Author: Yuri Gagarin

Vulnerability in Qualcomm chips allowing attacks on Android devices via Wi-Fi.

Three vulnerabilities have been discovered in the Qualcomm wireless chip stack, collectively known as "QualPwn." The first issue (CVE-2019-10539) allows remote attacks on devices using the Android platform via Wi-Fi. The second issue exists in the proprietary firmware with the Qualcomm wireless stack and enables access to the baseband modem (CVE-2019-10540). The third issue is found in the icnss driver (CVE-2019-10538) and allows for […]

The 'Security Certificate' is being abolished in Kazakhstan

The National Security Committee of the Republic of Kazakhstan has completed testing of the national 'security certificate,' as reported by the press service of the NSC RK. All citizens who installed the 'security certificate' can delete it—there is no longer a need for its use. However, the necessity to reinstall it may arise 'in cases of strengthening the digital border of the state under a special regulation.' Three weeks ago, residents of the capital of the Republic of Kazakhstan began […]

LinOTP two-factor authorization server

Today, I want to share how to set up a two-factor authentication server to protect corporate networks, websites, services, and SSH. The server will run a combination of LinOTP and FreeRadius. Why do we need this? It is a completely free and convenient solution that operates within your own network, independent of third-party providers. This service is quite user-friendly and visually clear, unlike other open-source products, and it also supports […]

Go to 2FA (Two-Factor Authentication for ASA SSL VPN)

The need to provide remote access to corporate environments is becoming increasingly common, whether it’s for internal users or partners who require access to certain servers in your organization. To meet these needs, most companies use VPN technology, which has proven to be a securely protected method for granting access to an organization's local resources. My company did not become […]

Comparison Review of Portable Microwave Devices Arinst vs Anritsu

A pair of devices from the Russian developer "Kroks" has arrived for an independent test review. These are quite compact radio frequency measurement devices, specifically: a spectrum analyzer with a built-in signal generator, and a vector network analyzer (reflectometer). Both devices have a frequency range of up to 6.2 GHz. There is interest in understanding whether these are just pocket-sized "meters" (toys), or truly noteworthy instruments, as the manufacturer positions them: […]

California farmers are installing solar panels due to the reduction of water supplies and agricultural land.

The reduction of water supplies in California, suffering from ongoing droughts, forces farmers to seek alternative sources of income. In the San Joaquin Valley alone, farmers may need to take more than half a million acres (202,300 hectares) out of agricultural production to comply with the Sustainable Groundwater Management Act of 2014, which ultimately imposes restrictions on […]

ARM has introduced its second-generation exclusive 64-bit Cortex-A34 core

In 2015, ARM introduced the energy-efficient 64/32-bit Cortex-A35 core for heterogeneous big.LITTLE architecture, and in 2016, it released the 32-bit Cortex-A32 core for wearable electronics. Now, subtly and without much fanfare, the company has unveiled the 64-bit Cortex-A34 core. This product is offered under the Flexible Access program, which gives developers access to a wide range of intellectual property, with payment options only for […]

The new Chrome features a mode that 'dims' any website.

The "dark mode" feature in applications is no longer surprising anyone. This capability is available in all current operating systems, browsers, and many mobile and desktop applications. However, many websites still do not support this feature. But it seems that this isn't necessary. Developers at Google have added a flag in the Canary version of the browser that activates the corresponding design on various […]

Release of multimedia package FFmpeg 4.2

After nine months of development, the multimedia package FFmpeg 4.2 is now available, which includes a set of applications and a collection of libraries for manipulating various multimedia formats (recording, converting, and decoding audio and video formats). The package is distributed under the LGPL and GPL licenses, and FFmpeg development is conducted alongside the MPlayer project. Notable changes added in FFmpeg 4.2 include: the ability to use Clang for compiling files […]

A method for detecting incognito mode browsing in Chrome 76 has been found.

In Chrome 76, a loophole in the implementation of the FileSystem API was closed, which allowed the detection of incognito mode usage from web applications. Starting with Chrome 76, instead of blocking access to the FileSystem API, which was used as an indicator of incognito mode activity, the browser no longer restricts the FileSystem API but instead clears any changes made after the session. It turns out that the new implementation has weaknesses, allowing it to still […]

Update of the free antivirus package ClamAV 0.101.3

Cisco has released a patch for the free antivirus package ClamAV 0.101.3, which resolves a vulnerability that could trigger a denial of service by sending a specially crafted zip archive as an attachment. This issue is a variant of a non-recursive 'zip bomb', the unpacking of which requires a significant amount of time and resources. The essence of the method is to place data in the archive that achieves maximum compression for the zip format — […]

Syncthing v1.2.1

Syncthing is a program for synchronizing files between two or more devices. The latest version resolves the following issues: fs event was not generated when creating a new file; closing a nil channel when sending a stop signal to the client; the web interface displayed an incorrect description of the RC build when updates were disabled; the state value changed when the folder had not yet been started; pausing the folder resulted in an error. […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster