Blog Section
The release of the main branch nginx 1.15.12 is available, which continues to develop new features (the parallel stable branch 1.14 only receives changes related to fixing serious bugs and vulnerabilities). In version 1.15.12, a crash (segmentation fault) of the worker process has been fixed that could occur if variables were used in the ssl_certificate or ssl_certificate_key directives and the OCSP stapling mechanism was enabled, […]
Hello, Habr! Recently I watched a downloaded version of the programming stream 'How to Create Your Web Application on Flask'. I decided to solidify my knowledge with some project. I wasn't sure what to write for a long time, and then the idea struck me: 'Why not create a mini backdoor on Flask?'. The first implementation options and possibilities for the backdoor immediately came to mind. But I decided […]
On April 13, the American daily newspaper The New York Times published an article on its website discussing how the U.S. police turn to Google for assistance in investigating crimes when no other means are available to search for witnesses and suspects. The article tells the story of Jorge Molina — a simple warehouseman accused of murder committed in December […]
Introduction 'Generating random numbers is too important to leave to chance' Robert Coveyou, 1970 This article is dedicated to the practical application of solutions that utilize collective random number generation in untrusted environments. Briefly — how and for what purposes randomness is used in blockchains, and a bit about how to distinguish 'good' randomness from 'bad'. Generating truly random numbers is […]
95% of cybersecurity threats are known, and you can defend against them using traditional means such as antivirus programs, firewalls, IDS, and WAF. The remaining 5% of threats are unknown and the most dangerous. They account for 70% of the risk to a company because they are very difficult to detect and even harder to protect against. Examples of 'black swans' include ransomware epidemics like WannaCry, […]
As multifunction printers (MFPs) have increased their built-in features, they have long since moved beyond simple scanning and printing. They have now evolved into fully autonomous devices integrated into high-tech local and global networks, connecting users and organizations not only within a single office but worldwide. In this article, together with practical information security expert Luka Safonov, we will explore […]
The Sun will hardly set twice below the horizon before all IT Jedi, Padawans, and Younglings flock to the star system 'Forest Depths' to affirm their IT status. The testing of the Force adepts will be handled by Rostelecom, RT Labs, and Habr. The initiation point will be the Russian Internet Forum (RIF), where warriors of information technology will gather for a council on numerous questions of galactic importance — small and medium business [...]
Surely, each of us has wondered what this dream team looks like? Is it Ocean's group of cool friends? Or perhaps the French national football team? Maybe it’s a team of developers from Google? In any case, we would like to be in such a team or even create one. Amid all this, I want to share […]
The first release candidate of the installer for the next significant release of Debian 10 'Buster' is now available. Currently, there are 146 critical bugs blocking the release (down from 316 a month ago, 577 two months ago, 275 at the time of Debian 9 freeze, 350 in Debian 8, and 650 in Debian 7). The final release of Debian 10 is expected in the summer. Compared to […]
Background In a medical organization, solutions based on PACS servers Orthanc and DICOM client Radiant were being implemented. During the setup, it turned out that each DICOM client must be described in the PACS servers as follows: Client name AE-name (must be unique) TCP port that automatically opens on the client side and receives DICOM studies from the PACS server (i.e., the server essentially pushes them towards the client […]
When a business operates with large data sets, the unit of storage becomes not an individual disk, but a set of disks, their aggregate, a necessary volume aggregate. And it must be managed as a cohesive entity. The logic of scaling storage with large block aggregates is well described using the JBOD example — both as a disk aggregation format and as a physical device. You can scale the disk infrastructure not only 'upward', cascading JBODs, but […]
You have probably already noticed that Visual Studio 2019 has been released. As expected, we have added enhancements for web development and Azure development. Serving as a starting point, Visual Studio 2019 provides new features to start working with your code, and we have also updated the creation experience for ASP.NET and ASP.NET Core projects to match the following […]