Author: Yuri Gagarin

The microkernel seL4 is mathematically verified for the RISC-V architecture.

The RISC-V Foundation has reported the verification of the seL4 microkernel on RISC-V instruction set architecture systems. The verification consists of a mathematical proof of the reliability of seL4, which indicates full compliance with specifications defined in formal language. The proof of reliability allows using seL4 in mission-critical systems based on RISC-V RV64 processors, which require a higher level of reliability and guarantee the absence of […]

Release of the Linux sound subsystem — ALSA 1.2.3

The release of the ALSA 1.2.3 sound subsystem has been announced. The new version involves updates to libraries, utilities, and plugins that operate at the user level. Drivers are developed in sync with the Linux kernel. Notable changes, apart from numerous driver fixes, include support for Linux kernel 5.7, expanded PCM, Mixer, and Topology APIs (loading handlers from user space by drivers). A relocatable version of snd_dlopen has been implemented […]

The second beta release of the Haiku R1 operating system

The second beta release of the Haiku R1 operating system has been published. The project was originally created in response to the closure of BeOS and was developed under the name OpenBeOS, but was renamed in 2004 due to trademark concerns with the name BeOS. Several bootable Live images (x86, x86-64) have been prepared to evaluate the performance of the new release.

The first edition of the Peer-to-Peer client for the federated Matrix network

The experimental Riot P2P client has been released. Riot was originally a client for the Matrix federated network. The P2P modification adds server implementation and federation without using centralized DNS by integrating libp2p, which is also used in IPFS. This is the first version of the client that retains sessions after reloading the page, but in future major updates (e.g., 0.2.0), the data will still […]

Elastic Under Lock: Enabling Security Options for Elasticsearch Cluster Access from Inside and Outside

Elastic Stack is a well-known tool in the SIEM systems market (indeed, not just for them). It can gather diverse data, both sensitive and non-sensitive. It is not entirely correct if access to the Elastic Stack components themselves is not secured. By default, all out-of-the-box Elastic components (Elasticsearch, Logstash, Kibana, and Beats collectors) operate over open protocols. And […]

Remote Desktop from the attacker's perspective

1. Introduction Companies that had not organized remote access systems were urgently deploying them a couple of months ago. Not all administrators were prepared for such "heat"; as a consequence, there were security oversights: incorrect service configurations or even the installation of outdated software versions with previously known vulnerabilities. Some of these oversights have already come back to haunt them, while others have been luckier, […]

Hosting and Dedicated Servers: Answering Questions. Part 4

In this series of articles, we want to address the questions that arise for people when working with hosting providers and dedicated servers in particular. Most of the discussions took place on English-language forums, where we aimed to assist users primarily with advice rather than self-promotion, providing a detailed and impartial response, given that our experience in the field spans over 14 years, hundreds of […]

Monolith Soft will focus on developing the Xenoblade Chronicles brand

Xenoblade Chronicles has become a major franchise for Nintendo over the past decade, thanks to two main installments and one spin-off. Fortunately for fans, neither the publisher nor Monolith Soft intends to abandon the series in the coming years. In an interview with Vandal, Monolith Soft's head and creator of the Xenoblade Chronicles series, Tetsuya Takahashi, stated that the studio is focused on further developing […]

CROSSTalk — a vulnerability in Intel CPUs that leads to data leaks between cores

A group of researchers from the Free University of Amsterdam has identified a new vulnerability (CVE-2020-0543) in the microarchitectural structures of Intel processors, notable for allowing the recovery of the results of certain instructions executed on another CPU core. This is the first vulnerability of the speculative execution instruction mechanism that permits data leakage between separate CPU cores (previous leaks were limited to different threads of a single core). The researchers named this issue […]

A vulnerability in UPnP suitable for amplifying DDoS attacks and scanning the internal network

Details have been disclosed about a vulnerability (CVE-2020-12695) in the UPnP protocol that allows traffic to be sent to arbitrary recipients using the standard operation 'SUBSCRIBE.' This vulnerability has been given the code name CallStranger. It can be used for data extraction from networks protected by data leak prevention (DLP) systems, for scanning ports of computers within the internal network, and to amplify DDoS attacks using millions of connected […]

GhostBSD 20.04

The GhostBSD project creates a desktop-oriented operating system based on FreeBSD. A new version of GhostBSD 20.04 has been released, addressing a number of issues related to installation and ZFS during setup. Innovations include replacing gnome-mount and hald with FreeBSD devd and Vermaden automount, which make the automatic mounting and unmounting of external devices more stable and […]

How and why the noatime option improves performance in Linux systems

Updating atime affects system performance. What is going on and what can be done about it — read in the article. Whenever I update Linux on my home computer, I have to deal with certain tasks. Over the years, this has become a habit: I back up my files, wipe the system, install everything from scratch, restore my files, […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster