Posted by Daniel Augusto Veronezi Salvador on Nov 12

Severity: important

Affected versions:

- Apache CloudStack 4.0.0 through 4.18.2.4
- Apache CloudStack 4.19.0.0 through 4.19.1.2

Description:

Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the
primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack
4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that...

Many new testing and monitoring products were on display last month at the AHR Expo in Orlando, Florida, where manufacturers showcased and demonstrated their newest, smartest products.

Over a year of research and design went into the 2018 Dealer Design Awards gold-winning product in the Residential Controls category. After listening to feedback from both contractors and consumers for a more basic, easy-to-use, and cost-effective thermostat, Nest created the Nest Thermostat E.

The project team and property management realized they needed to maximize open space for use by hotel guests. They chose LG’s Multi V™ 5 and Multi V™ S VRF systems, noted for energy efficiency and flexibility in design and installation options.

Contractors have numerous options for offering homeowners solutions in energy management systems.

Michael Hausenblas talks with host Kim Carter about topics covered in Michael’s ebook Container Networking, such as single vs. multi-host container networking, orchestration, Kubernetes, service discovery, and many more. Michael and Kim also discuss the roles that IPTables plays, how the allocation of IP addresses is handled, along with the assignment of ports. Overlay networks are covered along with topics such as the open Container Network Interface (CNI).

Jens Neuse, founder of Wundergraph, joins SE Radio host Jeff Doolittle for a conversation about back ends for front ends, or BFF. Jens begins by explaining how a heavy integration burden is often placed on front-end development teams. When multiple APIs must be integrated, it can be challenging for client development in web, mobile, and desktop environments. Explaining how APIs should be treated as dependencies, just like packages, the episode explores BFF patterns and use cases, as well as the future potential emergence of a “git for APIs” standard. This episode is sponsored by ClickSend. 

The Corsair Scimitar RGB Elite is a mouse that offers plenty of buttons, turns heads with its MMO and MOBA gaming performance, and excellent build quality.... [PCSTATS]

If you export your WordPress blog, it is delivered to you as an RSS feed that holds all of the blog's entries, pages and comments. WordPress makes use of five namespaces and calls the format WordPress eXtended RSS (WXR). I'm working on a Java application that converts a WXR file into a set of static HTML pages.

The distributed social network Mastodon has grown to 12.8 million user accounts, supporting itself through user donations and a lot of effort by the volunteers running servers. There's no CEO changing the network at whim, no ads and no algorithms that manipulate what you see to increase engagement. Just a scroll of posts by the people you follow pulled from all over the world.

Every Mastodon account has an RSS feed that can be found by going to the user's Mastodon page and adding ".rss" to the URL of that page. For example, the RSS feed for Bonaventure Software is at this address:

https://mastodon.online/@bonaventuresoft.rss

The feeds are valid RSS and use the Media-RSS and Webfeeds namespaces.

The Media-RSS content element contains the photo, audio or video included in the Mastodon post, if one is present:

<media:content url="https://files.mastodon.online/media_attachments/files/109/326/769/636/254/303/original/552ebb9fd3f30171.png" type="image/png" fileSize="49052" medium="image">
  <media:rating scheme="urn:simple">nonadult</media:rating>
  <media:description type="plain">Eli Lilly & Co stock performance graph over the last month, showing lower valuations than the one caused by the bogus announcement of free insulin.</media:description>
</media:content>

The Webfeeds icon element holds the URL of the user's avatar:

<webfeeds:icon>https://files.mastodon.online/accounts/avatars/109/298/336/948/075/673/original/e76dfce4df4bef76.gif</webfeeds:icon>

One potential improvement to the feed would be to add a link element from the Atom namespace to identify the URL of the RSS feed, as in this example:

<atom:link href="https://mastodon.online/@bonaventuresoft.rss" rel="self" type="application/rss+xml" />

That might not happen anytime soon. Mastodon is a frenetic open source project with 61 open issues and suggestions involving RSS.

If you publish an RSS feed, you should do a solid for the developers of RSS readers by including a guid in each item. The guid's job is to be a unique identifier that helps software downloading your feed decide whether it has seen that item before. Here's the guid for an item on the arts and technology blog Laughing Squid:

<guid isPermaLink="false">https://laughingsquid.com/?p=914660</guid>

No other item on Laughing Squid will ever have this guid value. It's a URL that loads a blog post with the title Playful Elephant Pretends to Eat Woman's Hat. If you load the guid's URL https://laughingsquid.com/?p=914660, it redirects to the permanent link of the post. Because the guid is not the permanent link, there's an isPermaLink attribute with a value of false.

Most guid values in RSS feeds are the permanent link of the item, as in this example from the world news site Semafor:

<guid>https://www.semafor.com/article/07/07/2023/us-jobs-data-what-experts-make-of-the-new-numbers</guid>

A drawback of using the permalink is that if any part of the URL changes -- such as the title text or the domain name -- the guid changes and RSS readers will think this is a new item to show the feed's subscribers, when it's actually a repeat.

A guid doesn't have to be a URL. It can be any string that the feed publisher has chosen to be unique. Here's the guid from the RSS Advisory Board's feed for this blog post:

<guid isPermaLink="false">tag:rssboard.org,2006:weblog.217</guid>

Our guid follows the TAG URI scheme, a simple way to assure uniqueness by putting these five components together in this order:

1. The text "tag"
2. A domain owned by the feed provider
3. A year the provider owned that domain
4. A short name for the feed different from any other feed on the site
5. The internal ID number of the post

There's different punctuation between each component. The year 2006 was when the board began using the domain rssboard.org. No one else used that domain that year, so any feed reader that stores "tag:rssboard.org,2006:weblog.217" as this item's guid should never encounter that value in any other item on any other feed.

To see how RSS 2.0 feeds are using guid, several thousand feeds were downloaded this evening from an RSS aggregator that publicly shares the OPML subscription lists of its users.

Category	Total	Percentage
Total number of feeds	4,954	--
Feed using guid	4,777	96.4%
Feeds using non-permalinks in guid	752	15.2%

The term guid means "globally unique identifier," but RSS 2.0 does not require global uniqueness in guids. Because the TAG URI scheme does a good job of serving that purpose, Blogger, Flickr, MetaFilter, SoundCloud and The Register are among the sites using it in their feeds.

Black students are disproportionately impacted by student loans, but this debtors' union is taking steps to repair that disparity.

handy reference

It's home to the largest collection of childhood objects in the UK and recently reopened to the public after having a little makeover.

Families have had to leave their homes and emergency services are helping people as they deal with the impact of the worst flooding in the country for many years.

New research shows the amount of carbon dioxide released into the atmosphere from private jets between 2019 and 2023.

Museum Digital Archives Internship (Chicago--virtual)

Another training article. Something my trainees weren't doing very well -drilling. Not very exciting, but someone might find it useful.

Title: Idioms- Furniture and Household Fittings
Topic: Idioms
Level: Advanced
Information: Choose the correct answer.
Link: https://www.usingenglish.com/quizzes/576.html

Title: Easily Confused Words
Topic: Vocabulary
Level: Advanced
Information: Choose the correct answer.
Link: https://www.usingenglish.com/quizzes/585.html

This technical article discusses twelve different methods for laying high voltage cables. Out of the ten, four are deemed conventional and eight are deemed progressive. Many various utilities and companies all across the globe are making use of them, though... Read more

The post Twelve high voltage cable construction techniques used worldwide appeared first on EEP - Electrical Engineering Portal.

Follow us! @CareerTechTest

Nearly a year after releasing its Moments curation feature, Twitter Moments is now available to users.

Twitter Moments are curated stories about what’s happening around the world—powered by Tweets.  Originally, a user could click on Moments on their profile page to find curated stories, i.e News, Entertainment, Sports, and Fun, in a typical news format.

But now, it’s easy to create your own story with Twitter Moments.  I think this is a great way to share school events and activities and it could also assist with classroom discussion, especially when dealing with current events.

Either watch the video by Richard Byrne of Free Technology for Teachers or follow the directions from Twitter below:

How to create a Moment

There are three ways to begin creating your own Moment. You can access Moments through the Moments tab, your profile page, or through a Tweet detail. To get started all you need is a title, description, Tweets, and a selected cover image.

From the Moments tab:

1. From the Moments tab, click the Create new Moment button.
2. Click the Title your Moment field to give your Moment a name.Note: Titles can be up to 75 characters in length.
3. Click the Add a description field to type in a description for your Moment.Note: Descriptions can be up to 250 characters in length. 
4. Choose Tweets to add to your Moment: 
1. From the Add Tweets to your Moment section at the bottom of the page, quickly access content to select Tweets from Tweets I’ve liked, Tweets by account, Tweet link, and Tweet search prompts. 
2. To add a Tweet to your Moment, click on the checkmark icon 
5. Click Set cover to choose a cover image from one of your selected Tweets, or to upload an image from your computer. Drag your selected image to set a Mobile preview, click the Next button, then click the Save button.Note: To change your selected image, hover over the cover image and click on Change cover media. After you’ve set your cover media, the source will be credited below the image. 
6. Once you have Tweets in your collection, click on the up  or down arrow buttons  to the right of a Tweet to move it up or down.
7. Click on the delete button  to remove a Tweet from your Moment.
8. Click on the crop button  next to any of your selected Tweets to make an image selection for mobile viewing.
9. Click the Finish later button at the top of the page to save a draft.
10. When you are ready to make your Moment live, click on the Publish button at the top of the page.

From a Tweet:

1. Click the more button 
2. Select New Moment to add the Tweet to a new Moment.Note: Any completed Moments or Moments drafts you have in progress will also be listed in the drop-down to choose from.
3. Follow the directions above to complete your Moment.

From the Moments tab on your profile page:

1. Click on the Moments tab, then click the Create new Moment button to get started.
2. Follow the directions above to complete your Moment.

From the More menu at the top of the page:

1. Click on ••• More while in draft mode.
1. Select Choose mobile theme color if you’d like to apply one.
2. Select Mark that Moment contains sensitive material if appropriate.
3. Select Share Moment privately to copy and paste your Moment’s URL to share privately with others. Note: The Moment will only be visible to people who have the URL, it will not be visible on your profile page, or published on Twitter.
4. Select Unpublish Moment to unpublish a Moment you have previously published. 
5. Select Delete Moment to permanently remove the Moment from your profile and Twitter. Note: You will see a confirmation pop-up message to confirm the deletion.

After you’ve saved your Moment as a draft:

• You can click on the Edit button under the Moment description to continue editing your Moment.
• Click the Tweet button under the Moment description to share your Moment with your followers. Note: The Tweet compose box will pop up giving you an opportunity to edit or add to the auto-populated Moment title and link in the compose box.
• Click on the more button  under the Moment description to send your Moment via Direct Message, and to view the copy and embed links to your Moment. Note: As you scroll through your saved or published Moment you will see a menu pop-up on the left hand side to conveniently Edit, Tweet, or Message your Moment.

Frequently asked questions

Can I make my Moments private?
When creating a Moment, you can select Share Moment privately, which will only make the Moment available to those who have the link. If you would like to make previously published or shared Moments visible to only you, select Unpublish Moment.

Can content in my Moment be reported?
Yes. Content displayed in a Moment, such as photos, videos, or Tweets can be reported. To learn about the various options for reporting components of a Moment, read our How to report violations article.

What happens if a Tweet I included in my Moment is reported?
If the cover or any of the individual Tweets of your Moment is reported to us and found to be in violation of the Twitter Rules, your account may be locked—even if you did not author the Tweet.

The auxiliary DC control power system is considered the most crucial element of a protection, control, and monitoring system. The failure of the direct current (DC) control power can result in the inability of fault detection devices to identify faults,... Read more

The post Auxiliary DC power system used for fault detection, trip coils and remote operation appeared first on EEP - Electrical Engineering Portal.

In addition to the known phenomena of lightning and switching, numerous new sources, in particular power converters, can cause disturbance in installations. This disturbance, which is generated by the installation itself or carried by the system from external sources or... Read more

The post Six less known phenomena that can cause disturbance in electrical installations appeared first on EEP - Electrical Engineering Portal.

Measuring power quality and finding a bugbear in the network which is messing with the power are considered a highly paid job. Every electrical network and its problems with harmonics, transients, or disturbances are unique and need careful planning, setting... Read more

The post How to measure power quality? What devices should you use and what to measure? appeared first on EEP - Electrical Engineering Portal.

Transformers are not perfect. Transients and noise (radio-frequency and low-level spikes) normally pass through transformers, not only by way of the magnetic lines of flux between the primary and the secondary windings but through resistive and capacitive paths between the... Read more

The post The magic that isolation transformer uses to suppress transients and noise appeared first on EEP - Electrical Engineering Portal.

1st part | 2nd part | 3rd part The list of the last eleven household circuit wirings: Three-way switches & light fixture (fixture at start of cable run) Three-way switches & light fixture (fixture at end of cable run) Three-way... Read more

The post 31 Common Household Circuit Wirings You Can Use For Your Home (3) appeared first on EEP - Electrical Engineering Portal.

1st part | 2nd part | 3rd part The list of the next ten household circuit wirings: Double receptacle circuit with shared neutral wire (receptacles alternate circuits) Double receptacle small-appliance circuit with GFCIs & shared neutral wire Double receptacle small... Read more

The post 31 Common Household Circuit Wirings You Can Use For Your Home (2) appeared first on EEP - Electrical Engineering Portal.

The circuit wirings in this article show the most common wiring variations for typical electrical devices. Most new wiring you install will match one or more of the wirings shown. Find the wirings that match your situation and use them to... Read more

The post 31 Common Household Circuit Wirings You Can Use For Your Home appeared first on EEP - Electrical Engineering Portal.

First, let’s say a word or two about the essentials of power distribution systems for our young electrical engineers. An electric distribution system, or distribution plant as it is sometimes called, is all of that part of an electric power... Read more

The post The loop electrical distribution system used to supply bulk loads (industrial plants and buildings) appeared first on EEP - Electrical Engineering Portal.

Jet Pumps are mounted above ground and lift the water out of the ground through a suction pipe. Jets are popular in areas with high water tables and warmer climates. There are two categories of jet pumps and pump selection... Read more

The post Jet pumps used for private well systems or low flow irrigation applications appeared first on EEP - Electrical Engineering Portal.

The problem of energy accessibility and production on Mars is one of the three main challenges for the upcoming colonisation of the red planet. The energetic potential on its turn is mainly dependent on the astrophysical characteristics of the planet.... Read more

The post Want to live and use energy on Mars? Why not? appeared first on EEP - Electrical Engineering Portal.

Photovoltaic markets can be classified based on the end-use application of the technology. The most common PV projects are off-grid applications. Water pumping also represents an important application of PV, particularly in developing countries. The largest long-term market potential for... Read more

The post Photovoltaic End-Use Application Markets appeared first on EEP - Electrical Engineering Portal.

For the last several decades, every engineering task related to processing control is realized by the use of PLC (Programmable Logic Controller). If we are talking about induction motor control, which is the most common case, usually a VFD (Variable... Read more

The post Learn how to use PLC and VFD for pump control: Power and control circuits analysis appeared first on EEP - Electrical Engineering Portal.

January 12
Fourth Grade Community Project: Going to the Museum
Encourage your students to research and visit a museum in your community with these activities.

At low voltage level, SCADA applications are usually used for process control and monitoring of equipment. Furthermore, incoming circuit breakers or switch disconnectors inside large LV switchboards may also be operated remotely, by the command given from the SCADA working... Read more

The post Field devices and signals used for LV SCADA operations appeared first on EEP - Electrical Engineering Portal.

You should know that single-phase motors are rarely rated above 5 kW. Fractional-kilowatt motors, most of which are single-phase, account for 80−90% of the total number of motors manufactured and for 20−30% of the total commercial value. A typical modern... Read more

The post The most used types of single-phase motors in the world appeared first on EEP - Electrical Engineering Portal.

Star-delta starting is frequently employed with high horsepower motors to mitigate inrush current during the start-up stage and to reduce starting torque. Star-delta starting involves initially connecting the motor stator windings in a star configuration during the motor startup phase,... Read more

The post Star-delta starting used with large horsepower motors appeared first on EEP - Electrical Engineering Portal.

A sixteen-year-old boy insinuates himself into the house of a fellow student from his literature class and writes about it in essays for his French teacher.

Exclusive photos and clips from our Q&A with In the House director Francois Ozon

Annissa Coy answers a question she’s never been asked before: “Would you ever use clean bric-a-brac heavy clean, high density line item…?” In her response Coy shares her approach to efficient billing.

“In the first part of this series, I identified the steps to create a respiratory protection program. This second article will cover how to implement and follow your program. Once everything is implemented, you will have an OSHA-compliant program tailored to your company and designed to protect employees from the hazards in the Restoration Industry,” Barry Rice, CSP, writes.

The Institute of Inspection, Cleaning and Restoration Certification (IICRC) is seeking volunteers from the User category to join the consensus body for the revision of the IICRC S300 Standard for Professional Upholstery Cleaning. Users of professional upholstery cleaning services are encouraged to apply by contacting IICRC Standards.

Lightspeed Restoration announces that its industry-leading training facility has been officially approved by the Institute of Inspection Cleaning and Restoration Certification (IICRC).

04-2014 : Montréal Exchange brings options trading to university campuses across Canada

The PA House Judiciary Committee on Tuesday passed 8 bills designed to combat human trafficking. Here are highlights as we shared them on Twitter. The PCC has long supported such legislation. PA House Judiciary Committee this morning passed 8 bills with strong bipartisan support that are designed to fight the crime of human trafficking. The PCC has long supported such measures. We talked with committee Chair Rep. Rob Kauffman after the vote. @PAHouseGOP @PaHouseDems pic.twitter.com/FF7POQKYL4 — PAcatholic (@PAcatholic) April 20, 2021 A package of 8 bills was passed this morning by the PA House Judiciary Committee to combat human trafficking in PA. The package included HB 246 by Rep. Natalie Mihalek. She talked about the bill prior to the vote. @PAHouseGOP @RepMihalek pic.twitter.com/VYPJc2NSpR — PAcatholic (@PAcatholic) April 20, 2021 Rep. Meghan Schroeder explains her bill on human trafficking, HB 580, to the PA House Judiciary Committee. The bill passed this morning and we hope it will soon be considered by the full House. The PCC supports these human trafficking bills. @PAHouseGOP pic.twitter.com/SRD61DojSF — PAcatholic (@PAcatholic) April 20, 2021 Rep. Craig Williams is the prime sponsor of HB 1130, a measure designed to fight human trafficking that passed the PA House Judiciary Committee this morning. Williams talked about his bill and about his background. @PAHouseGOP pic.twitter.com/3T3xPPG1CX — PAcatholic (@PAcatholic) April 20, 2021 PCC has long supported legislation to fight human trafficking. That has carried over into the package of bills that was passed today out of committee dealing with that crime. Here, Rep. Marci Mustello, sponsor of HB 231, addresses House Judiciary Comm. @PAHouseGOP @Marci4PA11 pic.twitter.com/7tbM8o6Iwy — PAcatholic (@PAcatholic) April 20, 2021 Rep. Barry Jozwiak addresses the PA House Judiciary Committee prior to the vote on his human trafficking bill, HB 753. The bill was passed along with 7 other bills designed to combat human trafficking. The PCC has long supported such legislation. @PAHouseGOP pic.twitter.com/AWJWRL8Vmk — PAcatholic (@PAcatholic) April 20, 2021          

The PA House Health Committee today unanimously passed Senate Bill 500, which calls for Medicaid coverage of human donor milk. The milk is vitally important for many newborns suffering from health issues. The PCC supports this issue. It has already passed the Senate and just needs approval by the full House. Here are the Facebook and X links for the two stories we ran. https://fb.watch/nLLsZciiLe/?mibextid=cr9u03 https://fb.watch/nLLsZciiLe/?mibextid=cr9u03 https://x.com/pacatholic/status/1714669965268193289?s=46&t=BhvQl7L4iZmDeA-ftim4Og https://x.com/pacatholic/status/1714667221551587757?s=46&t=BhvQl7L4iZmDeA-ftim4Og    

PA Speaker of the House Mike Turzai (R-Allegheny) is praising a decision by the U.S. Court of Appeals which will uphold the traditional practice of having a session-opening prayer. “We are pleased that the Third Circuit has found that our prayer complies with the United States Constitution,” Turzai said, “and has issued a precedent setting decision entirely in the House’s favor. As a result, we expect the House to be able to resume its tradition of welcoming guest chaplains as it has in the past.” In 2016 a group of atheists and other non-believers sued the House, claiming their exclusion as guest chaplains violated the Constitution. The plaintiffs also challenged the presiding officer’s traditional request to rise for the prayer and the pledge to the flag. Last year, a federal judge in Harrisburg ruled in favor of the plaintiffs and limited the practice to member-led prayers. But the House appealed. Late last month a three-judge panel of the Third Circuit ruled in the House’s favor on all counts. “By a 2-1 vote the panel held the House’s prayer practices were constitutional because they fit within the long history of legislative prayer in this country,” Turzai said. “The majority explained that ‘only theistic prayer can satisfy the historical purpose of appealing for divine guidance in lawmaking.’” Turzai said the panel ruled 3-0 that it is constitutional and not coercive to request that guests stand for the prayer and the pledge.              

The Health Committee within the Pennsylvania House of Representatives has approved a resolution which condemns the free availability of pornography based on the public health hazard that it presents by harming children and families across the Commonwealth. “It’s a public awareness resolution,” said Chairman Matt Baker (R-Tioga). With the resolution, Pennsylvania joins nineteen other states that have passed or introduced a similar measure. “Most people understand pornography is bad, and child pornography is particularly bad,” continued Baker. The resolution cites that due to advances in technology, young children are now exposed to pornography at alarming rates, with as many as 27% of older millennials reporting that they first encountered explicit pornography before even reaching puberty. “As someone with two small daughters, I think that it’s something we owe a certain amount of time and effort to look at,” said Rep. Eli Evankovich (R-WestmorelandAllegheny). House Resolution 519 also encourages a three-pronged approach to confronting this issue with education, prevention and research and policy change at the community and social levels. Prior to the vote, Rep. Martina White (R-Philadelphia) stated that her intent is to “make sure that families are aware of this issue, that it is a concern and it can become, if it not already is, a public health crisis.”

PA CATHOLIC CONFERENCE APPLAUDS HOUSE PASSAGE OF MARRIAGE ACT HARRISBURG, PA — The Pennsylvania Catholic Conference applauds today’s passage of House Bill 360, which, in addition to addressing some covid-19 related concerns, establishes 18 as the minimum age for marriage in Pennsylvania. The bill has been supported by the PCC since its inception, particularly as a means to help fight human trafficking. “This is good legislation for a number of reasons—first and foremost that it will help to end a problem in the law that has allowed girls as young as 12 to be married in PA,” said PCC Executive Director Eric Failing. “This can place them in a dangerous situation where they can be victims of domestic violence and exploited in sex trafficking. Advocates believe there are over 2,000 children who have been married in Pennsylvania.” The PCC has supported several measures designed to fight human trafficking, including the Safe-Harbor law that passed last session and the Buyer Beware act that passed earlier this session. Failing thanked the sponsor of the bill, Sen. Jesse Topper (R-Bedford, Franklin, Fulton) for his leadership and persistence on seeing the bill through.   Pennsylvania is one of 27 states that do not have a minimum age to marry. Currently, the state permits a minor under age 16 to marry with parental consent and a court determination that the marriage is in the best interest of the minor. The law also permits a 16 or 17 year old to marry with only parental consent.   The Pennsylvania Catholic Conference is based in Harrisburg and is the public affairs arm of Pennsylvania’s Catholic bishops