Category Archives: Viva!

After rare victory for the little guy, Atlantic City piano tuner gets to keep his house after eminent domain battle – The Independent

https://apple.news/AH_U0FZksQuie12TB3f_zdQ

Chrome Rewards – Application Security – Google

Source: Chrome Rewards – Application Security – Google

The following table outlines the usual rewards chosen for the most common classes of bugs:

 

High-quality report with
functional exploit [1]
High-quality report [2] Baseline [3] Low-quality report [4]
Sandbox Escape [5] $15,000 $10,000 $2,000 – $5,000 $500
Renderer Remote Code Execution $7,500 $5,000 $1,000 – $3,000 $500
Universal XSS (local bypass or equivalent) $7,500 $5,000 N/A N/A
Information Leak $4,000 $2,000 $0 – $1000 $0
Download Protection bypass [6] N/A $1,000 $0 – $500 $0

[1] A high-quality report with a reliable exploit that demonstrates that the bug reported can be easily, actively and reliably used against our users.
[2] A report that includes a minimized test case and the versions of Chrome affected by the bug. You will also demonstrate that exploitation of this vulnerability is very likely (e.g. good control of EIP or another CPU register). Your report should be brief and well written with only necessary detail and commentary.
[3] A minimized test case or output from a fuzzer that highlights a security bug is present without establishing that the issue is exploitable.
[4] A report submitted with only a crash dump, without a Proof of Concept (PoC) or with a poor quality PoC (e.g. a 1MB fuzz file dump with no attempt at reduction) that is later verified to be a legitimate issue.
[5] Escaping any layer of the sandbox (including the NaCl sandbox) will be considered as a sandbox escape.
[6] Landing a blacklisted test binary (malware example, UwS example) on disk where a typical user could execute it, on Mac or Windows. The file type on disk must lead to non-sandboxed code execution after minimal user interaction with the file. See the FAQ below for more information.

Sick of TV News Channels and Shouty Newsreaders? Prepare to be Mesmerised by Real Telangana TV – The Ladies 

If, like me, the first Real Telangana TV video you watch is the one about the rising prices of groceries, you will fall in love. On screen is shot after shot of Prime Minister Narendra Modi eating at events abroad, while in the background, the anchor announces morosely, “Unho alag alag mulkon mein phirke alag alag dishon ke maze udate phire. Aate jaa rahein jaate jaa rahein [He has travelled to different places and enjoyed different dishes. He comes. He goes].”When you recover from this, you hear her saying, “Humich haule hai, jo unka matlab nahi samjhe [We were the foolish ones who didn’t understand what he meant],” referring to Modi’s promise of “acche din”, which she says applies only to him. “Pehleich ke dinaa aa gaye toh bhi achha hai [If the old days come only it will be better],” she says. If for some reason you haven’t noticed this so far, you will now realise she’s speaking in Deccani Urdu. Initially you pay attention to how she adds –ich and –aan at the end of certain words, as though this is as important as the news itself. Din becomes dinaa, dal becomes dalaa— it’s like standing in the middle of chudi bazaar in Hyderabad’s Charminar and hearing stray bits of conversation from everyone milling around.I first saw Real Telangana TV when a colleague showed it to me. None of my friends in Hyderabad seem to have heard of it either, even though it was started in 2011 by the Ruby Group of Companies, which also owns Ruby Channel.Real Telangana TV’s existence mocks other media organisations’ diversity policies. A lot of the people who work there are proudly “pakka” local Hyderabadi people with no background in journalism. “Many of them would run autos, or sell things locally, and now they help us write the script for the videos because they know the language and the accents well,” said Mohammed Manzoor, Real Telangana TV’s manager. Where else on Indian news do we see women in hijabs as anchors, or news shows created by working class writers?Manzoor gave me examples of what he meant by knowing the language well, speaking in rapid Deccani about a political leader. Real Telangana TV wants to make news engaging for people who don’t know Urdu, or who might not know the names of political leaders, but deserve to know the news. This means one wonderful thing: Real Telangana is able to reach the audience they want, simply because those who write the news belong to the same class as the audience.

Source: Sick of TV News Channels and Shouty Newsreaders? Prepare to be Mesmerised by Real Telangana TV – The Ladies FingerThe Ladies Finger

July’s Strong Job Numbers Still Don’t Match Trump’s Claims | FiveThirtyEight

Donald Trump is running for president on the idea that the American economy is stuck in a deep hole, and only he can get it out. The job-market data keeps saying otherwise.U.S. employers added 255,000 jobs in July — significantly more than economists had forecast — and job growth in May and June was stronger than initially reported, the Bureau of Labor Statistics said Friday. Wage growth accelerated, drawing more Americans back into the job market, and the unemployment rate held steady at 4.9 percent.Last month, I wrote that the economy will probably look pretty good on Election Day. Friday’s report makes that a near-certainty, at least as far as the job market is concerned. With just three more reports to go until voters head to the polls — October’s jobs numbers will be released four days before Election Day — it would require a historic collapse for the unemployment rate to be much above 5 percent in November.

Source: July’s Strong Job Numbers Still Don’t Match Trump’s Claims | FiveThirtyEight

A Brush with Earl, Blaming “He” and Praying Away Crime: Jamaica, Tuesday, August 2, 2016 — Petchary’s Blog

It’s August already, and I am writing this accompanied by quick bursts of rainfall and breeze (and a cup of Darjeeling tea). Tropical Storm Earl (which took a while to be named) is passing just to the south of us and getting up some steam for Honduras and Mexico. It has not inconvenienced too many […]

via A Brush with Earl, Blaming “He” and Praying Away Crime: Jamaica, Tuesday, August 2, 2016 — Petchary’s Blog