In the summer, both consumer activity and the pace of changes in web project infrastructure traditionally decrease, according to Captain Obvious. Simply because even IT specialists occasionally take vacations. And so do CTOs. This makes it harder for those who remain on duty, but that’s not the topic now: perhaps this is precisely why summer is the best time to thoughtfully reconsider the existing backup scheme […]
At the recent PHDays 9, we held a hacking competition for a gas pumping station — the Industrial Ninja contest. There were three stands with different security parameters (No Security, Low Security, High Security), emulating the same industrial process: air was pumped into (and then released from) a balloon under pressure. Despite the different security parameters, the hardware composition of the stands […]
The Microsoft Edge Canary build number 77.0.222.0 has introduced a new feature to enhance privacy in the browser. It allows users to choose which data to delete after closing the application. This feature will come in handy if the user is working on someone else's computer or is simply paranoid enough to remove all traces behind them. The new option is available in the Settings -> Privacy and services […]
The vulnerability reward program for discovering vulnerabilities in the Google Chrome browser was launched in 2010. To date, thanks to this program, developers have received about 8,500 reports from users, and the total amount of rewards has exceeded $5 million. It has now been reported that Google has increased the bounty for discovering serious vulnerabilities in its own browser. In the program […]
Modern software increasingly resembles a standard file downloader from a remote server. Thanks to the high connection speed, users often don't even notice this. However, there are situations when a standalone installer is absolutely necessary, particularly for companies and corporations. Obviously, no one in their right mind would download the same software […]
A vulnerability has been identified in the fbdev subsystem (Framebuffer) that could lead to a 64-byte kernel stack overflow when processing improperly formatted EDID parameters. Exploitation can occur by connecting a malicious monitor, projector, or other output device (for instance, a specially prepared device simulating a monitor) to the computer. Interestingly, Linus Torvalds was the first to respond to the vulnerability notification, suggesting […]
A method has been published that allows any Chrome extension to execute external JavaScript code without granting the extension enhanced permissions (without unsafe-eval and unsafe-inline in manifest.json). Access rights imply that without unsafe-eval, the extension can only execute code that is part of the local delivery, but the proposed method bypasses this restriction and allows any JavaScript loaded […]
On July 18, a new version of NetSurf was released — a fast and lightweight web browser aimed at low-spec devices and compatible not only with GNU/Linux and other *nix systems but also with RISC OS, Atari, AmigaOS, and Windows, as well as having an unofficial port for KolibriOS. The browser uses its own engine and supports HTML4 and CSS2 (with HTML5 and CSS3 in early development), as well as JavaScript […]
Hello everyone! My name is Lyudmila Makarova, and I am a development manager at UBRiR, with about a third of my team being 'universal' specialists. Admit it: every Tech Lead dreams of cross-functionality within their team. It’s really great when one person can replace three others, and do it well without pushing back deadlines. Importantly, this also leads to resource savings! Sounds very […]
Hello. Today I'd like to discuss the process of writing client-server applications that perform the functions of standard Windows utilities such as Telnet, TFTP, et cetera on plain Java. Clearly, I'm not bringing anything new to the table — all these utilities have been successfully operating for years, but I believe not everyone knows what happens under the hood of these programs. Specifically about […]
The Cisco certification program has been around for 26 years (founded in 1993). Many are familiar with the certification line of CCNA, CCNP, CCIE. This year, the program has added certifications for developers, namely DevNet Associate, DevNet Specialist, DevNet Professional, and DevNet Expert. The DevNet program itself has been in the company for over five years. Learn more about the Cisco DevNet program […]
Ubisoft has revealed details of a major update titled "Sunken Treasures" for Anno 1800. This update will introduce a six-hour storyline with dozens of new quests. The plot will revolve around the disappearance of the queen. Her search will take players to a new cape — Trelawney, where they will meet the inventor Nate. He will invite players to hunt for treasures. The new […]