Blog Section
The issue was that a local or remote attacker could execute programs with system administrator privileges. Currently, there is no information that this vulnerability has already been exploited, but a POC exists. On September 6th, patches will be published in version 4.92.2 in the Git repository and packages will be available on the FTP server. Source: linux.org.ru
A minor release of GNU Emacs 26.3 has taken place — a text editor from the Emacs family. Change list: An option help-enable-completion-auto-load has been added, allowing the disabling of the feature introduced in Emacs 26.1 that loads files during auto-completion via C-h f and C-h v; The recently designated Unicode point 'U+32FF' has been added to the Emacs Unicode character database; This is primarily a maintenance release that contains […]
Developers of the free cloud platform Nextcloud reported that an increasing number of institutions and companies from the European Union are moving away from centralized cloud systems in favor of private cloud storage deployed on their own infrastructure. Mainly, European organizations are migrating from public cloud systems to comply with GDPR regulations and due to legal issues arising from the application of the US Cloud Act, which defines […]
Developers of the Grsecurity project shared an educational story demonstrating how careless removal of compiler warnings can lead to vulnerabilities in the code. At the end of May, a fix for a new exploitation vector of the Spectre vulnerability was proposed for the Linux kernel via the ptrace system call. During the patch testing, the developers noticed that the compiler emitted a warning about mixing code and definitions […]
How often do you go for interviews? If you are an adult and established in your profession, you likely don't have time to idly wander through other offices searching for a better opportunity. The situation becomes even more complicated if you're an introvert who simply cannot tolerate meetings with unfamiliar people. What should you do? According to a study by the NAIF analytical center, the most common way to search for a job […]
Hello! My name is Evgeniya Goleva, I presented at TeamLeadConf with a talk about feedback and want to share with you its unofficial transcript. I managed to teach engineers to provide feedback much better than they did before under the guise of a completely different project. This required not only a long and thorough explanation of 'why and how' but also […]
Hello! My name is Evgeniya Goleva, I presented at TeamLeadConf with a talk about feedback and want to share with you its unofficial transcript. I managed to teach engineers to provide feedback much better than they did before under the guise of a completely different project. This required not only a long and thorough explanation of 'why and how' but also […]
Conceiving the development of a cloud helpdesk system in 2018 seemed to be an unwise idea at first glance — on the surface, the market exists, there are domestic and foreign solutions, and plenty of custom systems as well. To think of developing a new system when you already have a large CRM development and over 6,000 'live' and active clients who constantly need something — that’s a significant resource […]
Today we will discuss router and switch password recovery, updating, reinstalling, and restoring IOS, as well as the Cisco licensing system for the IOSv15 operating system. These are very important topics related to network device management. How can you recover a password? You might ask why this might be necessary. Suppose you have configured a device and set all the necessary passwords: for VTY, for the console, […]
Transferring data and applications to the cloud presents a new challenge for corporate SOCs, which are not always prepared to monitor external infrastructure. According to NetSkope, the average enterprise (presumably still in the U.S.) uses 1,246 different cloud services, which is 22% more than last year. 1,246 cloud services!!! 175 of them are related to HR services, 170 are connected to marketing, 110 […]
In recent years, news feeds have been inundated with reports of newly emerging distributed computing networks that seem to appear out of nowhere, attempting to solve a variety of tasks — making cities smart, saving the world from copyright violators, or on the contrary, secretly transmitting information or resources, escaping from government control in one sphere or another. Regardless of the area, all […]
I dedicate this post to those individuals who lied on their certificates, which almost led us to install Bengal lights in our halls. The story is more than four years old, but I publish it now because the NDA has expired. Back then, we realized that we had nearly completely loaded the data center (which we rent out), and its energy efficiency didn't seem to improve much. Previously, the hypothesis […]