Blog Section
The release of project QEMU 4.2 has been announced. As an emulator, QEMU allows you to run a program compiled for one hardware platform on a system with a completely different architecture, for example, running an application for ARM on an x86-compatible PC. In virtualization mode, QEMU's performance for executing code in an isolated environment is close to that of a native system due to direct instruction execution on the CPU and leveraging […]
Hello, habr. If someone is running the graphite-web system and has encountered performance issues with the whisper storage (IO, disk space consumption), the likelihood of having looked at ClickHouse as a replacement should approach one. This statement implies that a third-party implementation, such as carbonwriter or go-carbon, is already being used as the metric receiver. ClickHouse addresses […]
Regarding the searches at nginx's office and the arrest of Igor Sysoev, a detailed analysis has already been made on Habr. I'm discussing the same topic, but from a different perspectiveā¦ What is happening, folks? Look at how journalists have rallied behind Golunov. Are we any worse? This is utter madness, or just pure disgrace. It seems like the lines have been blurred, […]
Translated note: Service mesh is a phenomenon that still lacks a stable translation into Russian (over 2 years ago, we suggested the term 'service grid', and later some colleagues began promoting the combination 'service sieve'). Ongoing discussions about this technology have led to a situation where the marketing and technical components are too closely intertwined. This remarkable […]
In the previous part of the "Introduction to SSD" series, we covered the history of disk drives. The second part will discuss the interfaces used to interact with storage devices. Communication between the processor and peripheral devices occurs according to predefined agreements known as interfaces. These agreements regulate the physical and software levels of interaction. An interface is a set of tools, methods, and rules governing the interaction between system elements. […]
One of the main tasks in building large-scale Zimbra OSE infrastructures is effective load balancing. In addition to enhancing the service's redundancy, load balancing is essential for ensuring consistent responsiveness across all users. To address this task, load balancers ā both software and hardware solutions ā are employed to redistribute requests among servers. Among these, there are both very […]
On December 9, the latest version of Kubernetes was released ā 1.17. Its motto is 'Stability,' with many features achieving GA status and a number of deprecated features being removed... As always, our favorite Action Required section of the CHANGELOG-1.17.md file demands attention. Let's get to work... Attention, Storage! Live kubelet updates in version 1.17 are not supported due to changes in the path […]
Corrective releases for the distributed version control system Git 2.24.1, 2.23.1, 2.22.2, 2.21.1, 2.20.2, 2.19.3, 2.18.2, 2.17.3, 2.16.6, 2.15.4, and 2.14.6 have been published. These releases fix vulnerabilities that could allow an attacker to overwrite arbitrary paths in the file system, initiate remote code execution, or overwrite files in the '.git/' directory. Most issues were identified by the Microsoft Security Response Center, with five of the eight vulnerabilities […]
Intel has released a microcode update that addresses a vulnerability (CVE-2019-14607) allowing an attacker to manipulate the dynamic voltage and frequency scaling mechanism in the CPU, potentially leading to corruption of data stored in memory cells, including areas used for computations in Intel SGX isolated enclaves. This attack is named Plundervolt and could potentially allow a local user to escalate their privileges in the system, triggering […]
During the work on the remaster of the popular strategy Command & Conquer, Electronic Arts discovered that it had lost the original voice recordings of the narrator from the first game in the franchise. As a result, all dialogues had to be re-recorded. For authenticity, the publisher involved Kia Huntzinger, who provided the voice in the first Command & Conquer. It was her voice that commented on the in-game events. […]
I conducted penetration testing using PowerView and utilized it to extract user information from Active Directory (AD). At that time, I focused on collecting information about group membership, and then used that information to navigate through the network. In any case, AD contains sensitive employee data, some […]
Once again, everyone is discussing the 'first in Russia' SuperApp, this time from Tinkoff. Recently marked the anniversary of one of the first SuperAppsāthe 'Gosuslugi Moscow' application, where you can pay for parking and fines, submit utility readings, make a doctorās appointment, and check your child's homework and grades. Following their lead, federal government services added the word 'super' (super-services […]