Author: Yuri Gagarin

The free demo of Detroit: Become Human is now available on EGS

Developers from Quantic Dream have released a free demo version of the game Detroit: Become Human on the Epic Games Store. This allows interested players to try the new title on their own hardware before purchasing, as David Cage's studio recently revealed the system requirements for the computer port of the game — they turned out to be quite high for interactive cinema. You can try the free demo of Detroit: Become Human right now by downloading […]

Release of Virtualization System VirtualBox 6.1

After a year of development, Oracle has released VirtualBox 6.1, a virtualization system. The installation packages are available for Linux (Ubuntu, Fedora, openSUSE, Debian, SLES, RHEL for AMD64 architecture), Solaris, macOS, and Windows. Key changes include: Support for hardware features introduced in the fifth generation of Intel Core i processors (Broadwell) for nested virtualization; removal of the old […]

Chrome 79 Release

Google has released version 79 of the Chrome web browser. At the same time, a stable release of the free project Chromium, which serves as the foundation for Chrome, is available. The Chrome browser is distinguished by its use of Google logos, a crash notification system, the ability to load the Flash module on demand, modules for playing protected video content (DRM), an automatic update system, and RLZ parameters transmission during searches. The next version, Chrome 80 […]

Vulnerability in ld.so OpenBSD

The dynamic loader ld.so, included in OpenBSD, under certain conditions may leave the LD_LIBRARY_PATH environment variable for SUID/SGID applications, thus allowing third-party code to be loaded in the context of a process running with elevated privileges. Patches fixing this vulnerability are available for versions 6.5 and 6.6. Binary patches (syspatch) for amd64, i386, and arm64 platforms have already been released into production and […]

How to assess your level of English proficiency

There are many articles on Habr about how to independently study English. But here's the question: how do you assess your level when learning on your own? It's clear that there are IELTS and TOEFL, but almost no one takes these tests without additional preparation, and these tests, as they say, evaluate not so much the level of language proficiency, but rather the ability to pass […]

Another 'first in the world' SuperApp

Once again, everyone is discussing the 'first in Russia' SuperApp, this time from Tinkoff. Recently marked the anniversary of one of the first SuperApps—the 'Gosuslugi Moscow' application, where you can pay for parking and fines, submit utility readings, make a doctor’s appointment, and check your child's homework and grades. Following their lead, federal government services added the word 'super' (super-services […]

The Data Privacy Issue in Active Directory

I conducted penetration testing using PowerView and utilized it to extract user information from Active Directory (AD). At that time, I focused on collecting information about group membership, and then used that information to navigate through the network. In any case, AD contains sensitive employee data, some […]

EA had to re-record the narrator's voice for the C&C remaster due to the loss of the original recordings

During the work on the remaster of the popular strategy Command & Conquer, Electronic Arts discovered that it had lost the original voice recordings of the narrator from the first game in the franchise. As a result, all dialogues had to be re-recorded. For authenticity, the publisher involved Kia Huntzinger, who provided the voice in the first Command & Conquer. It was her voice that commented on the in-game events. […]

Plundervolt — a new attack method targeting Intel processors, affecting SGX technology.

Intel has released a microcode update that addresses a vulnerability (CVE-2019-14607) allowing an attacker to manipulate the dynamic voltage and frequency scaling mechanism in the CPU, potentially leading to corruption of data stored in memory cells, including areas used for computations in Intel SGX isolated enclaves. This attack is named Plundervolt and could potentially allow a local user to escalate their privileges in the system, triggering […]

Git update patching 8 vulnerabilities

Corrective releases for the distributed version control system Git 2.24.1, 2.23.1, 2.22.2, 2.21.1, 2.20.2, 2.19.3, 2.18.2, 2.17.3, 2.16.6, 2.15.4, and 2.14.6 have been published. These releases fix vulnerabilities that could allow an attacker to overwrite arbitrary paths in the file system, initiate remote code execution, or overwrite files in the '.git/' directory. Most issues were identified by the Microsoft Security Response Center, with five of the eight vulnerabilities […]

Kubernetes 1.17 — how to upgrade without exhausting the entire error budget

On December 9, the latest version of Kubernetes was released — 1.17. Its motto is 'Stability,' with many features achieving GA status and a number of deprecated features being removed... As always, our favorite Action Required section of the CHANGELOG-1.17.md file demands attention. Let's get to work... Attention, Storage! Live kubelet updates in version 1.17 are not supported due to changes in the path […]

Load balancing in Zimbra Open-Source Edition using HAProxy

One of the main tasks in building large-scale Zimbra OSE infrastructures is effective load balancing. In addition to enhancing the service's redundancy, load balancing is essential for ensuring consistent responsiveness across all users. To address this task, load balancers — both software and hardware solutions — are employed to redistribute requests among servers. Among these, there are both very […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster