Internet News Section
Google has begun implementing the IP Protection feature in Chrome, designed to hide the user's IP address from website owners. This new feature can be used as a built-in anonymizer aimed primarily at preventing tracking while also being suitable for bypassing blocks established on both the website and the service provider levels. Technically, the proposed […]
The first stable release of the nghttp3 project is available, developing a library in C implementing the HTTP/3 protocol. The variant of the library for the HTTP/2 protocol, developed by the same project, serves as the foundation for the mod_http2 module included in the Apache HTTP server. The project's developments are also utilized in the Curl utility. The library code is distributed under the MIT license. The HTTP/3 standard defines the use of the QUIC (Quick […]
The release of the free boot firmware Libreboot 20231021 has been unveiled. This update has been assigned the status of a test release (stable releases are published approximately once a year, with the last stable release in June). The project develops a ready-made build from the coreboot project, providing a replacement for proprietary UEFI and BIOS firmwares responsible for initializing the CPU, memory, peripherals, and other hardware components, with minimal binary insertions. Libreboot is aimed at […]
The release of the Apache HTTP Server 2.4.58 has been published, featuring 33 changes and addressing three vulnerabilities, two of which are related to the potential for DoS attacks on systems using the HTTP/2 protocol. CVE-2023-45802 — conditions for memory exhaustion due to delayed memory release after an HTTP/2 stream reset by a packet with the RST flag. As memory is not released immediately after processing […]
Node.js 21.0 has been released, a platform for running network applications in JavaScript. Support for the Node.js 21.0 branch will last for 6 months. In the coming days, the stabilization of the Node.js 20 branch will be completed, which will achieve LTS status and will be supported until April 2026. Support for the previous LTS branch, Node.js 18.0, will continue until September 2025, and for the earlier LTS branch […]
A TLS connection interception was detected with XMPP (Jabber) instant messaging encryption protocol (Man-in-the-Middle attack) on the servers of the jabber.ru service (also xmpp.ru) hosted by Hetzner and Linode in Germany. The attacker issued several new TLS certificates using the Let’s Encrypt service, which were used for intercepting encrypted STARTTLS connections on port 5222 through a transparent MiTM proxy. The attack was discovered in connection with […]
The administrator of the Jabber server jabber.ru (xmpp.ru) identified a user traffic decryption attack (MITM), conducted over a period of 90 days to 6 months in the networks of the German hosting providers Hetzner and Linode, where the project server and auxiliary VPS environments are hosted. The attack was orchestrated by redirecting traffic to a transit node that substitutes the TLS certificate for XMPP connections encrypted using the STARTTLS extension. The attack was noted […]
Security researchers from Outpost24 published the results of their analysis on the reliability of passwords used by IT system administrators. During the study, accounts present in the Threat Compass database, which collects information about password leaks due to malware activity and hacks, were examined. A collection of over 1.8 million recovered passwords from hashes, related to administration interfaces, was successfully gathered […]
25 years ago, in October 1998, the domain Linux.org.ru was registered. Please write in the comments what you would like to change on the site, what is lacking, and which features should be further developed. Ideas for development and small details you would like to change, such as usability issues and bugs that hinder the user experience, are also of interest. In addition to the traditional survey, we would like to additionally note […]
After a year of development, the release of the new stable branch of the open communication platform Asterisk 21 has taken place. This platform is used for deploying software PBXs, voice communication systems, VoIP gateways, organizing IVR systems (voice menus), voicemail, telephone conferences, and call centers. The project's source code is available under the GPLv2 license. Asterisk 21 falls into the category of releases with standard support, with updates being generated over a two […]
Intel has released the scalable 3D rendering engine OSPRay 3.0, designed for realistic, high-quality visualization using ray tracing. The engine is being developed as part of the larger Intel Rendering Framework project, which focuses on creating software visualization tools for scientific computations (SDVis, Software Defined Visualization). This includes the Embree ray tracing library, the GLuRay photorealistic rendering system, and the oidn (Open […]
The release of ONLYOFFICE DocumentServer 7.5.0 has taken place, which includes a server for ONLYOFFICE online editors and enables collaborative work. The editors are designed to work with text documents, spreadsheets, and presentations, and the source code of the project is distributed under the free AGPLv3 license. At the same time, ONLYOFFICE DesktopEditors 7.5 has been released, built on the same codebase as the online editors. The desktop editors are applications for the desktop, written in JavaScript […]