Category: Blog

Catch Me If You Can. The King's Version

I am called the King. If you use familiar labels, I am a consultant. More precisely, I am the owner of a modern consulting firm. I have devised a scheme whereby my company reliably earns a decent amount of money, while, oddly enough, benefiting the client. What do you think the essence of my business scheme is? You will never guess. I sell factories their own programmers, and […]

Remote code execution in Firefox

A CVE-2019-11707 vulnerability has been discovered in the Firefox browser, reportedly allowing an attacker to remotely execute arbitrary code using JavaScript. Mozilla states that the vulnerability is already being exploited by attackers. The issue lies in the implementation of the Array.pop method. Further details have not been disclosed. The vulnerability has been patched in Firefox 67.0.3 and Firefox ESR 60.7.1. Consequently, it can be confidently stated that all versions are vulnerable […]

GNU nano 4.3 "Musa Kart"

The release of GNU nano 4.3 has been announced. Changes in the new version include: Restored ability to read and write to FIFO. Startup time reduced as full syntax parsing is now performed only when necessary. Accessing help (^G) while using the –operatingdir option no longer causes a crash. Reading a large or slow file can now be interrupted with […]

Device Manager. Extend the MDM to devices

An automated medical center utilizes a variety of devices that must be managed by a medical information system (MIS), as well as devices that do not accept commands but need to relay their operational results to the MIS. However, all devices have different connection options (USB, RS-232, Ethernet, etc.) and ways to interact with them. Supporting all of them within the MIS is practically impossible, […]

Digging graves, SQL Server, years of outsourcing and my first project

Almost always we create our problems with our own hands… our worldview… our inaction… our laziness… our fears. It becomes quite convenient then to float in the public current of sewage templates… since it is warm and fun, while the rest is irrelevant – we can just indulge. But after a major failure comes the realization of a simple truth – instead of generating an endless stream of excuses, pity for […]

What do orgasms and Wi-Fi have in common?

Hedy Lamarr was not only the first to appear nude in film and portray an orgasm on camera, but she also invented a frequency-hopping spread spectrum communication system. "I think people's minds are more interesting than their appearance," said Hollywood actress and inventor Hedy Lamarr in 1990, ten years before her death. Hedy Lamarr was a captivating actress of the 1940s […]

Updates for Firefox 67.0.3 and 60.7.1 addressing vulnerabilities

Corrective releases of Firefox 67.0.3 and 60.7.1 have been published, addressing a critical vulnerability (CVE-2019-11707) that could cause the browser to crash when executing malicious JavaScript code. The vulnerability is caused by a type handling issue in the Array.pop method. Access to detailed information is currently restricted. It is also unclear whether the issue is limited to the reported crash or could potentially be exploited for arbitrary code execution by an attacker. Additional information: […]

Professions of the Future: "What will you work as on Mars?"

"Jetpack Pilot" is a "job of the past," it's 60 years old. "Jetpack Developer" - 100 years old. "Instructor of the school course on jetpack construction" is a job of the present, we're doing that now. But what is the profession of the future? Tamper? Archeoprogrammer? Designer of false memories? Blade Runner? A long-time acquaintance of mine who participated in the crowdsourcing for a jetpack engine has now launched his […]

Ubuntu ceases to provide packages for 32-bit x86 architecture

Two years after the cessation of the formation of 32-bit installation images for the x86 architecture, the developers of Ubuntu have decided to fully end the lifecycle of this architecture in the distribution. Starting with the autumn release of Ubuntu 19.10, packages in the repository for the i386 architecture will no longer be created. The last LTS branch for users of 32-bit x86 systems will be Ubuntu 18.04, the support for which will last […]

Use GIT for documentation

Sometimes, not only the documentation itself but also the process of working on it can be critical. For example, in projects, a lion's share of the work is related to preparing documentation, and an incorrect process can lead to errors and even loss of information, and therefore, loss of time and profit. But even if this topic isn't central […]

Seph — from "homebrew" to "production"

Choosing CEPH. Part 1 We had five racks, ten optical switches, configured BGP, a couple of dozen SSDs, and a bunch of SAS drives of all colors and sizes, plus proxmox and a desire to shove all the static into our own S3 storage. It's not that all this was needed for virtualization, but since I started using open source – let’s go into […]

Reversing and hacking self-encrypting external HDD drive Aigo. Part 1: Disassembling it

Reversing and hacking external self-encrypting drives has been my long-standing hobby. In the past, I’ve had the opportunity to work with models like Zalman VE-400, Zalman ZM-SHE500, and Zalman ZM-VE500. Recently, a colleague brought me another exhibit: Patriot (Aigo) SK8671, which is built according to a typical design – an LCD indicator and a keyboard for PIN code entry. Here’s what came of it… 1. Introduction […]

Buy reliable website hosting with DDoS protection, VPS VDS servers šŸ”„ Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster