Category: Blog

Monorepositories: please, it's necessary

This article's translation is prepared for students in the course 'DevOps Practices and Tools' in the educational project OTUS. You should choose a monorepository because the behavior it fosters in your teams is transparency and collective responsibility, especially as teams grow. In any case, you will have to invest in the tooling, but it is always better when the default behavior is this behavior, […]

Murky Waters: How the MuddyWater Hackers Attacked a Turkish Military Electronics Manufacturer

Iranian pro-government hackers are facing significant problems. Throughout the spring, unknown individuals published "secret leaks" in Telegram—information about Iranian government-related APT groups—OilRig and MuddyWater—their tools, victims, and connections. But not all of them. In April, Group-IB specialists discovered a leak of email addresses from the Turkish corporation ASELSAN A.Ş, which specializes in the production of tactical military radios and electronic […]

Comparison and selection of data migration systems

Comparison and selection of data migration systems. The data model during development tends to change, and at some point, it no longer matches the database. Of course, the database can be deleted, and then the ORM will create a new version that will correspond to the model, but this procedure will lead to the loss of existing data. Thus, the function of the migration system comes down to […]

Introducing Helm 3

Note: May 16 this year marks a significant milestone in the development of the package manager for Kubernetes — Helm. On this day, the first alpha release of the upcoming major version of the project — 3.0 was presented. Its release will bring substantial and long-awaited changes to Helm, on which many in the Kubernetes community are placing great hopes. We are among them, as we are actively […]

ISTQB Certification. Part 2: How to prepare for ISTQB certification? Stories from practice

In the first part of our article on ISTQB certification, we tried to answer the questions: Who? and Why? is this certificate needed. A little spoiler: collaboration with ISTQB opens more doors more for the employer company than for the newly minted certificate holder. In the second part of the article, our staff will share their stories, impressions, and insights regarding passing the ISTQB test, both within the CIS, […]

The W3C and WHATWG organizations have agreed to develop common specifications for HTML and DOM

The W3C and WHATWG organizations have signed an agreement for further joint development of the HTML and DOM specifications. The signing of the agreement marked the conclusion of the rapprochement process between W3C and WHATWG, initiated in December 2017 after the introduction of some shared workflows in WHATWG and the approval of uniform rules regarding intellectual property. A new working group has been created in W3C for collaborative work on the specifications […]

Plans to strengthen the W^X protection mechanism in OpenBSD

Theo De Raadt shared plans to enhance the W^X (Write XOR Execute) memory protection mechanism. The essence of the mechanism is that the memory pages of a process cannot be accessible for both writing and execution at the same time. Thus, code can only be executed after writing is prohibited, and writing to a memory page is possible only after execution is prohibited. The W^X mechanism helps protect […]

Creating a Reverse socks5 proxy in PowerShell. Part 1

A story about research and development in three parts. Part 1 — research. There are many books — even more benefits. Task statement In the course of conducting penetration tests and Red Team campaigns, it is not always possible to use the standard tools of the Clients, such as VPN, RDP, Citrix, etc., as a means to gain access to the internal network. Sometimes the standard VPN operates under MFA […]

Bittium announced the 'ultra-secure' Tough Mobile 2 smartphone.

The Finnish company Bittium has announced the release of the 'ultra-secure smartphone Bittium Tough Mobile 2.' According to the press release, 'the core of the information security of Bittium Tough Mobile 2 is a multi-layer security structure based on an enhanced Android 9 Pie operating system, unique hardware solutions, and security and software protection features integrated into the source code.' Multi-layer information protection, as claimed […]

Krita 4.2 has been released — HDR support, over 1000 fixes, and new features!

The new release of Krita 4.2 has been released — the world's first free editor with HDR support. In addition to increased stability, this new release added many new features. Key changes and new capabilities include: HDR support on Windows 10. Improved support for graphic tablets across all OS. Enhanced support for multi-monitor systems. Improved monitoring of RAM consumption. The ability to undo operations […]

Release of self-sufficient Flatpak packages 1.4.0

A new stable branch of the Flatpak toolkit 1.4 has been published, which provides a system for building self-contained packages that are not tied to specific Linux distributions and run in a special container, isolating the application from the rest of the system. Support for running Flatpak packages is provided for Arch Linux, CentOS, Debian, Fedora, Gentoo, Mageia, Linux Mint, and Ubuntu. Flatpak packages are included in the Fedora repository and are supported […]

Release of Mir Display Server 1.2

The release of the Mir 1.2 display server has been introduced, with ongoing development by Canonical, despite the abandonment of Unity shell development and the Ubuntu edition for smartphones. Mir remains in demand for Canonical projects and is now positioned as a solution for embedded devices and the Internet of Things (IoT). Mir can be used as a compositing server for Wayland, enabling operation in environments […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster