Blog Section
After six years of development, the first stable release of the static analysis tool PHPStan 1.0 has taken place, allowing developers to find errors in PHP code without executing it or using unit tests. The project code is written in PHP and is distributed under the MIT license. The analyzer provides 10 levels of checks, where each subsequent level expands on the capabilities of the previous one and offers stricter validations: […]
The first public release of the MangoDB project is available, offering a layer implementing the document-oriented database protocol MongoDB that operates on top of the PostgreSQL database. The project aims to enable migration of applications using MongoDB to PostgreSQL, providing a fully open software stack. The code is written in Go and is distributed under the Apache 2.0 license. The program operates as a proxy, translating requests to MangoDB […]
Researchers from the University of Cambridge have published a technique for invisibly injecting malicious code into reviewed source texts. The prepared attack method (CVE-2021-42574) is presented under the name Trojan Source and is based on generating text that looks different to the compiler/interpreter and the human reviewing the code. Examples of how this method can be applied have been demonstrated for various compilers and interpreters provided for the C, C++ (gcc and clang), C#, […]
The release of the lightweight Live distribution AntiX 21 has been announced, optimized for installation on outdated hardware. This release is based on the Debian 11 package base but comes without the system manager systemd and includes eudev instead of udev. For initialization, either runit or sysvinit can be used. The default user environment is created using the IceWM window manager. File management is supported by zzzFM […]
After two months of development, Linus Torvalds announced the release of the Linux 5.15 kernel. Among the most notable changes are a new NTFS driver with write support, the ksmbd module implementing an SMB server, the DAMON subsystem for monitoring memory access, locking primitives for real-time mode, fs-verity support in Btrfs, the process_mrelease system call for out-of-memory handling, and a remote attestation module […]
The Wayland developers are working on extending the protocol to allow applications to continue functioning during the crash and restart of the window compositor. This extension will address the long-standing issue of application termination when there is a failure in the window environment. The necessary changes to keep the socket active during restarts have already been prepared for the KWin window manager and are included in the KDE […]
The release of Vaultwarden 1.23.0 (formerly bitwarden_rs) has taken place, developing an alternative server side for the Bitwarden password manager, compatible at the API level and able to work with the official Bitwarden clients. The project's goal is to provide a cross-platform implementation that allows running Bitwarden servers on private infrastructure while consuming significantly fewer resources than the official Bitwarden server. The Vaultwarden project code is written in […]
A vulnerability (CVE-2021-39341) has been identified in the WordPress plugin OptinMonster, which has over a million active installations and is used for pop-up notifications and offers. This vulnerability allows an attacker to place their JavaScript code on a site using the plugin. The vulnerability has been fixed in version 2.6.5. To block access via compromised keys after the update, the OptinMonster developers have revoked all previously created API access keys and added […]
The release of version 1.13.0 of the Tokio platform has taken place, designed for creating high-performance applications in Rust based on an event-driven architecture that supports multithreading and asynchronous network request handling. The project is written in Rust and is licensed under the MIT license. The new version features an expansion of the documentation, several fixes in the networking subsystem, and the synchronization system. Tokio includes […]
Nearly two years after the last release, a new version of the real-time embedded operating system BuguRTOS-4.1.0 has been released. ( read more... ) bugurtos, embedded, opensource, rtos
In this article, I would like to discuss how we changed our approach to orchestration in our startup project, why we did it, and what problems we encountered along the way. While this article may not claim to be unique, I still believe it could be useful to someone, as we gathered material during the problem-solving process […]
The development of the Trident custom distribution has been officially discontinued, originally developed based on FreeBSD and TrueOS (PC-BSD), but relocated to a package base of Void Linux two years ago. The distribution used the ZFS file system and the OpenRC initialization system. The decision to discontinue was made by key developers whose life circumstances have changed recently, as have their personal preferences. A gradual phase-out of elements […]