Blog Section
I want to share my experience with the evolution of database systems usage in the GLASHA online language school. The school was founded in 2012, and at the beginning of its operations, it had only 12 students, so there were no problems with scheduling and payments. However, as it grew, developed, and new students appeared, the question of choosing a database system became pressing […]
Epigraph: Once upon a time, Hedgehog and Little Bear met in the forest. — Hello, Hedgehog! — Hello, Little Bear! So, word for word, joke for joke, Hedgehog received a slap on the face from Little Bear … Below are the reflections of our team leader and the product development director at RAS, Igor Marnat, on the specifics of workplace conflicts and possible management methods for them. Most conflicts […]
The developers of Exim reported the discovery of a vulnerability and the upcoming release of an update that will fix it. They noted that the risk of exploitation is quite low, as it requires a very specific configuration to be carried out. Details are not yet disclosed, except that exploitation is possible both locally and remotely. The update will be released on July 25, 2019, at which time […]
A critical vulnerability (CVE-2019-12815) has been discovered in ProFTPd (a popular FTP server). Exploitation allows files to be copied within the server without authentication using the 'site cpfr' and 'site cpto' commands, even on servers with anonymous access. The vulnerability is caused by improper checking of read and write access limits (Limit READ and Limit WRITE) in the mod_copy module, which is used […]
AMD has released a new open framework, Caudron, providing tools for rapid development of game prototypes and graphical applications using the Vulkan or DirectX12 APIs. The framework was initially used internally to develop demonstrations and examples for the SDK. The project's code is written in C++11 and is distributed under the MIT license. Caudron is presented as a simplified game engine, easy to learn and […]
The Fedora project developers announced the start of testing the first preliminary version of the new edition of the Fedora CoreOS distribution, which replaces the Fedora Atomic Host and CoreOS Container Linux products as a single solution for running environments based on isolated containers. From CoreOS Container Linux, which came under Red Hat's control following the acquisition of CoreOS, Fedora CoreOS […]
The expansion of large cities and the formation of agglomerations is one of the significant trends in social development today. Moscow alone is expected to expand by 4 million square meters of housing in 2019 (not including the 15 municipalities that will join by 2020). Across this vast territory, telecommunications operators will need to provide internet access to users. This may involve […]
Microsoft is considering transferring the popular feature of the classic Edge browser to its new Chromium-based version. This concerns the password reveal feature (that eye icon). This feature will be implemented as a universal button. It is important to note that only manually entered passwords will be displayed in this way. When autofill mode is on […]
A new release has occurred in the current mainline branch of the nginx web server. Active development is underway in the 1.17 branch, while only bug fixes are being introduced in the current stable branch (1.16). Change: The minimum supported version of zlib is 1.2.0.4. Thanks to Ilya Leoshkevich. Change: The method $r->internal_redirect() of the built-in Perl now expects an encoded URI. Addition: The method $r->internal_redirect() of the built-in Perl […]
A critical vulnerability (CVE-2019-12815) has been identified in the ProFTPD FTP server, allowing files to be copied within the server without authentication through the 'site cpfr' and 'site cpto' commands. This issue has been assigned a severity level of 9.8 out of 10, as it can be exploited for remote code execution when providing anonymous FTP access. The vulnerability was caused by improper validation of access restrictions on […]
Devon O'Brien from the Chrome browser security team announced Google's intention to block DarkMatter intermediate certificates in the Chrome browser and on the Android platform. There are also plans to reject the application to include the DarkMatter root certificate in Google's certificate store. It should be noted that a similar decision was previously made by Mozilla. Google agrees with the arguments put forward by Mozilla representatives […]
Not long ago, I needed to write several Ansible playbooks to prepare a server for deploying a Rails application. Surprisingly, I couldn't find a simple step-by-step manual. I didn't want to copy someone else's playbook without understanding what was happening, and in the end, I had to read the documentation, piecing everything together myself. Perhaps I can help someone speed up this process with this […]