Blog Section
Many of us really enjoy when something is customized for us! When we feel a certain 'level of ownership' that allows us to stand out from the 'gray mass'. The same chairs, tables, computers, etc. All like everyone else! Sometimes even such a small detail as a company logo on a regular pen makes us feel it's special and thus […]
TL;DR if you need antivirus on your corporate mobile devices, then you are doing everything wrong, and antivirus won't help you. This post is the result of heated debates on whether antivirus is needed on corporate mobile phones, under what circumstances it works, and when it is useless. The article examines threat models that antivirus should theoretically protect against […]
The reliability of encryption is one of the most important indicators when using information systems for business, as they participate daily in the transmission of vast quantities of confidential information. A commonly accepted means of assessing the quality of an SSL connection is the independent test from Qualys SSL Labs. Since this test can be run by anyone, it is especially important for SaaS providers that their assessment in this test is maximized. On […]
The release of Linux Mint 20 has been announced, which has transitioned to the package base of Ubuntu 20.04 LTS. The distribution is fully compatible with Ubuntu but significantly differs in its approach to user interface organization and the selection of default applications. The developers of Linux Mint provide a desktop environment that adheres to the traditional canons of desktop organization, which is more familiar to users who are not adopting new interface building methods […]
LanguageTool is a free system for checking grammar, style, spelling, and punctuation. LanguageTool can be used as a desktop application, command line tool, or as an extension for LibreOffice/Apache OpenOffice. It requires Java 8+ from Oracle or Amazon Corretto 8+. Extensions for Mozilla Firefox, Google Chrome, Opera, and Edge have been created as part of a separate project. An additional extension […]
At the end of May, we discovered a campaign spreading Remote Access Trojan (RAT) malware—programs that allow attackers to remotely control the infected system. The group we analyzed distinguished itself by not targeting a specific family of RATs for infection. Several trojans (all widely available) were observed in the attacks within the campaign. This characteristic of the group reminded us of the rat king—a mythical creature composed of […]
VictoriaMetrics, TimescaleDB, and InfluxDB were compared in the previous article using a dataset of one billion data points belonging to 40K unique time series. A few years ago, there was the era of Zabbix. Each bare metal server had no more than a few metrics – CPU usage, memory usage, disk usage, and network usage. Thus, metrics from thousands of servers can fit […]
The Openwall project has released version 0.8 of the LKRG (Linux Kernel Runtime Guard) kernel module, designed to detect and block attacks and integrity violations in kernel structures. For example, the module can protect against unauthorized modifications to the running kernel and attempts to change permissions of user processes (detecting the use of exploits). The module is suitable for providing protection against already known kernel exploits […]
Chrome includes a new implementation of the built-in PDF document viewer interface. The interface is notable for moving all settings to the top panel. Previously, the top panel only displayed the file name, page information, rotation, print, and save buttons, but now it has been expanded to include the contents of the sidebar, which included controls for scaling and document placement […]
The release of BusyBox 1.32 has been announced, featuring a set of standard UNIX utilities packaged as a single executable file and optimized for minimal system resource consumption with a package size of less than 1 MB. The first release of the new 1.32 branch is positioned as unstable, with full stabilization expected in version 1.32.1, which is anticipated in about a month. The project's code is distributed under the license […]
Translator's note: the authors of this article detail how they discovered the CVE-2020–8555 vulnerability in Kubernetes. Although it initially seemed not very dangerous, along with other factors, its criticality turned out to be maximum for some cloud providers. The specialists' work was generously rewarded by several organizations. Who we are We are two French […]
Hello, Habr! In early July, Solarwinds announced the release of a new version of the Orion Solarwinds platform - 2020.2. One of the new features in the Network Traffic Analyzer (NTA) module is the support for recognizing IPFIX traffic from VMware VDS. Analyzing traffic in a virtual switch environment is essential for understanding the load distribution across the virtual infrastructure. By analyzing traffic, you can also detect the migration of virtual machines. In this […]