The fifth corrective update for the Debian 10 distribution has been released, which includes accumulated package updates and fixes in the installer. The release contains 101 updates addressing stability issues and 62 updates addressing vulnerabilities. Among the changes in Debian 10.5 is the fix for a vulnerability in GRUB2 that allows bypassing the UEFI Secure Boot mechanism and enables the installation of unverified malicious software. […]
Preliminary notification: this post is strictly a Friday one and more entertaining than technical. You can expect fun stories about engineering mishaps, tales from the dark side of working with a mobile operator, and other lighthearted anecdotes. If I embellish any details, it’s only for the sake of storytelling, and if I lie, those incidents are from long ago, so it won't matter to anyone. […]
The developers of Wayland have introduced the first release of the new package wayland-utils, which will include utilities related to Wayland, similar to how the wayland-protocols package provides additional protocols and extensions. Currently, it includes only one utility, wayland-info, designed to display information about the Wayland protocols supported by the current composite server. The utility stands alone […]
Two vulnerabilities have been identified in X.Org Server and libX11: CVE-2020-14347 — a lack of memory initialization when allocating buffers for pixmaps via the AllocatePixmap() call can lead to the X client leaking memory content from the heap when the X server is running with elevated privileges. This leak can be used to bypass address space layout randomization (ASLR). When combined with other vulnerabilities, this issue […]
TL;DR: an overview guide comparing environments for running applications in containers. The capabilities of Docker and other similar systems will be discussed. A bit of history on where it all began. The first well-known method of isolating an application is chroot. The system call of the same name changes the root directory, thus ensuring that the program that called it has access only to the files within that directory. But […]
Every year on the last Friday of July, the world celebrates System Administrator Appreciation Day — a professional holiday for all those responsible for the reliable and uninterrupted functioning of servers, corporate networks, workstations, multi-user computer systems, databases, and other network services. This tradition was initiated by American IT specialist Ted Kekatos, who believed it was unfair that there was no significant day in the calendar for […]
A new release of the JPype 1.0.2 layer is now available, allowing full access for Python applications to Java class libraries. With JPype, specific Java libraries can be used from Python, creating hybrid applications that combine Java and Python code. Unlike Jython, the integration with Java is achieved not by creating a version of Python for the JVM, but through interaction […]
After five months of development, the system manager systemd 246 has been released. The new version includes support for freezing units, the ability to verify the root disk image by digital signature, support for compressing logs and core dumps using the ZSTD algorithm, the ability to unlock portable home directories using FIDO2 tokens, support for unlocking Microsoft BitLocker partitions via /etc/crypttab, and the renaming of BlackList to DenyList. […]
The well-known system manager for GNU/Linux has prepared another release numbered 246. In this version: automatic loading of security rules, AppArmor support for checking disk encryption in units with ConditionPathIsEncrypted=/AssertPathIsEncrypted=, support for checking environment variables ConditionEnvironment=/AssertEnvironment=, support for checking the digital signature of the partition (dm-verity) in .service units, and the ability to transmit keys and certificates through AF_UNIX sockets without the need for […]
Hello everyone! Today we will try to automate the process of creating assignments using the data platform Microsoft Common Data Service along with Power Apps and Power Automate services. Based on Common Data Service, we will build entities and attributes, create a simple mobile application using Power Apps, and Power Automate will help connect all components with a unified logic. Let's not waste any time! But […]
Hello everyone! Today, let's talk about Power Automate and Logic Apps products. Often, people do not understand the differences between these services and which one to choose for their tasks. Let's figure it out. Microsoft Power Automate is a cloud service that offers users the ability to create workflows for automating tedious business tasks and processes. […]
Anyone who has tried to launch a virtual machine in the cloud knows well that the standard RDP port, if left open, will almost immediately be attacked by waves of password brute-force attempts from various IP addresses around the world. In this article, I will show how to configure automatic responses to password brute-force attacks in InTrust by adding a new rule to the firewall. InTrust […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Norwegian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish