Recently, many organizations are moving their applications from monoliths to microservices using 'Platform as a Service' (PaaS) such as RedHat OpenShift v3, and AppDynamics has made significant investments to ensure top-notch integration with such providers. AppDynamics integrates its agents with RedHat OpenShift v3 using Source-to-Image (S2I) methodologies. S2I is a tool for building reproducible […]
Defining DevOps is quite complex, which is why discussions about it tend to resurface continually. On Habr alone, there are thousands of publications on this topic. But if you're reading this, you likely know what DevOps is. Because I don’t. Hi, my name is Alexander Titov (@osminog), and we will just talk about DevOps, and I'll share my experiences. I spent a lot of time thinking about how to make my story useful, so there will be many questions here—those […]
Introduction At the end of March, we reported that we discovered a hidden capability for uploading and running unverified code in UC Browser. Today, we'll detail how this upload occurs and how hackers can exploit it for their purposes. Some time ago, UC Browser was marketed and distributed very aggressively: it was installed on users' devices via malware, distributed with […]
In one of our previous articles regarding infrastructure planning when deploying the Zimbra Collaboration Suite in enterprises, it was mentioned that the primary limitation when operating this solution is the read/write speed of disk devices in mail storage systems. Indeed, at a time when several hundred employees are simultaneously accessing the same mail storage, the bandwidth for […]
Once, I faced the task of granting one of my clients the right to edit PTR records for the given /28 subnet. I don't have automation for editing BIND settings externally. So I decided to take a different approach—delegate a piece of the PTR zone of the /24 subnet to the client. It seemed simple enough—just set the subnet correctly and point to the desired […]
Network latency significantly affects the performance of applications or services that interact with the network. The lower the latency, the higher the performance. This is true for any network service, ranging from a regular website to a database or network storage. A good example is the Domain Name System (DNS). DNS is inherently a distributed system, with root nodes scattered […]
TP-Link has released the Deco W2400 system, designed to deploy a Wi-Fi network in a large private house or apartment. The kit includes two routers. It is claimed that they can cover an area of up to 280 square meters with a quality Wi-Fi signal. If needed, the system can be supplemented with additional routers. The devices can operate in two frequency bands — 2.4 GHz and […]
An update for the virtualization system VirtualBox 6.0.8 has been released. Among the main changes: Fixes for errors during kernel module builds with non-standard configurations. Fixes for errors when attempting to restore from a saved VM state. UI change: full paths to files are now displayed in the New Medium window. UI change: fixes for issues with mouse click passthrough in multi-monitor VM configurations. […]
In May, RUVDS opened a new hermetic zone in Germany, in the country's largest financial and telecommunications city, Frankfurt. The highly reliable Telehouse Frankfurt data center is one of the data centers of the European company Telehouse (headquartered in London), which is in turn a subsidiary of the global Japanese telecommunications corporation KDDI. We have discussed our other sites multiple times before. Today, we will talk about […]
This year’s vulnerability discovered in Exchange allows any user in the domain to gain domain administrator rights and compromise Active Directory (AD) and other connected hosts. Today, we will explain how this attack works and how to detect it. Here’s how the attack operates: The attacker seizes the account of any domain user with an active mailbox to subscribe to the […]
As with most posts, a problem arose with a distributed service, let’s call this service Alvin. This time, I didn't discover the issue myself; it was reported to me by the client-side team. One day, I woke up to a disgruntled email about significant delays with Alvin, which we planned to launch soon. Specifically, the client was facing a 99th percentile delay in […]
It seemed that after the vulnerabilities Meltdown and Spectre discovered over a year ago, nothing could surprise fans and users of Intel processors anymore. Yet again, the company managed to astonish us. More precisely, it was the researchers of vulnerabilities in Intel's microarchitecture that surprised us. A new set of vulnerabilities collectively known as microarchitectural data sampling (MDS) threatens to put a halt to the technology of multithreaded computing or […]