Category: Internet News

Updates for Ruby 2.6.5, 2.5.7, and 2.4.8 addressing vulnerabilities.

Corrective releases for the Ruby programming language 2.6.5, 2.5.7, and 2.4.8 have been issued, addressing four vulnerabilities. The most critical vulnerability (CVE-2019-16255) is in the standard Shell library (lib/shell.rb), which allows for code injection. If user-provided data is processed as the first argument in the Shell#[] or Shell#test methods used to check for file presence, an attacker could invoke arbitrary Ruby methods. Other […]

The plan to discontinue support for TLS 1.0 and 1.1 in Chrome

Similar to Firefox, Chrome plans to soon halt support for the TLS 1.0 and TLS 1.1 protocols, which are being classified as obsolete and not recommended by the IETF (Internet Engineering Task Force) for use. Support for TLS 1.0 and 1.1 will be disabled in Chrome 81, scheduled for March 17, 2020. According to Google, […]

OVEN PLC110[M02]-MS4, HMI, OPC, and SCADA, or how much chamomile tea a person needs. Part 1

Good day, dear readers of this article. I am writing this in a review format. A small warning: I want to caution that if you immediately understood what the title refers to, I advise changing the first point (the PLC core itself) to anything from the pricing category one level higher. No savings are worth the amount of nerves it takes, subjectively speaking. For those who are not intimidated by a little gray hair and […]

Release of the TensorFlow 2.0 machine learning system

A significant release of the TensorFlow 2.0 machine learning platform has been presented, providing ready implementations of various deep learning algorithms, a simple programming interface for building models in Python, and a low-level interface for C++, allowing for the management of computation graph construction and execution. The system code is written in C++ and Python and is distributed under the Apache license. The platform was originally developed by the team […]

Windows 10 version 1909 will be able to differentiate between successful and unsuccessful cores in the processor.

As previously reported, the next major update for the Windows 10 operating system, known as 19H2 or 1909, will begin rolling out to users next week. Overall, it is believed that this update will not bring significant changes to the operating system and will serve as something akin to a regular service pack. However, for enthusiasts, it may be much more important and fundamental, as […]

Overview of the Edic Weeny A110 Voice Recorder with a 'Black Box' Function

I wrote about the Zelenograd company "Telesystems," which produces the world's smallest voice recorders, back in the distant year of 2010; at that time, "Telesystems" even organized a small tour for us at their production facility. The Weeny A110 recorder from the new Weeny/Dime line measures 29x24 mm, weighs 4 grams, and is 4 mm thick. Additionally, the Weeny line also includes even thinner […]

Another vulnerability in the Exim mail server

At the beginning of September, the developers of the Exim mail server informed users about a critical vulnerability (CVE-2019-15846) that allows a local or remote attacker to execute their code on the server with root privileges. Exim users were advised to install an emergency update to version 4.92.2. On September 29, another emergency release, Exim 4.92.3, was published, addressing another critical vulnerability (CVE-2019-16928) that allows […]

Local root vulnerability in pam-python

A vulnerability (CVE-2019-16729) has been identified in the pam-python PAM module, which allows connecting authentication modules in Python. If the vulnerable version of pam-python (which is not installed by default) is used, a local user can gain root access by manipulating the default environment variables processed in Python (for example, they can initiate saving a file with […]

Release of strace 5.3

The release of strace 5.3 has been presented, a utility for diagnosing and debugging programs for operating systems that use the Linux kernel. The utility allows tracking and, starting from version 4.15, intervening in the interaction between the program and the kernel, including the system calls being made, signals generated, and changes in process state. Strace utilizes the ptrace mechanism for its operations. Starting from version 4.13, the release generation of the program has been synchronized.

Patches to restrict root access to the internals of the kernel have been accepted into the Linux kernel 5.4

Linus Torvalds has accepted a set of 'lockdown' patches into the upcoming release of the Linux kernel 5.4, proposed by David Howells (working at Red Hat) and Matthew Garrett (working at Google) to restrict root user access to the kernel. The functionality associated with 'lockdown' has been moved to an optionally loadable LSM module (Linux Security Module), which establishes a barrier between UID 0 and.

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster