Category: Administration

Information Security of Data Centers

This is what the monitoring center of the NORD-2 data center located in Moscow looks like. You have read more than once about the measures taken to ensure information security (IS). Any self-respecting IT professional can easily name 5-10 IS rules. Cloud4Y suggests discussing the information security of data centers. The most "protected" objects in ensuring the data center's information security are: information resources (data); processes […]

Domain fronting based on TLS 1.3

Introduction Modern corporate content filtering systems from renowned manufacturers such as Cisco, BlueCoat, and FireEye share many similarities with their more powerful counterparts — DPI systems, which are being aggressively implemented at a national level. The essence of both is to inspect incoming and outgoing internet traffic and, based on black/white lists, make decisions […]

XML is almost always used for purposes it was not intended for

The XML language was invented in 1996. As soon as it appeared, its application possibilities began to be misunderstood, and it was not the best choice for the purposes for which it was being adapted. It is not an exaggeration to say that the overwhelming majority of XML schemas I have encountered represent impractical or incorrect uses of XML. Moreover, […]

Congratulations on Security Specialist Day

Security comes at a price, and its absence has to be paid for. Winston Churchill To everyone involved in the security field, we congratulate you on your professional day, wishing you higher salaries, calmer users, and appreciation from management! But what is this holiday? There is a portal Sec.ru that, due to its focus, proposed to declare November 12 a holiday — Day […]

5 Useful Ways to Use Raspberry Pi. Part Two

Hello, Habr. In the first part, I explored 5 ways to use Raspberry Pi. The topic proved to be quite interesting, and today I will look at a few more alternatives for how to use this microcomputer effectively. Photo from learn.adafruit.com As in the previous part, I will consider those methods that do not require programming. For those interested, the continuation is below. […]

A long and painful story of a data recovery attempt

It was the year 2019. Our laboratory received a rather unusual hard drive for our time, the QUANTUM FIREBALL Plus KA with a capacity of 9.1GB. According to the owner, the failure occurred back in 2004 due to a malfunctioning power supply, which took the hard drive and other PC components with it. What followed were visits to various service centers […]

Replacing EAV with JSONB in PostgreSQL

TL; DR: JSONB can greatly simplify database schema development without compromising query performance. Introduction Let's provide a classic example, probably one of the oldest use cases in the world of relational databases: we have an entity, and we need to store certain properties (attributes) of this entity. However, not all instances may have the same set of properties, and furthermore, in […]

Privileged Access Management as a priority task in information security (using Fudo PAM as an example)

There is a quite interesting document on CIS Controls that discusses Information Security using the Pareto principle (80/20). This principle states that 20% of protective measures yield 80% of the results in terms of a company's security. After reviewing this document, many security professionals discover that when selecting protective measures, they do not start with the most effective ones. The document highlights 5 key measures […]

Harsh reality: what wireless solutions are in demand among hoteliers

Colleagues from the PR department have been collecting case studies for several years involving our corporate-class equipment. A significant portion of these are projects in the hospitality sector. This is due to the fact that this area is one of the key components of TP-Link's project direction, and such cases often turn out to be the most interesting from a professional standpoint. On typical hotel requirements […]

RabbitMQ vs Kafka: Fault Tolerance and High Availability

In the previous article, we explored RabbitMQ clustering for achieving fault tolerance and high availability. Now, let’s dive deep into Apache Kafka. Here, the unit of replication is a partition. Each topic has one or more partitions. Within each partition, there is a leader with followers or without them. When creating a topic, the number of partitions and the replication factor are specified. A common value is 3, this […

Your move, graph: how we did not find a good network graph and created our own

While investigating cases related to phishing, botnets, fraudulent transactions, and criminal hacker groups, experts at Group-IB have been using graph analysis for many years to uncover various kinds of connections. Different cases have their own datasets, their own connection detection algorithms, and interfaces tailored to specific tasks. All of these tools were internally developed by Group-IB and were accessible only to our employees. […

Secure cloud on the DF Cloud platform 

Federal Law No. 152 "On Personal Data Protection" applies to all existing subjects: individuals and legal entities, federal government authorities, and local self-government bodies. In fact, this law applies to any organizations processing information and personal data of Russian citizens, regardless of ownership form and organization size. Sometimes, an organization may unexpectedly discover implicit personal information systems […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster