Category: Blog

MITM attack on JABBER.RU and XMPP.RU

A TLS connection interception was detected with XMPP (Jabber) instant messaging encryption protocol (Man-in-the-Middle attack) on the servers of the jabber.ru service (also xmpp.ru) hosted by Hetzner and Linode in Germany. The attacker issued several new TLS certificates using the Let’s Encrypt service, which were used for intercepting encrypted STARTTLS connections on port 5222 through a transparent MiTM proxy. The attack was discovered in connection with […]

Intercepted encrypted traffic from jabber.ru and xmpp.ru

The administrator of the Jabber server jabber.ru (xmpp.ru) identified a user traffic decryption attack (MITM), conducted over a period of 90 days to 6 months in the networks of the German hosting providers Hetzner and Linode, where the project server and auxiliary VPS environments are hosted. The attack was orchestrated by redirecting traffic to a transit node that substitutes the TLS certificate for XMPP connections encrypted using the STARTTLS extension. The attack was noted […]

Ranking of unreliable passwords used by administrators

Security researchers from Outpost24 published the results of their analysis on the reliability of passwords used by IT system administrators. During the study, accounts present in the Threat Compass database, which collects information about password leaks due to malware activity and hacks, were examined. A collection of over 1.8 million recovered passwords from hashes, related to administration interfaces, was successfully gathered […]

25 years of Linux.org.ru

25 years ago, in October 1998, the domain Linux.org.ru was registered. Please write in the comments what you would like to change on the site, what is lacking, and which features should be further developed. Ideas for development and small details you would like to change, such as usability issues and bugs that hinder the user experience, are also of interest. In addition to the traditional survey, we would like to additionally note […]

Release of the Asterisk 21 communication platform

After a year of development, the release of the new stable branch of the open communication platform Asterisk 21 has taken place. This platform is used for deploying software PBXs, voice communication systems, VoIP gateways, organizing IVR systems (voice menus), voicemail, telephone conferences, and call centers. The project's source code is available under the GPLv2 license. Asterisk 21 falls into the category of releases with standard support, with updates being generated over a two […]

Intel has released the OSPRay 3.0 distributed ray tracing engine.

Intel has released the scalable 3D rendering engine OSPRay 3.0, designed for realistic, high-quality visualization using ray tracing. The engine is being developed as part of the larger Intel Rendering Framework project, which focuses on creating software visualization tools for scientific computations (SDVis, Software Defined Visualization). This includes the Embree ray tracing library, the GLuRay photorealistic rendering system, and the oidn (Open […]

ONLYOFFICE 7.5.0

The release of ONLYOFFICE DocumentServer 7.5.0 has taken place, which includes a server for ONLYOFFICE online editors and enables collaborative work. The editors are designed to work with text documents, spreadsheets, and presentations, and the source code of the project is distributed under the free AGPLv3 license. At the same time, ONLYOFFICE DesktopEditors 7.5 has been released, built on the same codebase as the online editors. The desktop editors are applications for the desktop, written in JavaScript […]

Google has worked to enhance the address bar in Chrome.

Google has introduced a series of improvements to the Chrome address bar: Auto-completion of URLs will consider any keyword previously used to search for a site, not just words that match the beginning of the address. For example, the auto-completion of the address "https://www.google.com/travel/flights" will trigger not only when typing the word "google" but also when typing "flights." Automatic correction of typos when entering the website address has been implemented […]

The ONLYOFFICE office suite 7.5.0 has been released.

The release of ONLYOFFICE DocumentServer 7.5.0 has been published with the implementation of a server for ONLYOFFICE online editors and organization of collaborative work. The editors can be used for working with text documents, spreadsheets, and presentations. The project code is distributed under the free AGPLv3 license. Concurrently, the release of the ONLYOFFICE DesktopEditors 7.5 product has been established, built on a unified codebase with the online editors. The desktop editors are designed as desktop applications […]

Release Alt Education 10.2

The assembly of the operating system "Alt Education 10.2" is available for i586, x86_64, AArch64 on platform 10 (branch p10 Aronia). The distribution includes system and application software for daily tasks of all participants in the educational process and administrative activities of the institution. "Alt Education 10.2" is suitable for teaching computer science and helps to gain practical skills in working with hardware and software resources. […]

Java SE, MySQL, VirtualBox, Solaris, and other Oracle products updated to fix vulnerabilities

Oracle has released a scheduled Critical Patch Update aimed at addressing critical issues and vulnerabilities in its products. The October update resolves a total of 387 vulnerabilities. Some of the issues include 3 security vulnerabilities in Java SE and 4 issues in GraalVM for JDK. All vulnerabilities can be exploited remotely without authentication and affect environments that allow […]

Release of Chrome OS 118

The release of Chrome OS 118, based on the Linux kernel, with the upstart system manager, ebuild/portage build tools, open components, and Chrome 118 web browser, is now available. The user environment of Chrome OS is limited to the web browser, and instead of standard applications, web applications are used. However, Chrome OS includes a full multi-window interface, desktop, and taskbar. The source code is distributed under […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster