Lightning speech, black master, what else can Hack for Wuhan do this week- Personal space of the Open Source Agency - OSCHINA - Chinese Open Source Technology Exchange Community

Lightning speech, black master, what else can Hack for Wuhan do this week?

Click above“ Kaiyuan Cooperative ”Follow us

|Author: Daozi

|Editor: Wang Haoyue

|Designer: Liu Yingjie

|Editor in charge: Corrie

Hack for Wuhan is about to enter the second week of warm-up. The lightning speech in the preview is late. Are you ready?

In addition, this week we will continue to launch the "Hack for Wuhan Master Course". What will this issue bring?

lightning talk

The lightning speech comes from the English "Lighting Talk", which means to show yourself, talk about ideas, put forward demands, etc. through a few minutes of fast speech. It can be understood as a talk show in the technology industry.

Hack for Wuhan strongly recommends this way, so that the contestants with ideas can show themselves through three minute live video and find like-minded teammates.

Scan the code to see the example of lightning speech

For those who love sharing, this will be an opportunity for them to pitch live before the game. Through the absolute real live broadcast, you can let everyone remember you, understand your ideas, and attract teammates to join and the audience (Si) to follow.

Not only that, we will have tutors to join this link and provide some suggestions and feedback.

The first flash show is coming! We initially planned to broadcast live through the live broadcast platform Zoom on March 3, Beijing time. If you can't wait, please scan the following QR code to enter the lightning speech preparation group.

In the group, we will carry out follow-up simple training and schedule.

If you are still hesitating, then come and watch us! During the speech, all the audience can join in and comment at any time. If their ideas touch you, you can discuss whether to form a team or just improvise.

But we should remind you that you must register your intention in the registration form in advance. This table is the only entrance for contestants to release ideas, form teams, make speeches and confirm the main events.

Registration Form of Competitors

We will also arrange tutors and guests, as well as experienced volunteers, to teach the content and skills of the contestants' speeches, promote better preparation of the contestants, and make suggestions on speech skills and quick trial and error iteration methods.

Several CEOs of outstanding start-ups with financing experience have expressed their willingness to come and share in person, and a mysterious welfare club is reserved for those who participate in the speech!

Here comes the Black Master

Did you participate in the two Hacksong master classes last week?

Google product manager, uncle of Silicon Valley, and Uber's post-95 star designer, Jiang Cunchun, respectively talked with Brother Xue, bringing wonderful content about product managers or designers.

Through the exchange and interaction between the two programs, hundreds of viewers learned some of the guests' thoughts and practical methods.

If you don't participate, you can watch our video review:

The first review of Black Master

After the two live broadcasts, we investigated the feedback of the contestants and the audience through questionnaires. After synthesizing your suggestions, the next "Black Master" (short for Hacksong Master Class) is coming!

We will be on March 3, 9:00-10:00 (Silicon Valley Time)/March 4, 13:00-14:00 (Beijing Time)

Invite two online celebrity product managers to talk about Hackathon's Hack spirit and Implementation Style.

The specific contents of the shift "Black Master" include:

1. In the competition, how should engineers help guide the team to steadily promote the Hackathon project? Recommended process?

2. How should engineers allocate their strength in Hackathon? How are tasks assigned?

3. How should engineers cultivate product thinking? Are these abilities useful for competition and work?

4. What development style should engineers follow? What are the differences between Hackathon and normal work and school?

Guest introduction:

Han Chen

Author of Top 2 New Tech book Silicon Valley Thinking, chief engineer of software technology of Silicon Valley Internet Company. Focus on liquidity, advertising, SME business, social media and mobile infrastructure.

Qu Xiaoyin

CEO of Run The World, a real-time online activity platform, and author of the best-selling book Silicon Valley Products. Previously, he served as senior product manager of Facebook and Instagram.

IBM Developer fully supports wuhan 2020

IBM Developer provides developers with free IBM cloud platform support, scenario based open source applications, and regular online technical expert sharing to help you develop solutions better and faster.

To register an IBM cloud platform:

https://cloud.ibm.com/registration

View a large number of free open source applications based on business scenarios:

https://developer.ibm.com/cn/patterns/

IBM also provides developers with a 120 day trial of IBM LinuxONE - blockchain platform to facilitate competitors to build blockchain applications and networks.

Sound network Agora.io

A free quota of 10000 minutes per month is provided for all developers.

Provide education, video conference and other multi scene demo source code and online technical support.

The minutes involved in the public welfare project of wuhan 2020 are free for life.

Tencent Serverless fully supports wuhan 2020

Tencent Serverless provides Hack for wuhan with open-source, free and one-stop serverless development resources, computing services and technical support. With perfect Node, Python, PHP language and framework support, Serverless fully assists developers to quickly implement idea and race against time! For participants:

Two month free trial of Tencent Serverless service resources.

Provide full stack app open source code and demo examples to help contestants quickly build serverless Web services

Provide free Serverless technical guidance and training courses, online expert development guidance and technical question answering.

Vote for the top 5 team of Hackathon, and provide project follow-up incubation and landing support.

Tencent Serverless official website:

https://serverless.com

https://cloud.tencent.com/product/sls

Tencent Serverless Chinese Community:

https://china.serverless.com

Introduction to Kaiyuan News Agency

The Open Source Society is a manufacturer neutral, volunteer and non-profit open source alliance organized by enterprises, communities and individuals at home and abroad who support open source in accordance with the principle of "contribution, consensus and co governance", aiming to jointly create a healthy and sustainable open source ecosystem and promote the Chinese open source community to become an active participant and contributor of global open source software. We focus on open source governance, international integration, community development and open source projects.

Related reading | Related Reading

Virus science? New Crown rehabilitation? Blockchain tracking? What! So the first batch of projects came out?

The ongoing hacker marathon, we need to hear your voice

This well prepared competition is our best gift to you

I don't know what Hack for wuhan is for? That's your opening position

Click“ Read the original text ”, can be directly enter for

This article is shared from the WeChat official account Kaiyuan She.
In case of infringement, please contact support@oschina.cn Delete.
Participation in this article“ OSC Source Innovation Plan ”, welcome you to join us and share with us.

Yokesily 2024-06-02 15:11

So designed

-SORA- 2024-04-30 17:07

When this happened in a foreign country, the comment area suddenly became very objective and rational**

Xiao Xu Middle aged 2024-06-01 06:49

thank

Single structure 2024-05-11 10:09

Selected as Open Source China's disgrace pillar

sweet potato chips 2024-05-31 22:08

Glue code consumes few resources

young crops 2024-06-01 16:21

There is no tipping point. There are also many official documents stating that SQL fragments involving direct string splicing need to be controlled by the user, and specific solutions are also provided. If you say that the value part is injected, then we are also 100% free of any dispute. This obvious SQL fragment is unrealistic for ORM to explain without your control, Since SQL allows splicing fragments, there must be some scenarios that cannot be forced into non SQL strings. It is also very simple. Have you ever thought about why not force them???

One code Yma 2024-05-09 09:58

Recently, I often go to interviews. People who hate Ali background most regard me as a fool, even though I am a fool

hanf 2024-05-31 17:45

If only the design and architecture are similar, what's the point? Good things must be learned, and you can't prove that the design is not the same. As for the source code, you also said that neither Oracle nor Damon is open source, and you can't prove it. There are many people who question Dream, but so far, no one has come up with strong evidence. You should at least provide evidence to copy

Bright Stars 2 2024-05-31 23:28

Remove Unsafe? You don't want netty anymore?

People are addicted to food 2024-06-01 13:53

History history combination

Yoona520 2024-05-17 16:34

Zhou Hongyi is now living more and more like a clown. If he stays behind the scenes, he has to become an online celebrity. Can you learn from Lei Jun?

xiaoqibabby 2024-05-15 17:36

The bank is strongly required to be responsible for

Small and beautiful software development 2024-06-01 05:06

Cheat one's job

Ma Nong Little Fatty Brother 2024-05-16 14:40

I give you six seconds. I give you six moves with the same effect in the martial arts contest, which shows the invincibility and confidence of the master

monkey_cici 2024-05-09 00:25

My I9 CPU, 64GB memory module and 3080Ti computer are inferior to the top configuration of 19999 on a tablet

gamedot 2024-05-17 11:14

Old Zhou is deeply concerned about Huawei's great cause of open source. He is not a Huawei person, but has Huawei's soul.

-SORA- 2024-06-01 09:30

American characters

Bright 2024-05-19 23:25

What a fool! I killed myself. How can people deal with me later.

Ning Jinnong 2024-06-01 21:04

Correct it. The example of loading the library is wrong. It should be # library=@ loading the dynamic library, "./yards to the treasurer. dll"

Happy LeapFrog 2024-05-18 09:18

But the question is: "What's the use of this for ordinary Android users?" Now the answer seems to be: "Almost nothing.".

Voice of God 2024-06-01 20:47

By default, injection ($) and splicing are turned off. If you want to use it, you need to sign the birth and death form and press the fingerprint.

osc_92224065 2024-04-29 10:57

Long term oppressed outsourcing of state-owned enterprises

kakai 2024-05-10 10:21

The world only knows that Android was created by Google. Several people know that Android is only a product acquired by Google. Similarly, what is the problem with Huawei's contribution to the collection of OGG open source work and integration into its own proprietary product line?

Yeah, for 2024-05-17 13:42

That's too right. Old Zhou can't control Google, but he can control 360. Do not do to others what you do not want. All 360 products should be opened first.

Dogo_Little People 2024-06-02 12:24

Not everyone will go to see the document in full detail. As a general basic framework, the method naming should consider not only readability but also understandability. At least, it should also establish a cognition for developers. LambdaQueryWrapper is recommended. The official only briefly said that QueryWrapper may lead to SQL injection risks, There are no detailed examples (many people don't understand what SQL injection is). Now I met a jerk and submitted it to CVE to see who is the most powerful

Starry Night Destiny 2024-06-01 21:49

It feels like Mybatis. It's OK to provide users with optional security solutions. It's useless for users to complain about this problem

zzeric 2024-04-28 20:01

Although France is the parent community, the core developers of OCCT on github are all Russians. Without Russians, the French parent community cannot continue to operate. So Huawei took over, moved to China, changed its name and resumed open source and community operations. What's the problem?

Love to eat raw pears 2024-06-01 11:48

Why is this so-called "vulnerability" not a vulnerability? Spring, MyBatis and other frameworks can accept all kinds of CVE criticism, while MyBatisPlus has to dump the pot and accuse programmers of being too low-level# There is a difference. The premise is that you write XML, MyBatisPlus encapsulates Wrapper and claims to simplify code. Since it encapsulates and hides $#, it is not appropriate to do some necessary security checks? Instead of doubting the authority of CVE, you should know that SQL ->MyBatis ->MyBatisPlus ->various back-end scaffolds have multiple layers, each layer is simplifying, and each layer is throwing away the upper layer of the boiler. Who dares to use them. The programmers who use MyBatisPlus can't be expected to be at a high level. Every programmer wants to save effort. The front-end parameters can be directly obtained by HttpServletRequest from the back-end. Wrapper splicing can be found everywhere. If something goes wrong, is it the front-end or the framework? According to Qingmiao, can the injection vulnerability of the previous log4j and the deletion vulnerability of the Druid be used to eliminate low-level programmers?

All the way north GP 2024-04-25 14:55

America, the future of mankind

Shuimu Yi'an 2024-05-20 09:58

The news should be read continuously. I'm waiting for the third news besides rustdesk and teamviewer. Localized remote desktop software is far ahead.

Francesca 2024-05-19 18:00

Wine runs the Android emulator of Windows. Chrome OS is installed in the Android emulator. Linux environment is installed in chrome OS. Linux environment is installed in the Linux environment. Wine is installed in the Android emulator

The seven in one little King Kong 2024-06-02 15:54

Those people only use resources, others are not developed by NPM...

Monkeys think of apes 2024-05-31 18:31

You can cheat your brother. Just don't cheat yourself

Rocket ship 2024-05-31 19:22

It's a ghost anyway.

zhy 2024-05-16 13:16

At the end of Shannon is Nong

sunday12345 2024-05-15 18:31

What does the bank do? It's blamed on the remote desktop. Persimmons really pick up soft pinches~?

Hakuna 2024-05-31 18:28

It is compatible with Oracle, but does not know "just" or "just". Those who can be compatible with Oracle and do well are real men and real warriors. You should know that compatibility means that even bugs must be compatible, and you have no other code that can not be copied. It's all based on real skills and understanding of oracle.

kangaroo 2024-06-01 22:23

The next version focuses on improving existing functions * improving internal power and qi * and continues to move towards the goal of Grand Master.

jalena 2024-05-31 23:57

I can imagine that I will also receive the CVE repair request next week..... I don't use the key!!!!!!!!!

Qin Liming 2024-05-11 09:12

be devoid of any sense of shame

One code Yma 2024-05-06 09:14

My technical article was moved by CSDN. Why didn't anyone step on the sewing machine? This kind of report is a joke to me. The monsters with background are fine, and the monsters without background fight to death

osc_566335 2024-04-28 14:44

This is also called floor washing? Does it mean that Tesla will not wash the floor if it releases all the source code? Some people HWptds? That is to say, the language is ambiguous, which will also rise to the washing ground? Are some people too focused? Think the people he pays attention to must be staring at?

Love to eat raw pears 2024-06-01 19:18

Don't expect programmers to have a deep understanding of the document. I still think that since the tool hides the details of $#, some necessary security checks are necessary. Many people do not use MybatisPlus directly, but use various so-called rapid development platforms. The MyBatisPlus rapid development platform Snowy, Guns, etc., has an impression that many versions have the problem of using Wrapper directly to splice the Request parameter. I remember that JeecgBoot was opened a lot of CVEs last year or the year before last because of the Wrapper splicing problem. Do you know the author of ibeetl? Many CVE blaming holes have been opened before. The problem is similar. The lack of basic knowledge "script editing permission" is actively handed over to the front end. What a low-level error or even low-energy behavior. However, I accepted it with an open mind and added a white list check.

oldpig 2024-04-28 09:59

”Huawei contributed all the source code "?, the title is completely inconsistent with the content.

looly 2024-06-02 14:32

@Qingmiao Hutool has also been mentioned some loopholes that I think are relatively "low-level", or I think are not loopholes. At first, I was also very angry, but after thinking it through, I found that CVE's idea was that once you did not actively remind users that there was a pit, the user fell into the pit is your fault, that is, your vulnerability. For example, as a traffic policeman, you should remind everyone who crosses the road to pay attention to safety, and ask him to answer whether he knows. Once you don't remind someone and are hit by a car, you can't get away from it. Similarly, when using frameworks and tools, you should provide at least one parameter to remind users that there may be SQL injection vulnerabilities. Note that it is not in the comments, but in the method parameters, which is the user's responsibility. Therefore, it is not comprehensive to provide solutions in comments or documents.

Li Yinghui 2024-05-09 16:40

Buddhism has a good word, evil opinion. In dealing with the world, it is meaningless to draw conclusions from preset positions; It is also important to receive good logic training.

GDWhisperer 2024-05-15 17:23

I transferred tens of thousands of yuan to my own account, which was under risk control. How did I do this? The bank should be responsible for this**

Xiao Xu Middle aged 2024-05-31 19:13

Very good

CodeDoger 2024-05-02 20:48

35 It's too old to go to work and too early to retire at 60

Code craftsman 2024-06-01 11:22

I also said "user controllable parameters"

Xiao Xu Middle aged 2024-06-01 07:03

good

Apizza 2024-06-01 17:52

You can switch from lodash to radash in 2024!!!

haol666 2024-05-31 18:56

This story is powerful, I take it seriously, until I see the end.

MrChen89 2024-04-29 09:18

There are a group of people like this. I don't know what they have experienced. When it comes to HW, I can't say anything good, even if it's neutral

infoworld 2024-05-11 15:12

Universities should use open source free software instead of commercial ones. In this way, hands and feet will not be tied technically.

Chief taxi captain 2024-05-17 11:17

I suggest that 360 open source all its products, and then become the leading enterprise in the domestic open source industry through open source, leading everyone to compete with foreign enterprises

Shen Lang Panda 2024-06-01 08:16

You can directly ask questions in the project work order. The comment area is not suitable for answering such questions

Brother Xiao Yang 2024-06-01 20:39

Isn't Ali developed? What are you afraid of? There's no need for every family to set up a set

osc_25732934 2024-06-01 19:30

It seems that the current version of the Foreign Function&Memory API is not as fast as that of jni, or even worse. In addition, before vallhala comes out, all interactions between java and c have to get an additional memory. Even if it comes out, it may not be possible to directly throw a copy of binary data into memory as a structure. When the two apis are completely stable, the day lily is cold

Lightning speech, black master, what else can Hack for Wuhan do this week?

Virus science? New Crown rehabilitation? Blockchain tracking? What! So the first batch of projects came out?

The ongoing hacker marathon, we need to hear your voice

This well prepared competition is our best gift to you

Hot content

Popular comments of the whole site

About the author

Author's Album

Author's other popular articles

Hot News

Hot software

OSCHINA Community

Online tools

Introduction

QQ group

Public account

Video number

Lightning speech, black master, what else can Hack for Wuhan do this week?

Virus science? New Crown rehabilitation? Blockchain tracking? What! So the first batch of projects came out?

The ongoing hacker marathon, we need to hear your voice

This well prepared competition is our best gift to you

Hot content

Popular comments of the whole site

About the author

Author's Album

Author's other popular articles

Hot News

Recommended attention

Hot software

OSCHINA Community

Online tools

Introduction

QQ group

Public account

Video number