Author: Yuri Gagarin

Release of distributions ALT Workstation, ALT Server, and ALT Education 9.1

An update is available for three main OS Alt versions 9.1 based on the Ninth ALT platform (p9 Vaccinium): "Alt Workstation 9," "Alt Server 9," and "Alt Education 9." The most significant change is the further expansion of the list of supported hardware platforms. The Alt OS is available for eight Russian and foreign hardware platforms: 32-/64-bit x86 and ARM processors, Elbrus processors (v3 and […]

A critical vulnerability in the GRUB2 bootloader allows bypassing UEFI Secure Boot

Eight vulnerabilities have been identified in the GRUB2 bootloader. The most dangerous issue (CVE-2020-10713), codenamed BootHole, allows for the bypassing of the UEFI Secure Boot mechanism and enables the installation of unverifiable malicious software. A notable feature of this vulnerability is that simply updating GRUB2 is insufficient for resolution, as an attacker can utilize a boot medium with an old vulnerable version, certified by a digital signature. […]

How Uma.Tech has developed its infrastructure

We launched new services, traffic increased, we replaced servers, connected new sites, and revamped the data centers – now we will tell you this story, which we first introduced to you five years ago. Five years is a significant time for interim results. Therefore, we decided to share the development of our infrastructure, which has gone through an incredibly interesting journey over these five years, of which we […]

Creating an Ubuntu image for ARM "from scratch"

When development first begins, it's often unclear which packages will actually go into the target rootfs. In other words, it's too early to grab onto LFS, buildroot, or yocto (or anything else), but you need to start already. For those with ample resources (I have 4GB eMMC on the pilot samples), there is a solution to provide developers with a distribution that will quickly deliver whatever is missing in this […]

Canary Deployment in Kubernetes #1: Gitlab CI

We will use Gitlab CI and manual GitOps to implement and utilize Canary deployment in Kubernetes. Articles in this series: (this article) Canary Deployment using ArgoCI, Canary Deployment using Istio, Canary Deployment using Jenkins-X, Istio Flagger. We will perform Canary deployment manually through GitOps and create/modify core Kubernetes resources. This article is intended for the first […]

StealthWatch: incident analysis and investigation. Part 3

Cisco StealthWatch is a security analytics solution that provides comprehensive threat monitoring across a distributed network. The operation of StealthWatch is based on collecting NetFlow and IPFIX from routers, switches, and other network devices. As a result, the network becomes a sensitive sensor, allowing the administrator to peek into areas inaccessible to traditional network protection methods, such as Next Generation […]

4. NGFW for Small Business. VPN

Continuing our series of articles on NGFW for small businesses, I would like to remind you that we are examining the new 1500 series model range. In the first part of the series, I mentioned one of the most useful options when purchasing an SMB device — the provision of gateways with built-in Mobile Access licenses (from 100 to 200 users, depending on the model). In this article, we […]

Malicious code detected in the Perl package Module-AutoLoad

Malicious code has been discovered in the Perl package Module-AutoLoad distributed via the CPAN catalog, designed for on-the-fly automatic loading of CPAN modules. The malicious insertion was found in the test code 05_rcx.t, which has been included since 2011. Notably, concerns about loading suspicious code were raised on Stackoverflow as early as 2016. The malicious activity involves attempts to load and execute code from external […]

Release of Tails distribution 4.9 and Tor Browser 9.5.3

The release of the specialized Tails 4.9 distribution (The Amnesic Incognito Live System), based on the Debian package base and designed to ensure anonymous internet access, has been formed. Anonymous access in Tails is provided by the Tor system. All connections, except traffic through the Tor network, are blocked by the packet filter by default. User data storage in data preservation mode between sessions is implemented with […]

Firefox 79

Firefox 79 is now available. The password manager has learned to export saved passwords (in CSV format). A page with experimental features has been added to the settings dialog. To see it, you must use the setting browser.preferences.experimental. The about:support page now features a 'Clear Launch Cache' button. Prediction of partially entered search queries is enabled (browser.urlbar.richSuggestions.tail). For example, if a user types 'hobbit holes for sale in l', the search engine might […]

Windows Terminal Preview 1.2 has been released

We present the latest update for Windows Terminal Preview, which will appear in Windows Terminal in August. You can download Windows Terminal Preview and Windows Terminal from the Microsoft Store or from the releases page on GitHub. Check below to learn about the latest features! Focus Mode The introduced feature hides tabs and the title bar. In this mode, only the terminal content is displayed. […]

Patroni Failure Stories or How to Crash Your PostgreSQL Cluster. Alexey Lesovsky

The main goal of Patroni is to provide High Availability for PostgreSQL. However, Patroni is just a template, not a ready-made tool (as stated in the documentation). At first glance, configuring Patroni in a test lab shows what a wonderful tool it is and how easily it handles our attempts to break the cluster. However, in practice, in a production environment […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster