Blog Section
Greetings! Welcome to the eleventh and final lesson of the Fortinet Getting Started course. In the last lesson, we covered the key points related to device administration. Now, to conclude the course, I want to introduce you to the licensing scheme for FortiGate and FortiAnalyzer products, which often raises quite a few questions. As usual, the lesson will be presented in two formats — in […]
Greetings! Welcome to the tenth anniversary lesson of the Fortinet Getting Started course. In the last lesson, we explored the main mechanisms for logging and reporting, as well as got acquainted with the FortiAnalyzer solution. As a conclusion to the practical lessons of this course, I want to introduce you to various technologies that may be useful for administering the FortiGate firewall. The necessary theory as well as practical parts […]
The developers of the Android-x86 project, which is developed by an independent community working on the port of the Android platform for the x86 architecture, have published the first stable release of the build based on Android 9 (android-9.0.0_r53). The build includes fixes and enhancements that improve the operation of Android on the x86 architecture. Universal Live builds of Android-x86 9 are prepared for x86 32-bit (706 MB) and x86_64 […]
Researchers from Eset revealed at the ongoing RSA 2020 conference details about a vulnerability (CVE-2019-15126) in Cypress and Broadcom wireless chips that allows for decrypting intercepted Wi-Fi traffic secured using the WPA2 protocol. The vulnerability has been given the codename Kr00k. The issue affects FullMAC chips (Wi-Fi stack implemented on the chip side rather than the driver), used in a wide range of […]
Recently, we faced a situation where several antivirus programs (Kaspersky, Quttera, McAfee, Norton Safe Web, Bitdefender, and several lesser-known ones) began blocking our site. Investigating the situation led me to understand that getting on a blocklist is extremely easy, requiring just a few complaints (even without justification). I will describe the issue in more detail below. The problem is quite serious, as right now almost all […]
The article's translation is specially prepared for students of the 'Data Engineer' course. In the past few weeks, we, along with Nong Li, have added a binary streaming format to Apache Arrow, complementing the existing random access / IPC file format. We have implementations in Java and C++, as well as Python bindings. In this article, I will explain how the format works and show how to achieve […]
Customized development is practically impossible without transferring confidential information (CI) to the developer. Otherwise, how can it be considered customized? The larger the client, the more complicated it is to agree on the terms of the confidentiality agreement. A standard contract is almost guaranteed to be excessive. Ultimately, along with the minimum amount of information necessary for work, you might end up with a lot of obligations – to store and protect it as your own […]
Researchers from Exodus Intelligence demonstrated a weakness in the vulnerability patching process in the Chrome/Chromium codebase. The issue stems from the fact that Google discloses that the patches are related to security issues only after their release but includes code to fix the vulnerability in the V8 engine in the repository prior to the release. For some time, the patches undergo testing […]
Researchers from Stanford University, the University of California, San Diego, and the University of Texas at Austin have developed the RLBox toolkit, which can be used as an additional layer of isolation to block vulnerabilities in function libraries. RLBox aims to address the security issue of untrusted third-party libraries that are not controlled by developers, but vulnerabilities in which can compromise the main project. Mozilla plans […]
Kyiv Go Meetup May 2018: Moderator: – Hello everyone! Thank you for gathering here! Today we have two official speakers – Lyosha and Vanya. There will be two more if we have enough time. The first speaker is Alexey Grachev, who will tell us about GopherJS. Alexey Grachev (hereafter – AG): – I am a Go developer, and I write web services […]
If your company is just starting to implement DevOps or CI/CD tools, it may be useful to familiarize yourself with the most common mistakes to avoid repeating them and stepping on others' toes. The Mail.ru Cloud Solutions team has translated the article Avoid These Common Pitfalls When Transitioning to CI/CD by Jasmine Chokshi with additions. Unpreparedness for cultural and process change If you look at […]
Hello, my name is Kostya Kramlikh, I am the lead developer of the Virtual Private Cloud division at Yandex.Cloud. I work with virtual networks, and, as you might guess, in this article I will discuss the structure of Virtual Private Cloud (VPC) in general and virtual networks in particular. You will also find out why we, the developers of the service, value feedback from our users. But about […]