Vulnerability Report 02: Failure to invalidate session on Password Change

Dear Starjet,

Thank you for reaching out to Odoo Privacy.

If you wish to report a behaviour as a Security Vulnerability, please follow the instructions on this document: https://www.odoo.com/security-report

In particular, you will note in the guidelines that the correct email to report security issues is security@odoo.com (privacy@odoo.com is for Privacy Questions only).

In the same document, you will find information related to the rewards. If you report a new security issue that is confirmed to be critical (see the DO REPORT section), we will publicly thank you by adding your name to the Odoo Security Hall of Fame, on the right of this page. No monetary rewards are offered.

Have a nice day!

Elena

Odoo S.A.

+32 81 81 37 00 | info@odoo.com | https://www.odoo.com

Powered by Odoo

by "Elena Maglio (elm)" <elm@odoo.com> - 08:20 - 13 Aug 2024

Vulnerability Report 03:No CSRF protection on login

Dear Starjet,

Thank you for reaching out to Odoo Privacy.

If you wish to report a behaviour as a Security Vulnerability, please follow the instructions on this document: https://www.odoo.com/security-report

In particular, you will note in the guidelines that the correct email to report security issues is security@odoo.com (privacy@odoo.com is for Privacy Questions only).

In the same document, you will find information related to the rewards. If you report a new security issue that is confirmed to be critical (see the DO REPORT section), we will publicly thank you by adding your name to the Odoo Security Hall of Fame, on the right of this page. No monetary rewards are offered.

Have a nice day!

Elena

Odoo S.A.

+32 81 81 37 00 | info@odoo.com | https://www.odoo.com

Powered by Odoo

by "Elena Maglio (elm)" <elm@odoo.com> - 08:20 - 13 Aug 2024

Re: Seeking for agent in Indonesia

Dear agent,

Greeting from Charlotte and GLA family. Trust you are doing great.

I sincerely invite you to join GLA platform and cover the increasing request from/to Indonesia from our GLA members.

说明: 说明: cid:image009.png@01DAECC6.A5AFC2D0 说明: 说明: cid:image008.jpg@01DAECC6.355A96E0

Above 75% of GLA Members are first-class agents with wide range of primary resources. GLA fulfills all your needs in terms of finding reliable agents or getting huge volume of inquiries from/to your area. Have you ever tried to experience GLA Global Logistics Network for your business development and resources integration?

Besides, We are planning to hold the next GLA Global Logistics Conference in Bangkok, Thailand on 22th November 2024. Please don’t miss this opportunity to attend the conference as a GLA member.

I am looking forward to hearing you back.

Best regards,

说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: cid:image003.png@01DAD7E6.74B2DD60

Charlotte Jiang

GLA Overseas Department

Mobile:	(86) 181-2880-6170
Email:	member015@glafamily.com
Company:	GLA Co.,Ltd
Website:	glafamily.com
Address:	No. 2109, 21st Floor, HongChang, Plaza, No. 2001, Road Shenzhen, China

The 11^th GLA Conference - Bangkok Thailand on 22th November 2024 – click here for registration

说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: cid:image009.jpg@01DAD7E6.74B2DD60

Ø The 10^th GLA Conference in Dubai UAE, online album

Ø The 9^th GLA Conference in Hainan China, online album

【Notice Agreement No 7】

7. GLA president reserves the right to cancel or reject membership or application. Company shall cease to be a member of GLA if:

a) the Member does not adhere to GLA terms and conditions

b) the Member gives notice of resignation in writing to the GLA.

c) No good reputation in the market.

d) Have bad debt records in the GLA platform or in the market

by "Charlotte" <member139@glafamily.com> - 04:46 - 13 Aug 2024

9 attachments 9 attachments

Mejora tus fotos con una edición de muestra gratuita!

Hello Manu Reyes Fotografo,

I hope this email finds you well. My name is Grace, and I’m with Photo Editing Company. We offer professional photo editing services to help photographers like you bring out the best in your images.

We know that capturing the perfect shot is just the beginning. Our photo editing can help you polish your photos to perfection, making them stand out and impress your clients.

Here’s how we can help you:

Precise Edits: Remove imperfections and enhance details for stunning results.
Color Correction: Achieve perfect color balance and true-to-life tones.
Quick Turnaround: Get your edited photos back fast to meet tight deadlines.
Customized Edits: Tailored edits to match your unique style and branding.
Background Removal: Clean up or change backgrounds to highlight your subjects.
Advanced Retouching: Smooth skin, remove blemishes and refine features.
Object Removal: Eliminate unwanted objects for a clean, professional look.

To show you what we can do, we’d love to offer you a free sample edit. Please send us one of your photos, and we’ll enhance it to demonstrate our skills.

Thank you for your time, and I look forward to the chance to work together.

Best regards,

Grace S.
Marketing Department | Photo Editing Company
marketing@photoeditingcompany.com

Photo Editing Company, Belmont Village, Minglanilla, Cebu, Cebu City 6046, Philippines

Unsubscribe

by "Grace Smith" <hello=photoeditingcompany.com@hubspotstarter.hs-send.com> - 04:12 - 13 Aug 2024

Re: Seeking for agent in Indonesia

Dear agent,

Greeting from Charlotte and GLA family. Trust you are doing great.

I sincerely invite you to join GLA platform and cover the increasing request from/to Indonesia from our GLA members.

说明: 说明: cid:image009.png@01DAECC6.A5AFC2D0 说明: 说明: cid:image008.jpg@01DAECC6.355A96E0

Above 75% of GLA Members are first-class agents with wide range of primary resources. GLA fulfills all your needs in terms of finding reliable agents or getting huge volume of inquiries from/to your area. Have you ever tried to experience GLA Global Logistics Network for your business development and resources integration?

Besides, We are planning to hold the next GLA Global Logistics Conference in Bangkok, Thailand on 22th November 2024. Please don’t miss this opportunity to attend the conference as a GLA member.

I am looking forward to hearing you back.

Best regards,

说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: cid:image003.png@01DAD7E6.74B2DD60

Charlotte Jiang

GLA Overseas Department

Mobile:	(86) 181-2880-6170
Email:	member015@glafamily.com
Company:	GLA Co.,Ltd
Website:	glafamily.com
Address:	No. 2109, 21st Floor, HongChang, Plaza, No. 2001, Road Shenzhen, China

The 11^th GLA Conference - Bangkok Thailand on 22th November 2024 – click here for registration

说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: 说明: cid:image009.jpg@01DAD7E6.74B2DD60

Ø The 10^th GLA Conference in Dubai UAE, online album

Ø The 9^th GLA Conference in Hainan China, online album

【Notice Agreement No 7】

7. GLA president reserves the right to cancel or reject membership or application. Company shall cease to be a member of GLA if:

a) the Member does not adhere to GLA terms and conditions

b) the Member gives notice of resignation in writing to the GLA.

c) No good reputation in the market.

d) Have bad debt records in the GLA platform or in the market

by "Charlotte.J" <member015@glafamily.com> - 02:59 - 13 Aug 2024

9 attachments 9 attachments

RE: Estimate & Takeoff Professionals

Hi,

I have not heard from you. Please Let me know if we can be of any assistance in regards to providing Takeoff/Estimating services.

Thanks

From: Eric Steven <steven.juestimating@gmail.com>
Sent: Thursday, August 8, 2024 10:14 AM
To: info@learn.odoo.com
Subject: RE: Estimate & Takeoff Professionals

Hi,

I'm sure you're busy because I didn't hear anything back from you. I’d appreciate a response to my original email below.

Thanks

From: Eric Steven <steven.juestimating@gmail.com>
Sent: Tuesday, August 6, 2024 1:22 PM
To: info@learn.odoo.com
Subject: RE: Estimate & Takeoff Professionals

Hi,

Just making sure you saw my original email below regarding our Cost Estimation & Takeoff services.

Thanks

From: Eric Steven <steven.juestimating@gmail.com>
Sent: Friday, August 2, 2024 1:26 PM
To: info@learn.odoo.com
Subject: RE: Estimate & Takeoff Professionals

Hi,

Just making sure you saw this.

Thanks

From: Eric Steven <steven.juestimating@gmail.com>
Sent: Wednesday, July 31, 2024 3:02 PM
To: info@learn.odoo.com
Subject: Estimate & Takeoff Professionals

Hello,

JU Estimating has been offering cost estimation and takeoff services for all types of projects to residential, commercial, general contractors, subcontractors, owners, and developers, etc. We provide estimates and takeoff using advanced software Planswift and Bluebeam.

If you’re holding any job, then send over the project plans and get a quick quote, including our exact fee and timeline for that.

Should you have any questions or concerns feel free to reach out.

Thanks & Regards,

Eric Steven | (703) 721-8864

JU Estimating LLC

8855 Peregrine Heights Rd Apt 201 Manassas, VA 20111

If you no longer wish to receive emails from us, please respond with unsubscribe. We apologize if this email was not relevant to your needs.

by "Eric Steven" <steven.juestimating@gmail.com> - 03:08 - 12 Aug 2024

“React Native Dev – $10/hr”

Hi there,

Do you need an React Native developer for starts from $10 per hour, having 2-8 years of experience, will be available next Monday. If you're interested, I can arrange a meeting with them.

Best Regards,

Ashish

by "Ashish" <ashishi@xoniergroup.com> - 01:00 - 12 Aug 2024

New List OF UK USA Blogs Just $80/Post

Hello

we are offering guest posting service on our blogs, if you are interested in guest posting for your promotion projects please let me know.

Guest posting: - We are allowing 500+ words content with 2 do follow links (of your website) on my blogs.

I have many more blogs with many industries. If you like guest posting and want to see blogs for your campaign please let me know industry.

Sample of guest post
https://www.theexeterdaily.co.uk/news/charities/nominate-charity-receive-festive-financial-boost%C2%A0
https://teens4technology.org/types-of-cabinet-software-for-cabinet-design/

https://4-software-downloads.com/
http://www.7sixty.com/
https://www.spamweed.com/
https://technicamix.com/
https://teens4technology.org/
https://thetechblog.net/
https://www.techjazy.com/
https://technologywine.com/

Business
https://sapphirebusinesses.co.uk/
https://frenchinbusiness.co.uk/
https://oliverandcobusiness.co.uk/
https://trading4business.co.uk/
https://thereceiptrollbusiness.co.uk/

Finance
https://justgoinsurance.co.uk/
https://ukinsurance.org.uk/
https://tristarfinance.co.uk/
https://wakefieldfinance.co.uk/
https://thefinanceworld.co.uk/
https://financeright.co.uk/

Tech
https://dtechdesigns.co.uk/
https://technotv.co.uk/
https://applettechnology.co.uk/
https://carmtechnology.co.uk/
http://mtechcomputing.co.uk/
https://leadtechnology.co.uk/

Travel
https://chillinorthholidays.co.uk/
https://tripter.co.uk/
https://papillonholidays.co.uk/
https://theadventurerclub.co.uk/

Health
https://healthylivingretreats.co.uk/
https://allhealhealthcare.co.uk/
https://independenthealthconsultant.co.uk/
https://purityhealthandfitness.co.uk/
https://ultimatehealthandfitness.co.uk/
https://nutritionalhealthcare.co.uk/
https://cpmedicalcentre.co.uk
https://prestonmedicalcentre.co.uk/

Auto
https://hsr-autos.co.uk/
https://roadecars.co.uk/
https://asmotorstaunton.co.uk/
https://cloud9cars.co.uk/

Home
https://homesweephome.co.uk/
https://westfieldhomes.co.uk/
https://homereportonline.co.uk/
https://yourhomepagein.co.uk/

Thank

Kevin

by "Kevin Paul" <kpaul6771@gmail.com> - 11:01 - 12 Aug 2024

Vulnerability Report 03:No CSRF protection on login

Vulnerability: No CSRF protection on login.

Level: Critical

Description:

The login form is not protected against Cross-Site Request Forgery.
An attacker can craft an HTML page containing POST information to have the victim sign into an attacker's account, where the victim can add information assuming he/she is logged into the correct account, where in reality, the victim is signed into the attacker's account where the changes are visible to the attacker. The real issue here is that when the victim runs the HTML Proof of Concept, the account is logged in to the attacker without any visible warnings, thus the victim is capable of theft of data and potentially vulnerable to account takeover.

Steps to reproduce:
1. Create a victim account. (Google Chrome)
2. Create an attacker account. (Firefox)

3. Now intercept the attacker browser's request and save it as . HTML.
4. Now run that POC in the victim's browser and press submit.
5. On the victim's browser, he/she is logged in as an attacker without any indication unless the page is manually refreshed.

Proof of concept:

<html>
<body>
<form action="https://www.odoo.com/web/login" method="POST">
<input type="hidden" name="utc_offset" value="-300" />
<input type="hidden" name="email" value="abul37772@gmail.com" />
<input type="hidden" name="password" value="Testing123@#$" />
<input type="submit" value="Submit request" />
</form>
<script>
history.pushState('', '', '/');
document.forms[0].submit();
</script>
</body>
</html>

Mitigation:
You are using an authenticity token to prevent this but it is not validating so add a valid CSRF token and token verification method to the login request or make some type of prompt that the session has ended when the new login from the attacker occurs.

If you have any questions, please feel free to contact me. I'll be more than happy to assist you.
I look forward to hearing from you soon

Thanks and Regards

Team Star jet Cyber,

Afshan

by "starjet cyber" <starjetcyber22@gmail.com> - 10:19 - 12 Aug 2024

Vulnerability Report 02: Failure to invalidate session on Password Change

Hi team,

I am a security researcher and this time I found this vulnerability

in your website.

Vulnerability Report : Failure to invalidate session on Password Change

Weakness: Insufficient Session Expiration

Description :

I observe that when we change password from one browser in place of session

Expire from other browser its just update password from other browser and

the old session got updated without being logout

Steps to check Session Management issue On password change :

1- login From two browser at a time [ From Chrome browser and From Mozilla

Firefox ]

2- Change password in setting from chrome browser

3- Now Check Mozilla Firefox

4- Your Session Got Updated in place of expiration

Recommendations:

If Session is Updating From One Browser so Others Should Expire First to renew session after login.

Impact

If the attacker has a user password and logged in different places, As other sessions are not destroyed, the attacker will be still logged in your account even after changing password, cause his session is still active.. Malicious actor can completely access your account till that session expires! So, your account remains insecure even after the changing of password.

Please let me know if any more info is needed !

Looking after your response.

Thanks & Regards,
Through Star jet Cyber,
Afshan

by "starjet cyber" <starjetcyber22@gmail.com> - 10:19 - 12 Aug 2024

Vulnerability Report 01: Failure to invalidate session on Email Change

Hi team,

I am a security researcher and this time I found this vulnerability in your website.

Vulnerability Report : Failure to invalidate session on Email Change

Weakness : Insufficient Session Expiration

Description:

I observe that when we change Email from one browser in place of session

Expire from another browser it just updates Email from another browser and

the old session gets updated without being logged out.

Steps to check Session Management issue On Email change :

1- login From two browser at a time [ From Chrome browser and From Mozilla

Firefox ]

2- Change Email in setting from chrome browser

3- Now Check Mozilla FireFox

4- Your Session Got Updated in place of expiration

Recommendations:

If Session is Updating From One Browser so Others Should Expire First to

renew session after login.

Please let me know if any more info is needed !

Looking after your response.

Thanks & Regards,
Through Star jet Cyber,
Afshan

by "starjet cyber" <starjetcyber22@gmail.com> - 10:19 - 12 Aug 2024

Re:Looking for win-win cooperation!

Dear friends,

This is Joy from GLA network. Hope everything goes on well there.

Very delighted to write email with GLA Network details and sincerely invite your esteemed company to become GLA membership with much promotion.

Since establishment of GLA, we go through much challenges and opportunities. We stand for newly emerging enterprise since 2016 in this industry.

Fortunately GLA boosts very excellent with more than 7000 members from 178 countries.

We are developing as business-oriented and services-focused network to benefit each member from services department and whole sales team.

For more details, please check it from our website: www.glafamily.com

In the same time, GLA network will hold the 11^th Global Logistics Conference in Bangkok, Thailand on November 22nd- 25th, it is a good chance for you to find reliable partner, gain business and expand global influence! Welcome you attend our Thailand conference as GLA new member.

I would like to share with you as an international freight forwarder, why do you need to attend the offline Global Logistics Conference?

1.Face-to-face communication with more than 2000 agents from 130 countries to establish direct contact.

2.On-site direct signing of orders to promote cooperation

3.More than 10000 one-on-one meetings, 2.5 days sufficient time to present the company's strength and demand with each agent to find promotion business opportunities

4. Massive promotion of attendees and their companies in online one-on-one interview. and advertise on industrial social media such as Google, Facebook, Linkedin, Tiktok, CCTV and more.

5. Face-to-face conversation with industry elites, to update international logistics industry information as well the trend for each market.

Thank you.

Any interesting, keep us posted.

Conference register: http://www.glafamily.com/meeting/registration/Joy

(Notice: If you would not like to receive email blush, please inform us timely. We will delete your data from the database)

Joy Jiang

Overseas Dept

M: +86 153 6164 8088;

( Whatsapp & Wechat)

E member12@glafamily.com

A:GLA Co.,Limited

HongChang Plaza, 2001,Shennan Dong Road,Shenzhen
518000,China

www.glafamily.com

by "GLA family" <member321@glafamily.com> - 06:31 - 12 Aug 2024

3 attachments 3 attachments

Fw: RE:Shanghai-- Barranquilla/Buenaventura 40hq&BB&OOG

Dear Sir/Madam,

Good day!

I'm Linwer, This is WINCO logistics

Do you have any goods from China to Barranquilla/Buenaventura ?

We can handle the shipment from SHENZHEN/Shanghai/GUANGZHOU/FOSHAN/NINGBO/Qingdao/XIAMEN/TIANJIN.

If you want to ship from China, please contact me and I will give you the best rate support.

We can provide the services:

1)FCL shipment

2)Open Top &Flat Rack &Reefer Container Transport

3)Break Bulk Vessel Chartering

4)Heavy lift and RORO Vehicles

5)Inland Trucking and Customer clearance

6)HAZ&Chemical cargo

Below photos which we handled some shipment in before, just for your esay reference,

** Please accept our apologies in case we cause you any inconvenience. Should you wish to stop receiving our newsletter, please press here to Unsubscribe **

Warm Regards,

Linwer Weir(Miss)---heavy lift & project cargo

WINCO GROUP LIMITED

Whatsapp:+86 18377051612

Wechat: +86 13877090882

Skype: live:.cid.f4067aeb8522b2c4

Tel: 28511464-640

E-mail:Linwer@wincologistics.com

Web:www.wincologistics.com

Address:c5-Rm601,Zhonghao newtown, BanTian sub-District, Longgang, shenzhen, PR.china,518129深圳市龙岗区坂田街道象角塘社区中浩新城c5栋601

by "linwer@wincologistics.net" <linwer@wincologistics.net> - 06:17 - 12 Aug 2024

5 attachments 5 attachments

Join me to learn how to proactively monitor availability and performance with New Relic synthetics

Hi MD,

Liam, Senior Manager of Customer Training at New Relic University, here.

I’d like to personally invite you to my online workshop on Thursday 22nd August at 10am BST / 11am CEST on how to Proactively monitor availability and performance with New Relic synthetics.

In this 90-minute workshop, you'll learn about synthetic monitoring and automated testing in New Relic. You'll discover how to leverage automated testing to identify specific errors and slow pages, ensuring the best customer experience.

Attend and learn how to:

Set up monitors for specific use cases.
Report on specific SLAs and SLOs.
Use New Relic query language (NRQL) alerts to notify you of potential issues.

The interactive lab sessions will cover:

Monitor types: Ping, simple browser, scripted browser, API test.
Monitor alerts: Synthetic alerts and NRQL alerts.
Aggregate and individual monitors.
Dashboards to chart monitor performance.

While we recommend attending the hands-on workshop live, you can also register to receive the recording.

I hope to see you then,

Liam Hurrell

Senior Manager, Customer Training

New Relic

This email was sent to info@learn.odoo.com as a result of subscribing or providing consent to receive marketing communications from New Relic. You can tailor your email preferences at any time here.

by "Liam Hurrell, New Relic" <emeamarketing@newrelic.com> - 05:07 - 12 Aug 2024

You’re only human: To lead others, lead yourself first

Leading Off

Share this email

ESSENTIALS FOR LEADERS AND THOSE THEY LEAD

The path to becoming a successful leader is not straight and narrow. While many leaders make it to the top by gaining expertise in one area of a business, the best-performing CEOs may need to show mastery across all parts of their organization. But that’s just part of the equation. The best leaders cultivate qualities such as empathy, self-awareness, integrity, and humility that complement their business savvy. This week, we look at the importance of human-centered leadership and the need for CEOs to both look inward and connect with their teams to create stronger organizations.

AN IDEA

An image linking to the web page “The ‘inside out’ leadership journey: How personal growth creates the path to success” on McKinsey.com.

Lead from the inside out

Many leaders struggle to connect their aspirations with the performance of their organizations. That’s because most executives don’t spend enough time focusing on developing their so-called soft skills, observe McKinsey senior partners Dana Maor, Hans-Werner Kaas, Kurt Strovink, and Ramesh Srinivasan in their new book, The Journey of Leadership: How CEOs Learn to Lead from the Inside Out. In many cases, executives don’t know how to combine their traditional business talents with being reflective, humble, and vulnerable. But when they figure it out, they are better able to engage and inspire their colleagues and teams. As CEOs wrestle with digital transformation, disrupted global supply chains, and other complex issues, becoming a more human-centered, authentic leader can help them align with the right people to drive their business forward. “No one person, no matter how brilliant or capable, has the experience, knowledge, or temperament to tackle all these challenges alone,” the authors say.

A BIG NUMBER

5

That’s the number of mindset shifts that can help executives change the way they work and become better leaders at a time when employees really need them. Among these mindset shifts is changing how they see themselves at work. Executives must have the courage to embrace their humanity, including their quirks, to become more genuine leaders who bond with their teams and inspire stronger performance. “The intent is to move beyond task-driven and transactional relationships by taking the time to get to know one another and connect at a human level, sharing values, beliefs, hopes, and fears and enabling all to reveal the greatness that lies within,” say McKinsey senior partners Aaron De Smet and Arne Gast and their coauthors.

A QUOTE

“The best way, and perhaps the only way, to take good care of your teams, your customers, your stakeholders is to start by taking good care of yourself.”

That’s McKinsey senior partner Homayoun Hatami in an episode of The McKinsey Podcast on CEO priorities for 2024. In discussing how CEOs should focus their efforts to enable their organizations to thrive, Hatami suggests that self-care plays a critical role in managing the myriad demands of leadership. Developing effective microhabits can help leaders maintain their energy to inspire their teams. “These could be things like holding the line on travel, capping the length of meetings, not checking email after 8:00 p.m., picking up the phone and talking to someone instead of emailing,” notes Hatami. “It could also be going for a walk instead of doing a one-on-one.”

A SPOTLIGHT INTERVIEW

An image linking to the web page “How to make a strong start as a CEO” on McKinsey.com.

New CEOs must quickly connect with their teams in authentic ways. In an Inside the Strategy Room podcast interview on how CEOs can get off to a strong start in the role, McKinsey senior partners Carolyn Dewar and Kurt Strovink stress the importance of sharing meaningful moments with team members. “People want to see whether you are approachable and seem interested in them,” Strovink says. Adds Dewar, “You need to genuinely listen and learn, because the organization will sense if you are asking questions but not interested in the answers.” Finding the right balance between listening and taking strong positions is crucial for CEOs early in their tenure. “Sometimes leaders come in with too much of an assertive position without fully understanding the context,” Strovink says. “Alternately, they may shy away entirely from any early point of view. Either extreme can be a failure mode.”

STRONG, NOT SQUISHY

An image linking to the web page “It’s cool to be kind: The value of empathy at work” on McKinsey.com.

Investing in empathic behavior can generate higher productivity, a stronger workplace culture, and better organizational health. Stanford University research psychologist Jamil Zaki says, “When I train leaders in empathy, one of the first hurdles I need to get over is this stereotype that empathy is too soft and squishy for the work environment. It’s easy to debunk that. There are decades of evidence showing that empathy is a workplace superpower.” To create a positive and supportive workplace, CEOs can employ an affiliative leadership style that helps employees feel a sense of belonging, fosters open exchanges of ideas, and inspires people to work together to achieve common goals.

Lead authentically.

— Edited by Eric Quiñones, senior editor, New York

An image linking to the web page “McKinsey on Lives & Legacies” on McKinsey.com.

Introducing McKinsey on Lives & Legacies

This monthly series honors global leaders, innovators, and pioneers who have left an indelible mark on the business world. Each edition features new profiles of luminaries, highlighting their accomplishments and societal impact.

Click to subscribe today

Follow our thinking

McKinsey Insights - Get our latest thinking on your iPhone, iPad, or Android.

Share these insights

Did you enjoy this newsletter? Forward it to colleagues and friends so they can subscribe too. Was this issue forwarded to you? Sign up for it and sample our 40+ other free email subscriptions here.

This email contains information about McKinsey’s research, insights, services, or events. By opening our emails or clicking on links, you agree to our use of cookies and web tracking technology. For more information on how we use and protect your information, please review our privacy policy.

You received this email because you subscribed to the Leading Off newsletter.

Manage subscriptions | Unsubscribe

by "McKinsey Leading Off" <publishing@email.mckinsey.com> - 04:33 - 12 Aug 2024

Did you miss any of our most-read issues?

Only McKinsey

DELIVERING ACTIONABLE INSIGHTS ON THE DAY’S NEWS
As only McKinsey can

Thank you for being a valued reader of Only McKinsey! As we do every year around this time, we’re taking a brief pause from our newsletter, but we’ll be back in your inbox on September 3 with a new name: Only McKinsey Perspectives. We'll continue delivering actionable insights on the day’s news alongside exclusive McKinsey perspectives and insights, including from the upcoming book The Journey of Leadership by Dana Maor, Kurt Strovink, Ramesh Srinivasan, and senior partner emeritus Hans-Werner Kaas. In the meantime, catch up with some of our most popular recent issues:

It's tough for companies to grow. One C-suite partnership is especially important.

Generative AI is already starting to change the business world. Are you working with it yet?

How motivated are you? New research reveals what disengaged workers cost companies.

If you have friends or colleagues who might enjoy Only McKinsey Perspectives, consider forwarding this email to them or sharing it on LinkedIn, X, or Facebook. They can sign up for this or any of our 40+ other free email subscriptions at mckinsey.com/subscriptions. (And you might also want to revisit that page to see our full newsletter lineup.)

Was this forwarded to you? Sign up here.

Or send us feedback—we’d love to hear from you.

Follow our thinking

McKinsey Insights - Get our latest thinking on your iPhone, iPad, or Android.

This email contains information about McKinsey's research, insights, services, or events. By opening our emails or clicking on links, you agree to our use of cookies and web tracking technology. For more information on how we use and protect your information, please review our privacy policy.

You received this newsletter because you subscribed to the Only McKinsey newsletter, formerly called On Point.

Manage subscriptions | Unsubscribe

by "Only McKinsey" <publishing@email.mckinsey.com> - 11:08 - 11 Aug 2024

https://www.odoo.com/

Hi
I am working with a company where we buy 100 the post in 1 month Please let me know about my following questions

1)Please tell me your site's original traffic quality?

2)What is the sponsored post price of this site

3)If you have more websites then please send them to me .

4)Are you allowed links in the old post? If yes then tell me a price for link insertion
Please confirm you provide me at least 2 do-follow links permanent post with google indexa

5)Do you accept CBD/casino posts or not?

7) What is the price of link insertion?

Hope you also want to work with us

I am waiting for your response
Thanks

by "Abida seo" <asgharseo035@gmail.com> - 08:31 - 11 Aug 2024

https://www.odoo.com/

Hi
I am working with a company where we buy 100 the post in 1 month Please let me know about my following questions

1)Please tell me your site's original traffic quality?

2)What is the sponsored post price of this site

3)If you have more websites then please send them to me .

4)Are you allowed links in the old post? If yes then tell me a price for link insertion
Please confirm you provide me at least 2 do-follow links permanent post with google indexa

5)Do you accept CBD/casino posts or not?

7) What is the price of link insertion?

Hope you also want to work with us

I am waiting for your response
Thanks

by "Abida seo" <asgharseo035@gmail.com> - 08:28 - 11 Aug 2024

The week in charts

The Week in Charts

Share this email

ALL THE WEEK’S DATA THAT’S FIT TO VISUALIZE

Our McKinsey Chart of the Day series offers a daily chart that helps explain a changing world—as we strive toward sustainable and inclusive growth. In case you missed them, this week’s graphics explored recession predictions, mobile banking, consumer confidence in Asia–Pacific, AI in finance, and ROE in the Gulf Cooperation Council banking sector.

FEATURED CHART

Readying for a recession?

A chart titled “McKinsey Global Survey respondents are much more likely to predict a near-term recession than they were last quarter.” Click to open the full article on McKinsey.com.

This week’s other select charts

Mobile money matters

Consumer confidence roller coaster

CFOs counting on gen AI

The golden decade for GCC banks

Follow our thinking

McKinsey Insights - Get our latest thinking on your iPhone, iPad or Android.

Share these insights

Did you enjoy this newsletter? Forward it to colleagues and friends so they can subscribe too. Was this issue forwarded to you? Sign up for it and sample our 40+ other free email subscriptions here.

This email contains information about McKinsey's research, insights, services, or events. By opening our emails or clicking on links, you agree to our use of cookies and web tracking technology. For more information on how we use and protect your information, please review our privacy policy.

You received this email because you subscribed to The Week in Charts newsletter.

Manage subscriptions | Unsubscribe

by "McKinsey Week in Charts" <publishing@email.mckinsey.com> - 03:26 - 10 Aug 2024

EP124: How does SSH work?

͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏

Forwarded this email? Subscribe here for more

EP124: How does SSH work?

ByteByteGo

Aug 10

READ IN APP

This week’s system design refresher:

How does SSH work?
List of Subjects That Should be Mandatory in Schools
8 Common System Design Problems and Solutions
Why is Nginx so popular?
SPONSOR US

New Relic launched the industry's first fully-integrated, AI-driven Digital Experience Monitoring (DEM) solution (Sponsored)

New Relic DEM makes it easy for businesses to quickly identify and resolve user friction points across mobile, web, and AI-powered applications.

New Relic’s advanced DEM capabilities include:

Actionable user journeys without event duplication
The most comprehensive list of mobile platforms
Superior insights without the high costs

Get started

How does SSH work?

SSH (Secure Shell) is a network protocol used to securely connect to remote machines over an unsecured network. It encrypts the connection and provides various mechanisms for authentication and data transfer.

graphical user interface, text, application

SSH has two versions: SSH-1 and SSH-2. SSH-2 was standardized by the IETF.
It has three main layers: Transport Layer, Authentication Layer, and Connection Layer.

Transport Layer
The Transport Layer provides encryption, integrity, and data protection to ensure secure communication between the client and server.
Authentication Layer
The Authentication Layer verifies the identity of the client to ensure that only authorized users can access the server.
Connection Layer
The Connection Layer multiplexes the encrypted and authenticated communication into multiple logical channels.

An interesting list of subjects that should be mandatory in schools

While academics are essential, it's crucial to acknowledge that many elements in this diagram would have been beneficial to learn earlier.

Over to you: What else should be on the list? What are the top 3 skills you wish schools would teach?

Credit: Instagram accounts on startup_rules

The Train, Fine-Tune, and Deploy Large Language Models Bootcamp (Sponsored)

In the past few years, we saw a revolution with the advent of Large Language Models. Rarely has a discovery changed the world of Machine Learning that much, and the hype around LLM is real! That is something that very few experts predicted, and preparing for the future is essential. This boot camp is meant to train the new generation of engineers who will continue leading this revolution. You will learn:

The Transformer Architecture
Training LLMs to Follow Instruction
How to Scale Model Training
How to Fine-Tune LLMs
How to Deploy LLMs
How to Build the Application Layer

Enroll 20% Discount

8 Common System Design Problems and Solutions

Do you know those 8 common problems in large-scale production systems and their solutions? Time to test your skills!

Read-Heavy System
Use caching to make the reads faster.
High-Write Traffic
Use async workers to process the writes
Use databases powered by LSM-Trees
Single Point of Failure
Implement redundancy and failover mechanisms for critical components like databases.
High Availability
Use load balancing to ensure that requests go to healthy server instances.
Use database replication to improve durability and availability.
High Latency
Use a content delivery network to reduce latency
Handling Large Files
Use block storage and object storage to handle large files and complex data.
Monitoring and Alerting
Use a centralized logging system using something like the ELK stack.
Slower Database Queries
Use proper indexes to optimize queries.
Use sharding to scale the database horizontally.

Over to you: What other common problems and solutions have you seen?

Why is Nginx so popular?

Nginx is a high-performance web server and reverse proxy.

No alternative text description for this image

It follows a master-worker process model that contributes to its stability, scalability, and efficient resource utilization.

The master process is responsible for reading the configuration and managing worker processes. Worker processes handle incoming connections using an event-driven non-blocking I/O model.

Due to its architecture, Nginx excels in supporting multiple features such as:

High-Performance Web Server
Reverse Proxy and Load Balancing
Content Cache
SSL Termination

Over to you: Do you know any other features supported by Nginx?

SPONSOR US

Get your product in front of more than 1,000,000 tech professionals.

Our newsletter puts your products and services directly in front of an audience that matters - hundreds of thousands of engineering leaders and senior engineers - who have influence over significant tech decisions and big purchases.

Space Fills Up Fast - Reserve Today

Ad spots typically sell out about 4 weeks in advance. To ensure your ad reaches this influential audience, reserve your space now by emailing sponsorship@bytebytego.com

Like

Comment

Restack