teleren/devto huggingface dataset:
Attackers exploit 0day vulnerability that gives full control of Android phones
Tags: mobile, security, android, infosec
Published: 2019-10-04 10:44:39

---
title: "Attackers exploit 0day vulnerability that gives full control of Android phones"
cover_image: "https://thepracticaldev.s3.amazonaws.com/i/xig7e20hwimgg97i5195.jpg"
published: true
description: "Zero day vulnerable phones include 4 Pixel models, devices from Samsung, Motorola, and others."
tags: "mobile,security,android,infosec"
---

In [this article](https://arstechnica.com/information-technology/2019/10/attackers-exploit-0day-vulnerability-that-gives-full-control-of-android-phones/) we can read about a zero day exploit with high severity impact, affecting at least 18 different Android phones, including Pixel and Samsung models.

# TLDR

Article main points:

> “This issue is rated as high severity on Android and by itself requires installation of a malicious application for potential exploitation,” Tim Willis, another Project Zero member, wrote, citing Android team members. “Any other vectors, such as via web browser, require chaining with an additional exploit.”

> Stone said that information she received from Google’s Threat Analysis Group indicated the exploit was “allegedly being used or sold by the NSO Group,” a developer of exploits it sells to various government entities. Israel-based NSO gained widespread attention with the discoveries in 2016 and 2017 of an advanced piece of mobile spyware it developed called Pegasus. It jailbreaks or roots both iOS and Android phones so it can trawl through private messages, activate the microphone and camera, and collect all kinds of other sensitive information.

> The use after free vulnerability originally appeared in the Linux kernel and was patched in early 2018 in version 4.14, without the benefit of a tracking CVE. That fix was incorporated into versions 3.18, 4.4, and 4.9 of the Android kernel. For reasons that weren’t explained in the post, the patches never made their way into Android security updates. That would explain why earlier Pixel models are vulnerable and later ones are not. The flaw is now tracked as CVE-2019-2215.

# Don't panic

Quoting the again the article:

> While the vulnerability reported on Thursday is serious, vulnerable Android users shouldn’t panic. The chances of being exploited by attacks as expensive and targeted as the one described by Project Zero are extremely slim. Just the same, it may make sense to hold off installing non-essential apps and to use a non-Chrome browser until after the patch is installed.

# Let's Discuss

If you are using a Google phone you will get a quick security update, but other manufacturers will take much more time.

Do you ever take in consideration how much time it will take to receive security updates on the phone you are about to buy?
Dealing with anxiety, absent-mindedness, ineffectiveness as a developer
Tags: mentalhealth, productivity, help
Published: 2019-10-04 10:40:40

I'm a developer and I need some help with being the best I can be mentally, but I'm not sure where to get it.

By "mentally" what I mean is I feel anxious, absent minded or otherwise less effective than I feel like I can be (and have been in the past). 

I'm generally a happy person, confident in my technical abilities but I feel really held back by my mental state sometimes. It's so hard to talk about mental health, because so much of it is qualitative and everyone's experience is different.

I'm not sure where to find help. Ideas I've had are going into therapy or finding some sort of mentor/sounding board. I'm looking for suggestions, because I thought there must be people out there in the community who have had similar experiences.

If anyone out there has any thoughts/recommendations/advice then I'd really appreciate it!
Looking for clever examples of complex crm/admin panel UI
Tags: webdev, ux, design
Published: 2019-10-04 10:08:22

Looking for ideas to improve complex crm / admin panel UI. There are lots of relatively simple bootstrap-based examples and templates around, but struggling to find anything more "industrial" look and feel.

I'm building a custom, quite complex CRM-like web based software using laravel/js, and sometimes there's a need for loads of tabs, big editable datatables with additional modular windows and forms in one place.

Any ideas for websites, galleries or other online resources for complex control panels? One of the close examples is https://www.lightningdesignsystem.com/ , but  I'm sure there should be more "hardcore" examples and design systems around.

Thanks!
Вызывают интерес PWA и их прогресс
Tags: javascript, программирование, кодинг
Published: 2019-10-04 21:04:02

---
title: Вызывают интерес PWA и их прогресс
published: true
date: 2019-10-04 10:07:02 UTC
tags: JavaScript,Программирование,Кодинг
canonical_url: https://wanago.io/2019/09/09/installing-progressive-web-app-web-app-manifest/
---

Прогрессивные веб-приложения (PWA) - не просто сайты, адаптированные для мобильных устройств. Они могут быть интегрированы с Google Play и Apple App Store, а по функционалу сопоставимы с программам, написанными на Swift и Kotlin. [Эта статья](https://wanago.io/2019/09/09/installing-progressive-web-app-web-app-manifest/) поможет сделать первые шаги к пониманию концепции PWA.
Innovate Machine Learning and AI - learn how to kick start your journey
Tags: deepracer, machinelearning, aws
Published: 2019-10-04 09:54:18

On October 17th we have a free, online event covering several tracks on Machine Learning. Whether you are a complete beginner or seasoned data scientist, we have gentle introductions to deep dives.

What I am most excited about however, is that we will have an AWS DeepRacer racing challenge. You will learn how to create your first reinforcement learning model that will race a virtual car, with prizes for the fastest times.
Hacktoberfest2019
Tags: hacktoberfest, github, opensource, webdev
Published: 2019-10-04 09:30:00

🤩 Hacktoberfest2019 is here with a chance to contribute to open source and win an exclusive t-shirt and goodies🎁🎁.
.
🎉Whether you're a beginner or an intermediate level Programmer, developer or designer...Doesn't matter, your first contribution is on us. 😃👍
.
👉Visit the link below and follow along and step closer to your rewards. Contributions begin on 1st October 2019.
.
Happy Hacktober, keep hacking!!!
.
🌍 http://hacktoberfest.netlify.com
.
Also, 🌟 star our GitHub repository:
.
https://github.com/Open-Source-Contributors-JSS/Hacktoberfest2019/
The Boy Scout rule
Tags: softwaredevelopment, programming, cleancode, unittesting
Published: 2019-10-04 09:19:32

---
title: The Boy Scout rule
published: true
description: 
tags: software development, programming, clean code, unit testing
---

You are in front of that class and you start sweating. A switch which is not needed, unused legacy code, several blocks of code repeated, a condition based on a variable which never changes the value… and other things that usually appear in your worst nightmares. Probably sound familiar to you?

I’ve been in this situation recently. The code was not only mine, but even it was from a different project I’m working in. I’m collaborating with another project and I got to add some new improvements and features to an already existing one.

And I was there, in front of my computer thinking *“Oh, boy, this is a mess. I don’t know where to start from”. “Should I refactor this code? Made it more readable and maintainable?”*, I wondered. This is not even my project. How is the team responsible for this code going to take if I change completely the code?

And then I remembered the **Boy Scout rule**.

Apparently (and I say apparently because I’ve never been one), Boy Scouts have one rule which is that every time they go camping or in a group trip they need to leave the place tidier and cleaner than they encountered it (something not so difficult seeing how disrespectful and dirty people are)

And so for the code. For us developers, the Boy Scout rule means that you must leave the code you better than you found it. Probably a bit cleaner, probably with more tests, probably with better naming,…

Bad code sometimes is inevitable. We code a pretty decent first version of the code but then it comes issues fixed, patches, new features not considered in the first design, different developers with different styles,… and that decent code someone implemented in the first version becomes something difficult to read and maintain… and you wanna cry.

When it’s too late we need to allocate some time of the project to remove some Technical Debt. That’s when the Product Owner is not happy, and the Business Manager is not happy, and… only developers are happy. Because technical debt doesn’t add direct value to the product.

That’s when it comes the Boy Scout rule. If we apply it every time we have to add new code to an already existing one we contribute to a better and cleaner code. Probably to allocate less time in technical debt, and most probably to happier Product Owners.

If everyone is happier and the code is more maintainable and readable, why not apply it more often?

By the way, I refactored the code and the other team thanked me for improving it. They knew this code needed a huge refactor.
Developers wanted!
Tags: react, javascript, typescript
Published: 2019-10-04 09:09:03

Hi All!


Keen to get in touch with any React Developers who are looking for a new contract postion based in London!

Any developers who have experience with #react #storybook i would love to have a chat!

Look forward to hearing from you all


stephen.adupoku@exploreltd.com
Stephen @ Explore
Loading Maven dependencies from GitHub
Tags: github, jitpack, mavenrepository
Published: 2021-05-24 13:00:08

---
title: Loading Maven dependencies from GitHub
published: true
date: 2019-10-04 09:08:57 UTC
tags: github,jitpack,mavenrepository
canonical_url: https://medium.com/tech-epic/loading-maven-dependencies-from-github-45cdd004bcd6
---

![](https://cdn-images-1.medium.com/max/1024/0*HoMkb5M0qinYGc5R)

#### jitpack.io — github.com

Now you can import a Java library from a GitHub repo using [JitPack](https://jitpack.io/).   
In your pom.xml:

**First Add repository:**

```
<repository>
    <id>jitpack.io</id>
    <url>https://jitpack.io</url>
</repository>
```

**Second Add dependency:**

```
<dependency>
    <groupId>com.github.User</groupId>
    <artifactId>Repo name</artifactId>
    <version>Release tag</version>
</dependency>
```

**Note : for release tag**

Before we can use release tag as a version in dependency, we have to create release tag first.

```
$ git tag -a 0.0.1-SNAPSHOT -m "commit message"
$ git push origin --tag
```

**READ MORE ** : [https://git-scm.com/book/en/v2/Git-Basics-Tagging](https://git-scm.com/book/en/v2/Git-Basics-Tagging)

Example : I have a Repository : [https://github.com/sovannarithcheav/artifact-demo.git,](https://github.com/sovannarithcheav/artifact-demo.git,) So the dependency should look like this :

```
<dependency>
 <groupId>com.github.sovannarithcheav</groupId>
 <artifactId>artifact-demo</artifactId>
 <version>0.0.1-SNAPSHOT</version>
</dependency>
```

**It’s easy, right? 😜**

**READ MORE :** [loading-maven-dependencies-from-github](https://stackoverflow.com/questions/20161602/loading-maven-dependencies-from-github)

* * *
Learn to Program 04: Anatomy of a Program
Tags: learning, beginners
Published: 2019-10-04 08:46:23

[Rust Hello World Example](https://rusthelloworld.pieterjoubert.repl.run)

Replace the text inside the double quotes where my name _Pieter_ was with your name. Assuming your name is _Name_ the code will look as follows:

```rust
fn main() {
  println!("Hello Name!");
 }
```
---

So, what is actually happening in the small program we wrote above?

We've written some _instructions_ (commonly known as _code_) that tells the computer to perform certain actions. There's an interesting idea hidden in the use of the word _code_ to describe the instructions that we provide to the computer.

A _code_, more commonly, is some kind of encrypted message that needs to be decrypted or deciphered. This rough definition gives us the following useful insights into the properties any programming code we write will have:

* The code is not in plain language (known as a _Natural Language_). Instead it's written in a different language, often referred to as a _Formal Language_. _Formal_ also refers to the fact that there are specific rules that this language needs to follow.
* The code needs to be _decrypted_ by something or someone. Depending on the language you are using this will either be an _interpreter_ or a _compiler_, a piece of software that _translates_ your code into something the computer can understand.
* There is an intended _message_ or _purpose_ to our code. This is what we, as the programmer, are trying to achieve with our code. It is important to understand what this _purpose_ is, so that we can determine whether the computer is executing our code correctly.

Why are these properties of code important? Well they guide us in terms of what we need to do to write working and successful code. Each of these properties loosely fits into a basic coding _principle_ or _practise_:

* We need to understand the _rules_ of the language we are using. (We don't need to memorise them fully but we need to understand them, and understand them well enough to research any _new_ rules we come across).
* We need to setup our _interpreter_ or _compiler_ (and the associated tools) in such a way that maximises our efficiency in writing code.
* We need to follow some kind of structured approach to _determining_, _documenting_ and _sharing_ the purpose of our code.

So, for Task 2: Let's look at what happens when we do **not** follow the rules of the language we are using.

1. Create a new _C#_ repl.it
2. Copy over the code below

```rust
using System;

class MainClass {
  public static void Main (string[] args) {
    Console.WriteLine ("Hello World")
  }
}
```
3. Carefully look at the results of running this code.

---

Link to [Main Content Post](https://dev.to/pieterjoubert/learning-to-program-02-the-what-4n2g). If you are confused about this post start here.
Some full stack knowledge for frontend developers part 1
Tags: backend
Published: 2019-10-04 08:41:54

Hi :)

In this post I want to show you commands which I use to work with my server. My knowledge about server side is mostly based on course created by Jem Young on FrontEndMasters platform. I strongly recommend his courses.

This is part 1

```bash
$ sudo apt-get install nginx #install nginx 
$ sudo service nginx start #start nginx
$ sudo cat /etc/nginx/sites-available/default #display nginx default configuration using
$ sudo less /etc/nginx/sites-available/default #the same as above using less
$ nslookup #tell where domain is pointed
$ sudo mkdir -p /var/www #make a web directory if it doesn't already exists
$ sudo chown -R $USER:$USER /var/www #change ownership
#of the web directory to the current user
$ cd /var/www #go to this directory
$ mkdir tmp2 #make directory with a name tmp2
$ rmdir tmp2 #remove directory with a name tmp2
$ git clone #clone repository from git
$ sudo ln -s /usr/bin/package1 /usr/bin/pckg  #make a symbolic link - # pckg is symbolic link for package1. It's like an shortcut in windows'
```
Raspberry-Pi-Headless-Setup-via-Network-Manager
Tags: raspberrypi, wifi, wificonfiguration, network
Published: 2019-10-03 14:08:10

# WiFi Configuration on RPi

## Installation

Update your sources.

   ```
   $ sudo apt update & sudo apt upgrade
   ```

Install NetworkManager,This will install a number of other packages as well.
   ```
   $ sudo apt install network-manager
   ```

Remove these packages as suggested here:
   ```
   ### https://raspberrypi.stackexchange.com/a/73816
   ### Otherwise the wifi device appears as unavailable to nmcli.

   $ sudo apt purge openresolv dhcpcd5
   ```

Reboot, sudo reboot now.
   ```
   $ sudo reboot
   ```

Check network connection status and verify that the inet addr is empty.
   ```
   $ ifconfig wlan0
   ```

## Usage:

Start using nmcli by scanning the manual, man nmcli.
```
$ nmcli dev help.
```

Displays a table. Notice that wlan0 is disconnected
```
$ nmcli dev status
```

Displays a table of available wifi access points

```
$ nmcli dev wifi
```

Connect to a WiFi network.

```
$ nmcli device wifi connect <SSID> password <Secrete>
```

Connects may be added using nmcli, for example nmcli con add con-name HOMEOFFICE ifname wlan0 type wifi ssid MYSSID, but I prefer to use nmtui.

Provides a text user interface that allows easy creation of wifi connection.

```
$ sudo nmtui
```

Edit a connection. Add  wifi.
Give your connection a name and set the fields needed for your access point.
If you provided all the settings correctly and set the connection to connect automatically, it might already have connected. Check with ifconfig wlan0.

Notice the changed out put from nmcli dev status and nmcli dev wifi.

Show active connections with nmcli con show -a.

Take down a connection with sudo nmcli con down connection_name and bring it back up with sudo nmcli con up connection_name.\

## You can use Raspi-config at any time. To start it, enter the following at the Linux command line.

```
sudo raspi-config
```
AsmBB v2.7 has been released. Now encrypted databases are supported.
Tags: asm, asmbb, webdev
Published: 2019-10-04 08:01:22

[Has been released](https://board.asm32.info/asmbb-v2-7-has-been-officially-released.287/) the next, [v2.7](https://asm32.info/fossil/repo/asmbb/info/b1b34acbf71dada0) of the assembly language written forum engine AsmBB.

The major new feature (besides several minor bug fixes) is the support for fully encrypted database. 

The encryption is provided by the SQLite extension [SQLeet](https://github.com/resilar/sqleet/).

The implemented encryption seriously increases the security and privacy level of AsmBB. Now even leaking of the database or serious breach in the server will not compromise the security of the forum database.

The encryption is of course optional and the implementation is fully backward compatible with the existing non-encrypted databases.


P.S. The project still is looking for the contributors, especially about the design and the front-end issues. 

Unfortunately, the most of the complaints of the users is about the forum "ugliness". :D
Introducing DocFetcher: the document retrieving bot!

Published: 2019-10-04 07:27:42

DocFetcher is a bot that retrieves programming language documentation information. Right now, DocFetcher only works with Java 7, 8, and 11 To use DocFetcher simply leave a comment like this:

!DocFetcher <java7or8or11> <class>

The bot will respond with information about the Integer class and a link to the Java 7 documentation about the Integer class. To call the other version just do java7, java8, or java11

In the future, DocFetcher will work with other languages(c++, python, swift, JavaScript) hopefully starting with python. The bot is still in development, for questions and suggestions, please send a message.
Extract Images from PDF Documents using C# .NET
Tags: dotnet, csharp, webdev
Published: 2019-10-04 07:26:24

**Portable Document Format** (PDF) is a popular and widely used document format developed by Adobe. The PDF documents can contain a variety of content including formatted text, images, annotations, form fields, etc. Parsing PDF document programmatically is a popular use case and there are multiple ways of extracting the text. However, extracting images from a PDF document is a complex task. This article demonstrates how easily you can **extract images** from the **PDF** documents **programmatically** in **C#** using [GroupDocs.Parser for .NET](https://products.groupdocs.com/parser) API. So let’s begin.

### Steps to extract images from a PDF document

**1.** Create a new project.

**2. **Download [GroupDocs.Parser for .NET](https://downloads.groupdocs.com/parser/net) or install it using [NuGet](https://www.nuget.org/packages/GroupDocs.Parser).

**3.** Add the following namespaces.

```csharp
using GroupDocs.Parser;
using GroupDocs.Parser.Data;
using System.Drawing;
using System.Drawing.Imaging;
```

**4.** Load the PDF document.

```csharp
// Create an instance of Parser class
using (Parser parser = new Parser("sample.pdf"))
{
  // you code goes here.
}
```

**5.** Extract images from the document.

```csharp
// Extract images
IEnumerable<PageImageArea> images = parser.GetImages();
// Check if images extraction is supported
if (images == null)
{
  Console.WriteLine("Images extraction isn't supported");
  return;
}
```

**6.** Access each image from the collection and save it.

```csharp
// Iterate over images
foreach (PageImageArea image in images)
{
  // Save images
  Image.FromStream(image.GetImageStream()).Save(string.Format("{0}.Jpeg", counter++), ImageFormat.Jpeg);                    
}
```

### Complete code

```csharp
// Create an instance of Parser class
using (Parser parser = new Parser("C:\\candy.pdf"))
{
	// Extract images
	IEnumerable<PageImageArea> images = parser.GetImages();
	// Check if image extraction is supported
	if (images == null)
	{
		Console.WriteLine("Images extraction isn't supported");
		return;
	}
	
	int counter = 1;
	// Iterate over images
	foreach (PageImageArea image in images)
	{
		// Save each image
		Image.FromStream(image.GetImageStream()).Save(string.Format("{0}.Jpeg", counter++), ImageFormat.Jpeg);                    
	}
}
```

### Results

**PDF Document**
![Alt Text](https://thepracticaldev.s3.amazonaws.com/i/d0sdtadpcyvio4phf74d.png)
**Extracted Images**
![Alt Text](https://thepracticaldev.s3.amazonaws.com/i/c0ft95kander8hkcscfc.png)

Cheers!

### See Also
* [Work with Images in PDF with C#](https://blog.aspose.com/2021/01/25/Work-with-Images-in-PDF-in-Csharp)
* [Add Watermark to Excel in Python](https://blog.aspose.com/2021/05/07/add-watermark-to-excel-worksheets-in-python/ "Permalink to ")
* [Add Comments in Excel using Python](https://blog.aspose.com/2021/06/15/add-comments-in-excel-worksheets-using-python/ "Permalink to ")