Author: Yuri Gagarin

Introducing Contour: directing traffic to applications in Kubernetes

We are excited to share the news that Contour has been placed in the project incubator by the Cloud Native Computing Foundation (CNCF). If you haven't heard about Contour yet—it's a simple and scalable open-source ingress controller for routing traffic to applications running in Kubernetes. We will take a detailed look at how it works and show the 'roadmap' for its development at the upcoming Kubecon conferences […]

Tor security council report: malicious exit nodes used sslstrip.

The essence of what happened In May 2020, a group of outgoing nodes was discovered that interfered with outbound connections. Specifically, they left almost all connections untouched but intercepted connections to a small number of cryptocurrency exchanges. If users visited the HTTP version of the site (i.e., unencrypted and unauthenticated), the malicious nodes prevented redirecting to the HTTPS version (i.e., encrypted and authenticated). If the user did not notice the substitution […]

A Little About SMART and Monitoring Utilities

There is quite a bit of information available online about SMART and attribute values. However, I haven't come across mentions of several important points that I know from people engaged in media research. When I was telling a friend once again why SMART readings should not be trusted unconditionally and why it's better not to constantly use classic SMART monitoring tools, I came to […]

Inventory of LSI RAID arrays in GLPI

In my work, I often have obsessions about the lack of information regarding infrastructure, and as the number of servers under management increases, it turns into a real torment. Even when I was administering in small organizations, I always wanted to know what is where, where things are plugged in, who is responsible for which hardware or service, and most importantly — to record changes […]

Running JMeter tests in OpenShift using Jenkins Pipeline

Hello everyone! In this article, I want to share one of the ways to run JMeter performance tests in OpenShift using Jenkins for automation. First, we will go through all the necessary steps (creating ImageStreams, BuildConfig, Job, etc.) manually. After that, we will write a Jenkins Pipeline. Our starting point should be: a functioning OpenShift (v3.11) cluster with Jenkins […]

Notepad++ is blocked in China

The developers of Notepad++, the free (GPLv3) code editor for the Windows platform, have announced the project’s blockage in China. Despite only supporting the Windows platform, Notepad++ is very popular among Ubuntu users and ranks 5th among the most popular snap packages for developers (runs via Wine). It is speculated that the reason for Notepad++’s blockage was the project’s involvement in actions against […]

Hacking of the build server and compromise of the Libretro community repositories developing RetroArch

The Libretro community, responsible for developing the RetroArch game console emulator and the Lakka distribution for creating game consoles, has warned about the hacking of project infrastructure elements and vandalism in the repositories. Attackers were able to gain access to the build server (buildbot) and repositories on GitHub. On GitHub, the attackers accessed all repositories of the Libretro organization by exploiting the account of a trusted project member. […]

How to Accidentally Continue Writing a Web-GUI for Haproxy

It's been two years and four days since I wrote How to Accidentally Write a Web-GUI for Haproxy, and the landscape has long since changed — everything evolves, and HAProxy-WI strives to keep up with this trend. A lot of work has been done in these two years, and I want to share the main changes now, so: welcome to the 'cut'. 1. I will start […]

How to Accidentally Write a Web GUI for Haproxy

The modern world of system administrators has spoiled us with beautiful web interfaces, to the point where we are reluctant to install software without one (I can already hear the backlash from the die-hard command line users). After all, who wants to keep accessing the system via the command line, right? It would be fine if you could just install the software, configure it, and forget it, but what do you do when you need to access it regularly for tweaks? […]

You asked for a hint? We'll give it to you

UPDATE: THE LASER HAS BEEN HACKED! A weight is flying into the server aquarium, causing destruction, a short circuit, and a fire in an hour and a half; the countdown has begun. Enjoy the show! You can join the viewers on Discord. You have come far and solved almost all the riddles, but you are stuck on the easiest yet most complicated one. All you had to do was show a bit more […]

Attack of the Week: Voice Calls in LTE (ReVoLTE)

From the Translator and TL;DR: TL;DR: It seems that VoLTE is even less secure than the first Wi-Fi clients with WEP. This is purely an architectural oversight that allows for some traffic XOR'ing and key recovery. The attack is possible if you are close to the caller and they make frequent calls. Thanks for the tip and TL;DR Klukonin. Researchers have developed an app to check if your operator is vulnerable, details […]

Instagram Will Ask to Confirm Identity of 'Suspicious' Account Owners

The social network Instagram continues to ramp up efforts to combat bots and accounts used for manipulating platform users. This time, it's been announced that Instagram will be requesting account owners suspected of 'potentially misleading behavior' to confirm their identity. According to Instagram, the new policy will not affect the majority of social media users, as it […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster