Blog Section
Guix System is a Linux distribution based on the GNU Guix package manager. The distribution provides advanced package management features, such as transactional updates and rollbacks, reproducible build environments, management of unprivileged packages, and profiles for each user. The latest release of the project is Guix System 1.1.0, which introduces a range of new features and improvements, including the ability to perform large-scale deployments […]
I present to you a tutorial for generating access to a Kubernetes cluster using Dex, dex-k8s-authenticator, and GitHub. A local meme from the Russian-speaking Kubernetes chat on Telegram Introduction We use Kubernetes to create dynamic environments for our development and QA teams. Thus, we want to provide them access to the cluster for both the dashboard and kubectl. Unlike […]
Hello everyone! Today I would like to share a small example of automating the process of creating requests for new employee onboarding using Microsoft SharePoint, PowerApps, Power Automate, and Teams. When implementing this process, there's no need to purchase separate user plans for PowerApps and Power Automate; an Office365 E1/E3/E5 subscription will suffice. On the SharePoint site, we will create lists and columns, PowerApps […]
In 2013, IBS, which seemed to be establishing the Data Division at the time, asked me to create a brain dump (exclusively based on my experience interacting with corporate oil and gas clients) regarding the problematic area of Big Data and Data in general. I stumbled upon it after 7 years and found it amusing. Some points are obvious. Some turned out to be not entirely accurate, but… 7 […]
A major update for the Windows 10 platform is expected from Microsoft in May of this year, which will bring new features along with fixes. According to reports from network sources, Microsoft is currently testing a series of changes for the Windows Update Center, which may be rolled out in the future. Based on available information, Microsoft may significantly change the way new features are delivered in Windows 10. […]
A browser update for Chrome 81.0.4044.113 has been released, addressing a critical vulnerability that allows bypassing all layers of browser protection and executing code outside the sandbox environment. Details of the vulnerability (CVE-2020-6457) have not yet been disclosed, but it is known to be caused by accessing a freed memory block in the speech recognition component (by the way, the last critical vulnerability […]
openITCOCKPIT is a multi-client PHP-based interface for managing Nagios and Naemon monitoring systems. The system aims to create the simplest interface possible for monitoring complex IT infrastructures. Moreover, openITCOCKPIT offers a solution for monitoring remote systems (Distributed Monitoring), managed from a single centralized point. Key changes: New backend, new design, and new features. Custom monitoring agent — […]
Roman Gilg, one of the active developers of Kwin and Xwayland, presented a fork of the Kwin window manager called KwinFT (Fast Track), as well as a completely redesigned version of the Kwayland library called Wrapland, which is decoupled from Qt. The goal of the fork is to enable more active development of Kwin, increase the necessary functionality for Wayland, and optimize rendering. Classic Kwin suffers from […]
Have you ever experimented with code or system utilities in Linux in a way that protects the base system and avoids complete failure in case of errors in code that needs to run with root privileges? What about the need to test or launch a whole cluster of various microservices on a single machine? A hundred or even a thousand? […]
The translation of the article has been prepared in anticipation of the start of the course 'Pentest. Practical Penetration Testing.' Abstract Various types of security assessments, ranging from regular penetration testing and Red Team operations to hacking IoT/ICS devices and SCADA, involve working with binary network protocols, essentially intercepting and modifying network data between the client and the target. Network sniffing […]
Oracle has released a corrective update for the VirtualBox virtualization system 6.1.6, which includes 9 fixes. Corrective releases for VirtualBox 6.0.20 and 5.2.40 have also been issued simultaneously. The updates address 19 vulnerabilities, 7 of which are categorized as critical (CVSS above 8). This includes vulnerabilities exploited in attacks demonstrated at the Pwn2Own 2020 competition, allowing through […]
MyCrypto and PhishFort identified 49 malicious extensions in the Chrome Web Store catalog that sent private keys and passwords from cryptocurrency wallets to attackers' servers. The extensions were distributed using phishing advertising methods and were presented as implementations of various cryptocurrency wallets. They were based on the code of official wallets but included malicious modifications that sent private keys, recovery codes, and […]