Author: Yuri Gagarin

Malicious activity detected in the NPM package fallguys

NPM developers have warned about the removal of the fallguys package from the repository due to detected malicious activity. Aside from displaying an ASCII graphic splash screen featuring a character from the game "Fall Guys: Ultimate Knockout", this module included code attempting to transfer some system files via webhook to the Discord messenger. The module was published in early August but only managed to get 288 downloads before […]

Nick Bostrom: Are We Living in a Computer Simulation (2001)

I collect all the most important texts of all time and peoples that influence our worldview and understanding of the world ('Ontol'). And here, after thinking for a while, I propose a bold hypothesis that this text is more revolutionary and important in our understanding of the structure of the world than the Copernican revolution and the works of Kant. In the Russian internet, this text (full version) was in terrible condition, […]

Who stopped the shredder or how the quest to destroy the server should have been completed

A couple of days ago, we completed one of the most emotionally charged events that we were lucky enough to host on our blog — a hacker online game with server destruction. The results exceeded all our expectations: participants not only joined but quickly organized into a cohesive community of 620 people on Discord, which literally stormed the quest over the course of two days without a break for […]

Release Wine 5.16

An experimental release of the open implementation of WinAPI — Wine 5.16 has been made. Since the release of version 5.15, 21 bug reports have been closed and 221 changes have been made. The most important changes include: support for AVX registers on x86 added in ntdll. Improved ARM64 support for macOS. Ongoing work on restructuring console support. Bug reports related to the operation of games and applications have been closed: Memorex […]

Pleroma 2.1

The enthusiast community is pleased to present the new version of Pleroma — a blogging server with text markup, written in Elixir and utilizing the standardized W3C ActivityPub federation protocol. This is the second most widespread implementation of the server. Compared to the nearest competing project — Mastodon, written in Ruby and operating in the same ActivityPub network — Pleroma boasts a smaller size and […]

Alpha release of the openSUSE Jump distribution with binary packages from SUSE Linux Enterprise

An initial prototype of the experimental openSUSE Jump distribution is available for testing, created as part of the initiative to merge the development and compilation processes of openSUSE Leap and SUSE Linux Enterprise distributions. ISO images, sized at 3.8 GB, are offered for download, prepared for x86_64, Aarch64, ppc64le, and s390x architectures. The traditional openSUSE distribution is formed based on the core set of SUSE Linux Enterprise packages, but the packages […]

Release of the free racing game SuperTuxKart 1.2

The release of Supertuxkart 1.2 has been published, a free racing game with a large number of tracks, maps, and features. The game's code is distributed under the GPLv3 license. Binary builds are available for Linux, Android, Windows, and macOS. In this release: for low-level window creation and input processing, the SDL2 library has replaced the Irrlicht engine. The use of SDL2 has significantly improved gamepad support, in addition to […]

Modeling fault-tolerant clusters based on PostgreSQL and Pacemaker

Introduction Some time ago, I was tasked with developing a fault-tolerant cluster for PostgreSQL, operating across several data centers connected by fiber optics within a single city, and capable of withstanding the failure (e.g., power outage) of one data center. For the software responsible for fault tolerance, I chose Pacemaker, as it is the official solution from RedHat for creating fault-tolerant clusters. It is beneficial because […]

Kubernetes Cluster Monitoring: An Overview and Introduction to Prometheus

Let’s explore the concept of Kubernetes monitoring, familiarize ourselves with the Prometheus tool, and discuss alerting. The topic of monitoring is extensive and cannot be covered in a single article. The aim of this text is to provide an overview of the tools, concepts, and approaches. The content is a summary from an open lecture at the 'Slurm' school. If you want to undergo complete training, enroll in the course on Infrastructure Monitoring and Logging […]

Vulnerability in OpenZFS that disrupts access control in FreeBSD

A critical vulnerability (CVE-2020-24717) has been identified in the added OpenZFS code supporting the FreeBSD OS, leading to access rights processing issues. The core of the problem is that the rights assigned to the group were processed as rights for the file owner. The issue has been addressed in the OpenZFS 2.0.0-rc1 update. The fix was implemented before the FreeBSD HEAD codebase was migrated to OpenZFS. The problem arose because […]

Electron 10.0.0 release, a platform for creating applications based on the Chromium engine.

The release of the Electron platform 10.0.0 has been prepared, providing a self-sufficient framework for developing cross-platform user applications based on components such as Chromium, V8, and Node.js. The significant version number change is due to the update to Chromium base 85, Node.js 12.16.3, and JavaScript engine V8 8.5. In this new release: The method contents.getBackgroundThrottling() and the property contents.backgroundThrottling have been added. The main process provides […]

DevSecOps: principles of operation and comparison of SCA. Part one

The importance of Software Composition Analysis (SCA) in the development process is increasing as annual reports on vulnerabilities in open source libraries are published by companies such as Synopsys, Sonatype, Snyk, and White Source. According to the report The State of Open Source Security Vulnerabilities 2020, the number of identified vulnerabilities in open source in 2019 increased by nearly 1.5 times.

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster