Blog Section
Three years after the wave of vulnerabilities (1, 2, 3, 4, 5) in the AF_PACKET subsystem of the Linux kernel, another issue has been identified (CVE-2020-14386) that allows a local unprivileged user to execute code with root privileges or to escape from isolated containers if they have root access within them. To create an AF_PACKET socket and exploit the vulnerability, CAP_NET_RAW privileges are required. However, […]
The release of GnuPG 2.2.23 (GNU Privacy Guard), compliant with OpenPGP (RFC-4880) and S/MIME standards, has been published. It provides utilities for data encryption, electronic signature handling, key management, and access to public key repositories. This new version fixes a critical vulnerability (CVE-2020-25125) that emerged starting with version 2.2.21 and can be exploited when importing a specially crafted OpenPGP key. Importing the key […]
On September 1, version 0.4.3 of Embox, a real-time operating system for embedded systems distributed under the BSD license, was released: Changes: Improvements in the build system. Switched to using absolute names. Added a ‘project’ folder for projects. Added the ability to connect projects from external repositories and folders outside the project. Work has begun on the ‘device tree’ subsystem. Enhanced support for STM32. Added cache support […]
CinelerraGG is a fork of the non-linear video editor Cinelerra with the most frequent releases (once a month). New features in this release: Hotkeys for session saving (CTRL-S) and undo (CTRL-Z) have been added, along with the existing s and z. A new type of keyframe has been introduced — bump keyframes. These allow for the creation of rapidly changing parameters, such as fades or speeds. When using the speed curve (movement […]
Introduction With a sufficiently large and distributed infrastructure using DFS as a single point of access to data and DFSR for data replication between data centers and branch servers, the question of monitoring the status of this replication arises. It just so happened that almost immediately after starting to use DFSR, we began implementing Zabbix with the aim of replacing the existing zoo of various tools and streamlining monitoring […]
I'm starting a series of articles where I want to share my experience connecting Exchange and ELK. This stack will help process large volumes of logs without questioning at what scale traditional logging tools will cease to assist us. Let's get acquainted with a new player in the log arena. Exchange has a rather intricate logging system. The most sought-after logs are tracking logs, which monitor step-by-step progress […]
Usually, top-notch speakers who have 'devoured Docker and Kubernetes for breakfast' present at DevOps conferences, sharing their successful experiences with nearly unlimited resources from the corporations they work for. However, DevOps Live 2020 will be slightly different. DevOps blurs the lines between development and infrastructure, and DevOps Live 2020 blurs the boundaries between […]
Google has announced the phased rollout of the 'DNS over HTTPS' (DoH) mode for Chrome 85 users on the Android platform. This mode will gradually be activated, covering more users over time. The activation of DNS-over-HTTPS for desktop users began earlier with Chrome 83. DNS-over-HTTPS will be automatically enabled for users whose settings specify DNS providers that support this technology […]
The second release of the Fly-Pie project has been introduced, featuring an unusual implementation of circular context menus that can be used to launch applications, open links, and simulate hotkeys. The menu offers cascading items that are interlinked through dependency chains. An extension for GNOME Shell has been prepared for installation in GNOME 3.36 and has been tested in Ubuntu 20.04. For tips […]
The results of the testing of tools for detecting unpatched vulnerabilities and identifying security issues in Docker container images have been published. The check showed that 4 out of 6 known Docker image scanners had critical vulnerabilities that could directly attack the scanner itself and achieve code execution on the system, in some cases (for example, when using Snyk) with root privileges. For […]
Hello, Habr! We at 'Rexsoft' have translated the article Feature Selection in Machine Learning into Russian. We hope it will be useful for everyone interested in the topic. In the real world, data is not always as clean as business clients often believe. This is why there is demand for data mining and data wrangling. It helps identify missing values and patterns in structured […]
Greetings to everyone continuing to read the series on the new generation of NGFW Check Point from the SMB family (1500 series). In part 5, we discussed the SMP solution (management portal for SMB gateways). Today, I would like to talk about the Smart-1 Cloud portal, which positions itself as a SaaS-based Check Point solution, serving as the Management Server in the cloud, so it will […]