Project Meeting 2022.12.08

Agenda

• Admin
• Phase 8 RFP - proposer questions & schedule
• Code review updates
• Memory profile update
• Code management follow up / ActivitySim Strategic Development and Contribution Plan
• Vulnerability Report

Task and Code Review Updates

School Escorting

• CS identified a discrepancy in trips where the trip mode is not the same for the chauffer and escortee. RSG clarified the reason for this behavior is that all the trip modes are being determined simultaneously. It could be prevented by devising some ways or rules to match modes.
• CS suggested two approaches –
  • let it go.
  • Add an additional annotator at the end that would make the changes to the child’s mode choice and pair with the chauffer’s choice.
• Action Item – RSG agreed to make the changes as per the second approach. It will also be user configurable.

Flexible Number of Tour and Trip IDs

• Reviewed and accepted by Joe flood

Shadow Pricing

• RSG is testing the fix to the bug identified by CS

Estimation Fix

• RSG review ongoing

Disaggregate Accessibilities

• WSP has reviewed comments from RSG and responded

Skim Wrapper

• WSP review ongoing.
• Implementing the changes in ARC model.
• CS will address the changes required to make it compatible with sharrow.

Sharrow

• CS review ongoing.

PTV's Window Installer

• CS review ongoing.

Random Seed Generator

• RSG review completed.

ARC Parking location choice model

• CS review ongoing.

Operational Updates

• WSP review ongoing.

Memory Profiling

• WSP review ongoing
• Still not able to run MWCOG model. CS and WSP are working on it.
• WSP is also working on the memo

Code management follow-up:

• No comments yet

Discussion on vulnerability report:

• On cryptographic secure hashing: Jeff mentioned that there are no real issues. Cryptography secure hash is required in public-facing apps. The random numbers are used in a contained environment. Unsecured hashes are not actually a security risk but a stylistic choice.
• On Configuration of the YAML: The user is at risk if the user doesn’t look at the contents of the YAML and tries to run the activity sim model. It can execute some code and install arbitrary software on the system.
• On logging: Setting different formats for logging and allowing YAML to read a file that calls an arbitrary python function is real security risk.