Orange España, the second largest mobile operator in Spain, faced a significant outage on Wednesday after an unknown party accessed the account managing the global routing table using a "ridiculously weak" password. Starting at 9:28 UTC, an individual under the nickname Snow logged into Orange's account with RIPE NCC using the password ripeadmin. RIPE NCC […]
The compromise of the administrator account led to nearly four hours of downtime for the second-largest Spanish telecom operator, Orange Espagne, which serves 11 million subscribers. A predictable password, "ripeadmin," was used to access the RIPE NCC registrar interface in Orange Espagne, and two-factor authentication was not enabled. The RIPE password was intercepted during a security breach affecting one of the employees […]
A critical vulnerability (CVE-2023-7101) has been identified in the Perl module Spreadsheet::ParseExcel, which provides functions for parsing Excel files. The vulnerability allows for arbitrary code execution when processing XLS or XLSX files containing specially crafted number formatting rules. The issue arises from using data obtained from the processed file in the construction of an "eval" call. The problem has been fixed in Spreadsheet::ParseExcel 0.66 update. An exploit prototype exists. Vulnerable code: if […]
A vulnerability (CVE-2023-51714) has been discovered in the Qt library's implementation of the HTTP/2 protocol, allowing data to be written beyond the allocated buffer. This vulnerability is caused by an integer overflow in the code handling packed headers (HPack) and manifests when receiving more than 4 GB of total HTTP header data or 2 GB for a single header. The problem has been addressed in Qt updates 5.15.17, 6.2.11, 6.5.4, and 6.6.2. […]
Daniel Stenberg, the author of the curl utility for transferring data over networks, criticized the use of AI tools in generating vulnerability reports. Such reports may include detailed information, be written in plain language, and appear to be high-quality; however, without thoughtful analysis, they can mislead by substituting real issues with superficially presentable garbage content. The Curl project […]
One of the developers of JavaScript packages conducted an experiment by creating and publishing a package called ‘everything’ in the NPM repository, which encompasses dependencies for all existing packages in the repository. To implement such a capability, the ‘everything’ package is directly dependent on five packages ‘@everything-registry/chunk-N’, which in turn are linked with dependencies to over 3000 packages ‘sub-chunk-N’, each of which refers to 800 […]
A project has been introduced for developing a lightweight Unix-like kernel in Rust, implementing a subset of system calls from the Linux kernel sufficient for creating typical working environments. The project was initiated in 2018 and initially used the C language, but in 2020 it was completely restarted from scratch, taking into account the accumulated experience, and switched to Rust to reduce the likelihood of errors, […]
A new release of the distribution for building routers and firewalls, IPFire 2.27 Core 182, has been published. IPFire features a simple installation process and configuration setup through an intuitive web interface, rich in clear graphs. The size of the installation ISO image is 423 MB (x86_64, AArch64). The system is modular; in addition to basic packet filtering and traffic management functions, modules for implementing a prevention system for IPFire are available […]
DB-Engines has updated its database popularity ranking and awarded the title of Database of the Year 2023 to the PostgreSQL project, which demonstrated the largest growth in popularity over the past year among 417 tracked systems. The second place was awarded to the cloud platform Databricks, which rose from 19th to 17th place in the ranking, while third place went to the Google BigQuery engine, which improved from 21st to […]
The release of SBCL 2.4.0 (Steel Bank Common Lisp), a free implementation of the Common Lisp programming language, has been published. The project code is written in Common Lisp and C, and is distributed under the BSD license. In the new release: Compatibility-breaking changes: *COMPILE-VERBOSE* and *LOAD-VERBOSE* are bound to NIL when the system is run with the command line argument ‘—script’. When searching for a core file, the system checks the correctness of […]
On January 1st, Niklaus Wirth, one of the leading theorists in programming, passed away just a month shy of his 90th birthday. Wirth is the author of 10 programming languages, among which Pascal, Modula-2, and Oberon are the most well-known, and he is also one of the creators of the structured programming paradigm, the ideas of executing intermediate bytecode, and garbage collection in interpreters. For his contributions to the development […]
On January 1st, at the age of 90, one of the theorists and pioneers of computer science, Turing Award winner, Swiss scientist Niklaus Wirth, passed away. Wirth is known for his work on programming languages such as Algol, Modula, and Oberon. However, perhaps the most famous result of his work is the Pascal programming language, with which entire generations of students began their journey as programmers. […]