Category: Blog

A vulnerability in UPnP suitable for amplifying DDoS attacks and scanning the internal network

Details have been disclosed about a vulnerability (CVE-2020-12695) in the UPnP protocol that allows traffic to be sent to arbitrary recipients using the standard operation 'SUBSCRIBE.' This vulnerability has been given the code name CallStranger. It can be used for data extraction from networks protected by data leak prevention (DLP) systems, for scanning ports of computers within the internal network, and to amplify DDoS attacks using millions of connected […]

GhostBSD 20.04

The GhostBSD project creates a desktop-oriented operating system based on FreeBSD. A new version of GhostBSD 20.04 has been released, addressing a number of issues related to installation and ZFS during setup. Innovations include replacing gnome-mount and hald with FreeBSD devd and Vermaden automount, which make the automatic mounting and unmounting of external devices more stable and […]

How and why the noatime option improves performance in Linux systems

Updating atime affects system performance. What is going on and what can be done about it — read in the article. Whenever I update Linux on my home computer, I have to deal with certain tasks. Over the years, this has become a habit: I back up my files, wipe the system, install everything from scratch, restore my files, […]

HCI: ready solutions for building a flexible corporate IT infrastructure

In IT, there is a concept known as End User Computing — computing for end users. How, where, and in what ways can such solutions assist, and what should they be like? According to today's requirements, employees want to be able to work securely from any device, anywhere. Technological aspects make up about 30% of the incentives for engaged employees, as reported […]

New version of the Exim mail server 4.94

After 6 months of development, the release of the Exim mail server 4.94 has occurred, incorporating accumulated fixes and adding new features. According to a May automated survey of about a million mail servers, Exim's share is 57.59% (up from 53.03% last year), Postfix is used on 34.70% (up from 34.51%), Sendmail — 3.75% (down from 4.05%), and Microsoft Exchange — 0.42% (down from 0.57%). Changes in the new […]

Vulnerability in GnuTLS allowing TLS 1.3 session resumption without knowledge of the key

A vulnerability (CVE-2020-13777) has been identified in the GnuTLS library, which is used by default in many packages within Debian, including the package manager APT and many utilities, allowing a previously stopped TLS session to be resumed without the knowledge of the session key. Practically, this vulnerability can be exploited for MITM attacks. The vulnerability is caused by incorrect construction of the session ticket key — the TLS server did not bind the session key […]

Release of Terminal File Manager n³ v3.2

nnn (or n³) is a full-featured terminal file manager. It's incredibly fast, lightweight, and virtually requires no setup. nnn can analyze disk usage, rename files in bulk, launch applications, and select files. There are tons of plugins and documentation in the repository for further extending its capabilities, such as previews, disk mounting, searching, and diffs for files/directories, as well as an independent (neo)vim plugin. […]

Physical Education vs Computer Science, help make a choice

This is the second part of the 'series' on Russian school education and the opportunities for IT to enhance it in various areas. For those who haven't read it, I recommend starting with the first part. I want to clarify that this article is not about the optimal choice of subjects for the Unified State Exam (EGE) or the debate between 'jocks' and 'nerds.' It largely focuses on integrity and efficiency. At the end […]

The most important thing about Wi-Fi 6. No, seriously

Hello. According to Einstein's simplicity theory, the main indicator of understanding a subject is the ability to explain it as simply as possible. In this post, I will try to explain the functioning of just one detail of the new standard as clearly and thoroughly as possible, which for some reason the Wi-Fi Alliance deems unworthy of mention in the infographic about the new features of Wi-Fi 6, although it is, as we will soon […]

Simplifying work with Check Point API using Python SDK

The full power of interacting with APIs is revealed when used together with programming code, allowing for the dynamic formation of API requests and tools for analyzing API responses. However, the Python Software Development Kit (hereinafter — Python SDK) for Check Point Management API remains relatively unnoticed, which is a pity. It significantly simplifies life for developers and automation enthusiasts. Python […]

The Brave browser has been caught inserting referral links when navigating to certain URLs.

The Brave Browser, a product based on Chromium, has been caught by users inserting referral links when visiting certain websites. For instance, a referral code is added to the link when navigating to 'binance.us', turning the original link into 'binance.us/en?ref=35089877'. Similarly, the browser behaves this way with some other cryptocurrency-related websites. According to available data, the referral link […]

Release of Kuesa 3D 1.2, a package designed to simplify the development of 3D applications on Qt.

The company KDAB has published the release of the Kuesa 3D 1.2 toolkit, providing resources for creating 3D applications based on Qt 3D. The project aims to facilitate collaboration between designers creating models in packages like Blender, Maya, and 3ds Max, and developers writing application code using Qt. Working with models is separated from coding, and Kuesa acts as a bridge […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster