The handling of the virtual registry for desktop bridge applications can allow an application to create arbitrary files as system resulting in privilege escalation. This is because the fix for CVE-2018-0880 (MSRC case 42755) did not cover all similar cases which were reported at the same time in the issue.

A buffer overflow in the CheckMonitor() function in the Common Desktop Environment 2.3.1 and earlier and 1.6 and earlier, as distributed with Oracle Solaris 10 1/13 (Update 11) and earlier, allows local users to gain root privileges via a long palette name passed to dtsession in a malicious .Xdefaults file. Note that Oracle Solaris CDE is based on the original CDE 1.x train, which is different from the CDE 2.x codebase that was later open sourced. Most notably, the vulnerable buffer in the Oracle Solaris CDE is stack-based, while in the open source version it is heap-based.

A buffer overflow in the _SanityCheck() function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 (Update 11) and earlier allows local users to gain root privileges via a long calendar name or calendar owner passed to sdtcm_convert in a malicious calendar file. The open source version of CDE (based on the CDE 2.x codebase) is not affected, because it does not ship the vulnerable program. Versions 1.6 and below are affected.

A difficult to exploit stack-based buffer overflow in the _DtCreateDtDirs() function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 (Update 11) and earlier may allow local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges via a long X11 display name. The vulnerable function is located in the libDtSvc library and can be reached by executing the setuid program dtsession. Versions 2.3.1 and below as well as 1.6 and earlier are affected.

WordPress Windows Desktop and iPhone Photo Uploader plugin suffers from a remote shell upload vulnerability.

Research by fDi Intelligence reveals which countries receive more than their ‘expected share’ of FDI. 

London has been named fDi’s inaugural Fintech Location of the Future for 2019/20, followed by Singapore and Belfast. 

A look at the results of fDi’s rankings throughout 2019 finds that Singapore and New York dominated the year’s league tables, followed by Shanghai, Tokyo and London

The UK is the Europe's leading destination for foreign investment in green energy, followed by Spain, finds fDi’s Top European Locations for Renewable Energy Investment.

Severe threats to the environment accounted for all of the five most likely long-term risks in the WEF’s Global Risks Report 2020.

The US has the world’s strongest soft power, while China and Russia are rising in influence, according to a recent ranking from Brand Finance.

The UK is the top country, but Dublin is leading city, for foreign companies setting up headquarters in Europe, according to fDi’s ranking.

Frankfurt (Oder) is building on the strengths of its university to foster the development of successful start-ups through new co-working spaces and the promotion of sustainable practices and products. 

Poland’s Wrocław has turned in a stellar performance in fDi’s Return on Investment study, landing the city the top slot in the Return on Budget and Return on Personnel Investment categories. 

Over the past three years, the UK has led Europe for financial services FDI, with the US as top investor. Emma McCoy reports.

Dubai outstrips other Middle East cities as top destination for office openings.

The UAE remained the Middle East's most popular destination for foreign manufacturing investments in 2018.

In early June, the UK enshrined into law a commitment to reach net zero carbon emissions by 2050, making Britain the first major economy to do so. Meeting this target will require substantial reliance on renewable energy from solar, tidal, hydro, and wind sources, both onshore and offshore.

Homeowners and businesses may now have an easier time getting solar panels on rooftops thanks to software developed at Sandia.

Walmart Inc. sued Tesla Inc., claiming it failed to live up to industry standards in the installation of solar panels on top of hundreds of stores, resulting in multiple fires across the U.S.

Europeans can massively expand low-cost solar generation just by tapping the space over their heads.

The list of the world’s top solar EPC contractors was released in late February by Wiki-Solar.org. The list ranks the solar developers by number of projects and total installed capacity and reflects about the 30 percent of the market. Wiki-Solar.org says the list shows how the less volatile markets have favored domestic power plant builders. In particular, contractors from India and the US are rising up the ranking. Europeans have, with a few notable exceptions, found it harder to hold their position.

For the third year in a row, the U.S. solar industry installed double-digit gigawatts (GW) of solar PV capacity, with 10.6 GW coming online in 2018, according to the latest statistics from Wood Mackenzie Power & Renewables and the Solar Energy Industries Association (SEIA).

In the years since its passage, Section 210 of the Public Utility Regulatory Policies Act (PURPA) has provided one of the few options for small producers of renewable energy to access electric generation markets controlled by monopoly utilities. The law requires a monopoly utility to purchase the output of certain small power producers known as “qualifying facilities” (QFs) at the utility’s “avoided cost”—that is, the cost the utility would incur to generate or purchase power in the absence of the purchase from the QF.

A year ago, Tesla Inc. lost its throne as king of the U.S. rooftop solar business to Sunrun Inc. Now, it may get relegated to third place.

The rumor mill has been going into overdrive with news that a Porsche 718 Cayman GT4 RS is coming. Giving some credence to the rumors is a prototype spied this week of a Cayman even more hardcore than the GT4. Another prototype we spied was what appeared to be a new performance flagship for the M5 range. Word on the street is that the car, which...

Italian multinational utility Enel has been recognized as one of the world’s most active companies in the open innovation field.

Austrade has launched a digital health website showcasing Australia as an ideal location for developing, testing and launching the next generation of digital medical technologies.

Global emissions were unchanged last year, the first time that’s happened amid economic growth in four decades, according to the International Energy Agency.

Construction resumed Oct. 4 on tunnel works after a brief work stoppage that began on Sept. 28 at the 20-MW Lower Modi Khola run-of-river hydropower facility.
 

Tesla Inc. was sued by the family of a man who died as the result of a crash allegedly caused when the Autopilot navigation system of his 2017 Model X malfunctioned.

Homeowners and businesses may now have an easier time getting solar panels on rooftops thanks to software developed at Sandia.

Renewables became Germany’s most important power source for the first time this year, according to Agora Energiewende.

The Western States Petroleum Association (WSPA) — whose members include Chevron, ExxonMobil, Shell, ConocoPhillips, BP, and others — was caught red-handed late last month when a leaked internal presentation revealed a coordinated campaign to stomp out climate and clean energy progress in California, Oregon and Washington by propping up over 15 front groups that purport to represent the views of concerned citizens and the broader business community.

We here at RenewableEnergyWorld.com would like to send a big "thank you" to our blogging community. Year after year, bloggers contribute content that is filled with valuable insights, up-to-date news, innovative project highlights and cool new technology updates. RenewableEnergyWorld.com bloggers are truly a crucial part of our website.

The online community of readers who visit RenewableEnergyWorld.com is an important aspect of the news and information that we offer renewable energy stakeholders. We often post news that we feel will get people to view important topics from new angles, offering insights and opinions about technology, policy and more. Often that leads to engaging and informative discussions that add even more value to the article that we have posted.

Oil prices have fallen by more than half since July. Just five years ago, such a plunge in fossil fuels would have put the renewable-energy industry on bankruptcy watch. Today: Meh.

The renewable energy industry has come a long way in relatively little time. The costs of renewable technologies continue to go down, while renewable capacities at many utilities continue to go up. Although, in many cases, renewable technology is mature and ready for utility-scale deployment, state and federal production and investment tax policies appear less evolved.

Global emissions were unchanged last year, the first time that’s happened amid economic growth in four decades, according to the International Energy Agency.

For the past two months, the flagship of the Royal Australian Navy ― the 28,000 tonne HMAS Canberra ― has provided a platform to promote some of Australia’s leading defence and humanitarian technologies and services to our neighbours in the Indo-Pacific.

BEST DEALS ON GAMING LAPTOPS:

• MSI - Modern 15 15.6" Laptop — $749

• ASUS - ROG G531GT 15.6" Gaming Laptop — $999.99

• Dell - G3 15.6" Gaming Laptop — $999.99

It's time to level up.

If you didn't already know, PC gamers take great pride in the way they play. These are the folks who delight in the fact that PC gaming is just so much better than playing on a console, and if this Reddit thread is any indication — this way of thinking isn't going away any time soon.

While it can take a year or two for gaming consoles to adapt to updated technology, PCs see that improvement hit almost instantly. New rigs and laptops hit the market faster, as opposed to consoles that make you wait for months until their release.  Read more...

BEST DEALS ON GAMING LAPTOPS:

• MSI - Modern 15 15.6" Laptop — $749

• ASUS - ROG G531GT 15.6" Gaming Laptop — $999.99

• Dell - G3 15.6" Gaming Laptop — $999.99

My first gaming laptop cost $1,500 more than 10 years ago, and that was considered affordable. It wasn't a top-of-the-line model, but it wasn't a slouch either, sporting one of the better mid-tier graphics cards and a reliable processor/RAM combination.  

But my, how things have changed.

Today, you can go on Amazon and find plenty of laptops for less than $1,000 that would have been at least $1,500 a few years ago, thus opening doors to people who want to try out PC gaming for themselves. (And if it's Prime Day or Black Friday or Cyber Monday, you can expect deal prices to dip even lower.) But sorting through all of the options and deciding which is best presents its own unique challenge. Read more...

Internet of Yum digs into all the things that make us drool while we're checking our feeds.

The famously sensitive strongman, actor Terry Crews, is screaming at the top of his lungs. In another time and place, you would be sure he was getting tortured. Which, essentially he is — just not as a form of punishment. Instead, the misery is all in the name of promotional entertainment, with Crews' self-inflicted tears generating views for the YouTube series Hot Ones.

Across the centuries, people have watched transfixed as others dare to eat disgusting, torturous, or sickening amounts of food. The specifics change with the venue, but it is a consistent form of entertainment.  Read more...

With more than 300 million domain names registered globally, there are numerous examples of trending keywords reflected by domain name registrations. We have shown in the past that there is a correlation between domain name registrations and newsworthy and popular events, as well as anticipated trends. Keeping in the spirit of the zeitgeist that .com and […]

The post Top 10 Trending Keywords in .com and .net Registrations in July 2019 appeared first on Verisign Blog.

With more than 300 million domain names registered globally, there are numerous examples of trending keywords reflected by domain name registrations. We have shown in the past that there is a correlation between domain name registrations and newsworthy and popular events, as well as anticipated trends. Keeping in the spirit of the zeitgeist that .com […]

The post Top 10 Trending Keywords in .com and .net Registrations in August 2019 appeared first on Verisign Blog.

Romania violated the rights of its former anti-corruption chief Laura Codruta Kovesi when they fired hire. The judgement issued by the European Court of Human Rights in Strasbourg follows a long catalogue of high-level corruption in Romania.