Category: Blog

A malicious package bb-builder has been detected in the NPM repository. NPM release 6.11

NPM repository administrators have blocked the bb-builder package, which contained a malicious insertion. The malicious package had gone unnoticed since last August. Over the course of a year, the attackers managed to release 7 new versions, which were downloaded around 200 times. During the package installation, an executable file for Windows was launched, transmitting confidential information to an external host. Users who installed the package are advised to urgently change all existing […]

/etc/resolv.conf для Kubernetes pods, опция ndots:5, как это может негативно сказаться на производительности приложения

Not too long ago, we launched Kubernetes 1.9 on AWS using Kops. Yesterday, during the smooth rollout of new traffic to the largest of our Kubernetes clusters, I started noticing unusual DNS name resolution errors logged by our application. This had been discussed for quite a while on GitHub, so I too decided to investigate. In the end, I realized that in […]

10 interesting talks from hacker conferences

I've been thinking that it would be great to cover events from international conferences. Not just in a general overview, but to discuss the most interesting talks. I present to your attention the first hot ten. – Expecting a friendly tandem of IoT attacks and ransomware – "Open your mouth, say 0x41414141": An attack on medical cyber infrastructure – A toothy exploit at the tip of the stick of contextual advertising […]

Optical Telegraph, Microwave Network, and Tesla Tower: Unusual Communication Towers

We are all accustomed to communication towers and masts looking dull or unappealing. Fortunately, there have been, and still are, interesting and unusual examples of these primarily utilitarian structures throughout history. We’ve compiled a small selection of communication towers that we find particularly noteworthy. Stockholm Tower Let's start with the 'trump card' — the most unusual and oldest structure in […]

Cerebras — an AI processor of incredible size and capabilities

The announcement of the Cerebras processor — the Cerebras Wafer Scale Engine (WSE) or Cerebras silicon wafer scale engine — took place during the annual Hot Chips 31 conference. Looking at this silicon monster, it's not even the fact that they managed to produce it in reality that amazes. It’s the boldness of the concept and the effort of the developers who dared to design a chip with an area of 46,225 square millimeters with sides […]

15 vulnerabilities found in USB drivers from the Linux kernel

Andrei Konovalov from Google discovered 15 vulnerabilities in USB drivers provided in the Linux kernel. This is the second batch of issues found during fuzz testing — in 2017, this researcher discovered another 14 vulnerabilities in the USB stack. These issues could potentially be exploited when connecting specially crafted USB devices to a computer. An attack is possible with physical access to the hardware and […]

Alcohol and Mathematics

This is a complex, controversial, and painful topic. But I want to try to discuss it. I can't share anything great and brilliant about myself, so I will refer to the quite sincere (amidst a lot of hypocrisy and moralizing on this issue) speech of mathematician, Doctor of Sciences, Alexey Savvateev. (The video itself is at the end of the post.) 36 years of my life have been closely associated with alcohol. […]

End-stage alcoholism

Moderator's comment. This article was in the Sandbox and was rejected during pre-moderation. However, an important and complex question was raised in the article today. This post reveals signs of personality disintegration and may be useful to those who, as the author of the mentioned article put it, are a meter from the waterfall. Therefore, it was decided to publish it. Hello, dear readers! I am writing to you in a state of […]

BIZERBA VS MES. Where should manufacturers invest?

1. The cost of a labeling machine for weight products is comparable to the cost of implementing an MES system project. For simplicity, let’s assume that both cost 7 million rubles. 2. The payback period for labeling lines is fairly easy to calculate, making it clear who bears the costs: A team of 4 labelers labels approximately 5 tons per shift; with an automated line, supported by 3 […]

Futhark v0.12.1

Futhark is a programming language that supports parallelism and belongs to the ML family. Added: The internal representation of parallel constructs has been revised and optimized. With few exceptions, this may significantly impact performance. There is now support for structurally typed sum types and pattern matching. However, there are still some issues with sum-type arrays that contain arrays themselves. Compilation time has been significantly reduced […]

Remote DoS vulnerability in the FreeBSD IPv6 stack

A vulnerability (CVE-2019-5611) has been fixed in FreeBSD that allows the kernel to crash (packet-of-death) via specially fragmented ICMPv6 MLD (Multicast Listener Discovery) packets. The problem is caused by a lack of necessary checking in the m_pulldown() call, which can lead to the return of non-continuous mbuf chains, contrary to the caller's expectations. The vulnerability has been fixed in updates 12.0-RELEASE-p10, 11.3-RELEASE-p3, and 11.2-RELEASE-p14. As a workaround to protect, you can […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster