Category: Blog

Minimum installation of CentOS/Fedora/RedHat

I have no doubt that noble lords — Linux administrators — strive to minimize the number of packages installed on the server. This is more cost-effective, safer, and instills a sense of complete control and understanding of the processes at hand for the administrator. Therefore, the typical scenario for the initial installation of the operating system involves choosing a minimal variant, which is then filled with necessary packages. However, the minimal option proposed by the CentOS installer […]

The second candidate for the Debian 10 installer releases "Buster"

A second release candidate of the installer for the next major release of Debian 10 "Buster" is now available. There are currently 75 critical bugs blocking the release (down from 98 two weeks ago and 132 one and a half months ago). The Testing branch has been put into a state of full freeze regarding changes (with exceptions only for emergency interventions). The final release of Debian 10 is expected on July 6. Compared to […]

Reflections on the national standard NB-Fi and billing systems

In short, In 2017, an article appeared on Habr titled "A draft national standard NB-FI for the Internet of Things was submitted to Rosstandart." In 2018, the technical committee on "Cyber-Physical Systems" worked on three IoT projects: GOST R "Information Technologies. Internet of Things. Terms and Definitions," GOST R "Information Technologies. Internet of Things. Reference Architecture of the Internet of Things and Industrial Internet of Things," […]

Riseup has announced a new VPN service based on Bitmask.

Riseup has launched a new and easy-to-use VPN service — no configuration required, no registration, and no SMS. Riseup is one of the oldest non-profit organizations developing and offering users services for safe and private work on the internet. The service is based on Bitmask, which was previously created as part of the LEAP encryption access project. The goal of creating Bitmask is […]

Release JPype 0.7, a library for accessing Java classes from Python

After more than four years since the formation of the previous significant branch, the release of JPype 0.7 is available, allowing full access for Python applications to Java class libraries. With JPype, you can use Java-specific libraries from Python, creating hybrid applications that combine both Java and Python code. The project code is released under the Apache 2.0 license. Unlike […]

Project Salmon: How to Effectively Counter Internet Censorship with Trust Levels Proxies

Governments in many countries impose restrictions on citizens' access to information and services on the internet. Combating such censorship is a significant and complex task. Typically, simple solutions lack high reliability or long-term effectiveness. More complex methods for circumventing blocks have downsides in terms of usability, low performance, or prevent preserving the quality of usage […]

Reversing and hacking the self-encrypting external HDD Aigo. Part 2: Taking a dump from Cypress PSoC

This is the second and final part of the article on hacking external self-encrypting drives. I remind you that recently a colleague brought me a Patriot (Aigo) SK8671 hard drive, and I decided to reverse engineer it, and now I'm sharing what came out of it. Before reading further, make sure to check out the first part of the article. 4. Let’s start by dumping the internal flash of the PSoC 5. The ISSP protocol – […]

Fault-tolerant PostgreSQL cluster + Patroni. Implementation experience.

In this article, I will explain how we approached the issue of PostgreSQL fault tolerance, why it became important for us, and what we ultimately achieved. We operate a high-load service: 2.5 million users worldwide, with over 50,000 active users each day. Our servers are hosted on Amazon in a single region in Ireland, with more than 100 different servers in operation at any time, nearly half of which are […]

Vulnerability in AMD SEV that allows encryption keys to be determined

Developers from the Google Cloud team have identified a vulnerability (CVE-2019-9836) in the implementation of AMD SEV (Secure Encrypted Virtualization) technology, which allows for the compromise of data protected by this technology. AMD SEV provides hardware-level transparent encryption of virtual machine memory, where only the current guest system has access to decrypted data, and other virtual machines and the hypervisor cannot access it when attempting to do so […]

Google developers proposed to create their own libc for LLVM

One of the developers from Google raised the topic of developing a cross-platform standard C library (Libc) within the LLVM project on the LLVM mailing list. For various reasons, Google is dissatisfied with the current libc implementations (glibc, musl), and the company is on the path to developing a new implementation that is proposed to be developed as part of LLVM. Recent LLVM developments have been used as a basis for building […]

Release of Chrome OS 75

Google has released version 75 of its Chrome OS, based on the Linux kernel, with an init daemon, ebuild/portage build tools, open components, and the Chrome 75 web browser. The user environment of Chrome OS is limited to the web browser, and instead of standard applications, web apps are used; however, Chrome OS includes a full multi-window interface, desktop, and taskbar. The Chrome build […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster