Author: Yuri Gagarin

The deadly sins of website security: what we learned from a year of vulnerability scanner statistics.

About a year ago, we at DataLine launched a service for detecting and analyzing vulnerabilities in IT applications. The service is based on the cloud solution Qualys, which we have already reported on. Over the course of a year with this solution, we conducted 291 scans for different websites and accumulated statistics on common vulnerabilities in web applications. In the article below, I will show exactly which […]

Release of Stratis 2.1, a toolkit for managing local storage.

After seven months of development, version 2.1 of the Stratis project has been released, developed by Red Hat and the Fedora community to unify and simplify the configuration and management of pools of one or more local storage devices. Stratis offers features such as dynamic storage allocation, snapshots, data integrity assurance, and layer creation for caching. The project's code is written in Rust […]

Update of the Elementary OS 5.1.5 distribution

The release of Elementary OS 5.1.5 has been announced, marketed as a fast, open-source, and privacy-respecting alternative to Windows and macOS. The project focuses on high-quality design aimed at creating a user-friendly system that consumes minimal resources and ensures fast boot times. Users are offered a custom desktop environment called Pantheon. Bootable ISO images (1.5 GB) are prepared for download […]

Release of the Nextcloud Hub 19 collaboration platform

A new version of the Nextcloud Hub 19 platform has been unveiled, providing a self-contained solution for the collaboration of enterprise and project teams. At the same time, the cloud platform Nextcloud 19, which underpins Nextcloud Hub, has been released, enabling the deployment of cloud storage with synchronization and sharing capabilities, allowing data viewing and editing from any device at any location […]

One-cloud — data center-level operating system in Odnoklassniki

Aloha, people! My name is Oleg Anastasyev, and I work at Odnoklassniki on the Platform team. Besides me, a lot of hardware works at Odnoklassniki. We have four data centers, housing around 500 racks with over 8,000 servers. At one point, we realized that implementing a new management system would allow us to utilize our equipment more effectively and streamline management […]

Should we "turn off" the servers if the smoke test of the data center "lights up"?

What would you feel if one fine summer day the data center with your equipment looked like this? Hello everyone! My name is Dmitry Samsonov, and I work as a lead system administrator at "Odnoklassniki." In the photo is one of the four data centers housing the equipment servicing our project. Behind these walls, there are about 4,000 units: servers, systems […]

Linux tuning to improve PostgreSQL performance. Ilya Kosmodemyansky

Decoding the 2015 report by Ilya Kosmodemyansky titled "Linux tuning to improve PostgreSQL performance" Disclaimer: I should note that this report is dated November 2015 — more than 4 years have passed and much time has gone by. The version considered in the report, 9.4, is no longer supported. In the past 4 years, 5 new releases of PostgreSQL have come out and 15 kernel versions of Linux. If we rewrite […]

Google will highlight parts of content on pages based on text from search results.

Google has added an interesting option to its trademark search system. To help users navigate the content of the web pages they are viewing and quickly find the information they are looking for, Google will highlight snippets of text that were displayed in the answer block in the search results. Over the past few years, Google developers have been testing the content highlighting feature on web pages based on clicking on a snippet of text, […]

Dangerous vulnerabilities in QEMU, Node.js, Grafana, and Android.

Several recently discovered vulnerabilities: Vulnerability (CVE-2020-13765) in QEMU, which could potentially lead to code execution with the rights of the QEMU process on the host system when loading a specially crafted kernel image in the guest system. The issue is caused by a buffer overflow in the code copying ROM contents during the system boot and manifests when loading the contents of a 32-bit kernel image into memory. The fix […]

Corrective update Firefox 77.0.1

A corrective update Firefox 77.0.1 has been released, which disables the automatic selection of the DNS over HTTPS (DoH) provider during testing for a gradual rollout to avoid peak loads on DoH providers. The testing check for DoH implemented in Firefox 77, which sends 10 trial requests from each client, turned into a sort of DDoS attack on the NextDNS service, which could not handle it.

How to Use kubectl More Effectively: A Detailed Guide

If you work with Kubernetes, then kubectl is likely one of your most used tools. Whenever you spend a lot of time working with a specific tool, it makes sense to study it well and learn how to use it effectively. The Kubernetes aaS team from Mail.ru has translated an article by Daniel Weibel where you will find tips and tricks for efficient work […]

BLE Under the Microscope (ATT and GATT...)

BLE Under the Microscope (ATTs and GATTs…) Part 1, Overview It has been quite some time since the first specification for Bluetooth 4.0 was released. Although the topic of BLE is very interesting, it still deters many developers due to its complexity. In my previous articles, I mainly focused on the very low-level Link Layer and Physical Layer. […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster