This article will be a story about one very specific vulnerability in the ClickHouse replication protocol, and will also show how you can expand the attack plane. ClickHouse is a database for storing large amounts of data, most often more than one replica is used. Clustering and replication in ClickHouse are built on top of Apache ZooKeeper (ZK) and require write permissions. […]
The dangerous infection that has engulfed all countries has already ceased to be the number one newsbreak in the media. However, the reality of the threat continues to attract the attention of people, which is successfully used by cybercriminals. According to Trend Micro, the topic of the coronavirus in cyber campaigns is still leading by a wide margin. In this post, we will talk about the current situation, as well as share our view on the prevention of topical […]
Today I plan to tell you how to write applications and what are the requirements for your application to work well in Kubernetes. So that there is no headache with the application, so that you don’t have to invent and build some kind of “crutches” around it - and everything works as intended by Kubernetes itself. This lecture as part of the "Evening School […]
At the end of June, the Chinese company Xiaomi introduced the budget smartphone Redmi 9C with a MediaTek Helio G35 processor and a 6,53-inch HD+ display (1600 × 720 pixels). Now it is reported that this device will be released in a new modification. This is a version equipped with support for NFC technology: thanks to this system, users will be able to make contactless payments. Press renderings and […]
MSI today, August 6, 2020, officially unveiled the Creator PS321 Series monitors, the first information about which was released during the January CES 2020 electronics exhibition. The panels of the named family are aimed primarily at content creators, designers and architects. It is noted that the appearance of the new products is inspired by the works of Leonardo da Vinci and Joan Miró. The monitors are based on [...]
The recipes for conquering the desktop monitor market are known, all the cards have been revealed by the main players - take it and repeat it. ASUS has an affordable TUF gaming line with an excellent ratio of price, quality and features, Acer has the often even more affordable Nitro, MSI has a huge number of cheap models in the Optix series, and LG has some of the most affordable UltraGear solutions […]
The first beta release of the new branch of the PHP 8 programming language has been presented. The release is scheduled for November 26. At the same time, corrective releases of PHP 7.4.9, 7.3.21 and 7.2.33 were formed, in which accumulated errors and vulnerabilities were eliminated. The main innovations of PHP 8: Inclusion of a JIT compiler, the use of which will improve performance. Support for named function arguments, allowing you to pass values to a function in relation to names, i.e. […]
Canonical has released the first patch release of the Ubuntu 20.04.1 LTS distribution, which includes updates to several hundred packages related to fixing vulnerabilities and stability issues. The new version also fixes bugs in the installer and bootloader. The release of Ubuntu 20.04.1 marked the passage of the basic stabilization of the LTS release - users of Ubuntu 18.04 will now be prompted to upgrade to […]
The Free Software Foundation announced the election of a new president, following the resignation of Richard Stallman from this post following accusations of behavior unworthy of the leader of the Free Software movement and threats to sever relations with free software by some communities and organizations. The new president is Geoffrey Knauth, who has been on the board of directors of the Open Source Foundation since 1998 and is involved in the […]
Hi all! This is the second post in our series where we show you how to deploy modern web applications on Red Hat OpenShift. In the previous post, we briefly touched on the capabilities of the new S2I (source-to-image) builder image, which is designed to build and deploy modern web applications on the OpenShift platform. Then we were interested in the topic of rapid application deployment, and today we will look at how […]
Welcome to the third article in the series about the new cloud-based personal computer protection management console - Check Point SandBlast Agent Management Platform. Let me remind you that in the first article we got acquainted with the Infinity Portal and created a cloud-based agent management service Endpoint Management Service. In the second article, we explored the web-based management console interface and installed the agent with the default […]
Since May 2020, official sales of WD My Book external hard drives supporting AES hardware encryption with a 256-bit key have started in Russia. Due to legal restrictions, previously such devices could be purchased only in foreign online electronics stores or on the "gray" market, but now anyone can get a secure drive with a proprietary 3-year warranty from Western Digital. […]
