> The only case where this would never happen is if there is no scripting language. eg your web application is compiled (Which is the case with C/C++/Rust/Java) because there is no functionality within the application to execute something outside it's process.

That makes no sense at all. Compiled applications can have RCE bugs, it changes nothing. Well, maybe you need to make a few more requests, as you usually don't know the exact software & hardware platform of server, and have to try different shellcodes in payload. Even then, in most cases you will only need 2: linux/glibc/x86_64 and linux/glibc/arm. MUSL is rare and nobody uses Windows on servers, maybe with the exception of MS SqlServer, Outlook and AD domain controllers. BSD variants are also rare nowadays.

Does "anything" include C? Those bugs would be easier to avoid if PHP itself was written in something (more) memory safe.

Fix is in commit 01a40e8 and it is quite large, they had to fix that OOM failure everywhere, not only in that file upload handling, that was already found to be exploitable.

Launching car into space was silly marketing stunt. Performing that jump during the reveal, once, would be one too. Announcing that those gas thrusters are going to be part of mass-produced car strait up hurts my brain. They really should have keept Musk away from designing cars after cybertrunk.

There are reports that modified Ledger devices were found in Media Markt, popular German electronics retailer. I can't stress how terrifying the entire situation is - it is now cheap enough to modify&bug entire line of devices with internal phones, just in case it will maybe allow to steal money. The next target will be bugged USB/network cables. I mean they *already* exist, but were too expensive to be found in the wild, just used by red teams/pentesters.

You don't have to be so subtle, everything is botted to oblivion. In recent suply-chain attack, a fake version of mathjs on got 6 million downloads in 2 days - without any real package that depended on it. And as soon as ad networks allowed to pay for number of installs people started to work on gaming those numbers.

> Elasticsearch cluster

If I remember correctly the default setup finally started requiring password like 5 years ago. And somehow security researcher still find ES databases serving data to unauthenticated users. And it is always gigabytes.
If anyone else wants easy setup in their projects - generate random password at first startup, and show it once, in console. Don't believe admins will come with good password during evaluation, and you can be sure they won't change it when moving to production.

I am appealed by quality of reporting in this and few previous GN videos. They are covering important topics in such tabloid fashion it might make everyone else invested in topic to look bad by association.

uBlock works fine on mobile Firefox. And it also has option to keep playing in background, that I found official YouTube to struggle with, even with Premium subscription (which I would like to remind everyone they blocked on free accounts on purpose, it worked fine before they decided to funnel people into paid tier at any cost).

> potentially enabling instantaneous exchanges of information across vast distances

This is (was?) a portal for nerds, such bullshit reporting should not have place here.

Most people are pessimistic about this ban and for good reasons. GDPR introduced very high (% of revenue) fines for companies that don't keep consumer data safe. And yet it doesn't matter when no one cares about enforcing them. We keep hearing about leaks all the time, but id anyone heard about company that got under as a consequence?

Thank you, just wanted to check same thing. Even Gini coefficient is insufficient to show how lopsided distribution is on those "content creator" platforms.

> lack of interest on the consumer markets

You missed the memo. NVidia doesn't have consumer segment anymore, there are only data centers and "edge computing".

I was happy with local delivery services but damn COVID changed that. Is there still any (global) company that will require a code/pin, protecting the package from being handled to random person that happens to be close enough to target address?

So Cargo Trams? What a coincidence, I think developer just added them to Mashinky.