Blog Section
Google is set to launch an IP Protection feature in the Chrome browser, designed to hide users' IP addresses from website owners. This new feature could serve as a built-in anonymizer aimed at preventing the tracking of movements and circumventing blocks both at the website level and by communication operators. Technically, the IP Protection implementation involves directing traffic through a proxy server before reaching the target […]
On October 23, 2023, on its fourteenth birthday, a new version of the open real-time operating system Embox was released. Among the changes: Improved support for ARM architecture Improved support for RISC-V architecture Improved support for AARCH64 architecture Enhanced dev-tree technology Enhanced SPI, I2C, UART subsystems, and others Improved built-in GDB server Enhanced file subsystem Improved device subsystem (block & char […]
In Russia, a training platform for system programmers is being developed — BMPOS (Basic Modular Platform for Operating Systems), which is conceived and created as a teaching aid for operating system development with an extensive theoretical and practical foundation. As part of the project, a modular kernel is being developed, fundamentally different from existing kernels and specifically designed for studying the process of operating system development. Code […]
In the nightly builds of Firefox, on which version 120 will be based, set to release on November 21, the list of language models in the built-in machine translation system, enabled by default since Firefox version 118, has been expanded. In addition to the initially available models for English, Bulgarian, Danish, German, French, Spanish, Polish, Italian, and Portuguese, models for Russian, Ukrainian, Estonian, and […] have been proposed for testing.
Google has begun implementing the IP Protection feature in Chrome, designed to hide the user's IP address from website owners. This new feature can be used as a built-in anonymizer aimed primarily at preventing tracking while also being suitable for bypassing blocks established on both the website and the service provider levels. Technically, the proposed […]
The first stable release of the nghttp3 project is available, developing a library in C implementing the HTTP/3 protocol. The variant of the library for the HTTP/2 protocol, developed by the same project, serves as the foundation for the mod_http2 module included in the Apache HTTP server. The project's developments are also utilized in the Curl utility. The library code is distributed under the MIT license. The HTTP/3 standard defines the use of the QUIC (Quick […]
The release of the free boot firmware Libreboot 20231021 has been unveiled. This update has been assigned the status of a test release (stable releases are published approximately once a year, with the last stable release in June). The project develops a ready-made build from the coreboot project, providing a replacement for proprietary UEFI and BIOS firmwares responsible for initializing the CPU, memory, peripherals, and other hardware components, with minimal binary insertions. Libreboot is aimed at […]
The release of the Apache HTTP Server 2.4.58 has been published, featuring 33 changes and addressing three vulnerabilities, two of which are related to the potential for DoS attacks on systems using the HTTP/2 protocol. CVE-2023-45802 — conditions for memory exhaustion due to delayed memory release after an HTTP/2 stream reset by a packet with the RST flag. As memory is not released immediately after processing […]
Node.js 21.0 has been released, a platform for running network applications in JavaScript. Support for the Node.js 21.0 branch will last for 6 months. In the coming days, the stabilization of the Node.js 20 branch will be completed, which will achieve LTS status and will be supported until April 2026. Support for the previous LTS branch, Node.js 18.0, will continue until September 2025, and for the earlier LTS branch […]
A TLS connection interception was detected with XMPP (Jabber) instant messaging encryption protocol (Man-in-the-Middle attack) on the servers of the jabber.ru service (also xmpp.ru) hosted by Hetzner and Linode in Germany. The attacker issued several new TLS certificates using the Let’s Encrypt service, which were used for intercepting encrypted STARTTLS connections on port 5222 through a transparent MiTM proxy. The attack was discovered in connection with […]
The administrator of the Jabber server jabber.ru (xmpp.ru) identified a user traffic decryption attack (MITM), conducted over a period of 90 days to 6 months in the networks of the German hosting providers Hetzner and Linode, where the project server and auxiliary VPS environments are hosted. The attack was orchestrated by redirecting traffic to a transit node that substitutes the TLS certificate for XMPP connections encrypted using the STARTTLS extension. The attack was noted […]
Security researchers from Outpost24 published the results of their analysis on the reliability of passwords used by IT system administrators. During the study, accounts present in the Threat Compass database, which collects information about password leaks due to malware activity and hacks, were examined. A collection of over 1.8 million recovered passwords from hashes, related to administration interfaces, was successfully gathered […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Norwegian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish