GraphQL output in addition to the existing slot and epoch fields.

@MartinMinkov  to follow up to confirm this is already done

Followed up, it is good to be closed.


One example of how to minify build

All recent versions of the internal themes use a bunch of minify stuff to pack their css and image files up more nicely. It needs to be decided if some version of the minify stuff should also be in this theme template.
The minify setup in this PR resembles that being used in @jupyterlab/theme-light-extension/webpack.conf.js before jupyterlab/jupyterlab/#5505.

First I'd like to say thank you for putting this together. I'd been searching for a while now for a way to make my custom theme work.  From what I've seen, this is necessary for the icons to work with a custom theme. The install, and subsequent rebuild doesn't seem to copy over the svg files so the console is littered with 404's but having it run through webpack obviously doesn't have this issue.

The core themes in jupyterlab master are no longer pre-webpacked after a recent refactor (jupyterlab/jupyterlab#5505). I think the problem of how to minify themes will go away by itself with the new JupyterLab prerelease (1.0.0a1).  I'll try to take this for a test-drive today and see what will need to be updated.
Thanks for making this repo @telamonian!

That being said, it may be that people will still want to webpack their themes themselves. I confess I don't really know what best-practices should be here.

@mountain01 has actually found a bug in the latest version of the package.json template. The style/*.foo file globs are too specific (they were in fact designed to only pick up the files the webpack script missed). It should just be a single generic style/* glob.


improving error message with unknown files

Closes #51

Pull Request Test Coverage Report for Build 70

0 of 1 (0.0%)  changed or added relevant line in 1 file are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 64.502%

Changes Missing Coverage
Covered Lines
Changed/Added Lines
%

cmd/diligent/factory.go
0
1
0.0%

Totals

Change from base Build 68:
0.0%

Covered Lines:
298

Relevant Lines:
462

💛  - Coveralls


Cleanup1

Some code cleanups, tested only by running the tests, but shouldn't introduce any significant runtime changes

Thanks! Sorry it took me so long to review and accept it.
Your code style is nice and matches mine.


Expose onHoverIn/onHoverOut on Pressable

Summary
With facebook/react-native#32405 , The Stock Pressable component now exposes onHoverIn/onHoverOut as the way to support mouse events. We should align our desktop ports (rn-macos/windows/win32) to take advantage of this.
Motivation
This issue is motivated by my want to use the RN Stock Pressable component in FluentUI React Native, which currently has a local copy of Pressable internally. Using the upstream component would mean less custom code and smaller bundle size for FluentUI React Native. It also will help push Pressable as "the" cross platform component for handling mouse / keyboard focus / press events.
Basic Example
No response
Open Questions
No response

Fixed with #884


Webkit package not found when building

Hi,
I've tried to build the app, but I'm getting an error when stack is building webkit 0.14.
Here's  .stack-logs/logs/webkit-<IP_ADDRESS>.log:
[1 of 2] Compiling Main             ( /tmp/stack10795/webkit-<IP_ADDRESS>/Setup.hs, /tmp/stack10795/webkit-<IP_ADDRESS>/.stack-work/dist/x86_64-linux-tinfo6-nopie/Cabal-<IP_ADDRESS>/setup/Main.o )
[2 of 2] Compiling StackSetupShim   ( /home/gamma/.stack/setup-exe-src/setup-shim-mPHDZzAJ.hs, /tmp/stack10795/webkit-<IP_ADDRESS>/.stack-work/dist/x86_64-linux-tinfo6-nopie/Cabal-<IP_ADDRESS>/setup/StackSetupShim.o )
Linking /tmp/stack10795/webkit-<IP_ADDRESS>/.stack-work/dist/x86_64-linux-tinfo6-nopie/Cabal-<IP_ADDRESS>/setup/setup ...
Configuring webkit-<IP_ADDRESS>...
setup: The pkg-config package 'webkit-1.0' version >=1.8 is required but it
could not be found.

Do you know what's up?

It seems that C-library webkit is missing or pkg-config cannot find it. Webkit must be listed in the external library section of the README and currently not. I'll fix it soon.
By the way, make sure pkg-config --modversion webkit-1.0 command success.
Or, there seems to be an open problem to install webkit on OS X. See this report if you use OS X. https://github.com/gtk2hs/webkit/issues/13


Cleanup

This is mostly redundant code removal with a few fixes sprinkled in. It's really just an attempt to make the IDE complain a little less :smile:.
I wasn't sure if any of these were intentional, so I split each area up into a separate commit.

Noticed one more thing :)


[FEATURE] Multilayer Perceptron

I have seen that you guys have MLP in TODO here.
I already have implemented NN in C++ (repo link). I am planning to make a pull request to add this. But as you might have seen I have created three header files. I am also going to modify code to suit the pull request. Can you please discuss your ideas about what should I do with header files and also some ideas about refactoring my code.
Thanks.

Thats wonderful, thank you 👍

Ideally, the repo had been using at most of two files - one CPP and one H, if needed.
The matrix.hpp sounds quite generic and useful. Please review QR decomposition and LU decomposition programs in the repo that use similar tools but only that are needed. There is redundancy but it keeps the programs whole and easy to read and study with the documentation added and organized using namespaces.

I will add proper documentation and namespaces. One more thing should I keep header files in the same folder (i.e. machine_learning/).

I will add proper documentation and namespaces. One more thing should I keep header files in the same folder (i.e. machine_learning/).

yes, in the same folder please and with the same names, except for the type suffix - .h and .cpp

Is it okay if I provide only MSE as loss function and SGD as optimizer (along with various activation functions) ?

Is it okay if I provide only MSE as loss function and SGD as optimizer (along with various activation functions) ?

Absolutely!

Should I provide facility to save and load model ?
I mean it is already there in my code, but I was confused about that feature since it include file handling (i.e. fstream).

Should I provide facility to save and load model ?
I mean it is already there in my code, but I was confused about that feature because it includes file handling (i.e. fstream).

You can use any of the standard C++11 features from the STL library.

For testing Can I upload dataset (for e.x. iris.csv) in the same folder ?

I think we can have a small enough CSV file for testing in ML.
Is it https://gist.github.com/curran/a08a1080b88344b0c8a7#file-iris-csv?
Or you can generate simple test data as in other ML programs in the repo and use that for testing.

Is it https://gist.github.com/curran/a08a1080b88344b0c8a7#file-iris-csv?

Yes.
It is only around 4KB in size.

Is it https://gist.github.com/curran/a08a1080b88344b0c8a7#file-iris-csv?

Yes.
It is only around 4KB in size.

Ok, sounds fine.


[Security][Flash Enc] - Software exploits can decrypt firmware using esp_partition_read() (IDFGH-7461)

From the docs, any flash can be automatically decrypted on read when using esp_partition_read().
When I read this in the docs, my first thought was "ah, an attacker just needs to find a buffer overflow with esp_partition_read() to read the entire flash contents, or otherwise get execution privileges on the device.
Why should code be able to decrypt instruction code? Im not sure a reason for it. Data, yes. But instructions?
Ideally instruction decryption  would be done entirely in hardware with no ability to call decryption from software.
Are there any protections to prevent an attacker from calling this function after an attacker gains local code execution? or finds a buffer already being used by this function and causes it to overflow?

There is only one flash encryption engine so yes it is possible to dump the whole flash.  One example is you need to read code to calculate the hash of an app partition.  The checks in esp_partition_read do seem to be missing an explicit check on size argument.  If you can find a buffer overflow to overwrite the call stack you can probably do anything.

Thanks for the answer!
That's a pretty unfortunate limitation (and vulnerability...). 😔
For most attackers is pretty easy to find some out of bounds writes, use after free, etc, bugs in a complex C application. And it only takes 1 bug, in any version of the app you ever shipped.
Allowing esp_read_flash() to decrypt instruction code just makes extracting app firmware too easy!
I'd gladly take the tradeoff of not being able to calculate app hashes (and just store a copy of the app hash in data, like we already have!).
Request - Can new revisions of the ESP32 please remove the ability to decrypt instructions from software?
Thanks for your consideration.

@igrr

There may be something to be done with the MPU especially in newer chips to provide more protection

It is indeed possible to protect the code section from reading, allowing only instruction fetch (starting from esp32-s2.) However compilers also insert literal values (constants) into code sections, so in the process of normal code execution the CPU often has to read such data stored in the code sections. If the instruction set allowed us to place these constants "far away" from the code itself, it would have been possible to move the constants into a separate readable section, which would allow read-protecting the code section. There are some limits on how far this section can be (and hence on the size of code section), given the number of bits which can be used for PC-relative addressing.
Out of curiosity, do you know of an example of a system (embedded or otherwise) which has this kind of code readback protection?

That's great news that the hardware potentially already ready!!
What is preventing us from modifying the compiler? That seems like a pretty doable change.

do you know of an example of a system (embedded or otherwise) which has this kind of code readback protection?

No, I'm not familiar with enough processors to say, but it's similar to the idea behind DEP (Data Execution Prevention) in modern OS's.

Its impossible to protect any system that has instrutions to on the fly decrypt any part of flash content.
As an attack goes good, taking control of execution address could be possible and flasible, but, take in mind that you must know exact the part in memory where the flash read decrypt is allocated to invoke the function, so, its not so simple.
Also, a buffer overflow must be achieved to open a space to call some other function to act.
To clear the full understand the ESP-IDF decrypt is part of work process so, its impossiple to disable it, even if espressif just close to the public the use of such function it will remain used internaly. So, barely impossible to protect.
Even if this kind of function is used by hardware crypto calls it is possible to to a bufferunderan to move pointers set to clear the registry and open the hardware to be invoked to another part of the code and move the cache to be pointed to another pointer.
So, its an endeless discussion that takes nowhere!

Thanks for your input.

Its impossible to protect any system that has instrutions to on the fly decrypt any part of flash content.

Ideally, these instructions should not exist in the first place. Firmware decryption would happen automatically in HW without software control.

As an attack goes good, taking control of execution address could be possible and flashible, but, take in mind that you must know exact the part in memory where the flash read decrypt is allocated to invoke the function, so, its not so simple.

Most simply, an attacker can just try every address until it succeeds. If it crashes, just reboot.

Also, a buffer overflow must be achieved to open a space to call some other function to act.

Something along those lines, yes.

To clear the full understand the ESP-IDF decrypt is part of work process so, its impossiple to disable it, even if espressif just close to the public the use of such function it will remain used internaly. So, barely impossible to protect.

Right, but why does Espressif need this function? Is it really necessary?

Even if this kind of function is used by hardware crypto calls it is possible to to a bufferunderan to move pointers set to clear the registry and open the hardware to be invoked to another part of the code and move the cache to be pointed to another pointer.

Not sure I follow. But ideally this would be entirely in hardware.
In short, exposing esp_flash_read function to decrypt is a god send to a hacker. Yes, they need to gain local code execution (easy). Exposing this function is just asking to have your firmware extracted.
Just for some inspiration of what hackers are capable of. A turing complete software CPU written into ram using a corrupt PDF file: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html

Bump.
Just curious if this might be worked on / studied more.
Would be great to have flash encryption be impervious to software exploits.

Someone used this idea (using custom code to decrypt with esp_partition_read())  to hack the flash encryption!

As a bonus round, [courk] then decided to speed up the painfully slow process of recovering the encryption keys by fault injection, which just requires the first 128 bytes (one block) on the -C3 and -C6 parts. Using a voltage fault injection the Secure Boot feature is bypassed. The essential idea is that through a buffer overflow custom code can be run, which dumps the entire Flash content. After demonstrating this and report it to Espressif, an advisory was published that notes that there’s no defense against this SCA and fault injection attack, other than using an ESP32 part that has internal Flash and no access to the QSPI bus from the outside.

https://hackaday.com/2024/01/15/breaking-the-flash-encryption-feature-of-espressifs-microcontrollers/

The problem will only be solved with a unique key per flash, so this way, doing such work will do nothing in the end.
Paired keys to cloud and Mac, True Flash I'd, and MD5 from the read of readable refuses blocks will be enough to keep the healthy of a secure connection to the cloud and assure the software boundaries still intact.
What I see now is that the always secure problem is a flawless design if the software is now well designed as well.l, so, the manufacture process also relying on just hardware will always be a mess.

A unique key per flash doesn't help much once they've decrypted all your firmware and can create clones of your device.

Sure, this is why you can use alternative approaches, like used in PS5 and other protected devices.
FW decryption can lead to a lot of secure flaws over time, so a correct security design shall be taken into consideration prior to anything else.
There is a primary security mistaken in the esp32 and others MCU design that doesn't have a hardcoded ID, mac address are also used as boundaries for the key to encrypt derivation, but this is not the correct approach.
PS5 uses 4 techniques, each flash used in the motherboard have theirs unique ID registered, the manufacturer, the id's of the MCU in the border, those all hardwares creates the main part of the salt to the RSA/Encryption keys to run the firmware and also to receive the firmware and secure connect to the cloud.
When the firmware got decrypted in some consoles, they had the maximum possibility to just do it in a unique device and not in all devices, and this is the main intention for the hardware contention losses, lower as possible the damage taken in the production environment.
So, a simple FW decryption becomes useless to any kind of network attack or intellectual property broken down, the device become just an hardware that can be used but not to create a harsh into the production environment.

Someone used this idea (using custom code to decrypt with esp_partition_read()) to hack the flash encryption!

Adding some details here:
For IDF case, the 2nd stage bootloader executes entirely from the internal memory of the target (to avoid any TOCTOU attacks). ROM loader must first verify the bootloader image and then load it into the internal memory through staging buffer. So, if we look at this part then entire bootloader contents must be treated as data itself, and loaded through the memory mapped cache (for decryption purpose) to internal memory. The attack also re-utilized same flash cache mapping (setup by the ROM loader) and it was able to read (decrypt) the bootloader contents.

Why should code be able to decrypt instruction code? Im not sure a reason for it. Data, yes. But instructions?

Requirement is a valid one after successful setup of the application. However, early boot sequence or even the code that executes from internal memory does have a dependency on the decryption engine. Probably, hardware specific control for selective decryption could help to meet the requirement here. But for the early boot sequence part, we are still brain-storming on few countermeasures to reduce the attack surface.


vim-racer not work

I start to use vim writing Rust. I installed racer by following https://github.com/racer-rust/racer, and the test racer complete std::io::B works well on my iterm2. Then I follow https://github.com/racer-rust/vim-racer to setup my vim-racer.But  it not works when I use vim to write rust code. I have no idea what is going wrong.

I suggest using coc.nvim and coc-rls . It works really well for rust in vim.

Please post this as a vim-racer issue. I don't think this is related to this vimrc.


Pool redesign

Fixes: https://github.com/oVirt/ovirt-web-ui/issues/195

This is looking great @bond95 ! For the colors of the pool labels, I can put together a color palette based off of PatternFly colors so we're drawing from PatternFly approved colors for it.

For the colors of the pool labels, I can put together a color palette based off of PatternFly colors so we're drawing from PatternFly approved colors for it.

Now colors are generated automatically based on id of pool. The problem with approved colors is that we get limited numbers of colors, what I think not very good in case when there be a lot of pools.

For the colors of the pool labels, I can put together a color palette based off of PatternFly colors so we're drawing from PatternFly approved colors for it.

Now colors are generated automatically based on id of pool. The problem with approved colors is that we get limited numbers of colors, what I think not very good in case when there be a lot of pools.

fair point, but I think we want to restrict, even if it means reusing. The bright green stood out to me a bit too. @michalskrivanek did you have thoughts on the colors?

well, looked a bit weird to me, IIUC the color doesn't have any purpose? That was quite confusing to me because....it's a different color...what does it mean it's a different color...hmmm
I'd stick with a decent non-intrusive single color and be done with it

well, looked a bit weird to me, IIUC the color doesn't have any purpose? That was quite confusing to me because....it's a different color...what does it mean it's a different color...hmmm
I'd stick with a decent non-intrusive single color and be done with it

Using two colors was in the design:
https://docs.google.com/document/d/1G8ROKv_Talwh3c_drDglxM03zdOWoW-cAWt2-2zVqqk/edit
page 8
can't remember if we talked about the use case of more than 2 active pools. @michalskrivanek how many active pools maximum have you seen in real environments?

Using two colors was in the design:
https://docs.google.com/document/d/1G8ROKv_Talwh3c_drDglxM03zdOWoW-cAWt2-2zVqqk/edit
page 8

Maybe I missed something, but I don't see any explicit definition of how much color must be.

Maybe I missed something, but I don't see any explicit definition of how much color must be.

You didn't. We just only did the design with maximum of 2 pools, one light blue and one dark blue. This is why we do agile :)

@gregsheremeta @michalskrivanek @bond95 I think once we figure out what the max number of pools a user would typically have access to at any given time is then we can decide from a color palette from there. I wouldn't be too worried about being limited by the color palette, PatternFly has a pretty extensive approved color palette.

can't remember if we talked about the use case of more than 2 active pools. @michalskrivanek how many active pools maximum have you seen in real environments?

well, a few. definitely more than 2. But I wonder if it's really just not making people curious about the meaning of those colors:)

can't remember if we talked about the use case of more than 2 active pools. @michalskrivanek how many active pools maximum have you seen in real environments?

well, a few. definitely more than 2. But I wonder if it's really just not making people curious about the meaning of those colors:)

It's a fair point. We were trying to think of ways to group the pool-spawned VMs and their parent all together, even though the cards wouldn't be in a sub-box.

Here are the colors I would suggest for primary and secondary label colors:

I've also included a PDF of the color palette:
Pool label colors.pdf

One comment about the behavior of the grouping and order of the cards, I would recommend having the pools card at the top of the list of VMs and then have the allocated VMs follow the pools card. Any personal VMs of the user could follow. Everything would be ordered by alphabetical order.

@lwrigh WDYT?

@lwrigh WDYT?

It's looking good. One comment about the pool cards, they should feature the colored pool name label too.

so you do want to go ahead with different colors?

@lwrigh

so you do want to go ahead with different colors?

@michalskrivanek yes, I think for users it would be more clear to recognize needed VM or Pool.

@bond95 Great the look and the sorting look good to me!

@lwrigh added tooltips

@sjd78 @lwrigh can you please review?
Did we cover
https://docs.google.com/document/d/1G8ROKv_Talwh3c_drDglxM03zdOWoW-cAWt2-2zVqqk/edit   ?

I looked through the design doc again and updated a couple things but it's up to date and I didn't change anything major. Just copied some of the dialogs messages for word into the doc.

ci build please

ci build please

Note: I fixed the merge conflicts in sharedStyle.css via the github web tool.

ci build please

Pool page is not supposed to exist, but you can still get to it through link on the VM card in VMs dashboard.

ci build please

ci build please

I tested pools on ovirt-engine-<IP_ADDRESS>-0.1.el7.noarch and found some issues https://docs.google.com/document/d/1Fw9rLHwoGDY77VyygubOhZqc4sLHrQ-fCLoOGv3DXy4/edit?usp=sharing

@lwrigh

@lwrigh

Thanks for adding it! Could we chance the direction of the tooltip so it goes off the top of the "Restore Snapshot" button instead?

@lwrigh done

@bond95 When you get the chance can you post updated screenshots of the main parts of pools so I can review them? Thanks!

@bond95 When you get the chance can you post updated screenshots of the main parts of pools so I can review them? Thanks!

@lwrigh But on main page no changes. Or what do you mean?

@bond95 When you get the chance can you post updated screenshots of the main parts of pools so I can review them? Thanks!

@lwrigh But on main page no changes. Or what do you mean?

Ah okay never mind then! If there are any other smaller details (like the "Restore Snapshot" button) to review I'd be happy to take a look at those.

ci build please

ci build please

I found one more issue, but it occurs only with SuperUser role (admin@internal).
Version:
ovirt-web-ui-1.6.1-0.20190923.git5bd255e.el7.noarch
ovirt-engine-<IP_ADDRESS>-0.1.el7.noarch
Browsers: Firefox 69.0.2, Chromium 77.0.3865.90
If you take or run a pool VM from the VM grid and refresh the page in browser (F5),
the web-ui crashes during loading the VM cards.
Running a regular VM doesn't have this effect.
Browser console log:
Firefox:
[debug]  Reducing action: {"type":"UPDATE_VMPOOLS_COUNT"} utils.js:47:14
[error]  TypeError: "n is undefined"
    default index.js:324
    Redux 8
    qt react-dom.production.min.js:132
    Dn react-dom.production.min.js:167
    Rn react-dom.production.min.js:180
    xr react-dom.production.min.js:232
    wr react-dom.production.min.js:233
    Hr react-dom.production.min.js:249
    Vr react-dom.production.min.js:248
    Ir react-dom.production.min.js:245
    Er react-dom.production.min.js:243
    enqueueSetState react-dom.production.min.js:130
    setState React
    Redux 12
    _ middleware.js:25
    Redux 14
    jQuery 2
react-dom.production.min.js:198:186

Chromium:
[debug]  Reducing action: {"type":"UPDATE_VMPOOLS_COUNT"} utils.js:47
[error]  TypeError: Cannot read property 'get' of undefined
    at Function.mapToProps (index.js:324)
    at r (wrapMapToProps.js:54)
    at Function.r.mapToProps (wrapMapToProps.js:63)
    at r (wrapMapToProps.js:54)
    at o (selectorFactory.js:37)
    at selectorFactory.js:85
    at Object.run (connectAdvanced.js:43)
    at c.initSelector (connectAdvanced.js:195)
    at new Connect(t) (connectAdvanced.js:136)
    at qt (react-dom.production.min.js:132)

LGTM
With regards to the web-ui crashing for SuperUsers - as it is recommended to use only UserRole(s) for VM Portal users, it can be fixed via another GH issue.

@bond95 any reason not to merge this?

@sgratch no reason, it can be merged.


[Question] The re-direct url with dot(.) doesn't work on Windows

Describe the bug
Hey there! I followed the guide and set up the redirect URL to io.xxx.xxx. However, when I registered this scheme on Windows, it didn't work (although it works perfectly on macOS).
I think it's related to the app_links library. I just want to confirm if you have successfully set up the scheme on Windows before?
Updated: io-xxx-xxx works perfectly on Windows too.

Hi, @dshukertjr. Can you help confirm that?

Hi @LucasXu0
No I have never set up deep links for Windows, and I don't think anyone working on this library has. We definitely should take some time to try it out, but unfortunately were blocked due too other tasks.
Reading thought your issue on app_link, I can see that you know this, but the scheme can be anything you would like, so you don't necessary have to include io.supabase like the docs says.
I'm going to close this issue as I can see that you have opened an issue on app_link repo.  https://github.com/llfbandit/app_links/issues/69


Formatting issue when adding a debug configuration

pls see https://youtu.be/2oFKNL7vYV8?t=184
The identation of the text is not correct

This is as expected since @auchenberg had a badly formated file before the action.
Notice that he is adding the "Attach by Process ID" configuration which is nicely indented. The issue is that he already has a badly idented "Launch Program".
When a suggestion is accepted it is idented based on the previous line and that is done correctly in this case.
Closing as designed

@isidorn Isn't it the other way around? The launch.json is created with the last configuration that is nicely indented, which the "attach by process id" is inserted into? With a bad indent?

@auchenberg you are correct, my mistake.
I can not reproduce though following your steps, that is why I though the issue was the original launch.json.
@auchenberg Do you see this issue all the time in the vscode insiders? If yes, are you doing something differnetly than me?
Thanks

Yeah, I can't reproduce it in Insiders either. I think Rob fixed an issue related to this earlier. Let's close for now. I'll re-open if I see it again.


Document color output support for run_simple

https://github.com/pallets/werkzeug/pull/1013#issuecomment-250922863

docs/Serving.rst seemed like the most logical place to put it, but it might be better in quick start? let me know.
the PR is #1021 if you've got any feedback.


wrong documentation of tempo-synced LFO rate

Hi,
This line refers to  see _freq_array which does not exist.
After some playing around i finally figured out how to get the desired tempo division in case sync mode is set to BPM locked.
The unit for the argument of setMode1Rate(float l_mode1_rate) is quarter notes
this means if you want a lfo cycle duration of 1 bar you need to pass 1/4 or 0.25 as argument.
argument | lfo cycle duration
---------------------------------
     .125|   2 bars
     .25 |   1 bar
     .5  |   half note
     1   |   quarter note
     2   |   1/8 note
     3   |   1/12 note
     4   |   1/16 note
     5   |   1/20 note
     6   |   1/24 note
     7   |   1/28 note
     8   |   1/32 note
     9   |   1/36 note
    10   |   1/40 note
    11   |   1/44 note
    12   |   1/48 note
    13   |   1/52 note
    14   |   1/56 note
    15   |   1/60 note
    16   |   1/64 note

consider to update the documentation

Thank you for addressing this. The doc was indeed outdated. I updated the code some time ago to make it more flexible. I have just updated the documentation and added your table :-)