How is this an RCE? The only way I can think of exploiting this is having access to the code. You can "exploit" JSON.parse with the same methodology. Perhaps if someone was using a serializer that uses eval but that shouldn't be a vuln in jsonwebtoken but in the library that passes user input into eval.
I think the point of bringing up hurricane Dorian is the size/strength. It's not unique by itself but cat 4/5's are at an upward trend[1]. Also take a look at hurricane Barry[2] this year. It's a disturbance that came out of the continental US, became a hurricane in the gulf, and came back to strike the US.
Big problem with that chart. Look where it ends. 2006. It looks like an upward trend. If you add the last decade it's missing, that trend won't exist. You know what, let put that together in BI really quick. I want to see if that trend holds true since it's missing the past decade of data.
Taking a look at the data, it's not that damning. Our upward swing really started in 1995 and hasn't increased since. 2005 was an outlying year, and the rest really aren't that much of a big deal. No real upward swing since 95.
I will say our hurricane floor count is higher on average by 2-3. I have a hard time believing there were zero hurricanes some years. Meteorology and aeronautics really was useless before the 60s (compared to today). So, numbers before then are hard to take seriously and are probably understated.
Our 5 year average of storms is trending down (slightly) since 08 as well. 10 year average peaked in 05 and has dropped since 2012.
My grand point, hurricanes right now don't make good evidence for global warming. There are far better evidence points and general scientific knowledge about greenhouse gases. Using hurricane statistics is only going to lead to ammo for deniers as they don't pay attention to better evidence. Will hurricanes potentially intensify in both volume and strength? It's definitely possible if ocean temperatures rise on average. That's how hurricanes are "fueled". But right now, we don't have good evidence of that being a truth.
Only because they are very successfully at monetizing their content which was originally bootstrapped by tax and donations. After this exclusive deal that percentage may drop further.
They did this with the 40kwh option when they first offered the S. They didn't produce this battery and shipped a 60kwh battery that was software limited to 40kwh. I had a 40 on order and was delighted by this. I got the speed of a 60 for free and also not charging your battery to capacity can increase it's longevity. Plus, this gave me or future owners the option to unlock if they wished (I never did).
I think this is fair for when they transition to larger packs. You will get upset customers if you introduce a larger pack right after they bought the smaller. This gives customers the option to upgrade in that transition period.
Also, I noticed a comment:
"Are they hoping some people are going to buy the upgrade when they’re about to out of juice".
It doesn't work like that, you pay to unlock the extra capacity which needs to be charged. When your battery is depleted it won't matter.
#/media/File:Barry_2019_track.png){kind=link}