Author: Yuri Gagarin

Attacks on email client users using 'mailto:' links

Researchers from Ruhr University Bochum (Germany) analyzed (PDF) the behavior of email clients when processing 'mailto:' links with extended parameters. Five out of the twenty email clients reviewed were found to be vulnerable to an attack that manipulates resource substitution using the 'attach' parameter. An additional six email clients were susceptible to attacks through PGP and S/MIME key replacement, while three clients were vulnerable to […]

nnn v3.4 — console file manager with terminal icon support

A new version of the fully functional file manager nnn has been released, optimized for efficient workflow (searching, filtering, sorting, renaming, instant handling of thousands of files). The program uses minimal resources (binary 100KB, 3.5MB in RAM), is compatible with Pi, Termux (Android), Linux, macOS, BSD, Haiku, Cygwin, WSL, and various graphical and console environments. The program operates with 8 color […]

We shorten links without fluff (F3)

It's not embarrassing to shorten links at 13, right? A beginner, and not just beginners, should try writing their own Link Shortener while learning some new framework along the way. That's what I've been doing. What can I say — the fifth bootstrap, a lean framework, and a piece of my soul. Here's a demo, and here's the code. For readers like me 😉 A framework, right? Of course […]

On the transition from Redis to Redis-cluster

When entering a product that has been evolving for more than a decade, it is not surprising to encounter outdated technologies. But what if in six months you need to handle a load ten times higher, and the cost of failures increases by hundreds? In this case, you need a skilled Highload Engineer. However, in the absence of one, the problem was entrusted to me. In the first […]

Release of the Kali Linux 2020.3 distribution for security research

The release of Kali Linux 2020.3 has occurred, designed for testing systems for vulnerabilities, conducting audits, analyzing residual information, and identifying the consequences of attacks by malicious actors. All original developments created within the distribution are distributed under the GPL license and are available through a public Git repository. Several ISO image options have been prepared for download, sized at 430 MB, 2.9 GB, and 3.7 GB. The builds […]

Qt 6 in Debian may end up unsupported

The current maintainers of the Qt framework packages in Debian have decided not to provide support for the next major branch Qt 6, the release of which is scheduled for December. Meanwhile, support for the previous branch Qt 5 will continue unchanged. The delivery of Qt 6 to Debian will be ensured if new maintainers are found who are ready to provide package support at a suitable level […]

Mozilla has expanded its vulnerability rewards program

Mozilla has announced an expansion of its initiative to pay monetary rewards for identifying security issues in Firefox. In addition to vulnerabilities, the Bug Bounty program will now cover methods to circumvent existing browser mechanisms that prevent exploits. Such mechanisms include an HTML fragment cleansing system before use in a privileged context and memory separation for DOM nodes […]

The creation of the Rust Foundation, independent of Mozilla, has been announced.

The main development team of the Rust programming language (Rust Core Team) and Mozilla have announced plans to create an independent non-profit organization, the Rust Foundation, by the end of the year. This organization will be entrusted with the intellectual property related to the Rust project, including trademarks and domain names associated with Rust, Cargo, and crates.io. The organization will also be responsible for organizing project funding. Recall that […]

Interview from the Hosting World: Boodet.online

My name is Leonid, and I am a website developer at VPS Search. Given my work, I am interested in the stories of the establishment and development of various companies in the hosting services sector. Today, I want to present an interview with Danil and Dmitry, the creators of the hosting service Boodet.online. They will share insights about their infrastructure, work organization, and their experience in developing a virtual server provider in Russia. Please tell us about […]

Best Practices for Bash Scripting: A Concise Guide to Reliable and Efficient Bash Scripts

Shell wallpaper by manapi Debugging bash scripts is like searching for a needle in a haystack, especially when new additions are made to an existing codebase without timely consideration of structure, logging, and reliability. In such situations, one can find themselves dealing with both their own mistakes and managing complex script entanglements. The Mail.ru Cloud Solutions team translated the article […]

Release of Parrot 4.10 distribution with a selection of programs for security testing

The release of Parrot 4.10, based on the Debian Testing package base and including a set of tools for system security testing, forensic analysis, and reverse engineering, is now available. Several ISO images are offered for download with the MATE environment (full 4.2 GB and minimal 1.8 GB), with the KDE desktop (2 GB), and with the Xfce desktop (1.7 GB). The Parrot distribution […]

Chrome 86 will feature protection against unsafe submission of web forms

Google announced the introduction of protection against insecure submission of web forms in the upcoming release of Chrome 86. This protection targets forms displayed on pages loaded via HTTPS but submitting data without encryption over HTTP, which creates risks of data interception and modification during MITM attacks. Three changes have been implemented for such mixed web forms: Autocompletion of any mixed input forms has been disabled, […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster