Issue 2024-W19 Highlights

R Weekly Highlights

Our take on the important conversations spurred by the recent R deserialization CVE, how simulations may save you from cracking open that probability textbook, and recapping the exciting 2024 Shiny Conference.
Episode Links

• This week's curator: Colin Fay - @[e-mail] & [@ColinFay]](https://twitter.com/ColinFay) (X/Twitter)
• Everything you never wanted to know about the R vulnerability, but shouldn't be afraid to ask
• Calculating birthday probabilities with R instead of math
• Highlights from ShinyConf 2024
• Entire issue available at rweekly.org/2024-W19

Supplement Resources

• R-bitrary Code Execution: Vulnerability in R’s Deserialization https://hiddenlayer.com/research/r-bitrary-code-execution/
• CVE-2024-27322 Should Never Have Been Assigned And R Data Files Are Still Super Risky Even In R 4.4.0 https://rud.is/b/2024/05/03/cve-2024-27322-should-never-have-been-assigned-and-r-data-files-are-still-super-risky-even-in-r-4-4-0/
• Safety Radar for RDA Files https://github.com/hrbrmstr/rdaradar
• R's new exploit: how it works & other ways you're vulnerable (Josiah Parry) https://www.youtube.com/watch?v=WGvXEi4nG5k
• Bogus CVE follow-ups https://daniel.haxx.se/blog/2023/09/05/bogus-cve-follow-ups/
• Data serialisation in R https://blog.djnavarro.net/posts/2021-11-15_serialisation-with-rds/
• Tapyr https://connect.appsilon.com/tapyr-docs/
• Podcast Index Database Dashboard (built with R and Quarto) https://rpodcast.github.io/pod-db-dash/
• Eric will be a guest on the Podcasting 2.0 show this Friday! (10-May-2024 1:30 PM EDT) https://podcastindex.org/podcast/920666

Supporting the show

• Use the contact page at https://rweekly.fireside.fm/contact to send us your feedback
• R-Weekly Highlights on the Podcastindex.org - You can send a boost into the show directly in the Podcast Index. First, top-up with Alby, and then head over to the R-Weekly Highlights podcast entry on the index.
• A new way to think about value: https://value4value.info
• Get in touch with us on social media
  
  • Eric Nantz: @[e-mail] (Mastodon) and @theRcast (X/Twitter)
• • Mike Thomas: @[e-mail] (Mastodon) and @mikeketchbrook (X/Twitter)

Music credits powered by OCRemix

• Green Glade Groove - Donkey Kong Country 2: Diddy's Kong Quest - TSori, dpMusicman, etc - https://ocremix.org/remix/OCR04437
• Salut Voisin! - Final Fantasy IV - colorado weeks, Aeroprism - https://ocremix.org/remix/OCR04553