Issue 2024-W19 Highlights

Our take on the important conversations spurred by the recent R deserialization CVE, how simulations may save you from cracking open that probability textbook, and recapping the exciting 2024 Shiny Conference.
Episode Links
This week's curator: Colin Fay - @[email protected] & [@ColinFay]](https://twitter.com/ColinFay) (X/Twitter)Everything you never wanted to know about the R vulnerability, but shouldn't be afraid to askCalculating birthday probabilities with R instead of mathHighlights from ShinyConf 2024Entire issue available at rweekly.org/2024-W19Supplement Resources
R-bitrary Code Execution: Vulnerability in R’s Deserialization https://hiddenlayer.com/research/r-bitrary-code-execution/CVE-2024-27322 Should Never Have Been Assigned And R Data Files Are Still Super Risky Even In R 4.4.0 https://rud.is/b/2024/05/03/cve-2024-27322-should-never-have-been-assigned-and-r-data-files-are-still-super-risky-even-in-r-4-4-0/Safety Radar for RDA Files https://github.com/hrbrmstr/rdaradarR's new exploit: how it works & other ways you're vulnerable (Josiah Parry) https://www.youtube.com/watch?v=WGvXEi4nG5kBogus CVE follow-ups https://daniel.haxx.se/blog/2023/09/05/bogus-cve-follow-ups/Data serialisation in R https://blog.djnavarro.net/posts/2021-11-15_serialisation-with-rds/Tapyr https://connect.appsilon.com/tapyr-docs/Podcast Index Database Dashboard (built with R and Quarto) https://rpodcast.github.io/pod-db-dash/Eric will be a guest on the Podcasting 2.0 show this Friday! (10-May-2024 1:30 PM EDT) https://podcastindex.org/podcast/920666 Supporting the show
Use the contact page at https://rweekly.fireside.fm/contact to send us your feedbackR-Weekly Highlights on the Podcastindex.org - You can send a boost into the show directly in the Podcast Index. First, top-up with Alby, and then head over to the R-Weekly Highlights podcast entry on the index.A new way to think about value: https://value4value.info Get in touch with us on social media
 Eric Nantz: @[email protected] (Mastodon) and @theRcast (X/Twitter) Mike Thomas: @[email protected] (Mastodon) and @mikeketchbrook (X/Twitter) Music credits powered by OCRemix
Green Glade Groove - Donkey Kong Country 2: Diddy's Kong Quest - TSori, dpMusicman, etc - https://ocremix.org/remix/OCR04437Salut Voisin! - Final Fantasy IV - colorado weeks, Aeroprism - https://ocremix.org/remix/OCR04553