Category: Blog

Automation of flow delivery in Apache NiFi

Hello everyone! The task is as follows—there is a flow represented in the image above, which needs to be rolled out across N servers with Apache NiFi. The flow is a test that generates a file and sends it to another NiFi instance. Data transmission occurs using the NiFi Site to Site protocol. NiFi Site to Site (S2S) is a secure, easily configurable way to transfer […]

Eco-Fiction on Planet Protection

Cli-Fi (climate fiction, derived from Sci-Fi, science fiction) began to be discussed in 2007, although fictional works addressing ecological issues were published earlier. Cli-Fi is a very interesting subgenre of science fiction, based on theoretically possible or already existing technologies and scientific advancements that could dramatically spoil our lives. Eco-fiction raises issues of […]

Batch Request Processing Problems and Solutions (Part 1)

Nearly all modern software products consist of multiple services. Often, long response times between service channels become a source of performance issues. The standard solution to this kind of problem is to package several inter-service requests into one bundle, known as batching. If you are using batching, you may not be satisfied with its results in terms of performance or code clarity. This method is not so simple […]

Coreboot 4.11 Release

Coreboot 4.11 has been released — a free alternative to proprietary UEFI/BIOS firmware used for the initial hardware initialization before handing over control to a payload, such as SeaBIOS or GRUB2. Coreboot is very minimalist, and it also provides extensive options for embedding various payloads like the coreinfo utility for detailed system information and the game Tetris, as well as floppy disk operating systems: Kolibri, FreeDOS, MichalOS, Memtest, […]

Vulnerability in the Unbound DNS server allowing remote code execution

A vulnerability (CVE-2019-18934) has been identified in the Unbound DNS server, which can lead to the attacker's code execution upon receiving specially crafted responses. Systems are only affected when Unbound is built with the ipsec module ("—enable-ipsecmod") and ipsecmod is enabled in settings. The vulnerability has been present since version 1.6.4 and has been fixed in the Unbound 1.9.5 release. This vulnerability arises from the passing of unescaped characters when calling the shell command ipsecmod-hook, […]

Oracle Solaris 11.4 SRU15 Update

An update for the Solaris 11.4 operating system, SRU 15 (Support Repository Update), has been released, offering a series of additional fixes and improvements for the Solaris 11.4 branch. To install the fixes proposed in the update, simply execute the command 'pkg update'. In this release: Oracle Explorer has been updated to version 19.4, a toolkit for building detailed profiles of system configuration and status; new modules have been added […]

Mozilla expands its bug bounty program for identifying vulnerabilities

Mozilla has announced the expansion of its initiative to offer monetary rewards for identifying security issues in infrastructure elements related to the development of Firefox. The bounty amounts for discovering vulnerabilities on Mozilla's websites and services have been doubled, and the bounty for identifying vulnerabilities that could lead to code execution on critical sites has been increased to $15,000 […]

Google wants to move Android to the main Linux kernel

The mobile operating system Android is based on the Linux kernel, but it is not standard; it's heavily modified. It includes 'upgrades' from Google, chip manufacturers Qualcomm and MediaTek, as well as OEM producers. Now, reportedly, the 'corporation of good' intends to transition its system to the main version of the kernel. At this year's Linux Plumbers Conference, Google engineers conducted […]

Microsoft is testing the integration of Google services with Outlook.com

Microsoft plans to integrate several Google services with its email service Outlook.com. Some time ago, Microsoft began testing the integration of Gmail, Google Drive, and Google Calendar on certain accounts, as shared by one of the participants in this process on Twitter. During the setup, users need to link their Google and Outlook.com accounts, after which Gmail, Google […]

Windows 10X will combine desktop and mobile tasks

Recently, Microsoft introduced a new operating system called Windows 10X. According to the developer, it is based on the regular 'ten', but it also differs significantly from it. In the new OS, the classic 'Start' menu will be removed, along with other changes. However, the main innovation will be the unification of the desktop and mobile versions of the OS. And while it is still unclear what exactly is in store […]

The functionality of modern application protection systems (WAF) should be much broader than the list of vulnerabilities from the OWASP Top 10.

Retrospective Scope, composition, and structure of cyber threats to applications are rapidly evolving. For many years, users accessed web applications over the internet using popular web browsers. At any given moment, it was necessary to support 2-5 web browsers, and the set of development and testing standards for web applications was fairly limited. For instance, almost all databases were built using SQL. To […]

JSON-RPC? Take a clever REST approach

I’m sure the title sparked a healthy reaction—"here we go again..." But allow me to capture your attention for 5-10 minutes, and I’ll try not to betray your expectations. The structure of the article will be as follows: a stereotypical statement is taken, and the "nature" of the stereotype’s origin is explored. I hope this will allow you to look at your data exchange paradigm choices in your projects from a new angle. To […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster