Author: Yuri Gagarin

The reliability of encryption is one of the most important indicators when using information systems for business, as they are involved daily in transferring vast amounts of confidential information.

TL;DR if you need antivirus on your corporate mobile devices, then you are doing everything wrong, and antivirus won't help you. This post is the result of heated debates on whether antivirus is needed on corporate mobile phones, under what circumstances it works, and when it is useless. The article examines threat models that antivirus should theoretically protect against […]

Improving SSL Connection Security Parameters in Zimbra Collaboration Suite Open-Source Edition

The reliability of encryption is one of the most important indicators when using information systems for business, as they participate daily in the transmission of vast quantities of confidential information. A commonly accepted means of assessing the quality of an SSL connection is the independent test from Qualys SSL Labs. Since this test can be run by anyone, it is especially important for SaaS providers that their assessment in this test is maximized. On […]

Release of the Linux Mint 20 distribution

The release of Linux Mint 20 has been announced, which has transitioned to the package base of Ubuntu 20.04 LTS. The distribution is fully compatible with Ubuntu but significantly differs in its approach to user interface organization and the selection of default applications. The developers of Linux Mint provide a desktop environment that adheres to the traditional canons of desktop organization, which is more familiar to users who are not adopting new interface building methods […]

Major Release of LanguageTool 5.0!

LanguageTool is a free system for checking grammar, style, spelling, and punctuation. LanguageTool can be used as a desktop application, command line tool, or as an extension for LibreOffice/Apache OpenOffice. It requires Java 8+ from Oracle or Amazon Corretto 8+. Extensions for Mozilla Firefox, Google Chrome, Opera, and Edge have been created as part of a separate project. An additional extension […]

RATKing: new campaign featuring remote access trojans

At the end of May, we discovered a campaign spreading Remote Access Trojan (RAT) malware—programs that allow attackers to remotely control the infected system. The group we analyzed distinguished itself by not targeting a specific family of RATs for infection. Several trojans (all widely available) were observed in the attacks within the campaign. This characteristic of the group reminded us of the rat king—a mythical creature composed of […]

High-Performance TSDB Benchmark: VictoriaMetrics vs TimescaleDB vs InfluxDB

VictoriaMetrics, TimescaleDB, and InfluxDB were compared in the previous article using a dataset of one billion data points belonging to 40K unique time series. A few years ago, there was the era of Zabbix. Each bare metal server had no more than a few metrics – CPU usage, memory usage, disk usage, and network usage. Thus, metrics from thousands of servers can fit […]

Release of LKRG module 0.8 for protection against kernel vulnerabilities exploitation in Linux

The Openwall project has released version 0.8 of the LKRG (Linux Kernel Runtime Guard) kernel module, designed to detect and block attacks and integrity violations in kernel structures. For example, the module can protect against unauthorized modifications to the running kernel and attempts to change permissions of user processes (detecting the use of exploits). The module is suitable for providing protection against already known kernel exploits […]

A new PDF viewer interface has been proposed in Chrome, along with support for AVIF.

Chrome includes a new implementation of the built-in PDF document viewer interface. The interface is notable for moving all settings to the top panel. Previously, the top panel only displayed the file name, page information, rotation, print, and save buttons, but now it has been expanded to include the contents of the sidebar, which included controls for scaling and document placement […]

Release of the minimalist set of system utilities BusyBox 1.32

The release of BusyBox 1.32 has been announced, featuring a set of standard UNIX utilities packaged as a single executable file and optimized for minimal system resource consumption with a package size of less than 1 MB. The first release of the new 1.32 branch is positioned as unstable, with full stabilization expected in version 1.32.1, which is anticipated in about a month. The project's code is distributed under the license […]

When it's not just about a vulnerability in Kubernetes...

Translator's note: the authors of this article detail how they discovered the CVE-2020–8555 vulnerability in Kubernetes. Although it initially seemed not very dangerous, along with other factors, its criticality turned out to be maximum for some cloud providers. The specialists' work was generously rewarded by several organizations. Who we are We are two French […]

Configuring IPFIX export on VMware vSphere Distributed Switch (VDS) and subsequent traffic monitoring in Solarwinds

Hello, Habr! In early July, Solarwinds announced the release of a new version of the Orion Solarwinds platform - 2020.2. One of the new features in the Network Traffic Analyzer (NTA) module is the support for recognizing IPFIX traffic from VMware VDS. Analyzing traffic in a virtual switch environment is essential for understanding the load distribution across the virtual infrastructure. By analyzing traffic, you can also detect the migration of virtual machines. In this […]

Deploying an application on Laravel 7 on Ubuntu & Nginx

I decided to create my portfolio using Laravel 7. I wanted the homepage to serve as a landing page, with all the information on it changeable via the admin panel. That's not the main point. When it came time for deployment, I found a couple of good tutorials on how to do this on a full server with all its intricacies. I'm not very strong in deployment; I'm generally more of a front-end person than […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster