Blog Section
Not long ago, we published a semi-serious forecast titled ‘What You Will Pay For in 20 Years’. These were our own expectations based on emerging technologies and scientific achievements. But in the U.S., they went further. A whole symposium was held there, including discussions on predicting the future awaiting humanity in 2050. The organizers approached the issue with utmost seriousness: […].
Quietly and unnoticed, a minor release of Wire version 3.35 for Android occurred just a few minutes ago. Wire is a free cross-platform messenger with end-to-end encryption (E2EE) by default (which means all chats are secret), developed by Wire Swiss GmbH and distributed under GPLv3 (clients) and AGPLv3 (server) licenses. Currently, the messenger is centralized, but there are plans for future federation […].
Free as in Freedom in English: Chapter 1. The Fateful Printer Free as in Freedom in English: Chapter 2. 2001: A Hacker Odyssey Free as in Freedom in English: Chapter 3. The Portrait of a Young Hacker Free as in Freedom in English: Chapter 4. Debunking God Free as in Freedom in English: Chapter 5. A Stream of Freedom Free as […]
The release of the minimalist cross-platform web browser NetSurf 3.9 has occurred, capable of running on systems with just a few dozen megabytes of RAM. The release has been prepared for Linux, Windows, Haiku, AmigaOS, RISC OS, and various Unix-like systems. The browser's code is written in C and is released under the GPLv2 license. This new release is notable for its support of CSS Media Queries, improvements in JavaScript handling, and fixes for accumulated bugs. The browser […]
At the recent PHDays 9, we held a hacking competition for a gas pumping station — the Industrial Ninja contest. There were three stands with different security parameters (No Security, Low Security, High Security), emulating the same industrial process: air was pumped into (and then released from) a balloon under pressure. Despite the different security parameters, the hardware composition of the stands […]
In the summer, both consumer activity and the pace of changes in web project infrastructure traditionally decrease, according to Captain Obvious. Simply because even IT specialists occasionally take vacations. And so do CTOs. This makes it harder for those who remain on duty, but that’s not the topic now: perhaps this is precisely why summer is the best time to thoughtfully reconsider the existing backup scheme […]
There are many resources available online about the RSTP protocol. In this article, I propose to compare the RSTP protocol with the proprietary protocol from Phoenix Contact – Extended Ring Redundancy. Details of RSTP implementation General information Convergence time – 1-10 s Possible topologies – any It is commonly believed that RSTP only allows switches to be combined in a ring: However, RSTP allows […]
Once, Parallels decided to accommodate those employees who had long been with the company and did not want to change it, but wanted to relocate to be closer to the West, obtain an EU passport, and become more mobile and independent in their movements. Thus, the idea was born to expand the geographical presence and open the Parallels R&D center […]
The vulnerability reward program for discovering vulnerabilities in the Google Chrome browser was launched in 2010. To date, thanks to this program, developers have received about 8,500 reports from users, and the total amount of rewards has exceeded $5 million. It has now been reported that Google has increased the bounty for discovering serious vulnerabilities in its own browser. In the program […]
The Microsoft Edge Canary build number 77.0.222.0 has introduced a new feature to enhance privacy in the browser. It allows users to choose which data to delete after closing the application. This feature will come in handy if the user is working on someone else's computer or is simply paranoid enough to remove all traces behind them. The new option is available in the Settings -> Privacy and services […]
A method has been published that allows any Chrome extension to execute external JavaScript code without granting the extension enhanced permissions (without unsafe-eval and unsafe-inline in manifest.json). Access rights imply that without unsafe-eval, the extension can only execute code that is part of the local delivery, but the proposed method bypasses this restriction and allows any JavaScript loaded […]
A vulnerability has been identified in the fbdev subsystem (Framebuffer) that could lead to a 64-byte kernel stack overflow when processing improperly formatted EDID parameters. Exploitation can occur by connecting a malicious monitor, projector, or other output device (for instance, a specially prepared device simulating a monitor) to the computer. Interestingly, Linus Torvalds was the first to respond to the vulnerability notification, suggesting […]