In Russia, a training platform for system programmers is being developed — BMPOS (Basic Modular Platform for Operating Systems), which is conceived and created as a teaching aid for operating system development with an extensive theoretical and practical foundation. As part of the project, a modular kernel is being developed, fundamentally different from existing kernels and specifically designed for studying the process of operating system development. Code […]
In the nightly builds of Firefox, on which version 120 will be based, set to release on November 21, the list of language models in the built-in machine translation system, enabled by default since Firefox version 118, has been expanded. In addition to the initially available models for English, Bulgarian, Danish, German, French, Spanish, Polish, Italian, and Portuguese, models for Russian, Ukrainian, Estonian, and […] have been proposed for testing.
Google has begun implementing the IP Protection feature in Chrome, designed to hide the user's IP address from website owners. This new feature can be used as a built-in anonymizer aimed primarily at preventing tracking while also being suitable for bypassing blocks established on both the website and the service provider levels. Technically, the proposed […]
The first stable release of the nghttp3 project is available, developing a library in C implementing the HTTP/3 protocol. The variant of the library for the HTTP/2 protocol, developed by the same project, serves as the foundation for the mod_http2 module included in the Apache HTTP server. The project's developments are also utilized in the Curl utility. The library code is distributed under the MIT license. The HTTP/3 standard defines the use of the QUIC (Quick […]
The release of the free boot firmware Libreboot 20231021 has been unveiled. This update has been assigned the status of a test release (stable releases are published approximately once a year, with the last stable release in June). The project develops a ready-made build from the coreboot project, providing a replacement for proprietary UEFI and BIOS firmwares responsible for initializing the CPU, memory, peripherals, and other hardware components, with minimal binary insertions. Libreboot is aimed at […]
The release of the Apache HTTP Server 2.4.58 has been published, featuring 33 changes and addressing three vulnerabilities, two of which are related to the potential for DoS attacks on systems using the HTTP/2 protocol. CVE-2023-45802 — conditions for memory exhaustion due to delayed memory release after an HTTP/2 stream reset by a packet with the RST flag. As memory is not released immediately after processing […]
Node.js 21.0 has been released, a platform for running network applications in JavaScript. Support for the Node.js 21.0 branch will last for 6 months. In the coming days, the stabilization of the Node.js 20 branch will be completed, which will achieve LTS status and will be supported until April 2026. Support for the previous LTS branch, Node.js 18.0, will continue until September 2025, and for the earlier LTS branch […]
A TLS connection interception was detected with XMPP (Jabber) instant messaging encryption protocol (Man-in-the-Middle attack) on the servers of the jabber.ru service (also xmpp.ru) hosted by Hetzner and Linode in Germany. The attacker issued several new TLS certificates using the Let’s Encrypt service, which were used for intercepting encrypted STARTTLS connections on port 5222 through a transparent MiTM proxy. The attack was discovered in connection with […]
The administrator of the Jabber server jabber.ru (xmpp.ru) identified a user traffic decryption attack (MITM), conducted over a period of 90 days to 6 months in the networks of the German hosting providers Hetzner and Linode, where the project server and auxiliary VPS environments are hosted. The attack was orchestrated by redirecting traffic to a transit node that substitutes the TLS certificate for XMPP connections encrypted using the STARTTLS extension. The attack was noted […]
Security researchers from Outpost24 published the results of their analysis on the reliability of passwords used by IT system administrators. During the study, accounts present in the Threat Compass database, which collects information about password leaks due to malware activity and hacks, were examined. A collection of over 1.8 million recovered passwords from hashes, related to administration interfaces, was successfully gathered […]
25 years ago, in October 1998, the domain Linux.org.ru was registered. Please write in the comments what you would like to change on the site, what is lacking, and which features should be further developed. Ideas for development and small details you would like to change, such as usability issues and bugs that hinder the user experience, are also of interest. In addition to the traditional survey, we would like to additionally note […]
After a year of development, the release of the new stable branch of the open communication platform Asterisk 21 has taken place. This platform is used for deploying software PBXs, voice communication systems, VoIP gateways, organizing IVR systems (voice menus), voicemail, telephone conferences, and call centers. The project's source code is available under the GPLv2 license. Asterisk 21 falls into the category of releases with standard support, with updates being generated over a two […]