AMP Compatibility

Are there plans for Pym.js compatibility with AMPhtml in some fashion?
amp-iframe uses postMessage-based communications to send signals from the child page to the parent page, so if the pymChild could detect that it was loaded in an amp-iframe element instead of a usual pymParent element, and then send the appropriate messages, that would be nice.

I don't have any plans for it right now, but would be happy to take a look at pull requests for it.
As far as I'm aware, the AMP iframe implementation doesn't really send any identifiable information into the child, it just listens for messages coming from inside the child. This might make it hard to detect what kind of host is including us.

As far as I'm aware, the AMP iframe implementation doesn't really send any identifiable information into the child, it just listens for messages coming from inside the child. This might make it hard to detect what kind of host is including us.

Would it matter if the child just went ahead and sent the AMP embed-size messages in addition to the existing ones? Is detecting an AMP environment really necessary?

Technically, no, you could just send the messages and they should get ignored by Pym hosts. That's what Sidechain does, and anyone who's interested in AMP/Pym cross-compatibility should probably use it instead.

Alternatively, if the AMP project actually cares about working with the community, perhaps they should implement compatibility with legacy Pym messages. There are a lot of static graphics generated with tools like our Dailygraphics Rig that are not going to be upgraded to a new Pym or Sidechain, because it's not reasonable to dig all of them up and republish them. Having AMP support the news industry's de-facto embedding standard would be a real sign of goodwill.

Thanks for the suggestion. Good idea. I'll propose it.

Things are coming full circle: https://github.com/ampproject/amphtml/issues/495

Proposed: https://github.com/ampproject/amphtml/issues/22714

Thank you! I'll be curious to see how that pans out. NPR does not have any intentions at this time of publishing an AMP-compatible site, and there are significant legacy barriers to doing so with our current CMS, but we do know that some of our member stations using WordPress/custom systems are looking into it and would appreciate the support.
Yes, this is not my first time around this particular AMP protocol. In fact, if you all are ever interested in having a conversation about how news sites publish content, particularly on the dataviz/interactive side of things, feel free to reach out. One of the things that was distressing about the project when it launched was that it didn't seem to have consulted with any newsroom developers--hence my filing a bug back then about the surprising omission of support for responsive iframe libraries like Pym, responsive-frame, and Sidechain. That said, I appreciated the team's quick response (then and now).

@thomaswilburn no, thank you! Could you subscribe to that issue to answer any technical details that pop up? I tried to answer one based on my limited Pym.js experience.

we do know that some of our member stations using WordPress/custom systems are looking into it and would appreciate the support

We'd be very happy to support NPR in exploring AMP and WordPress. Feel free to make an introduction.


FR: Different settings per view

Hi @mayker as always great work. The new custom header is a lot more stable than the old one.
I do have a request though. Would it be possible to have different configs per view? Say on the frontpage (view 0) we can put a marquee, but on the first view (view 1) have something else? Same applies to buttons for example so I can show a menu button on the frontpage and a home button on the other views?
Also would it be possible to make buttons do a service call instead of navigation? (Srry didn’t see if this is already possible).
Anyways a big thanks once again. And a great 2020 to you!
Jimz011

Would it be possible to have different configs per view?
I'm looking into this, trying to find the best way to handle it without glitches.
Also would it be possible to make buttons do a service call instead of navigation?
I don't think this is something that I would add, unfortunately.

No problem, it was just a question. I can make separate configs using exceptions But it seems a bit hacky though. But thanks for your reply.
Last question, If I split the header I can have text in the top and buttons below. Would it be possible to have text and a few buttons? Like in the screenshot? This would be in the header text area. As I want a separate footer with other buttons.

It's possible with a template in the header text, some creative html/css to create your own buttons, and probably a couple of divs with one justified left (header text) and one right (buttons). All I can say is check out the existing templates on the showcase thread as a start.


_.has({}, []) should return true

_.has({}, []) and _.has({}) should technically return true, because the object does have nothing?

_.has doesn't take an array or undefined as the second argument so returning false seems correct

I think you're misunderstanding the use of has. It's only really used to check if the key (a string) exists in the object. An array isn't an empty value, and neither is Undefined.

Thanks all.
I create a hasOnly mixin to return true if object has only the provided keys
_.mixin({
  hasOnly: function(obj, keys){
    if(_.difference(_.keys(obj), keys) == 0) return true
    return false
  },
})

So when you run console.log(_.hasOnly({}, [])) you are kind of expecting true I realize it's not the same for _.has. At the time of writing this issue I was using _.has for a more complicated version of this mixin.


Is toast styling possible?

If not then this should be added as a feature request.

this is a good idea

👍


Check these projects on Sourceforge

[ ] http://libsdl-android.sourceforge.net/
[ ] http://pyopengl.sourceforge.net/
[ ] http://snowstorm.sourceforge.net/cgi-bin/site.cgi
[ ] http://www.sourceforge.net/projects/ika
[ ] http://www.sourceforge.net/projects/lgames (all of them)
[x] http://www.sourceforge.net/projects/stratagus
[ ] https://sourceforge.net/projects/dices/
[ ] https://sourceforge.net/projects/dsa-hl.berlios/
[ ] https://sourceforge.net/projects/lgames/files/barrage/
[ ] https://sourceforge.net/projects/moeng/
[ ] https://sourceforge.net/projects/openzelda/
[ ] https://sourceforge.net/projects/palomino-sim/ (http://www.jimbrooks.org/archive/software/palomino/)
[ ] https://sourceforge.net/projects/pipmak/
[ ] https://sourceforge.net/projects/qua/
[ ] https://sourceforge.net/projects/quest/
[ ] https://sourceforge.net/projects/roguelike/ (collection of other rogue-like sources
https://sourceforge.net/projects/roguelike/files/, https://web.archive.org/web/20180418191859/http://rogue.rogueforge.net/)
[ ] https://sourceforge.net/projects/rpgstudio/
[ ] https://sourceforge.net/projects/rpgtoolkit/
[ ] https://sourceforge.net/projects/rptools.berlios/
[ ] https://sourceforge.net/projects/solarconflict/
[ ] https://sourceforge.net/projects/spaxehilk/
[ ] https://sourceforge.net/projects/sphere/
[ ] https://sourceforge.net/projects/tbswwengine/
[ ] https://sourceforge.net/projects/terratenebrae/
[ ] https://sourceforge.net/projects/tyrant/
[ ] https://sourceforge.net/projects/untitled-rpg/
[ ] https://sourceforge.net/projects/wme/
[ ] https://sourceforge.net/projects/wowrl/
[ ] https://sourceforge.net/projects/wwiig/
[ ] https://sourceforge.net/projects/ztab/
[ ] https://web.archive.org/web/20150526225753/http://sourceforge.net/projects/mameosx/

http://www.sourceforge.net/projects/stratagus

It is moved to github
Yet, it has entry in the OSGL (with new repository in github) https://trilarion.github.io/opensourcegames/frameworks/game engine.html#stratagus

@mdtrooper Thanks. I added http://www.sourceforge.net/projects/stratagus as former address to the Stratagus entry and marked that url here as checked. If you want you can just continue with other links.

https://sourceforge.net/projects/solarconflict/ is GPL2. It is:

a game similar to Ogame or other PHP games.
in PHP4 or PHP5.
dead since 2006.
not in one code repository. I has only a zip file uploaded.

And I could not run it under a lamp docker container, I don't know if it runs or not.


Update Python's installation prefix

Changes

Resolves recent issues with building Flatpaks because of changes to PyGObject's build process

PyGObject seems to have updated from setup.py to meson-python
When meson-python builds PyGObject, it adds the include directory that was used to build Python but Standalone Python is reporting that's /install....in actuality, we've installed Python in to /app

So, this updates the buildtime installation prefix of /install to /app
Additionally, the cp -r commands are replaced with cp --archive to avoid changing any of the metadata or filesystem layout of Python or the app when they are copied in to the Flatpak

Notes

This issue of buildtime absolute paths is called out in Standalone Python's docs: https://gregoryszorc.com/docs/python-build-standalone/main/quirks.html#references-to-build-time-paths
I only updated the prefix in the bin/python3-config and lib/pkgconfig/python3.pc files
There's also plenty to update in the _sysconfigdata_ file....but it's less straightforward; just a naive sed for /install will catch other values.

I suppose we could target most of them, though, after empirically reviewing the files:

 '/install/ ->  '/app/
=/install -> =/app
 /install ->  /app

A different approach altogether, perhaps, would be to actually install Python to /install...

PR Checklist:

[X] All new features have been tested
[X] All new features have been documented
[X] I have read the CONTRIBUTING.md file
[X] I will abide by the code of conduct

AppImage, technically, has the same issue....although, interestingly, it manages to build PyGObject anyway.
Docker|   [1/41] Compiling C object gi/_gi.cpython-312-x86_64-linux-gnu.so.p/pyginterface.c.o
Docker|   cc1: warning: /install/include/python3.12: No such file or directory [-Wmissing-include-dirs]
Docker|   [2/41] Compiling C object gi/_gi.cpython-312-x86_64-linux-gnu.so.p/pygi-source.c.o
Docker|   cc1: warning: /install/include/python3.12: No such file or directory [-Wmissing-include-dirs]
Docker|   [3/41] Compiling C object gi/_gi.cpython-312-x86_64-linux-gnu.so.p/pygspawn.c.o
Docker|   cc1: warning: /install/include/python3.12: No such file or directory [-Wmissing-include-dirs]
Docker|   [4/41] Compiling C object gi/_gi.cpython-312-x86_64-linux-gnu.so.p/pygpointer.c.o
Docker|   cc1: warning: /install/include/python3.12: No such file or directory [-Wmissing-include-dirs]
Docker|   [5/41] Compiling C object gi/_gi.cpython-312-x86_64-linux-gnu.so.p/pygi-resulttuple.c.o
Docker|   cc1: warning: /install/include/python3.12: No such file or directory [-Wmissing-include-dirs]
Docker|   [6/41] Compiling C object gi/_gi.cpython-312-x86_64-linux-gnu.so.p/pygi-foreign.c.o
Docker|   cc1: warning: /install/include/python3.12: No such file or directory [-Wmissing-include-dirs]
Docker|   [7/41] Compiling C object gi/_gi.cpython-312-x86_64-linux-gnu.so.p/pygboxed.c.o
Docker|   cc1: warning: /install/include/python3.12: No such file or directory [-Wmissing-include-dirs]

This kinda makes me feel like the appropriate place to do this is in Briefcase after it unpacks the Standalone Python; that way, anything using it will get these patches.
Either way, I think we should at least merge the backport of this.
Note: an easy way to test AppImage with newer versions of PyGObject is to use fedora:36 or similar instead of the manylinux image.

Regarding AppImage - it's using a pinned version of PyGObject, so it won't be picking up the most recent meson-based build; I'm guessing we just haven't noticed the warnings before in the flood of appimage output.

Those warnings only show up when you add -vv to the call to pip in Briefcase; otherwise, pip suppresses the whole package build.
Since this could affect any package for which pip builds from an sdist or source, I'll try to figure out a longer term solution. Do you know if Python has standardized this layout? In a PEP maybe? I'm also concerned about making Briefcase too dependent on the exact support package and template being used.....but not too worried I guess...

I'm not completely sure which layout are referring to. The location of bin/include/lib paths is something you extract from sysconfigdata; it's platform dependent, but on Linux, it's derived from the prefix that was used to configure the Python build (i.e., with ./configure --prefix)

I mean the location of these config files relative to the base of the Python install; i.e. bin/python3-config, lib/pkgconfig/python3.pc, ib/python3.10/_sysconfigdata__linux_x86_64-linux-gnu.py and so on.
Just curious if this structure is standardized...or perhaps more convention for CPython?

They're sort of halfway between the two. There's no formal PEP that I'm aware of, but the locations are so predictable that they effectively can't be changed. It's sort of a "well that's just how python works" levels of standardisation. There's a bit of variation for Windows, but on any POSIX, once you know the installation prefix, the config binary and pkgconfig file will always be where you've described them; and the std library will always be in lib/python3.X. The suffix of the sysconfigdata file depends on the specific platform you're compiling for, but any lib/python3.X/_sysconfigdata_*.py file will have the same basic structure (an importable dictionary with keys derived from what was used to configure the build environment)


Fix realtime bugs

See commit messages for details. Most of these are patches for code accessing uninitialized memory.

Tests touching the realtime framework are high on our wishlist.

Thanks @PaulWagener


Improve event last OK

Update check (and event) last OK when storing latest results. This PR uses a separate Redis key/value for last OK, instead of storing it within a current event (if exists).
Closes https://github.com/sensu/sensu/issues/1693

Will last_ok still be returned with events via the API?

@amdprophet yes, as its is still stored within current events (just no longer used as a record).


Privileged container do not get recogniced as such (

Describe the bug
When I start a privileged container the "Launch Privileged Container" default rule does not get triggered. Because of this, I tried to use a modified version of this rule in order to see, if Falco is even able to detect that this example container is started as a privileged one:
- macro: container_started
  condition: ((evt.type = container) or (spawned_process and proc.vpid=1))

- rule: Launch Privileged Container
  desc: Detect the initial process started in a privileged container. Exceptions are made for known trusted images.
  condition: >
    container_started and container
  output: Privileged container started (priv=%container.privileged user=%user.name user_loginuid=%user.loginuid command=%proc.cmdline %container.info image=%container.image.repository:%container.image.tag)
  priority: INFO
  tags: [container, cis, mitre_privilege_escalation, mitre_lateral_movement]

It's not (see "container.privileged":false):
{"priority":"Notice","rule":"Launch Privileged Container","time":"2020-11-04T11:50:49.740339716Z", "output_fields": {"container.id":"f4318ef0227c","container.image.repository":null,"container.image.tag":null,"container.privileged":false,"evt.time":1604490649740339716,"k8s.ns.name":null,"k8s.pod.name":null,"proc.cmdline":"pause","user.loginuid":-1,"user.name":"root"}}
{"priority":"Notice","rule":"Launch Privileged Container","time":"2020-11-04T11:50:51.108031343Z", "output_fields": {"container.id":"14108da41f70","container.image.repository":null,"container.image.tag":null,"container.privileged":false,"evt.time":1604490651108031343,"k8s.ns.name":null,"k8s.pod.name":null,"proc.cmdline":"sleep 3600","user.loginuid":-1,"user.name":"root"}}

How to reproduce it
echo '
apiVersion: v1
kind: Pod
metadata:
  name: falcotest
  namespace: default
spec:
  serviceAccountName: falcotest
  containers:
  - args:
    - "/bin/sleep"
    - "3600"
    image: busybox:1.32.0
    name: falcotest
    securityContext:
      privileged: true
' | kubectl apply -f -

(ServiceAccount falcotest is referring to a PSP with privileged set to true.)
Container gets created:
$ kubectl get pods -n default
NAME        READY   STATUS    RESTARTS   AGE
falcotest   1/1     Running   0          6m32s

Expected behaviour
The "Launch Privileged Container" default rule should trigger since it matches for container.privileged=true: https://github.com/falcosecurity/falco/blob/294804daf436b4d146731322f46a99e2736feee0/rules/falco_rules.yaml#L1959-L1968
Environment

Falco version: 0.26.1

System info:

{
  "machine": "x86_64",
  "nodename": "node1",
  "release": "4.15.0-117-generic",
  "sysname": "Linux",
  "version": "#118~16.04.1-Ubuntu SMP Sat Sep 5 23:35:06 UTC 2020"
}

Cloud provider or hardware configuration: PKS 1.8.2
OS: Kubernetes

Kernel: 4.15.0-117

Installation method: Kubernetes

Additional context
Helm chart version: 1.5.0
Thanks & regards,
Philip

{"priority":"Notice","rule":"Launch Privileged Container","time":"2020-11-04T11:50:49.740339716Z", "output_fields": {"container.id":"f4318ef0227c","container.image.repository":null,"container.image.tag":null,"container.privileged":false,"evt.time":1604490649740339716,"k8s.ns.name":null,"k8s.pod.name":null,"proc.cmdline":"pause","user.loginuid":-1,"user.name":"root"}}
{"priority":"Notice","rule":"Launch Privileged Container","time":"2020-11-04T11:50:51.108031343Z", "output_fields": {"container.id":"14108da41f70","container.image.repository":null,"container.image.tag":null,"container.privileged":false,"evt.time":1604490651108031343,"k8s.ns.name":null,"k8s.pod.name":null,"proc.cmdline":"sleep 3600","user.loginuid":-1,"user.name":"root"}}

I see container/k8s metadata is missing too. It seems to me that Falco was not able to fetch information from the k8s api-server.
Could you provide additional details about your Kubernetes installation, please?
Which is the container runtime?
Also, check if Falco can access what is needed to fetch that info.

Hi @leogr
Thanks for your answer.
The Falco DaemonSet is started with the following args:
      - args:
        - /usr/bin/falco
        - --cri
        - /run/containerd/containerd.sock
        - -K
        - /var/run/secrets/kubernetes.io/serviceaccount/token
        - -k
        - https://$(KUBERNETES_SERVICE_HOST)
        - -pk

Also the kube-apiserver seems to be reachable from within a falco Pod using the falco ServiceAccount token from the secret:
[user@host:~]$ kubectl get secret $(kubectl get serviceaccount falco -o jsonpath='{.secrets[0].name}') -o jsonpath='{.data.token}' | base64 --decode
ey....IQ

[user@host:~]$ kubectl exec -it falco-cxm6b -- bash

# The token inside the container is the same:
root@2b67af75-69e0-4d99-9458-c1528a2c9af7:/# cat /var/run/secrets/kubernetes.io/serviceaccount/token
ey....IQ
root@2b67af75-69e0-4d99-9458-c1528a2c9af7

root@2b67af75-69e0-4d99-9458-c1528a2c9af7:/# curl -k https://$KUBERNETES_SERVICE_HOST/api --header "Authorization: Bearer ey....IQ"
{
  "kind": "APIVersions",
  "versions": [
    "v1"
  ],
  "serverAddressByClientCIDRs": [
    {
      "clientCIDR": "<IP_ADDRESS>/0",
      "serverAddress": "<IP_ADDRESS>:8443"
    }
  ]
}root@2b67af75-69e0-4d99-9458-c1528a2c9af7:/#

Here some more information about the runtime:
[user@host:~]$ docker info
Client:
 Debug Mode: false

Server:
...
 Server Version: 19.03.5
...
 Runtimes: runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: b34a5c8af56e510852c35414db4c1f4fa6172339
 runc version: 3e425f80a8c931f88e6d94a8c831b9d5aa481657
 init version: fec3683
...
 Kernel Version: 4.15.0-117-generic
 Operating System: Ubuntu 16.04.7 LTS
 OSType: linux
 Architecture: x86_64
...
 Docker Root Dir: /var/vcap/store/docker/docker
...
 Product License: Community Engine

What other information would be useful for you to debug?
The Falco K8s Audit feature is not enabled (Helm chart option auditLog.enabled: false) but I do not think this rule would need this since its not from k8s_audit_rules.yaml, right?
Thanks!
Regards,
Philip

Thank you, @PhilipSchmid
I suspect the root cause is the missing metadata. Btw, it might be related to something like this other issue: https://github.com/falcosecurity/falco/issues/1421.
If you noticed the same behavior (missing container/k8s info) with other rules, I would say that's the root cause.
Other than that, you confirmed that essential things are ok, so I don't have other questions now. I will try to reproduce the problem.
About the k8s Audit feature, you're right. It's not needed in this case.
Thank you again!

Hi @leogr,
Thanks for your hint with the DS container arguments!! That exactly where the problem was.. PKS uses custom containerd and docker socket paths. The following Falco Helm chart values resolve the issue:
containerd:
  socket: /var/run/docker/containerd/containerd.sock
docker:
  socket: /var/vcap/sys/run/docker/docker.sock

Regards,
Philip


something wrong with your endcoder?

https://github.com/joeylitalien/noise2noise-pytorch/blob/7942c06f924e2244d91fc8c1aff1c2e3991e0eae/src/unet.py#L82
I think enconv(i), i=2,...,5 should be defined separatedly or they will share the same weights.

Same issue and this All convolutions use padding mode “same”, and except for the last layer are followed by leaky ReLU in original paper should mean only last conv use ReLU I think.


PLTCONN-2777 Update package.json to use connector-sdk from npm version instead of git

Description
What is the intent of this change and why is it being made? Update to use connector-sdk from npm
How Has This Been Tested?
What testing have you done to verify this change? Local testing

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


getParentElement.js missing from atoms in 6.2.0

Not sure if this is intentional but lib/watir/atoms/getParentElement.js is not in this gem release. Although seems intentional due to the load :getParentElement missing from Watir::Atoms

Ok nevermind, I see in this commit https://github.com/watir/watir/commit/904e32a2fe423b82cce60deaceecbe0729ea83ce that you've changed how parents are found. Which means the page_object gem needs to be changed to accommodate.


Makefile: Only run linter if code compiles

There are ton of cases where the linter can't run, with errors like:
WARN [runner] Can't run linter goanalysis_metalinter: assign: failed prerequisites<EMAIL_ADDRESS>WARN [runner] Can't run linter unused: buildssa: analysis skipped: errors in package: [lokomotive/pkg/platform/packet/packet.go:271:20: cannot use arguments (variable of type []string) as string value in argument to ex.Execute]
ERRO Running error: buildssa: analysis skipped: errors in package: [lokomotive/pkg/platform/packet/packet.go:271:20: cannot use arguments (variable of type []string) as string value in argument to ex.Execute]

The error is not crystal clear, but if you look closely it says there
were some errors in the package. While not very clear, that seems to
mean compilation errors.
I've faced this linter error several times in the last days and kept the
branches to later analyze (didn't find the reason immediately). I can
confirm that all the branches I kept where the linter failed to run with
similar errors, there were compilation errors and running "make lint"
(with this patch) makes it obvious.
Adding this dependency, the error is way clear, as it shows the
compilation error, like:
pkg/platform/packet/packet.go:270:17: too many arguments in call to ex.Apply

This would have saved me quite some time, as this is way more clear.
And I sometimes trying to fix a linter error end up creating a syntax
error.

@iaguis I bet the error you saw was this too.
Didn't check the linter doc, but I guess it only makes sense to run it when the code compiles :-D

@invidian @iaguis thanks again! :)


Fix small bug in mkdocs

Fixes incorrect reference in watch of mkdocs.yml so building docs locally works
Adds a makefile command for make docs-serve that serves the docs on a site locally

The standard mkdocs project setup actually has mkdocs.yml in the project root, and would build docs/ into site/ (as opposed to docs/docs/ into docs/site/). We've wrapped things into a subdirectory layer of docs/ that is non-standard to keep the root level cleaner (credit to Jay for the explanation!). To refer to the right place when building docs locally, we need:
watch:
    ../cloudpathlib

Instead of
watch:
   cloudpathlib

In mkdocs.yml

@jayqi this fixes the same issue in cloudpathlib that we just fixed in zamba if you have a chance to look it over. Thanks!

@jayqi updated! should be good to merge


rm mobx-react-devtools

As stated in mobx-react-devtools's README, mobx≧6.0 doesn't require this tool actually.
It would be appreciated if you could tell me how to recover the same kind of functionality since I've never used this tool. Well, I think we can remove this tool for now even if we're not sure about the alternative, I dunno.
/cc @BenRussert @lgeiger

The updated prettier added some automated formatted lines.


WIP: Port to Faraday v2

Signed-off-by: Takuro Ashie<EMAIL_ADDRESS>DESCRIPTION HERE
(check all that apply)

[ ] tests added
[ ] tests passing
[ ] README updated (if needed)
[ ] README Table of Contents updated (if needed)
[ ] History.md and version in gemspec are untouched
[ ] backward compatible

For future tasks, I assumed that the current excon/typhoeus switching system is not required for faraday v2 migration.
This is aimed for supporting HTTP keepalive. If excon supports HTTP keepalive, we can remove this switching feature safely with obsoleted parameter exceptions.

Superseded by #97. Closing.


About the result shown on tab1

Hi, thank you for opening your great work!
I would like to further confirm whether the dataset used for the experiment in tab1 is scannetV2 or scannet200.
Because in paper SAI3D: Segment Any Instance in 3D Scenes, they report their 30.8 AP result on the ScannetV2 dataset.
Thank you for your attention.

Thanks for your interest! We initially referenced the first version of the SAI3D paper, which reported performance tested on ScanNet200, and we directly used those results. Only recently did we discover the issue that they actually used ScanNetV2 for their tests. We re-evaluated their method on ScanNet200 and found that the performance had slightly decreased, but the difference was not significant. Therefore, we did not modify the performance of SAI3D in Table 1, even though it is slightly higher than the actual value.

However other methods (e.g. HDBSCAN Nunes et al.) also seem to experiment on Scannet, not Scannet200.

Hi, thanks for pointint out this issue!
In our Table1, we refer to the v1 version of SAI3D on arxiv and the performance of HDBSCAN, Nunes et al., Felzenszwalb et al. and UnScene3D are reported from the SAI3D paper. They are actually evaluated on the 18 classes of ScanNet and so the actual performance of them on ScanNet200 should be lower.
We are evaluating ESAM on the 18 classes of ScanNet in class-agnostic manner and compare it with the above mentioned methods. We will record these experiments in a new table (class-agnostic on ScanNet). As for our Table1, we will try to implement the first four baselines on ScanNet200.
The new experiments will be soon updated in this issue. We will also revise the paper accordingly.

I would like to express my respect for your rigorous academic attitude.
Thank you for your reply.

The class-agnostic 3D instance segmentation performance of ESAM-E on ScanNet (18 classes) is:

Method
Type
VFM
AP
AP50
AP25

SAI3D
offline
Semantic-SAM
30.8
50.5
70.6

ESAM-E
online
FastSAM
49.3
71.4
85.8


fix ios thread problem

fix issue:
#1662 #1549
Do not prevent render thread creation, remove CADisplayLink as render thread.

See: https://github.com/bkaradzic/bgfx/commit/ef22a071caa4ec2e9f445a292a8e2e1a946bd440

Thanks, problem fixed!


AppState addEventListener && removeEventListener #fail RNv0.27

When using Appstate.addEventListener('change', this._someFunction);
on componentDidMount and then AppState.removeEventListener('change', this._someFunction);
All is working fine!
however when I add .bind(this) to my function all hell breaks loose
====>  Appstate.addEventListener('change', this._someFunction.bind(this));
====> when calling AppState.removeEventListener('change', this._someFunction.bind(this));
The listener is not removed... please advise, Im sure this is related to the binding

You need to pass the same function instance in. When you call bind() it creates a new instance.

have the same problem, what if I need reference to 'this.props' inside of '_someFunction' ?

+1, is it not possible to reference this in your callback method? @ide

never mind, figured out the solution with the help of:
https://gist.github.com/Restuta/e400a555ba24daa396cc
@puzpuz


Update allresults.py

This version is compatible with Python 3

Hi @dptriani , @manodeep . What is the status of this pull request?

Don't think this PR is up-to-date or any longer in scope. The original PR intent was to update only the allresults.py file to make it python3 compatible. Now that we are moving to sage-home/sage-model, we should move all future updates to that repo.
@dptriani what do you think?

Agree. Let me close it.


fix: resolve the console warning of shader material

Why

The console will print warning messages if using shaderMaterial

Cause we use assign to merge parameters and Three.ShaderMaterial. There is no need to use super(...parameters)
What

Checklist

[ ] Documentation updated
[x] Ready to be merged

typescript has no problems with this right ?

typescript has no problems with this right ?

Yeah, tsc works well

i changed one loadash.assign to Object.assign should be fine right ? https://github.com/pmndrs/drei-vanilla/commit/6cda8252fc6d374802913a80c816566c97bf9143

i changed one loadash.assign to Object.assign should be fine right ? 6cda825

I have merged the main branch, and no issues arose.


No error-handling in case of authentication-mishaps

Describe the bug
There is no informing of the user that something went wrong after an error during authentication.
To Reproduce
Steps to reproduce the behavior:

Try to login without valid credentials or a working backend.

Expected behavior
Some kind of information about what just happened would be appreciated.
Smartphone (please complete the following information):

Device: iPhone 12 Simulator
OS: 14.5

closed with #62


OAS : Request to include pattern for application name to ensure provided application name is in upper camel case

In OAS , currently, any particular pattern is not specified for application name.
So , as a part of request, the given application name can be of any pattern . For example , if the application name is OamLog it can be given in any of the below mentioned format or more :

OamLog
oamlog
oamLog
Oamlog

Problem :
But , if the given application name contains all lower case letters or only one upperCase letter in it , it would become difficult to form the OwnApplicationID part of the  UUID . For example , please find the below mentioned scenarios
If applicationame is given as OamLog , then the UUID would be ol-* , which is composed from the uppercase letters of the application name.
But , if application name is given as oamlog or Oamlog , then it would become difficult to compose the UUID.
Proposal :
To include any one of the below mentioned patterns for application name to ensure the given application name is in upper camel case with atleast 2 uppercase letters in it .
Pattern : ([A-Z][a-z0-9!@#$&()\-`.+,/"]+){2,} (which allows alphanumeric and special characters)
or
Pattern : ([A-Z][a-z0-9]+){2,} (which allows only alphanumeric)

Add ([A-Z][a-z0-9]+){2,} at RO://v1/register-application :: application-name .
At the OAM layer, too.
(Potentially at the regard-application.)

Pull-request #539 merged.


Increase test coverage

Codecov Report

Merging #18 (307bbec) into main (6b791c9) will increase coverage by 11.87%.
The diff coverage is 100.00%.

:exclamation: Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.
@@             Coverage Diff             @@
##             main      #18       +/-   ##
===========================================
+ Coverage   43.48%   55.36%   +11.87%
===========================================
  Files          25       25
  Lines        1175     1174        -1
===========================================
+ Hits          511      650      +139
+ Misses        664      524      -140

Files Changed
Coverage Δ

lib/src/model/pdf_types.dart
98.98% <100.00%> (+62.62%)
:arrow_up:

lib/src/parser/pdf_object_parser.dart
72.08% <100.00%> (ø)

lib/src/utils/reader_helper.dart
100.00% <100.00%> (+20.96%)
:arrow_up:

... and 1 file with indirect coverage changes
:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more


action bugfix

Codecov Report

Merging #150 into develop will decrease coverage by 0.01%.
The diff coverage is 0%.

@@             Coverage Diff             @@
##           develop     #150      +/-   ##
===========================================
- Coverage    52.66%   52.65%   -0.02%
===========================================
  Files          213      213
  Lines        21353    21353
===========================================
- Hits         11246    11243       -3
- Misses        8839     8844       +5
+ Partials      1268     1266       -2

Impacted Files
Coverage Δ

bfe_modules/mod_header/action.go
59.58% <0%> (ø)
:arrow_up:

bfe_websocket/server_conn.go
74.24% <0%> (-2.28%)
:arrow_down:

bfe_http2/server.go
71.5% <0%> (-0.33%)
:arrow_down:

bfe_spdy/server_conn.go
78.53% <0%> (+0.88%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ed3b945...951654d. Read the comment docs.


Implement missing ASDU types

M_BO_NA,
M_BO_TB,
M_IT_NA,
M_IT_TB,
M_ME_ND

M_BO_NA,
M_BO_TB,
M_IT_NA,
M_IT_TB,
M_ME_ND

M_ST_NA and M_ST_TB types are not supported by the south service (and the bit OV).


RFC: Reorganize file structure

I'm unhappy with our current file structure, what does the team think of this change?
Our packages except for env are been moved into a new broadway package.
I envision this broadway package as the sole interface used by broadway clients, whether they are importing the broadway package or invoking behavior from CLI or invoking behavior from HTTP.
thirdparty.go.bak and broadwayctl.go.bak illustrate some ways the broadway package could act as an entry point.
Todo: Consolidate broadway/* packages; move server package to top level and make it depend only on the broadway package

Seen other projects using pkg folder for lib packages (https://github.com/coreos/etcd/tree/master/pkg https://github.com/kubernetes/kubernetes/tree/master/pkg).
I'm not a big fan of broadway/broadway style package names. Too long and unnecessary.
Also our project is not big enough to start hiding these folders yet.

yeh i donna how i feel about this either "github.com/namely/broadway/broadway/store"

Can we close this?

Closing; will improve structure more gradually e.g. #47
See also my broadway-as-a-package usage idea, vanishing with this branch:
https://gist.github.com/therealplato/75177a442eb7d7a904ad30bfe4c359b8


add command: --input-format option (fixes #235)

Summary
This PR adds an additional "input format" option to archivebox add. When set to a value other than the default, only that format will be parsed. If the url-list format is specified, each non-empty line in input files is simply added as a URL.
Related issues
#235
Stuff not yet done/determined

[ ] should the other parsers should also be available using this option?
[ ] documentation updates (especially the wiki section "Import a list of URLs from a text file")

Changes these areas

[ ] Bugfixes
[x] Feature behavior
[x] Command line interface
[ ] Configuration options
[ ] Internal architecture
[ ] Snapshot data layout on disk

Code scanning results / CodeQL: 1 new error

Is not caused by my changes.

This looks great! Can you change the flag name from --input-format to --parser, as that's what we use internally and in the documentation to refer to the different input format handlers.

Good point. I also changed the function parameters to parser.

Thanks!


Add JavaScript Language to API Explorer

Is your feature request related to a problem?
I am looking to use this amazing plugin, but require a JavaScript language option in the API Explorer. I see the codegen in your plugin, but its not being utilized in the component.
Describe the solution you'd like
I would like the JavaScript language to be an option in the API Explorer, specifically js-fetch, although the more the merrier.
Describe alternatives you've considered
Using a different method of displaying docs, although I really don't want to.
Additional context
I would be happy to open a PR to assist with this, if you can provide some direction on getting it working. I messed around locally, but it kept crashing.

Adding to roadmap with the goal of expanding language support.


Convert system integration test to D script (+other minor things)

~Let's see if this works.~ Yes, yes it does.

Updated

This was part of https://github.com/bpfkorea/agora/issues/269


Is landmarks + headpose = actually landmarks from detector?

I found you guys disentangled landmark and headpose, but general landmark detector detect actually landmarks and headpose, you guys get neutral landmark from this final actually landmarks and headpose by inverse final actually landmarks using headpose?

The originally detected 2D facial landmarks are of course contain head pose. We do 3D facial tracking on each frame (via landmarks supervision) and get disentangled head poses sequences and facial movements-only 3D landmarks. The two parts are used as two different learning target for two different models (audio2mouth/audio2headopse).


ConsumerConfigCustomizer/ProducerConfigCustomizer in Cloud Binder for  kafka-streams

Hi,
Similar to 1014, due to security reasons, we need to set the SASL/SCRAM credentials at runtime in our Kafka Streams app. The documentation seems to indicate we should be able to achieve this by providing ConsumerConfigCustomizer/ProducerConfigCustomizer. However, I am not actually seeing this being used anywhere in the Kafka-streams config code (only in Kafka binding). Interestingly enough, AdminConfigCustomizer is being properly passed in here and works as expected.
If this is currently not supported, what is the recommended way to set the client configs at runtime?

@bek-tws Apologies for the delay in getting back to you on this. In Kafka Streams binder, you can use the StreamsBuilderFactoryBeanConfigurer for customizing the consumer and producer configurations. For example, you can do this to customize the credentials.
@Bean
public StreamsBuilderFactoryBeanConfigurer customizer() {
	return fb -> {
		final Properties streamsConfiguration = fb.getStreamsConfiguration();
		streamsConfiguration.put("foo", "bar");  // just as an example
                 // Similarly, you can provide SASL/SCRAM properties.
	};
}

Is this sufficient for your use case? I don't see much advantage for providing consumer/producer config customizers in Kafka Streams binder as ultimately we have to modify the Streams configuration anyway and that is already possible through the configurer as shown above.

@bek-tws Closing this issue. Feel free to re-open, if you are finding issues with the suggestions I made above.


Is it possible to use this package without bower?

with https://www.npmjs.com/package/pace-progress for example
Pace theme CSS file was not found: blue/pace-theme-minimal.css
Error: Pace theme CSS file was not found: blue/pace-theme-minimal.css
    at Class.treeFor (/app/node_modules/ember-cli-pace/index.js:80:15)
    at project.addons.map.addon (/app/node_modules/ember-cli/lib/broccoli/ember-app.js:538:22)
...

@server-may-cry Are you looking for https://www.npmjs.com/package/ember-cli-pace ?

@vectart yep.
I'am currently using that (this) package.
But it require bower
$ ember install ember-cli-pace
Yarn: Installed ember-cli-pace
installing pace
  install bower package pace

I'm looking for this as well, since the Ember ecosystem in general is moving away from Bower. :)

This should be fairly easy to convert to not use bower as long as pace is available somewhere on NPM. I've just converted a bunch of bower-dependent addons to use NPM via ember-cli-node-assets

@jamesdixon can you give an example?


⚠ ClamAV has degraded performance

In 5a533c1, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 197 ms

Resolved: ClamAV performance has improved in baf8440.


visual overviews of sbt

My experiences and talks with colleagues showed to us that simple build tool is by far not simple.
Visual overviews similar to this one for hg would really help to wrap the head around how sbt's components work.

I am closing this due to inactivity, but pull request would be welcome.


LmlView without Stage

Hi,
I would like to know if there is a way to have LmlView without stage. I know LmlView interface has method getStage(), What am trying to achieve is have all ui in lml and have game screen without stage just normally drawing sprites using batch. Is there easy way todo it?
I am aware that there is LmlApplicationListener(Game) and AbstractLmlView(Screen) that can be used but AbstractLmlView has stage and LmlView interface defines getStage method.
So i was thinking if i implement my own LmlView and method getStage returns null that could do the job. But i would like some better solution then returning null or returning empty stage.
The same goes for ViewController which implements LmlView again there is method getStage but that class belongs to Autumn MVC, i would like to avoid autumn for now.
Is there possibility that getStage method gets moved from LmlView to AbstractLmlView or StageLmlView?
Thanks.
Edit.
I found solution to my question so closing the issue.

This wiki page describes how you can access the parsed actors. I believe that LmlParser methods creating views will accept pretty much anything and will inject the actors into a Stage only if LmlView interface is implemented - as you probably figured out by now.


Bluetooth not working

Describe the issue you are experiencing
Fresh install of 12.1 averything seems to be ok except bluetooth. No adapters found.
What operating system image do you use?
rock-4c-plus
What version of Home Assistant Operating System is installed?
Home Assistant OS 12.1.dev20240324
Did you upgrade the Operating System.
No
Steps to reproduce the issue

Flash rockpi HA-OS image to SD
Start and restore HA backup from old raspberry pi3

...
Anything in the Supervisor logs that might be useful for us?
2024-04-06 07:11:25.449 INFO (MainThread) [supervisor.resolution.evaluate] Starting system evaluation with state running
2024-04-06 07:11:25.959 INFO (MainThread) [supervisor.resolution.evaluate] System evaluation complete
2024-04-06 07:11:25.960 INFO (MainThread) [supervisor.resolution.fixup] Starting system autofix at state running
2024-04-06 07:11:25.960 INFO (MainThread) [supervisor.resolution.fixup] System autofix complete
2024-04-06 07:15:08.774 INFO (MainThread) [supervisor.updater] Fetching update data from https://version.home-assistant.io/stable.json
2024-04-06 07:15:08.896 WARNING (MainThread) [supervisor.updater] Board 'rockpi-4c' not found in version file. No OS updates.
2024-04-06 07:15:15.071 INFO (MainThread) [supervisor.homeassistant.api] Updated Home Assistant API token
2024-04-06 07:29:34.972 INFO (MainThread) [supervisor.hardware.monitor] Detecting remove hardware /dev/ttyUSB0 - /dev/serial/by-id/usb-ITead_Sonoff_Zigbee_3.0_USB_Dongle_Plus_a40e24167545ed11a32cc88f0a86e0b4-if00-port0
2024-04-06 07:29:34.984 INFO (MainThread) [supervisor.hardware.monitor] Detecting remove hardware /dev/gpiochip5 - None

Anything in the Host logs that might be useful for us?
-

System information
No response
Additional information
# lscpu
Architecture:           aarch64
  CPU op-mode(s):       32-bit, 64-bit
  Byte Order:           Little Endian
CPU(s):                 6
  On-line CPU(s) list:  0-5
Vendor ID:              ARM
  Model name:           Cortex-A53
    Model:              4
    Thread(s) per core: 1
    Core(s) per socket: 4
    Socket(s):          1
    Stepping:           r0p4
    BogoMIPS:           48.00
    Flags:              fp asimd evtstrm aes pmull sha1 sha2 crc32 cpuid
  Model name:           Cortex-A72
    Model:              2
    Thread(s) per core: 1
    Core(s) per socket: 2
    Socket(s):          1
    Stepping:           r0p2
    BogoMIPS:           48.00
    Flags:              fp asimd evtstrm aes pmull sha1 sha2 crc32 cpuid
NUMA:
  NUMA node(s):         1
  NUMA node0 CPU(s):    0-5
Vulnerabilities:
  Gather data sampling: Not affected
  Itlb multihit:        Not affected
  L1tf:                 Not affected
  Mds:                  Not affected
  Meltdown:             Not affected
  Mmio stale data:      Not affected
  Retbleed:             Not affected
  Spec rstack overflow: Not affected
  Spec store bypass:    Not affected
  Spectre v1:           Mitigation; __user pointer sanitization
  Spectre v2:           Mitigation; Branch predictor hardening, BHB
  Srbds:                Not affected
  Tsx async abort:      Not affected

# lsmod
Module                  Size  Used by
bnep                   24576  2
nft_chain_nat          12288  27
xfrm_user              45056  1
xfrm_algo              16384  1 xfrm_user
nft_compat             16384  86
nf_tables             249856  1006 nft_compat,nft_chain_nat
nfnetlink              20480  3 nft_compat,nf_tables
cfg80211              438272  0
sch_fq_codel           16384  2
hci_uart              114688  0
cp210x                 24576  1
btqca                  16384  1 hci_uart
btrtl                  24576  1 hci_uart
btbcm                  24576  1 hci_uart
panfrost               65536  0
crct10dif_ce           12288  1
btintel                45056  1 hci_uart
snd_soc_audio_graph_card    12288  0
snd_soc_simple_card    16384  0
rockchipdrm           176128  0
snd_soc_spdif_tx       12288  0
bluetooth             544768  12 btrtl,btqca,btintel,hci_uart,btbcm,bnep
hantro_vpu            266240  0
rockchip_vdec          36864  0
drm_shmem_helper       20480  1 panfrost
ecdh_generic           16384  1 bluetooth
snd_soc_simple_card_utils    28672  2 snd_soc_audio_graph_card,snd_soc_simple_card
analogix_dp            40960  1 rockchipdrm
ecc                    36864  1 ecdh_generic
dw_mipi_dsi            16384  1 rockchipdrm
v4l2_vp9               24576  2 rockchip_vdec,hantro_vpu
gpu_sched              36864  1 panfrost
rfkill                 28672  3 bluetooth,cfg80211
dw_hdmi                49152  1 rockchipdrm
rockchip_rga           24576  0
dwmac_rk               28672  0
v4l2_h264              12288  2 rockchip_vdec,hantro_vpu
videobuf2_dma_sg       16384  1 rockchip_rga
cec                    53248  1 dw_hdmi
stmmac_platform        20480  1 dwmac_rk
snd_soc_rockchip_i2s    20480  2
drm_display_helper    163840  3 rockchipdrm,dw_hdmi,analogix_dp
videobuf2_dma_contig    16384  2 rockchip_vdec,hantro_vpu
v4l2_mem2mem           40960  3 rockchip_vdec,hantro_vpu,rockchip_rga
drm_dma_helper         20480  1 rockchipdrm
videobuf2_memops       12288  2 videobuf2_dma_contig,videobuf2_dma_sg
videobuf2_v4l2         32768  4 rockchip_vdec,hantro_vpu,rockchip_rga,v4l2_mem2mem
drm_kms_helper        208896  6 dw_mipi_dsi,drm_dma_helper,drm_display_helper,rockchipdrm,dw_hdmi,analogix_dp
videobuf2_common       57344  8 rockchip_vdec,videobuf2_dma_contig,videobuf2_v4l2,hantro_vpu,rockchip_rga,videobuf2_dma_sg,v4l2_mem2mem,videobuf2_memops
stmmac                229376  3 stmmac_platform,dwmac_rk
pcs_xpcs               24576  1 stmmac
coresight_cpu_debug    12288  0
coresight              73728  1 coresight_cpu_debug
fuse                  131072  1
drm                   593920  11 gpu_sched,drm_kms_helper,dw_mipi_dsi,drm_dma_helper,drm_shmem_helper,drm_display_helper,rockchipdrm,dw_hdmi,panfrost,analogix_dp
backlight              20480  2 drm_display_helper,drm

# dmesg | grep -i brcmfmac
# dmesg | grep -i bluetooth
[  131.157398] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[  131.157432] Bluetooth: BNEP filters: protocol multicast
[  131.157462] Bluetooth: BNEP socket layer initialized

Thanks for providing the logs. There should be many more lines in the dmesg log regarding bluetooth initialization. That makes me wonder if there is a problem with the bluetooth chipset in the devicetree. I'm using the 4C+ devicetree from the upstream linux kernel so I would be surprised but it's not impossible.
Can you post the output of find /proc/device-tree/ | grep blue?
Just to make sure, this is a Radxa Rock 4C+ board?
Have you tried any of the previous images? 11.5 would be worth testing as there was a kernel upgrade between 11.5 and 12.

Thank you for your work with this.
# find /proc/device-tree/ | grep blue
/proc/device-tree/serial@ff180000/bluetooth
/proc/device-tree/serial@ff180000/bluetooth/device-wakeup-gpios
/proc/device-tree/serial@ff180000/bluetooth/pinctrl-names
/proc/device-tree/serial@ff180000/bluetooth/pinctrl-0
/proc/device-tree/serial@ff180000/bluetooth/clock-names
/proc/device-tree/serial@ff180000/bluetooth/clocks
/proc/device-tree/serial@ff180000/bluetooth/shutdown-gpios
/proc/device-tree/serial@ff180000/bluetooth/max-speed
/proc/device-tree/serial@ff180000/bluetooth/compatible
/proc/device-tree/serial@ff180000/bluetooth/vddio-supply
/proc/device-tree/serial@ff180000/bluetooth/vbat-supply
/proc/device-tree/serial@ff180000/bluetooth/host-wakeup-gpios
/proc/device-tree/serial@ff180000/bluetooth/name
#

It's this board and kit. ROCK 4 Model C+ 4GB single board computer.
I have not tried any of the previous images, and unfortunately i currently don't have physical access to the board for a couple of weeks. But I'm happy to perform any other checks I'm able to do remotely. Otherwise I'll test downgrading at the next opportunity.

The device tree output looks good and lsmod shows that many of the bluetooth related kernel modules are loaded. btsdio is missing but not sure if that is a cause or a symptom. Can you upload the full dmesg log just to make sure there are no other errors?
The next release 12.2 will use the rockchip kernel config from the upstream haos project instead of the one I'm currently maintaining. That might also fix it (for when you have physical access again).

The full dmesg output is attached. I realize when I look through it that there are a lot of errors I dont know what it is.
dmesg.zip
I also add  journalctl -b 0 --dmesg as I think dmesg buffer fills.
journctl.zip
Does that mean haos are adding support for this board?

The dmesg output looks strange indeed. I have never seen this error before
es8316 1-0011: ASoC: error at soc_component_read_no_lock on es8316.1-0011 for register: [0x00000016] -6

Does that mean haos are adding support for this board?

No not for the Rock Pi boards. They added some other board that are based on the same rk3399 SoC.
12.2 is out. Let me know if that changes anything once you have physical access again.
https://github.com/citruz/haos-rockpi/releases/tag/12.2%2B20240414
Btw, is Wifi working for you? BT and Wifi are handled by the same chip so I would assume Wifi should be broken as well then.

What is the output of cat /proc/device-tree/model?

Thanks! I'll test it as soon as I'm able.
I have no need for wifi so I never checked. But I don't seem ta have any physical network adapters except end0 when i check output of ip addr
# cat /proc/device-tree/model
Radxa ROCK Pi 4C#

Radxa ROCK Pi 4C

Huh are you sure that you downloaded the correct image haos_rock-4c-plus? Because that should return Radxa ROCK 4C+

🤪 I feel pretty dumb right now, sorry for wasting your time. I'll test with the correct image.

Haha no worries. There's still a small chance that the wrong devicetree was included with the image but I would be surprised if that is the case.


Access the SQL database server privately from the VM

Under the heading 'Access the SQL database server privately from the VM'
Step 2. Enter xxxxx.database.windows.net.
An error; The term 'xxxx.database.windows.net' is not recognized as the name of a cmdlet.
How does PowerShell will recognize xxxx.database.windows.net, I think something is missing here in step two.
[Enter feedback here]

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d16533ae-5e19-5769-4c29-581152f8c30c
Version Independent ID: 3f1b2b47-0bfe-b65c-ad0a-cca3586f7ba7
Content: Manage Private Endpoints in Azure
Content Source: articles/private-link/create-private-endpoint-portal.md
Service: virtual-network
GitHub Login: @KumudD
Microsoft Alias: kumud

@sakaldeepyadav , Thank you for your feedback. There is a typo in the documentation.
You need to execute nslookup myserver.database.windows.net
I will fix the typo and paste the PR here.

Ya, I figured it out after posting. It was typo error. Anyway, good to get it identified at earliest.


workflows/update-manpage: fix issue

[x] Have you followed the guidelines in our Contributing document?
[x] Have you checked to ensure there aren't other open Pull Requests for the same change?
[x] Have you added an explanation of what your changes do and why you'd like us to include them?
[ ] Have you written new tests for your changes? Here's an example.
[ ] Have you successfully run brew style with your changes locally?
[ ] Have you successfully run brew typecheck with your changes locally?
[ ] Have you successfully run brew tests with your changes locally?

This PR aims to fix problems with the update-manpage workflow, as encountered in #10854. We should be using git reset --hard origin/master instead.

Review period will end on 2021-03-16 at 13:23:09 UTC.

Review period skipped due to critical label.


Permissions issue on KendraRetrieve. Example not compatible with latest version of langchain

Change the langchain on requirements.txt to:
langchain==0.0.218

Updated to latest langchain version


Make button design consistent

Right now filtering, dumping, and zooming buttons have different designs. Let's make them consistent!

80cbe76f4c40195e5853803d0deac9222ea05244


Fixed chunk loading issue on Folia

CMIMaterial#get method invokes a Block#getType, which will load the chunk.
CMIMaterial res = ItemManager.byRealMaterial.get(block.getType());

Folia seems don't allowed plugins to load chunks in main thread, so this patch simply fixed this by invoke a Paper-provided method (World#getChunkAtAsync) to load the chunk asynchronously before the Block#getType invocation.

d493c24de9cdbc9f089e40e9c8bb191cc821c59c
Not ideal solution as this needs to be done fully async instead of locking main thread which will happen due to #get() method, better solution will be needed down the road.
By the way, there was Version.isFolia() method already to check if server is Folia type or not.


When a node joins a swarm cluster, it will cause the docker service of the server where the node is located to hang

When a node joins a swarm cluster, it will cause the docker service of the server where the node is located to hang。There is no problem when the two machines independently establishing a swarm network。

Apr 23 18:23:27 youdata01.deppon.com.cn dockerd[4810]: /go/src/github.com/docker/docker/daemon/image_pull.go:84 +0x436
Apr 23 18:23:27 youdata01.deppon.com.cn dockerd[4810]: github.com/docker/docker/daemon.(*Daemon).PullImage(0xc4201cc000, 0x7fac2c18da68, 0xc421796180, 0xc424554ba0, 0x1e, 0x0, 0x0, 0x1d4347c, 0x5, 0xc420a03ad0, ...)
Apr 23 18:23:27 youdata01.deppon.com.cn dockerd[4810]: /go/src/github.com/docker/docker/daemon/image_pull.go:46 +0x14c
Apr 23 18:23:27 youdata01.deppon.com.cn dockerd[4810]: github.com/docker/docker/daemon/cluster/executor/container.(*containerAdapter).pullImage.func1(0xc421932c30, 0x7fac2c18da68, 0xc421796180, 0xc420a03ad0, 0xc42469dd50, 0xc4214fe9d0)
Apr 23 18:23:27 youdata01.deppon.com.cn dockerd[4810]: /go/src/github.com/docker/docker/daemon/cluster/executor/container/adapter.go:95 +0xdd
Apr 23 18:23:27 youdata01.deppon.com.cn dockerd[4810]: created by github.com/docker/docker/daemon/cluster/executor/container.(*containerAdapter).pullImage
Apr 23 18:23:27 youdata01.deppon.com.cn dockerd[4810]: /go/src/github.com/docker/docker/daemon/cluster/executor/container/adapter.go:91 +0x2a2
Apr 23 18:23:27 youdata01.deppon.com.cn systemd[1]: docker.service: main process exited, code=exited, status=2/INVALIDARGUMENT
Apr 23 18:23:27 youdata01.deppon.com.cn systemd[1]: Unit docker.service entered failed state.
Apr 23 18:23:27 youdata01.deppon.com.cn systemd[1]: docker.service failed.
Apr 23 18:24:41 youdata01.deppon.com.cn systemd[1]: Started Docker Daemon.
Apr 23 18:24:41 youdata01.deppon.com.cn systemd[1]: Starting Docker Daemon...

Docker version: 17
Centos version: 7.4

Please note that Docker 17.xx versions have reached EOL a few years back, and CentOS uses a rolling release model, which means that 7.4 reached EOL when CentOS 7.5 was released. Docker 17.xx versions are no longer maintained, and have known vulnerabilities, so I would highly recommend updating to a current version of docker (19.03.x at time of writing).
As to the problem;
23T18:23:27.661786170+08:00" level=info msg="Attempting next endpoint for pull after error: Get https://localhost/v2/: http: server gave HTTP response to HTTPS client"

It looks like you're using a custom registry, which doesn't have TLS enabled, and doesn't return a proper response, which leads to a panic in the daemon; panic: no ':' separator in digest "".
That looks to be a problem in your setup  / configuration of your registry (or perhaps a proxy that's configured).
Also note that this issue tracker is intended for reporting issues with the documentation, not the software itself.
I'm closing this issue because of the above, but feel free to continue the conversation


Read less 272 than expected 276 for asset LightsQuality(MonoBehaviour)

When reading sharedassets1.assets, this error is thrown while reading asset LightsQuality(MonoBehaviour)
System.Exceptiion`Read less 272 than expected 276`
   at uTinyRipper.Classes.Object.Read(Byte[] buffer) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Classes\Base\Object\Object.cs:line 58
   at uTinyRipper.SerializedFiles.SerializedFile.ReadAsset(EndianReader reader, AssetInfo assetInfo, Int64 offset, Int32 size) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 431
   at uTinyRipper.SerializedFiles.SerializedFile.ReadAsset(EndianReader reader, AssetEntry info, Int64 startPosition) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 408
   at uTinyRipper.SerializedFiles.SerializedFile.ReadAssets(EndianReader reader, Int64 startPosition) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 398
   at uTinyRipper.SerializedFiles.SerializedFile.Read(Stream stream, Action`1 dependencyCallback) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 275
   at uTinyRipper.SerializedFiles.SerializedFile.Load(Action`1 dependencyCallback) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 234
   at uTinyRipper.SerializedFiles.SerializedFile.Load(Parameters pars) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 61
   at uTinyRipper.FileCollection.LoadSerializedFile(String filePath) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\AssetCollection\FileCollection.cs:line 111
   at uTinyRipper.FileCollection.Load(String filePath) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\AssetCollection\FileCollection.cs:line 61
   at Extract.AssetExporter.RequestDepency(String dep) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipperTest\Extract\AssetExporter.cs:line 108
   at uTinyRipper.FileCollection.OnRequestDependency(String dependency) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\AssetCollection\FileCollection.cs:line 485
   at uTinyRipper.SerializedFiles.SerializedFile.Read(Stream stream, Action`1 dependencyCallback) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 270
   at uTinyRipper.SerializedFiles.SerializedFile.Load(Action`1 dependencyCallback) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 234
   at uTinyRipper.SerializedFiles.SerializedFile.Load(Parameters pars) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\Format\SerializedFile\SerializedFile.cs:line 61
   at uTinyRipper.FileCollection.LoadSerializedFile(String filePath) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\AssetCollection\FileCollection.cs:line 111
   at uTinyRipper.FileCollection.Load(String filePath) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipper\uTinyRipperCore\Parser\AssetCollection\FileCollection.cs:line 61
   at Extract.AssetExporter.Export(String assetPath) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipperTest\Extract\AssetExporter.cs:line 160
   at Extract.AssetExporter.Export(String gameDir, String assetPath, String exportPath) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipperTest\Extract\AssetExporter.cs:line 177
   at Extract.Program.Main(String[] args) in C:\Users\Tom\Dropbox\Code\KingmakerMods\UtinyRipperTest\Extract\Program.cs:line 310

Sample files: https://ufile.io/jswno

Same as this one

Sorry for taking so long. If there was a mismatch between the assemblies, and the asset files, wouldn't unity have trouble reading the assets when the game loads? I've been looking into it, and i suspect that uTinyRipper is in some cases resolving generics to the wrong class. The highlighted field should be DropdownLightsQuality, not DropdownItemDecalsQuality.

The issue seems to be when passing a generic array to MonoManager.GetScriptType, it calls AssemblyManager.TryGetScriptType and resolves the type to Kingmaker.UI.SettingsUI.DropdownItemDecalsQuality. I would imagine the fix is to search paramater arguments by name to match TElement[] against {TElement, Kingmaker.UI.DropdownItemLightsQuality}?

wouldn't unity have trouble reading the assets when the game loads
This is what worries me most
suspect that uTinyRipper is in some cases resolving generics to the wrong class
I will double check it later, but anyway I tested this in independent way. I ripped necessary scripts from dll and added them to Unity, then built project and processed it with uTinyRipper. And it was processed fine.

When you build the unity project from exported scripts, did you export both SettingsEntityDropdownLightsQuality and SettingsEntityDropdownDecalsQuality, create scriptable objects for both scripts and create an entry for the in the array SettingsEntityDropdownGeneric.m_Values? I think because of how uTinyRipper's AssemblyManager.TryGetScriptType works, if you only test one at a time, it will work, but testing both causes the error.
I've created a unity project from the exported scripts, and was able to reproduce the error in a new project made from scripts exported with uTinRipper
.
Assets.zip
Build.zip

I've checked it. It was really problem with MonoManager. Thanks for helping in figure this out.
fixed in 57f56b9d311a03d7f7df439e0dfc7e26d075cb96


composer package name issue

The package name mikey179/vfsStream is invalid, it should not contain uppercase characters. We suggest using mikey179/vfs-stream instead.

See #137.


Please, support fields in javascript classes, at least  public and static public fields

Please, support fields in javascript classes, at least  public and static public fields
class A {

   constructor() {
   }

   Field;
   Field2 = 123;
   static Field3;
   static Field4 = 123;
}

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Classes/Class_fields

This project is no longer being maintained.


Update asset relocator loader

This includes fixes for https://github.com/zeit/ncc/issues/273 and https://github.com/zeit/ncc/issues/280.
The unit tests for these are located in the commits there:

https://github.com/zeit/webpack-asset-relocator-loader/commit/590d2abed881e1c25d6509bf787ada99817ab077
https://github.com/zeit/webpack-asset-relocator-loader/commit/6122f38cf76d7aafa71d8a221e199ba2881838ee
As well as the asset permissions fix in https://github.com/zeit/webpack-asset-relocator-loader/commit/85bfce894d8c67124a5813fbbe0b27dd346fddf4.

Codecov Report

Merging #282 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #282   +/-   ##
=======================================
  Coverage   66.57%   66.57%
=======================================
  Files          11       11
  Lines         350      350
=======================================
  Hits          233      233
  Misses        117      117

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 55aee8e...82aa481. Read the comment docs.


Accuracy_reimplementation

Hi, @JunMa11,
I tried reimplementing the liver segmentation using dice loss. Everything goes well though, the performance is a little lower than the results in your paper. I use the SoftDiceloss and the LiTS dataset. I conducted the experiments, using the same splits as provided. When I evaluate the liver segmentation, I combine the liver and liver tumor into one channel. The average Dice result is 94.51.
Do you have any idea about that or suggestions?
Best,
Xi

Hi @xifang001 ,
It seems that your network segments both liver and liver tumors, right?
In my experiments, I combine the liver and liver tumor (e.g., gt = np.uint8(gt>0) ) as a single mask. It is normal that the results have a slight fluctuation because the default training is non-deterministic.
BTW, liver segmentation is almost a solved problem in LITS dataset. I would recommend paying more attention to the there three tasks. I also released the dataset with baidu net disk.
https://github.com/JunMa11/SegLoss/tree/master/test
Best,
Jun


DM - Proofreading

The 1:1 DM is proofreading the text instead of a normal conversation with the GPT.

The DM mode considers chat history when responding to your message. If you send a clear instruction in the DM, the bot should help you in the way.

Thanks, yes, you were right!
One more thing is that the input tokens count are way too high in comparison to the output. ~28K Input token by just 37 requests (Output only 1.7k). Is there a way to reduce the input tokens being sent?
Modifying the initial export OPENAI_SYSTEM_TEXT doesn't seem to have much effect.


4.9 Release

[docs] Improve release process
[docs] Move notion of Jira to GitHub issues
[release] Perform 4.9 release

Will rebase commit list one more time.
website CI will fail until it is published


Bug: In Pending request, it does not show the count on Profile Page

Bug: In Pending request, it does not show the count on Profile Page
Acceptance Criteria
A number of request pending should be visible if there will be any request, make sure to keep the counting hidden if no pending request.

can i start doing this issue>>??

can i start doing this issue>>??

@Aryan1patel : I am already working on this one. You can create a new one

It works new version. Dont need to change anything now


U16: Create UI Inventory Background and Final Buttons

I added the final buttons and the background to the tiles. Both have the same style.
We really need to find a font that looks good ->I think for lobby screen we should use a pixel font but then for the game maybe leave it
Ah and i also already added the buttons for Leon's PR hope that doesn't give any conflicts

They look very nice! What about the start and share buttons? 🤔

lol they didn't get pushed I guess. They are now also in the PR


Update Solution.hs

the use of the filter function can be avoided,  zipWith already has this built in, it will only zip a number of times equal to the length of the smaller list. This can only be done because of "Assume that the two lists have the beers in the same order."

Thank you, @PP144gh! 🙌


[stdlib] Re-add withContiguousStorageIfAvailable to SubString.UTF8View

This is a second pass at the original patch, which broke an OS test. Originally added in #29094 and reverted in #29128. /cc @milseman
Due to an oversight it seems that we never added a
withContigousStorageIfAvailable implementation to SubString.UTF8View,
which meant that if you sliced a String you lost the ability to get fast
access to the backing storage. There's no good reason for this
functionality to be missing, so this patch adds it in by delegating to
the Slice implementation.
Resolves SR-11999.

@swift-ci please test

Build failed
Swift Test OS X Platform
Git Sha - c69cadae61d44191a087136d758dcff6b4667009

Ok, I definitely need a Swift expert to help me here, because I can't decipher that failure at all. This failure seems to be pretty far away from the change I made, though I admit that that doesn't mean all that much.

I think the DebugInfo test failure is fixed by #29149, but I’m not sure about the other one.

@swift-ci please test macOS platform

Thanks @airspeedswift. Ok, so is our conclusion that the full test suite does not catch the failure that caused us to back this out the first time @milseman?

The failure was here, which should build the test with the new compiler+stdlib, and run with the old stdlib. Your change should work if alwaysEmitIntoClient is working, IIUC.

@slavapestov would this be a correct use of alwaysEmitIntoClient?

Doh, I missed the fact that the test is generic. @Lukasa, can you have a concrete test and a generic one? The concrete one should always pass, but since witness tables are constructed at compile time, the generic one should only pass on bleeding-edge.
@lorentey, what would be the preferred way for Cory to differentiate between master and a shipped OS? Would that be something like:
  let hasSubstringWCSIA: Bool
  if #available(macOS 9999, iOS 9999, watchOS 9999, tvOS 9999, *) {
    expected = true
  } else {
   expected = false
  }
  ...

@swift-ci please test

Build failed
Swift Test OS X Platform
Git Sha - c69cadae61d44191a087136d758dcff6b4667009

Build failed
Swift Test Linux Platform
Git Sha - c69cadae61d44191a087136d758dcff6b4667009

@swift-ci please smoke test

@swift-ci please test

Build failed
Swift Test Linux Platform
Git Sha - e458538212e89a520c039ec6048ee087c57102eb

Build failed
Swift Test OS X Platform
Git Sha - e458538212e89a520c039ec6048ee087c57102eb


YAML/JSON field name typo: "reuired" -> "required"

Dunno if anyone is relying on the misspelt field name already?

🥇


ldap-checker module fails on LDAP signing

Describe the bug
The ldap-checker module fails to determine if LDAP signing is enabled.
To Reproduce
Enable LDAP signing with the registry key:
PS C:\> reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters /v ldapserverintegrity
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
    ldapserverintegrity    REG_DWORD    0x2

Install nxc from the git repo:
# which nxc
# pipx install git+https://github.com/Pennyw0rth/NetExec
[...]
done! ✨ 🌟 ✨
# nxc --version
1.1.0 - nxc4u - 1f8a0ef

Check if signing is enabled:
# nxc ldap <IP_ADDRESS> -u bob -p pass -d corp.local -M ldap-checker -k
SMB         <IP_ADDRESS>    445    DC01             [*] Windows Server 2016 Standard 14393 x64 (name:DC01) (domain:CORP.LOCAL) (signing:True) (SMBv1:True)
LDAPS       <IP_ADDRESS>    636    DC01             [+] corp.local\bob
LDAP-CHE... <IP_ADDRESS>    389    DC01             LDAP Signing NOT Enforced!
LDAP-CHE... <IP_ADDRESS>    389    DC01             [-] LDAPS Channel Binding is set to "Required"

Confirm that signing is enable with LdapRelayScan or ntlmrelayx.py:
# python3 LdapRelayScan.py -m BOTH -dc-ip <IP_ADDRESS> -u bob -p pass
~Domain Controllers identified~
   DC01.CORP.LOCAL
~Checking DCs for LDAP NTLM relay protections~
   DC01.CORP.LOCAL
      [-] (LDAP)  server enforcing signing requirements
  ssl_sock = ssl.wrap_socket(s,
      [-] (LDAPS) channel binding set to "required", no fun allowed

# ntlmrelayx.py -t ldap://<IP_ADDRESS> --no-dump --no-da
[...]
[*] Servers started, waiting for connections
[*] HTTPD(80): Client requested path: /bla
[*] HTTPD(80): Client requested path: /bla
[*] HTTPD(80): Connection from <IP_ADDRESS> controlled, attacking target ldap://<IP_ADDRESS>
[*] HTTPD(80): Client requested path: /bla
[-] HTTPD(80): Exception in HTTP request handler: Server rejected authentication because LDAP signing is enabled. Try connecting with TLS enabled (specify target as ldaps://hostname )

Expected behavior
LDAP signing result should display "enforced".
NetExec info

OS: Kali
Version of nxc: 1.1.0
Installed from: pipx

@zblurx can you check ? :)

Cannot reproduce
(venv) $ nxc ldap <IP_ADDRESS> -u accueil -p accueil -M ldap-checker
SMB         <IP_ADDRESS>   445    DC01             [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:testlab.local) (signing:True) (SMBv1:False)
LDAPS       <IP_ADDRESS>   636    DC01             [+] testlab.local\accueil:accueil
LDAP-CHE... <IP_ADDRESS>   389    DC01             [-] LDAP Signing IS Enforced
LDAP-CHE... <IP_ADDRESS>   389    DC01             LDAPS Channel Binding is set to "NEVER"
(venv) $ nxc --version
1.1.0 - nxc4u - 1f8a0ef4

@tiyeuse can you run ls -la ~/.local/pipx/venvs/netexec/lib/python3.10/site-packages/ | grep msldap ?
My output is :
$ ls -la ~/.local/pipx/venvs/netexec/lib/python3.10/site-packages/ | grep msldap
drwxrwxr-x    - tse 23 avril 19:59 msldap
drwxrwxr-x    - tse 23 avril 19:59 msldap-0.5.10.dist-info

The module won't work if it's not msldap 0.5.10.

It's failling with pipx since the poetry lock file was not updated when the version in the pyproject was changed.
The pyproject need to be updated

@mpgn very nice finding! It isn't even in the pyproject.toml lol. I will add it in #269

@tiyeuse can you try again with pipx install git+https://github.com/Pennyw0rth/NetExec@neff-dependencies --force?

Cannot reproduce
(venv) $ nxc ldap <IP_ADDRESS> -u accueil -p accueil -M ldap-checker
SMB         <IP_ADDRESS>   445    DC01             [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:testlab.local) (signing:True) (SMBv1:False)
LDAPS       <IP_ADDRESS>   636    DC01             [+] testlab.local\accueil:accueil
LDAP-CHE... <IP_ADDRESS>   389    DC01             [-] LDAP Signing IS Enforced
LDAP-CHE... <IP_ADDRESS>   389    DC01             LDAPS Channel Binding is set to "NEVER"
(venv) $ nxc --version
1.1.0 - nxc4u - 1f8a0ef4

@tiyeuse can you run ls -la ~/.local/pipx/venvs/netexec/lib/python3.10/site-packages/ | grep msldap ? My output is :
$ ls -la ~/.local/pipx/venvs/netexec/lib/python3.10/site-packages/ | grep msldap
drwxrwxr-x    - tse 23 avril 19:59 msldap
drwxrwxr-x    - tse 23 avril 19:59 msldap-0.5.10.dist-info

The module won't work if it's not msldap 0.5.10.

Ldap library version:
# ll /root/.local/bin/nxc
lrwxrwxrwx 1 root root 45 Apr 23 11:06 /root/.local/bin/nxc -> /root/.local/share/pipx/venvs/netexec/bin/nxc

# ls -la ~/.local/share/pipx/venvs/netexec/lib/python3.11/site-packages/ | grep msldap
drwxr-xr-x  11 root root    4096 Apr 23 11:06 msldap
drwxr-xr-x   2 root root    4096 Apr 23 11:06 msldap-0.5.10.dist-info

New reinstall from scratch:
# pipx uninstall netexec
uninstalled netexec! ✨ 🌟 ✨

# which nxc

# pipx install git+https://github.com/Pennyw0rth/NetExec@neff-dependencies --force
  installed package netexec 1.1.0+18c3fd0, installed using Python 3.11.8
  These apps are now globally available
    - NetExec
    - netexec
    - nxc
    - nxcdb
done! ✨ 🌟 ✨

# nxc ldap <IP_ADDRESS> -u bob -p pass -d corp.local -M ldap-checker -k
SMB         <IP_ADDRESS>    445    DC01             [*] Windows Server 2016 Standard 14393 x64 (name:DC01) (domain:CORP.LOCAL) (signing:True) (SMBv1:True)
LDAPS       <IP_ADDRESS>    636    DC01             [+] corp.local\bob
LDAP-CHE... <IP_ADDRESS>    389    DC01             LDAP Signing NOT Enforced!
LDAP-CHE... <IP_ADDRESS>    389    DC01             [-] LDAPS Channel Binding is set to "Required"

# python3 LdapRelayScan/LdapRelayScan.py -m BOTH -dc-ip <IP_ADDRESS> -u bob -p pass

~Domain Controllers identified~
   DC01.CORP.LOCAL
~Checking DCs for LDAP NTLM relay protections~
   DC01.CORP.LOCAL
      [-] (LDAP)  server enforcing signing requirements
      [-] (LDAPS) channel binding set to "required", no fun allowed

can you check without the flag -k @tiyeuse ? :)

The code workflow stop if channel binding is enabled(no check on LDAP signing performed) without Kerberos argument (it shouldn't imho):
# nxc ldap <IP_ADDRESS> -u bob -p pass -d corp.local -M ldap-checker
SMB         <IP_ADDRESS>    445    DC01             [*] Windows Server 2016 Standard 14393 x64 (name:DC01) (domain:CORP.LOCAL) (signing:True) (SMBv1:True)
LDAPS       <IP_ADDRESS>    636    DC01             [-] corp.local\bob:pass
LDAPS       <IP_ADDRESS>    636    DC01             [-] LDAPS channel binding might be enabled, this is only supported with kerberos authentication. Try using '-k'.

If I disable channel binding:

with Kerberos (assuming the IP address is replaced by the FQDN, I haven't checked the code)

└─# nxc ldap <IP_ADDRESS> -u bob -p pass -d corp.local -M ldap-checker -k
SMB         <IP_ADDRESS>    445    DC01             [*] Windows Server 2016 Standard 14393 x64 (name:DC01) (domain:CORP.LOCAL) (signing:True) (SMBv1:True)
LDAPS       <IP_ADDRESS>    636    DC01             [+] corp.local\bob
LDAP-CHE... <IP_ADDRESS>    389    DC01             LDAP Signing NOT Enforced!
LDAP-CHE... <IP_ADDRESS>    389    DC01             LDAPS Channel Binding is set to "NEVER"

without Kerberos

└─# nxc ldap <IP_ADDRESS> -u bob -p pass -d corp.local -M ldap-checker
SMB         <IP_ADDRESS>    445    DC01             [*] Windows Server 2016 Standard 14393 x64 (name:DC01) (domain:CORP.LOCAL) (signing:True) (SMBv1:True)
LDAPS       <IP_ADDRESS>    636    DC01             [+] corp.local\bob:pass
LDAP-CHE... <IP_ADDRESS>    389    DC01             [-] LDAP Signing IS Enforced
LDAP-CHE... <IP_ADDRESS>    389    DC01             LDAPS Channel Binding is set to "NEVER"

The code path with Kerberos seems to return false results.

With the fix in https://github.com/skelsec/msldap/pull/47 :
$ nxc ldap <IP_ADDRESS> -u accueil -p accueil -M ldap-checker -k
SMB         <IP_ADDRESS>   445    DC01             [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:testlab.local) (signing:True) (SMBv1:False)
LDAPS       <IP_ADDRESS>   636    DC01             [+] testlab.local\accueil
LDAP-CHE... <IP_ADDRESS>   389    DC01             [-] LDAP Signing IS Enforced
LDAP-CHE... <IP_ADDRESS>   389    DC01             [-] LDAPS Channel Binding is set to "Required"

Reopening as it is only fully fixed when https://github.com/skelsec/msldap/pull/47 is merged and a new version is released

Having a similar issue but with Kerberos.

Also when I set Channel Binding to Required I get this (the password is correct) no combination of arguments will get it to work

Can you run netexec --version ?


Multi-file upload: All files are uploaded to same folder (subfolders are not created)

As the title says, when using multi-file upload functionality, all the uploaded files are uploaded into same folder. The uploader does not create subfolders.

Affected dash-uploader version: 0.7.0dev 279ee87

Todo

[ ] Check if this can be fixed on Chrome
[ ] Check if this can be fixed on other browsers

[ ] If not, check if an alert could be shown to users with unsupported browsers

This also affects the case if there are files at different hierarchy levels having the same name+ext.
- file.txt
- folder\
  - file.txt

The current version simply overwrites the previously uploaded file.

Yeah that's a good point.


Add unit tests for each entitlement.

We currently have zero tests for entitlements besides the main libentitlement_test.go: TestRegisterDummyEntitlement.

Part one is merged: https://github.com/docker/libentitlement/pull/45
Part two is being reviewed: https://github.com/docker/libentitlement/pull/49


Tighten check for sending an unlock

Having a secret registered is not sufficient, since it may be registered after the lock has expired, the code below:
https://github.com/raiden-network/light-client/blob/60903231bc2bcebc366b8431061bb20610ca5579/raiden-ts/src/transfers/epics/locked.ts#L245
Should instead be:
(
    state.sent[secrethash].secret![1].registerBlock > 0 &&
    state.sent[secrethash].secret![1].registerBlock < locked.lock.expiration
)

Or equivalent (I did not check the API of lock.expiration). Note that this may or may not be a bug, it depends if transferUnlock.request is emitted for that case or not, I did not check this.
Edit: Here is the code that checks the lock.expiration against the block at which the secret was registered:
https://github.com/raiden-network/raiden-contracts/blob/93230caa554f6f29e55b4521aafd0af20b710b1f/raiden_contracts/data/source/raiden/TokenNetwork.sol#L1679-L1686
Use this to make sure there is not off-by-one errors

Superseded by #2077 and #2085


allow renderSrc to be specified as an array

For when webpack bundle is output as multiple chunk files
Simply concatenates the file sources - probably should find a way to evaluate them one after another

Coverage remained the same at 100.0% when pulling 31692d5398d6adcb8e6057b0b3836163f040327d on bguiz:patch-1 into 85ddc98a16e6e7a658ffefdce0e44ef885efad1c on markdalgleish:master.

Could you please add a test for this?

This PR isn't wasn't intended as a full thing on its own, rather a partial solution to the issue I raised in #42 (could you look into that please?)
Do you think this feature could be useful in its own right?

Thinking about this further, if your webpack bundle is being output in multiple chunks, it's probably a better idea to create a separate config for your static render function, otherwise you're introducing too much complexity to your build. I know I've found myself creating a separate render.js bundle with its own separate config when things got too complex. Closing this for now.


Cut labels between tiles.

I see the same problem in https://help.openstreetmap.org/questions/33485/cut-labels-with-mapnik and https://stackoverflow.com/questions/34719478/vector-labels-get-cutted-since-new-ol-version-3-12-1-and-vectortile-layer
But in this page just say how to resolve it.
I want to know the algorithms or souce code and learn you guys how to resolve it.
Now I know maybe use tile buffer to resolve it, but i want to know something more details.
I could not find code in openlayers code.
Some one can give me help?
Thanks

please go to https://stackoverflow.com/questions/tagged/openlayers for questions.


Little better check/handling of remove/insert headers related to payload diff

Will now get compile time errors on remove_fn, insert_fn functions if the header passed in for changes doesn't match the HeaderUpdates trait. If used for "other" headers, they can noop those trait functions.
Not the end all be all, but a bit better to what @drunkirishcoder was saying.

@clinedome i think this fairly well tested as it tests over what bounds it works for, which is ipv6 and it's exts only. We should elaborate on tests once we have more ext headers too.


Archive/delete osc-update-metadata

With the new DBT/OpenMetadata pattern for managing metadata, I suspect that this repo, which was never fleshed out, is obsolete and can be deleted:
https://github.com/os-climate/osc-update-metadata
I plan to delete along with other obsolete/unused repos.

I have archived this repository. It's reversible, so safer. We can delete later if nobody squeals.


[18.09] dovecot: fix CVE-2019-3814

Motivation for this change
Stable version of #55343.
I wasn't able to identify which of the commits in https://github.com/dovecot/core/commits/<IP_ADDRESS> are related to which of the changes mentioned in https://dovecot.org/list/dovecot-news/2019-February/000394.html. However, they both seem desirable so I included all three commits.
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[x] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[x] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Assured whether relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Thank you! :+1: on those commits.
The one other change also looks like a useful bugfix to backport to me: https://github.com/dovecot/core/commit/964112f05ed534c528fc3dfe0d3b996964820d8d
See https://github.com/dovecot/core/compare/2.3.4...release-2.3.4.
@peti What do you think? IMHO bumping to <IP_ADDRESS> is preferable here because upstream seems to be doing a good job with their patch releases.

IMHO bumping to <IP_ADDRESS> is preferable here because upstream seems to be doing a good job with their patch releases.

I don't feel too strongly about it. If you prefer doing a full version bump, then I won't object.

Since I also prefer a full version bump, that's what I switched to. However, I had to backport a lot of commits.


Create an Account on the Gateway Demo System

Tutorial URL: https://developers.sap.com/tutorials/gateway-demo-signup.html
Please specify the step you are referring to 5:
i would like to confirm access to the same set of data that is being exposed in subsequent steps, like e.g. fiori, however the standard table browser transaction SE16 is throwing an authorization error when browsing the actual data:
Authorization Obj. S_TABU_DIS Table Maintenance (using standard tools such as SM30)       Authorization Field ACTVT      Activity                                                                03       Authorization Field DICBERCLS  Table Authorization Group                                               &NC&
how do i obtain the authorization to compare data at the source with the data made later available in Fiori, odata, etc?

First this issue doesn't fall within the scope of this tutorial.  For general questions on the usage of trial systems outside the scope of a particular tutorial, you should really ask those on the SAP Community Q&A instead. The ES5 system - Gateway Demo System is a shared environment with limited access to directly support a set of learning materials. The account security is intentionally limited to only the scope of what is necessary to perform those specific tutorials.


chore: release 1.3.0

:robot: I have created a release *beep* *boop*
1.3.0 (2019-09-16)
Bug Fixes

docs: remove reference-docs anchor (812bdc4)

Features

load protos from JSON, grpc-fallback support (abe6f81)

This PR was generated with Release Please.

Release is at https://github.com/googleapis/nodejs-asset/releases/tag/v1.3.0

The release build has started, the log can be viewed here. :sunflower:

:egg: You hatched a release! The release build finished successfully! :purple_heart:


Implement user defined planner for create_struct & create_named_struct

Which issue does this PR close?
Closes #11221
Closes #11222
Rationale for this change
Part of #11207
What changes are included in this PR?
Are these changes tested?
Using existing test cases
cargo test

Are there any user-facing changes?

Thanks @dharanad and @alamb

Thank for your time and help @jayzhan211 & @alamb


Ability to adjust sensitivity

The accuracy of the software depends on the game ran through it, In some games I've noticed the results being up to 18 fps off from actual performance(so far always too high of a framerate). How possible would it be to add some sort of calibration mode? Say you can provide it with a video file with known Min, Max, Avg, and possibly frametimes, and calibrate the sensitivity until your results are within an acceptable margin of error.

I agree that some sort of calibration would be useful.
I ran a GL test with various framerates (using a frame limiter), starting wih 1 fps, then 5 fps and so on.
Recorded the process on video and pass it through trdrop while adjusting the pixel differences until the framerates match. IIRC the value was 15.
https://youtu.be/P7snMvpNRyw
The problem is that when I used a more complex test (more motion on screen) I couldn't replicate the results, the numbers were all over the place, even though I knew the real framerates and tried again to adjust pixel differences.
https://youtu.be/ulJe6w8w8bk
Is possible that it simply was too much motion on the screen? In any case, looks like calibration depends on too many factors to be covered by a single video file with known numbers, although I wouldn't mind if the author would provide one to cover most cases.

I can explain my thought process as to why this happens and why I'm against your proposed solutions. I'll enumerate them so you can reference them while arguing.

I see trdrop as benchmarking software - it returns the framerate that it returns with a certain configuration and that's the "truth" for now. We had some discussions going on to renaming the framerate trdrop returns to "visual" framerate, or maybe vFPS, as the program can only infer framerates from moving changing images. The somewhat popular video of Resident Evil where you open up some settings and the image doesn't alter, trdrop returns 0 FPS, which is correct, in my opinion. It is impossible to infer the actual framerate in these scenarios, and I see it as a user-error to try to do that. (A good idea to fix that would be to create a tutorial or better documentation)
If you create an FPS limited video (and make sure by either counting manually or programmatically creating it to be a specific framerate), and show me that trdrop returns the wrong framerate/time, this counts as a bug to me, and I will try to fix that.
If you think you have a recording of a fixed framerate and trdrop returns a different result, this typically can either be corrected by adjusting the pixel-difference, or there is something strange going on. Usually (in the previous issues), we had hidden encodings, the recording software not fixing the framerate, or other user-related issues. I encourage you guys to enable delta-rendering, go frame by frame for 30 frames (if you record with 30 fps) and count the difference frames yourself. Then the issue will be showing itself (typically some white pixels where you didn't anticipate them or the inverse of that)

So having said that, the second video of @dubigrasu is really interesting, and I'm wondering a bit myself why this happens. I kind of remember having found a bug in the algorithm in January, but I have to dig a bit and check if I fixed it. But if you find these kinds of issues, please contact me with the raw video file to test it myself. Even better if you have already checked the delta-renderings and detected the "error"-frames.
The calibration is a demanding issue to deal with, as I do not want to encourage faking results. Imagine I want to analyze some PS5 game and see if it holds the 60 FPS for whatever game. Now, if I want to make it look worse, I assume an average FPS of 30, just to auto-calibrate the tool to return that value. The only way I currently envision this not to be possible is to embed the calibration information into the rendered video itself (like a text field where I say "pixel-difference: 10"), so people can compare tests fairly.
I'm very open to your ideas and responses, but otherwise, I'll hope you can either provide me with hard evidence or send me a video yourself. Thanks for being so interested in the software and helping it get better :+1:

Would it help to send that second video? Is rather big, 2GB.
https://drive.google.com/file/d/1YqtJe4xXb_XlCime5czoDhNYXzKx3Fvv/view?usp=sharing

Would it help to send that second video? Is rather big, 2GB.
https://drive.google.com/file/d/1YqtJe4xXb_XlCime5czoDhNYXzKx3Fvv/view?usp=sharing

Thats totally fine, I have some storage left on my device. The only thing I cant guarantee is when I can get to the analysis, as I'm stressed with my full-time work for the foreseeable future. Please try to keep that link alive for some time.


Run app without "compiling"

I tried to follow best practices when creating Bowtie which led me down the path of using yarn and webpack to fetch and bundle up the app. I don't necessarily want to deviate too much from this but it does create a poorer user experience compared to a package that just let's you run the app directly.
I am thinking that if I can just translate *.jsx files and grab js libraries from cdns that this could be possible.

[ ] create a new command e.g. run
[ ] create links for packages in packages.json from unpkg.com
[ ] translate jsx to js with babel
[ ] insert sources into index.html

Update: Putting this on hold for now, since I'm not sure how technically feasible it is. In the mean time building apps has been optimized, especially for subsequent builds. I've also added a run command that combines building and serving into one command.

Thought about this again. I think the best thing to do is compile a HUGE bundle that combines all the js libraries used by bowtie. It would be a little ugly having a 1mb binary blob in the repo, but I think the overall ux outweighs that.


CB-11993 - windows platform doesn't test all node versions on appveyor and travis

Platforms affected
Self.
What does this PR do?
Makes appveyor and travis CI test for all node versions.
What testing has been done on this change?
We'll find out if this PR passes on appveyor or travis, since we are modifying the CI config files themselves.
Checklist

[X] Reported an issue in the JIRA database
[X] Commit message follows the format: "CB-3232: (android) Fix bug with resolving file paths", where CB-xxxx is the JIRA ID & "android" is the platform affected.
[X] Added automated test coverage as appropriate for this change.

Failing on Travis 0.12, 4, and 6 (but works on 0.10).
Env vars expected are null because Travis is on Linux and not on Windows. e.g https://github.com/apache/cordova-windows/blob/1417b932c836c0fe21cca902e5098fa12e98fe82/template/cordova/lib/deployment.js#L128

Current coverage is 74.34% (diff: 100%)

Merging #201 into master will not change coverage

@@             master       #201   diff @@
==========================================
  Files            14         14
  Lines          1949       1949
  Methods         366        366
  Messages          0          0
  Branches        392        392
==========================================
  Hits           1449       1449
  Misses          500        500
  Partials          0          0

Powered by Codecov. Last update 1417b93...cfe0187