Internet News Section
The Children and Youth Center for Technical Creativity and Information Technologies, in partnership with Calculate Linux, is holding the first open competition for children and teenagers in GNU/Linux. Participants will be offered theoretical questions and practical tasks of varying complexity. The competition will start online in Russian on May 25, 2020, at 1 PM Moscow time. Participation is free. All participants will receive diplomas. […]
Checkpoint has introduced the Safe-Linking protection mechanism, which complicates the creation of exploits that manipulate the definition or modification of pointers to buffers allocated during a malloc call. While Safe-Linking does not completely block the possibility of exploiting vulnerabilities, it significantly complicates the creation of certain categories of exploits with minimal overhead, as in addition to the exploitable buffer overflow, one must find another vulnerability that causes information leakage about […]
The developers of OpenBSD have released a portable version of the OpenBGPD routing package 6.7, which can be used in operating systems other than OpenBSD. Portability has been achieved using code from the OpenNTPD, OpenSSH, and LibreSSL projects. In addition to OpenBSD, support for Linux and FreeBSD has been declared. OpenBGPD has been tested on Debian 9, Ubuntu 14.04+, and FreeBSD 12. The development of OpenBGPD is supported by the regional […]
An experimental release of the open WinAPI implementation — Wine 5.9 — has occurred. Since the release of version 5.8, 28 bug reports have been closed and 337 changes made. The most significant changes include: Significant progress in the development of the WineD3D backend based on the Vulkan graphics API; Initial support for splitting DLLs into PE format and Unix shared libraries (.so). Initial […]
On this day, exactly 30 years ago, Microsoft introduced the Windows 3.0 operating system, which included the legendary solitaire game that captured the hearts of tens of millions of users worldwide. Although Windows 3.0 was essentially just a graphical shell for MS-DOS, it sold over […] in an unprecedented circulation for its time in just a couple of years.
In anticipation of the release of Intel Comet Lake-S processors, ASUS gathered several successful extreme overclocking enthusiasts at its headquarters, giving them the opportunity to experiment with the new Intel processors. As a result, this set a very high bar for the maximum frequency of the flagship Core i9-10900K right at launch. Enthusiasts began their acquaintance with the new platform using 'simple' liquid nitrogen cooling […]
Microsoft has announced the release of the source code for the GW-BASIC programming language interpreter, which was included with the MS-DOS operating system. The code is open under the MIT license. It is written in assembly for 8088 processors and is based on a snapshot of the original source code dated February 10, 1983. The use of the MIT license allows for free modification, distribution, and use of the code in products, […]
An update to the OpenWrt 19.07.3 distribution has been prepared, aimed at use in various network devices, such as routers and access points. OpenWrt supports a wide range of platforms and architectures and has a build system that makes cross-compiling easy and convenient, allowing different components to be included in the build. This enables the creation of firmware or disk images tailored to specific tasks, […]
Security researchers from Cisco have disclosed details about a vulnerability (CVE-2020-6096) in the implementation of the memcpy() function in Glibc for the 32-bit ARMv7 platform. The issue arises from improper handling of negative values of the parameter that defines the size of the copied area due to the use of assembler optimizations that manipulate signed 32-bit integers. A call to memcpy() on ARMv7 systems with a negative size results in incorrect comparison of values and writing […]
Details have been published regarding a vulnerability (CVE-2020-9484) in Apache Tomcat, the open-source implementation of Java Servlet technologies, JavaServer Pages, Java Expression Language, and Java WebSocket. The issue allows for code execution on the server through sending a specially crafted request. The vulnerability has been fixed in releases Apache Tomcat 10.0.0-M5, 9.0.35, 8.5.55, and 7.0.104. For successful exploitation of the vulnerability, the attacker must be able to control the contents and […]
An update for the Solaris 11.4 SRU 21 (Support Repository Update) operating system has been published, offering a series of fixes and enhancements for the Solaris 11.4 branch. To install the updates provided in the update, simply execute the 'pkg update' command. The new release includes: A new package driver/network/ethernet/mlxne with drivers for supporting Mellanox ConnectX-4 and ConnectX-5 100Gb Ethernet adapters; Updated printing subsystem components: […]
A group of researchers from Tel Aviv University and the Interdisciplinary Center in Herzliya (Israel) has developed a new NXNSAttack (PDF) method, allowing any DNS resolvers to be used as traffic amplifiers, achieving an amplification factor of up to 1621 times in the number of packets (for every query sent to the resolver, 1621 queries can be sent to the victim's server) and up to 163 times in traffic. The issue […]