Blog Section
Microsoft has not officially confirmed the existence of an operating system called Windows Lite. However, the software giant is hinting that this OS will appear in the future. For example, Nick Parker, corporate vice president of consumer goods and devices at Microsoft, spoke at the annual Computex 2019 event about what a modern operating system looks like from a developer's perspective. […]
Hello, dear IT specialists! Stop picking your noses; instead, listen to an economics course. From this course, you will learn about the most important economic concepts, and as a result, you will become incredibly smart. And if you answer the questions correctly, your parents will buy you ice cream and take you to the zoo. Task 1 In a faraway kingdom, in a distant state, a grandfather grew a turnip, and the hen Ryaba laid […]
A vulnerability has been identified in the Docker management tool for isolating Linux containers (CVE-2018-15664), which, under certain circumstances, allows access to the host environment from a container if there is permission to run images in the system or access to the running container. This issue affects all versions of Docker and remains unpatched (a patch has been proposed but not yet accepted).
This article is the sixth in the series "How to Take Control of Your Network Infrastructure." You can find the content and links to all articles in the series here. After leaving a few topics behind, I decided to start a new chapter. I will return to security a bit later. Here, I want to discuss one simple yet effective approach that I believe, in one way or another, [...]
Safety first – it's not an abstract call, but a concrete action plan for enterprises with industrial safety risks. Data centers fall into this category, which means they must have well-developed labor protection rules. Today, I will discuss how the LOTO system at Linxdatacenter's site in St. Petersburg enhances data center operational safety. Analyzing industrial accidents, injuries, incidents, and occupational diseases [...]
This article's translation is prepared for students in the course 'DevOps Practices and Tools' in the educational project OTUS. You should choose a monorepository because the behavior it fosters in your teams is transparency and collective responsibility, especially as teams grow. In any case, you will have to invest in the tooling, but it is always better when the default behavior is this behavior, […]
Iranian pro-government hackers are facing significant problems. Throughout the spring, unknown individuals published "secret leaks" in Telegram—information about Iranian government-related APT groups—OilRig and MuddyWater—their tools, victims, and connections. But not all of them. In April, Group-IB specialists discovered a leak of email addresses from the Turkish corporation ASELSAN A.Ş, which specializes in the production of tactical military radios and electronic […]
Comparison and selection of data migration systems. The data model during development tends to change, and at some point, it no longer matches the database. Of course, the database can be deleted, and then the ORM will create a new version that will correspond to the model, but this procedure will lead to the loss of existing data. Thus, the function of the migration system comes down to […]
Note: May 16 this year marks a significant milestone in the development of the package manager for Kubernetes — Helm. On this day, the first alpha release of the upcoming major version of the project — 3.0 was presented. Its release will bring substantial and long-awaited changes to Helm, on which many in the Kubernetes community are placing great hopes. We are among them, as we are actively […]
In the first part of our article on ISTQB certification, we tried to answer the questions: Who? and Why? is this certificate needed. A little spoiler: collaboration with ISTQB opens more doors more for the employer company than for the newly minted certificate holder. In the second part of the article, our staff will share their stories, impressions, and insights regarding passing the ISTQB test, both within the CIS, […]
The W3C and WHATWG organizations have signed an agreement for further joint development of the HTML and DOM specifications. The signing of the agreement marked the conclusion of the rapprochement process between W3C and WHATWG, initiated in December 2017 after the introduction of some shared workflows in WHATWG and the approval of uniform rules regarding intellectual property. A new working group has been created in W3C for collaborative work on the specifications […]
Theo De Raadt shared plans to enhance the W^X (Write XOR Execute) memory protection mechanism. The essence of the mechanism is that the memory pages of a process cannot be accessible for both writing and execution at the same time. Thus, code can only be executed after writing is prohibited, and writing to a memory page is possible only after execution is prohibited. The W^X mechanism helps protect […]