Blog Section
ReversingLabs has published results from an analysis of type squatting in the RubyGems repository. Type squatting is typically used to distribute malicious packages, designed to trick inattentive developers who might make a typo while searching or overlook the differences. The study identified over 700 packages whose names are similar to popular packages and differ only by minor details, such as replacing similar letters or using […]
The rebuilderd toolkit allows for independent verification of binary packages in the distribution by deploying a continuously running build process that checks the downloaded packages against those obtained from rebuilding on a local system. The toolkit is written in Rust and is distributed under the GPLv3 license. Currently, rebuilderd only has experimental support for verifying packages from Arch Linux, but soon […]
Or how to get beautiful badges for your project in a relaxing evening of coding. Every developer with at least one pet project probably experiences the itch for beautiful badges displaying statuses, code coverage, and package versions in NuGet at some point. This itch led me to write this article. In the process of preparing for it, I […]
Hello, Habr, my name is Sasha. After 10 years of working as an engineer in Moscow, I decided to make a radical change in my life—I bought a one-way ticket and moved to Latin America. I didn't know what awaited me, but I must admit, it has become one of my best decisions. Today, I want to share what I encountered over three years in […]
The ipfw packet filter has fixed two vulnerabilities in the TCP options parsing code caused by improper data checks in processed network packets. The first vulnerability (CVE-2019-5614) when processing specifically crafted TCP packets could lead to memory access outside the allocated mbuf buffer, while the second (CVE-2019-15874) could result in accessing already freed memory areas (use-after-free). An analysis of the relevance of the identified issues for […]
A corrective release of the OpenSSL cryptographic library 1.1.1g is available, which addresses a vulnerability (CVE-2020-1967) that leads to denial of service when attempting to negotiate a TLS 1.3 connection with a server or client controlled by an attacker. The vulnerabilities have been assigned a high severity level. The issue manifests only in applications using the SSL_check_chain() function and causes a process crash when incorrectly using the TLS extension 'signature_algorithms_cert'. In particular, […]
The GNU Shepherd 0.8 service manager (formerly dmd) is now available, developed by the GNU Guix System distribution as a supporting dependency alternative to the SysV-init initialization system. The managing daemon and Shepherd utilities are written in Guile (one of the implementations of the Scheme language), which is also used to define service settings and launch parameters. Shepherd is already being used in the GuixSD GNU/Linux distribution and […]
PyTorch, a popular machine learning framework, has been updated to version 1.5.0. This release includes several major additions and API improvements, among which is the stabilization of the C++ API, previously considered experimental. Users can now easily port their models from the Python API to the C++ API. The torch.distributed.rpc package has been stabilized, providing extensive capabilities in distributed […]
I invite you to review the transcript of Georgy Rylov's report from early 2020, "WAL-G: New Opportunities and Community Expansion." Maintainers of open-source projects face numerous challenges as they grow. How to write an increasing number of required features, fix more issues, and keep up with more pull requests? Using WAL-G (a backup tool for PostgreSQL) as an example, I will discuss how we addressed these […]
It is hard to imagine the modern world without an abundance of media content, which also includes audio and video data. Just a short while ago, a collection of MP3 files was the dream. Today, 4K video files are seen as something commonplace. All this media content needs to be created, hosted somewhere, and then made accessible. […]
All Raspberry Pi 4 owners who wish to indulge in the aesthetics of Windows XP can now fulfill their desire thanks to a hobbyist-built Linux distribution named Raspbian XP Professional. The operating system features a design that closely resembles the classic Microsoft OS, including the Start menu, icons, and many other interface elements. However, since the operating system is based on Linux, it cannot run applications, […]
After a year of development, a new stable branch of the high-performance HTTP server and multi-protocol proxy server nginx 1.18.0 has been released, which incorporates changes accumulated in the main branch 1.17.x. Going forward, all updates in the stable branch 1.18 will focus on fixing serious bugs and vulnerabilities. Soon, the main branch nginx 1.19 will be established, within which […]