Administration Section
Hello, Habr! Today I would like to discuss how to protect processes from the intrusions of attackers in macOS. This is particularly useful for antivirus software or backup systems, especially considering that there are multiple ways to 'kill' a process in macOS. Read on for information about this and methods of protection.
Ryuk is one of the most well-known variants of ransomware in recent years. Since its first appearance in the summer of 2018, it has accumulated an impressive list of victims, particularly in the business sector, which is the primary target of its attacks. 1. General information This document contains an analysis of the Ryuk ransomware variant, as well as the downloader responsible for loading the malware.
The ecosystem of containerization technologies is rapidly evolving and changing, which creates a lack of good working practices in this area. Nevertheless, Kubernetes and containers are being used more and more — both for modernizing legacy applications and for developing modern cloud applications. The Kubernetes aaS team from Mail.ru has gathered forecasts, advice, and best practices for market leaders from Gartner, 451.
A system for analyzing traffic without decrypting it. This method is simply called 'machine learning.' It turns out that if a very large volume of varied traffic is fed into a special classifier, the system can detect the actions of malicious code within encrypted traffic with a very high degree of probability. Network threats have changed and become 'smarter.' Recently, the very concept of attack and defense has evolved.
That which has been will be; and that which has been done will be done; and there is nothing new under the sun. Ecclesiastes 1:9 Eternal wisdom, highlighted in the epigraph, is applicable to almost any industry, including one as rapidly changing as IT. It turns out that many innovations that are only now being discussed are based on older ideas.
Legitimate traffic on the DDoS-Guard network has recently exceeded one hundred gigabits per second. Currently, 50% of all our traffic is generated by client web services. This encompasses tens of thousands of domains, which are very diverse and, in most cases, require a personalized approach. Below, we explain how we manage front nodes and issue SSL certificates for hundreds of thousands of sites. Configuring the front for a single site, even one that is very […]
Continuing the series of articles on organizing Remote-Access VPN access, I cannot help but share an interesting experience of deploying a highly secure VPN configuration. One client posed a non-trivial challenge (there are quite a few imaginative thinkers in Russian villages), but Challenge Accepted—creatively implemented. The result is an interesting concept with the following characteristics: Several protective factors against device impersonation (strictly tied to the user); […]
Open spaces have always annoyed me. Stuffy air. Struggling for a draft. Constant background noise. Everyone around needs to communicate. You are always in headphones. But even they don’t help. Dozens of colleagues. You sit facing a wall. Everyone is watching your screen. And at any moment, someone tries to distract you. Sneaking up from behind. Now—working from home in quarantine. Lucky to be able to work remotely. With […]
Due to the forced break, even large companies with developed IT infrastructures find it challenging to organize remote work for their staff, while small businesses simply lack the resources to deploy the necessary services. Another issue is related to information security: opening access to the internal network from employees' home computers is risky without specialized corporate-class products. Renting virtual servers does not require capital investment […]
In anticipation of the start of the course "Algorithms for Developers," we have prepared a translation of another useful material for you. Huffman coding is a data compression algorithm that formulates the basic idea of file compression. In this article, we will discuss fixed and variable-length coding, uniquely decodable codes, prefix rules, and the construction of Huffman trees. We know that each symbol is stored […]
Hello! My name is Andrey Semyonov, I am a senior analyst at Sportmaster. In this post, I want to raise the issue of denormalization in ERP database systems. We will discuss general conditions as well as a specific example — let’s say, it will be a magnificent tavern-monopolist for pirates and sailors, where pirates and sailors need to be served differently because their views on beauty and consumer patterns are […]
I present to you a tutorial for generating access to a Kubernetes cluster using Dex, dex-k8s-authenticator, and GitHub. A local meme from the Russian-speaking Kubernetes chat on Telegram Introduction We use Kubernetes to create dynamic environments for our development and QA teams. Thus, we want to provide them access to the cluster for both the dashboard and kubectl. Unlike […]