Blog Section
Mozilla has announced an expansion of its initiative to pay monetary rewards for identifying security issues in Firefox. In addition to vulnerabilities, the Bug Bounty program will now cover methods to circumvent existing browser mechanisms that prevent exploits. Such mechanisms include an HTML fragment cleansing system before use in a privileged context and memory separation for DOM nodes […]
The main development team of the Rust programming language (Rust Core Team) and Mozilla have announced plans to create an independent non-profit organization, the Rust Foundation, by the end of the year. This organization will be entrusted with the intellectual property related to the Rust project, including trademarks and domain names associated with Rust, Cargo, and crates.io. The organization will also be responsible for organizing project funding. Recall that […]
My name is Leonid, and I am a website developer at VPS Search. Given my work, I am interested in the stories of the establishment and development of various companies in the hosting services sector. Today, I want to present an interview with Danil and Dmitry, the creators of the hosting service Boodet.online. They will share insights about their infrastructure, work organization, and their experience in developing a virtual server provider in Russia. Please tell us about […]
Shell wallpaper by manapi Debugging bash scripts is like searching for a needle in a haystack, especially when new additions are made to an existing codebase without timely consideration of structure, logging, and reliability. In such situations, one can find themselves dealing with both their own mistakes and managing complex script entanglements. The Mail.ru Cloud Solutions team translated the article […]
The release of Parrot 4.10, based on the Debian Testing package base and including a set of tools for system security testing, forensic analysis, and reverse engineering, is now available. Several ISO images are offered for download with the MATE environment (full 4.2 GB and minimal 1.8 GB), with the KDE desktop (2 GB), and with the Xfce desktop (1.7 GB). The Parrot distribution […]
Google announced the introduction of protection against insecure submission of web forms in the upcoming release of Chrome 86. This protection targets forms displayed on pages loaded via HTTPS but submitting data without encryption over HTTP, which creates risks of data interception and modification during MITM attacks. Three changes have been implemented for such mixed web forms: Autocompletion of any mixed input forms has been disabled, […]
We are excited to share the news that Contour has been placed in the project incubator by the Cloud Native Computing Foundation (CNCF). If you haven't heard about Contour yet—it's a simple and scalable open-source ingress controller for routing traffic to applications running in Kubernetes. We will take a detailed look at how it works and show the 'roadmap' for its development at the upcoming Kubecon conferences […]
The essence of what happened In May 2020, a group of outgoing nodes was discovered that interfered with outbound connections. Specifically, they left almost all connections untouched but intercepted connections to a small number of cryptocurrency exchanges. If users visited the HTTP version of the site (i.e., unencrypted and unauthenticated), the malicious nodes prevented redirecting to the HTTPS version (i.e., encrypted and authenticated). If the user did not notice the substitution […]
There is quite a bit of information available online about SMART and attribute values. However, I haven't come across mentions of several important points that I know from people engaged in media research. When I was telling a friend once again why SMART readings should not be trusted unconditionally and why it's better not to constantly use classic SMART monitoring tools, I came to […]
In my work, I often have obsessions about the lack of information regarding infrastructure, and as the number of servers under management increases, it turns into a real torment. Even when I was administering in small organizations, I always wanted to know what is where, where things are plugged in, who is responsible for which hardware or service, and most importantly — to record changes […]
Hello everyone! In this article, I want to share one of the ways to run JMeter performance tests in OpenShift using Jenkins for automation. First, we will go through all the necessary steps (creating ImageStreams, BuildConfig, Job, etc.) manually. After that, we will write a Jenkins Pipeline. Our starting point should be: a functioning OpenShift (v3.11) cluster with Jenkins […]
The developers of Notepad++, the free (GPLv3) code editor for the Windows platform, have announced the project’s blockage in China. Despite only supporting the Windows platform, Notepad++ is very popular among Ubuntu users and ranks 5th among the most popular snap packages for developers (runs via Wine). It is speculated that the reason for Notepad++’s blockage was the project’s involvement in actions against […]