Blog Section
Variti develops bot protection and DDoS attack prevention, as well as conducts stress and load testing. At the HighLoad++ 2018 conference, we discussed how to secure resources against various types of attacks. To put it briefly: isolate parts of the system, use cloud services and CDN, and regularly update. However, without specialized security companies, you won't be able to manage on your own 🙂 Before reading […]
Four vulnerabilities have been identified in the drivers for Broadcom wireless chips. In the simplest case, these vulnerabilities could be exploited to remotely trigger a denial of service, but scenarios are not excluded in which exploits could be developed, allowing an unauthenticated attacker to execute their code with Linux kernel privileges by sending specially crafted packets. The issues were revealed during reverse engineering […]
Andrey Kopylov, our technical director, loves, actively uses, and advocates for Docker. In a new article, he explains how to create users in Docker. Proper management of users, why users should not be left with root privileges, and how to solve the issue of indicator mismatch in Dockerfile. All processes in the container will run as the root user unless specified otherwise. This may seem very convenient, as this user […]
The topic of fault tolerance in storage systems is always relevant, as in our age of widespread virtualization and resource consolidation, a storage system is the component whose failure will lead not just to a minor incident, but to prolonged service downtimes. Therefore, modern storage systems consist of many redundant components (including controllers). But is this protection sufficient? Absolutely all […]
Many Enterprise applications and virtualization systems have their own mechanisms for building fault-tolerant solutions. In particular, Oracle RAC (Oracle Real Application Cluster) represents a cluster of two or more Oracle database servers working together to balance the load and ensure fault tolerance at the server/application level. To operate in this mode, a shared storage is required, acting as […]
Many popular Android applications from the major Chinese developer DU Group, including a selfie app with 50 million downloads, are used for fraud, misuse of user permissions, intrusive advertising, and more. In particular, they send data to China. This was reported by BuzzFeed.News. The company has an audience of over a billion worldwide and claims to […]
Valve has released a build of the Proton project 4.2-3, which is based on the work of the Wine project and aims to enable the launch of Linux gaming applications created for Windows and listed in the Steam catalog. The project's developments are distributed under the BSD license. As new features are finalized in the original Wine and related projects, such as DXVK and vkd3d, the changes developed in Proton are transferred over. […]
Mozilla has unveiled the WebThings platform after two years of experimentation and development, which incorporates previously developed projects WebThings Framework and WebThings Gateway, providing components for accessing various categories of consumer devices and utilizing the universal Web Things API for interacting with them. The project's developments are released under the MPL 2.0 license. The WebThings Framework offers a set of interchangeable components for […]
Preface or how the idea of partitioning arose The story begins here: Do you remember how it all started? Everything was new and unprecedented. After nearly all resources for query optimization had been exhausted at that moment, the question arose—what next? Thus, the idea of partitioning emerged. A lyrical digression: It was 'at that moment', because […]
It is possible that the Sea Launch platform will be relocated from California to the Far East. At least, sources in the rocket and space industry say this, according to the online publication RIA Novosti. The Sea Launch project was developed in the early 1990s. The idea was to create a floating rocket and space complex capable of providing the most favorable […]
A new release of the NixOS distribution has been announced. Features of NixOS include a 'functionally pure' package manager Nix, as well as its own unified configuration system. Some changes: The default Python 3 interpreter is now CPython 3.7; the Pantheon desktop environment developed by the elementary OS team has been added; the Kubernetes module has undergone a comprehensive refactoring; 35 new modules have been added; support for Node.js version 6 has been discontinued; Wayland compositor […]
Introduction To ensure an additional level of server security, a mandatory access distribution model can be used. This publication will describe how to run Apache in a jail with access only to the components necessary for the correct operation of Apache and PHP. This principle can be applied to restrict not only Apache but also any other stack. Preparation […]