Category: Blog

Research: Six-digit PIN codes are no better for security than four-digit ones

A German-American team of researchers, in collaboration with volunteers, tested and compared the security of six-digit and four-digit PIN codes for locking smartphones. In case of loss or theft of a smartphone, it is good to be assured that the information is protected against hacking. Is this really the case? Philipp Markert from the Horst Görtz Institute for IT Security at Ruhr University Bochum and Maximilian Golla from the Security Institute […]

Here we go again: fresh patches for Windows 10 have caused new errors

A few days ago, information emerged about a vulnerability in Microsoft's SMBv3 protocol that allows the infection of groups of computers. According to the Microsoft MSRC portal, this poses a risk to PCs running Windows 10 version 1903, Windows Server version 1903 (Server Core installation), Windows 10 version 1909, and Windows Server version 1909 (Server Core installation). In addition, the protocol is used in Windows […]

Release of mail client Geary 3.36

The release of the Geary mail client 3.36, designed for use in a GNOME environment, has been announced. Originally, the project was founded by the Yorba Foundation, which created the popular photo manager Shotwell, but later development was taken over by the GNOME community. The code is written in Vala and is distributed under the LGPL license. Ready-made builds will soon be prepared for Ubuntu (PPA) and […]

The internal mechanisms of PostgreSQL allow it to be very fast in some situations and 'not so much' in others.

Delta Chat is a messenger that operates without its own servers, using email for message exchange. Messages are automatically encrypted using the Autocrypt standard, which is based on OpenPGP. Opportunistic encryption is used by default, but verified contacts can be created by scanning a QR code from another device. New features in version 1.2 include the ability to pin chats and non-blocking addition of contacts using a QR code. […]

PostgreSQL Antipatterns: fighting the hordes of "dead" records

The peculiarities of how PostgreSQL's internal mechanisms operate allow it to be very fast in some situations and 'not so much' in others. Today, we will focus on a classic example of the conflict between how the DBMS operates and what developers do with it—UPDATE vs the principles of MVCC. A brief overview from an excellent article: When a row is modified by an UPDATE command, effectively two operations are performed: […]

MVCC-3. String versions

So, we discussed the issues related to isolation and made a digression about organizing data at a low level. Finally, we have reached the most interesting part—row versions. Header: As we have stated, each row can simultaneously exist in the database in several versions. One version must be distinguishable from another. To achieve this, each version has […]

WhatsApp will introduce a message auto-delete feature

Recently, the popular messaging app WhatsApp received support for dark mode, but this does not mean that developers have stopped working on new features. However, this time users can expect something that has been available for years in competing messengers. This refers to the automatic deletion of messages. The beta versions of WhatsApp 2.20.83 and 2.20.84 introduced the option to set […]

DDR4 memory chips remain vulnerable to RowHammer attacks, despite added protections

A group of researchers from the Vrije Universiteit Amsterdam, the Swiss Federal Institute of Technology Zurich, and Qualcomm conducted a study on the effectiveness of the defense mechanisms against RowHammer attacks implemented in modern DDR4 memory chips, which can alter the contents of individual bits in dynamic RAM (DRAM). The results were disheartening, as DDR4 chips from major manufacturers remain vulnerable (CVE-2020-10255). The RowHammer vulnerability allows for the corruption of specific contents […]

Wine 5.4

On March 13, Wine 5.4 was released. Wine is a compatibility layer for running Windows applications on POSIX-compliant operating systems, translating Windows API calls to POSIX calls on the fly instead of emulating Windows logic like a virtual machine. Besides more than 34 bug tracker fixes, the new release includes: Unicode updated to version 13 Built-in programs now use the UCRTBase C runtime Improved support […]

Cryptographic ARM based on open key standards for the Android platform

It's time to demonstrate how the cryptographic ARM based on public key standards cryptoarmpkcs works on one of the mobile platforms, namely Android. The concept laid out during the development of the cryptoarmpkcs utility is that the user should experience minimal inconvenience when creating and verifying electronic signatures. That's why we propose as the key carrier for the personal certificate […]

Vulnerability in the Bluez Bluetooth stack

A vulnerability (CVE-2020-0556) has been discovered in the open Bluetooth stack BlueZ, which is used in Linux distributions and Chrome OS, potentially allowing an attacker to access the system. Due to improper access validation in the implementation of Bluetooth profiles HID and HOGP, the vulnerability permits denial of service or privilege escalation when connecting a malicious Bluetooth device without completing the device bonding process. The malicious Bluetooth device […]

Update of the distribution for creating home theaters LibreELEC 9.2.1

The release of LibreELEC 9.2.1, a fork of the OpenELEC distribution for creating home theaters, has been published. The user interface is based on the Kodi media center. Images are prepared for loading from USB drives or SD cards (32- and 64-bit x86, Raspberry Pi 1/2/3/4, and various devices with Rockchip and Amlogic chips). The new version adds a section in the configurator for setting up VPN use […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster