ื ื•ืฉื: ื‘ืœื•ื’

ื’ื™ื•ืก ืœืœื™ืžื•ื“ื™ ืชื•ืืจ ืจืืฉื•ืŸ ื‘ืื•ื ื™ื‘ืจืกื™ื˜ืช ืกื ื˜ ืคื˜ืจืกื‘ื•ืจื’ ื‘ืชืžื™ื›ืช Yandex ื•-JetBrains

ื‘ืกืคื˜ืžื‘ืจ 2019, ืื•ื ื™ื‘ืจืกื™ื˜ืช ืžื“ื™ื ืช ืกื ื˜ ืคื˜ืจื‘ื•ืจื’ ืคื•ืชื—ืช ืืช ื”ืคืงื•ืœื˜ื” ืœืžืชืžื˜ื™ืงื” ื•ืžื“ืขื™ ื”ืžื—ืฉื‘. ื”ื”ืจืฉืžื” ืœืœื™ืžื•ื“ื™ ืชื•ืืจ ืจืืฉื•ืŸ ืžืชื—ื™ืœื” ื‘ืกื•ืฃ ื™ื•ื ื™ ื‘ืฉืœื•ืฉื” ืชื—ื•ืžื™ื: "ืžืชืžื˜ื™ืงื”", "ืžืชืžื˜ื™ืงื”, ืืœื’ื•ืจื™ืชืžื™ื ื•ื ื™ืชื•ื— ื ืชื•ื ื™ื" ื•"ืชื›ื ื•ืช ืžื•ื“ืจื ื™". ื”ืชื•ื›ื ื™ื•ืช ื ื•ืฆืจื• ืขืœ ื™ื“ื™ ืฆื•ื•ืช ื”ืžืขื‘ื“ื” ืขืœ ืฉื. P.L. Chebyshev ื™ื—ื“ ืขื POMI RAS, ืžืจื›ื– ืžื“ืขื™ ื”ืžื—ืฉื‘, Gazpromneft, JetBrains ื•ื—ื‘ืจื•ืช Yandex. ื”ืงื•ืจืกื™ื ืžื•ืขื‘ืจื™ื ืขืœ ื™ื“ื™ ืžื•ืจื™ื ื‘ืขืœื™ ืฉื, ืžื ื•ืกื™ื [...]

TCP SACK Panic - ืคืจืฆื•ืช ื”ืœื™ื‘ื” ื”ืžื•ื‘ื™ืœื•ืช ืœืžื ื™ืขืช ืฉื™ืจื•ืช ืžืจื—ื•ืง

ืขื•ื‘ื“ ื ื˜ืคืœื™ืงืก ืžืฆื ืฉืœื•ืฉ ื ืงื•ื“ื•ืช ืชื•ืจืคื” ื‘ืงื•ื“ ื”ืžื—ืกื ื™ืช ืฉืœ TCP. ื”ืคื’ื™ืขื•ืช ื”ื—ืžื•ืจื” ื‘ื™ื•ืชืจ ืžืืคืฉืจืช ืœืชื•ืงืฃ ืžืจื•ื—ืง ืœื’ืจื•ื ืœื‘ื”ืœืช ืœื™ื‘ื”. ืžืกืคืจ ืžื–ื”ื™ CVE ื”ื•ืงืฆื• ืœื ื•ืฉืื™ื ืืœื”: CVE-2019-11477 ืžื–ื•ื”ื” ื›ื—ื•ืœืฉื” ืžืฉืžืขื•ืชื™ืช, ื•-CVE-2019-11478 ื•-CVE-2019-11479 ืžื–ื•ื”ื™ื ื›ืžืชื•ื ื™ื. ืฉืชื™ ื”ืคื’ื™ืขื•ื™ื•ืช ื”ืจืืฉื•ื ื•ืช ืžืชื™ื™ื—ืกื•ืช ืœ-SACK (ืื™ืฉื•ืจ ืกืœืงื˜ื™ื‘ื™) ื•-MSS (ืžืงืกื™ืžื•ื [โ€ฆ]

ืžื—ื•ืœืœ ืกื™ืกืžืื•ืช ื•ืžืฆื‘ ื—ืกื™ืžืช ื”ืคืขืœื” ืื•ื˜ื•ืžื˜ื™ืช ืฉืœ ื•ื™ื“ืื• ื”ื•ื›ื ื• ืขื‘ื•ืจ Firefox 69

ื‘ื‘ื ื™ื™ื” ื”ืœื™ืœื™ืช ืฉืœ Firefox, ืฉืขืœ ื‘ืกื™ืกื ืชื™ื•ื•ืฆืจ ืžื”ื“ื•ืจืช Firefox 3 ื‘-69 ื‘ืกืคื˜ืžื‘ืจ, ื ื•ืกืคื” ื”ื˜ืžืขื” ืฉืœ ืžื—ื•ืœืœ ืกื™ืกืžืื•ืช, ื›ื“ื™ ืœืืคืฉืจ ืื•ืชื• ืขืœื™ืš ืœื”ื’ื“ื™ืจ ืืช ื”ืคืจืžื˜ืจ "signon.generation.available" ื‘- about:config. ืœืื—ืจ ื”ื”ืคืขืœื”, ื‘ืงื˜ืข ื ื™ื”ื•ืœ ืกื™ืกืžืื•ืช ืฉืœ ื”ืงื•ืคื™ื’ื•ืจื˜ื•ืจ, ื‘ื ื•ืกืฃ ืœืืคืฉืจื•ืช ืœืืคืฉืจ ื‘ืงืฉื” ืœืฉืžื™ืจืช ืกื™ืกืžืื•ืช, ืชื•ืคื™ืข ืืคืฉืจื•ืช ื”ืžืืคืฉืจืช ืœื”ืฆื™ื’ ื”ื ื—ื™ื” ืขื ื”ื•ื“ืขื” ืฉื ื•ืฆืจื” ืื•ื˜ื•ืžื˜ื™ืช [โ€ฆ]

Flash ื™ื•ืฉื‘ืช ื›ื‘ืจื™ืจืช ืžื—ื“ืœ ื‘-Firefox 69

ืžืคืชื—ื™ ืžื•ื–ื™ืœื” ื”ืฉื‘ื™ืชื• ืืช ื”ื™ื›ื•ืœืช ืœื ื’ืŸ ืชื•ื›ืŸ ืคืœืืฉ ื›ื‘ืจื™ืจืช ืžื—ื“ืœ ื‘ื‘ื ื™ื™ื” ืœื™ืœื™ืช ืฉืœ Firefox. ื”ื—ืœ ืž-Firefox 69, ื”ืžืชื•ื›ื ืŸ ืœ-3 ื‘ืกืคื˜ืžื‘ืจ, ื”ืืคืฉืจื•ืช ืœื”ืคืขืœืช ืคืœืืฉ ืœืฆืžื™ืชื•ืช ืชื•ืกืจ ืžื”ื’ื“ืจื•ืช ื”ืชื•ืกืฃ Adobe Flash Player ื•ื™ื•ื•ืชืจื• ืจืง ื”ืืคืฉืจื•ื™ื•ืช ืœื”ืฉื‘ื™ืช ืืช Flash ื•ืœืืคืฉืจ ืื•ืชื• ื‘ืื•ืคืŸ ืคืจื˜ื ื™ ืœืืชืจื™ื ืกืคืฆื™ืคื™ื™ื (ื”ืคืขืœื” ื‘ืœื—ื™ืฆื” ืžืคื•ืจืฉืช ) ืžื‘ืœื™ ืœื–ื›ื•ืจ ืืช ื”ืžืฆื‘ ืฉื ื‘ื—ืจ. ื‘ืกื ื™ืคื™ Firefox ESR [โ€ฆ]

Cloudflare ื”ืฆื™ื’ื” ืžื—ื•ืœืœ ืžืกืคืจื™ื ืืงืจืื™ื™ื ืžื‘ื•ื–ืจ

Cloudflare ื”ืฆื™ื’ื” ืืช ืฉื™ืจื•ืช League of Entropy, ื›ื“ื™ ืœื”ื‘ื˜ื™ื— ืืช ืคืขื•ืœืชื• ื ื•ืฆืจ ืงื•ื ืกื•ืจืฆื™ื•ื ืฉืœ ืžืกืคืจ ืืจื’ื•ื ื™ื ื”ืžืขื•ื ื™ื™ื ื™ื ืœืกืคืง ืžืกืคืจื™ื ืืงืจืื™ื™ื ื‘ืื™ื›ื•ืช ื’ื‘ื•ื”ื”. ื‘ื ื™ื’ื•ื“ ืœืžืขืจื›ื•ืช ืžืจื›ื–ื™ื•ืช ืงื™ื™ืžื•ืช, League of Entropy ืื™ื ื” ืžืกืชืžื›ืช ืขืœ ืžืงื•ืจ ืื—ื“ ื•ืžืฉืชืžืฉืช ื‘ืื ื˜ืจื•ืคื™ื” ืžืžืกืคืจ ื’ื ืจื˜ื•ืจื™ื ืœื ืงืฉื•ืจื™ื ื”ื ืฉืœื˜ื™ื ืขืœ ื™ื“ื™ ืžืฉืชืชืคื™ ืคืจื•ื™ืงื˜ ืฉื•ื ื™ื ื›ื“ื™ ืœื™ืฆื•ืจ ืจืฆืฃ ืืงืจืื™. [โ€ฆ]

ืฉื—ืจื•ืจ ืžืขืจื›ืช ื”ื”ืคืขืœื” DragonFly BSD 5.6

ื”ืฉื—ืจื•ืจ ืฉืœ DragonFlyBSD 5.6 ื–ืžื™ืŸ, ืžืขืจื›ืช ื”ืคืขืœื” ืขื ืœื™ื‘ื” ื”ื™ื‘ืจื™ื“ื™ืช ืฉื ื•ืฆืจื” ื‘ืฉื ืช 2003 ืœืฆื•ืจืš ืคื™ืชื•ื— ื—ืœื•ืคื™ ืฉืœ ืขื ืฃ FreeBSD 4.x. ื‘ื™ืŸ ื”ืžืืคื™ื™ื ื™ื ืฉืœ DragonFly BSD, ืื ื• ื™ื›ื•ืœื™ื ืœื”ื“ื’ื™ืฉ ืืช ืžืขืจื›ืช ื”ืงื‘ืฆื™ื ื”ืžื‘ื•ื–ืจืช HAMMER, ืชืžื™ื›ื” ื‘ื˜ืขื™ื ืช ื’ืจืขื™ื ื™ ืžืขืจื›ืช "ื•ื™ืจื˜ื•ืืœื™ื•ืช" ื›ืชื”ืœื™ื›ื™ ืžืฉืชืžืฉ, ื”ื™ื›ื•ืœืช ืœืฉืžื•ืจ ื ืชื•ื ื™ื ื‘ืžื˜ืžื•ืŸ ื•ืžื˜ื-ื ืชื•ื ื™ื ืฉืœ FS ื‘ื›ื•ื ื ื™ SSD, ืงื™ืฉื•ืจื™ื ืกืžืœื™ื™ื ืฉืœ ื•ืจื™ืื ื˜ื™ื ืจื’ื™ืฉื™ื ืœื”ืงืฉืจ, ื”ื™ื›ื•ืœืช ืœื”ืงืคื™ื ืชื”ืœื™ื›ื™ื [โ€ฆ]

ื™ื•ืžืŸ ื•ื™ื“ืื• ืฉืœ ืžืคืชื—ื™ Control: ืื™ืš ืœื”ืชืžื•ื“ื“ ืขื Hissing?

ื‘ืคืจืง ื”ืื—ืจื•ืŸ ืฉืœ ื™ื•ืžื ื™ ื”ืคื™ืชื•ื— ืฉืœ Control, ื”ื‘ืžืื™ ืžื™ืงืืœ ืงืกื•ืจื™ื ืŸ, ื”ืžืขืฆื‘ ื”ืจืืฉื™ ืคื•ืœ ืืจืช', ืžืขืฆื‘ ื”ืžืฉื—ืงื™ื ื”ื‘ื›ื™ืจ ืชื•ืžืก ื”ื“ืกื•ืŸ ื•ืžืขืฆื‘ ื”ืžืฉื—ืงื™ื ืกืจื’ื™ื™ ืžื•ื—ื•ื‘ ื—ืฉืคื• ืžื•ืœ ืฉื—ืงื ื™ ื”ืื•ื™ื‘ ื”ืขื™ืงืจื™ื™ื ื™ืชืžื•ื“ื“ื• ื‘ืกืจื˜ ื”ืืงืฉืŸ ื”ืงืจื•ื‘. ืขืœ ืคื™ ืกื™ืคื•ืจ ื”ืžืฉื—ืง, ืœืื—ืจ ืฉื”-His ื”ื•ืคื™ืข ื‘ื‘ื™ืช ื”ื™ืฉืŸ ื‘ื™ื•ืชืจ (ื’ื•ืจื“ ื”ืฉื—ืงื™ื ืฉื‘ื• [โ€ฆ]

ืคื’ื™ืขื•ื™ื•ืช ื‘ืขืจื™ืžื•ืช Linux ื•- FreeBSD TCP ื”ืžื•ื‘ื™ืœื•ืช ืœืžื ื™ืขืช ืฉื™ืจื•ืช ืžืจื—ื•ืง

ื ื˜ืคืœื™ืงืก ื–ื™ื”ืชื” ืžืกืคืจ ื ืงื•ื“ื•ืช ืชื•ืจืคื” ืงืจื™ื˜ื™ื•ืช ื‘ืขืจื™ืžื•ืช ื”-TCP ืฉืœ Linux ื•-FreeBSD ืฉืขืœื•ืœื•ืช ืœื”ืคืขื™ืœ ืžืจื—ื•ืง ืงืจื™ืกืช ืœื™ื‘ื” ืื• ืœื’ืจื•ื ืœืฆืจื™ื›ืช ืžืฉืื‘ื™ื ืžื•ื’ื–ืžืช ื‘ืขืช ืขื™ื‘ื•ื“ ืžื ื•ืช TCP ื‘ืขืœื•ืช ืžื‘ื ื” ืžื™ื•ื—ื“ (ื—ื‘ื™ืœืช-ืžื•ื•ืช). ื”ื‘ืขื™ื•ืช ื ื’ืจืžื•ืช ืžืฉื’ื™ืื•ืช ื‘ืžื˜ืคืœื™ื ืœื’ื•ื“ืœ ื”ืžืงืกื™ืžืœื™ ืฉืœ ื‘ืœื•ืง ื ืชื•ื ื™ื ื‘ื—ื‘ื™ืœืช TCP (MSS, Maximum segment size) ื•ืžื ื’ื ื•ืŸ ืื™ืฉื•ืจ ืกืœืงื˜ื™ื‘ื™ ืฉืœ ื—ื™ื‘ื•ืจื™ื (SACK, TCP Selective Acknowledgement). CVE-2019-11477 (SACK Panic) [โ€ฆ]

ืคื™ื™ืกื‘ื•ืง ืชืฉื™ืง ืืช ืืจื ืง ื”ืžื˜ื‘ืขื•ืช ื”ืงืจื™ืคื˜ื• ืฉืœ Calibra ื‘-2020

ืื—ืจื™ ื—ื•ื“ืฉื™ื ืฉืœ ืฉืžื•ืขื•ืช ื•ืกืคืงื•ืœืฆื™ื•ืช, ืคื™ื™ืกื‘ื•ืง ืกื•ืฃ ืกื•ืฃ ื”ืคื›ื” ืืช ื–ื” ืœืจืฉืžื™ ืœื’ื‘ื™ ืชื•ื›ื ื™ื•ืชื™ื” ืœื”ื™ื›ื ืก ืœืขื•ื’ืช ื”ืžื˜ื‘ืขื•ืช ื”ืงืจื™ืคื˜ื•ื’ืจืคื™ื™ื. ืื ื—ื ื• ืžื“ื‘ืจื™ื ืขืœ ื”ืืจื ืง ื”ื“ื™ื’ื™ื˜ืœื™ ืฉืœ Calibra, ืฉื™ื™ื‘ื ื” ืขืœ ื‘ืกื™ืก ื”ืžื˜ื‘ืข ื”ืงืจื™ืคื˜ื•ื’ืจืคื™ ื”ื—ื“ืฉ Libra. Calibra, ื—ื‘ืจืช ื‘ืช ืฉืœ ืคื™ื™ืกื‘ื•ืง, ื ื•ืขื“ื” ืœืกืคืง ืฉื™ืจื•ืชื™ื ืคื™ื ื ืกื™ื™ื ืฉื™ืืคืฉืจื• ืœืื ืฉื™ื ืœื’ืฉืช ื•ืœื”ืฉืชืชืฃ ื‘ืจืฉืช ืžืื–ื ื™ื™ื. ืจืื•ื™ ืœืฆื™ื™ืŸ ื›ื™ [โ€ฆ]

ื”ื‘ื™ื˜ืงื•ื™ืŸ ืขื‘ืจ ื”ืฉื ื” 9000 ื“ื•ืœืจ ืœืจืืฉื•ื ื”

ื‘ื™ื•ื ืจืืฉื•ืŸ ืฉืขื‘ืจ, ื”ื‘ื™ื˜ืงื•ื™ืŸ ืขื‘ืจ ื”ืฉื ื” 9000 ื“ื•ืœืจ ืœืจืืฉื•ื ื”. ืœืคื™ ื”ืžืฉืื‘ CoinMarketCap, ื”ืคืขื ื”ืื—ืจื•ื ื” ืฉื‘ื” ื”ืžื—ื™ืจ ืฉืœ ืžื˜ื‘ืข ื”ืงืจื™ืคื˜ื• ื”ื’ื“ื•ืœ ื‘ืฉื•ืง ื”ื™ื” ื™ื•ืชืจ ืž-9000 ื“ื•ืœืจ ื”ื™ื™ืชื” ืœืคื ื™ ื™ื•ืชืจ ืžืฉื ื”, ื‘ืชื—ื™ืœืช ืžืื™ 2018. ื”ืฉื ื”, ื”ื‘ื™ื˜ืงื•ื™ืŸ ื”ื—ืœ ืœืชืคื•ืก ืฉื•ื‘ ืชืื•ืฆื”. ื–ื• ืœื ื”ืคืขื ื”ืจืืฉื•ื ื” ืฉื”ื™ื ืงื•ื‘ืขืช ืฉื™ื ืขืจืš ืฉื ืชื™ ื—ื“ืฉ. ื™ื•ืชืจ [โ€ฆ]

ืื•ืœืคื ื™ ื”ืžืฉื—ืงื™ื ืฉืœ ืืžื–ื•ืŸ ืžืžืฉื™ื›ื™ื ืœื”ื™ื›ืฉืœ

ื—ื˜ื™ื‘ืช ืžืฉื—ืงื™ ื”ื•ื•ื™ื“ืื• ืฉืœ ืืžื–ื•ืŸ ืคื™ื˜ืจื” ืขืฉืจื•ืช ืขื•ื‘ื“ื™ื ืฉืœ ืื•ืœืคื ื™ ื”ืžืฉื—ืงื™ื ืฉืœ ืืžื–ื•ืŸ ื•ื‘ื™ื˜ืœื” ื›ืžื” ืคืจื•ื™ืงื˜ื™ื ืฉืœื ื”ื•ื’ืฉื•. Amazon Game Studios ืžืคืชื—ืช ื›ืขืช ืžืฉื—ืงื™ ืžืงื•ื•ื ื™ื Crucible ื•-New World. ืคืจื•ื™ืงื˜ื™ื ืืœื• ืœื ื”ื•ืฉืคืขื• ืžื”ืงื™ืฆื•ืฆื™ื ื”ืื—ืจื•ื ื™ื, ืืš ืื—ืจื™ื ื”ื•ืฉืคืขื•. ืœืขื•ื‘ื“ื™ื ื”ืžื•ืฉืคืขื™ื ื ืืžืจ ื‘ืฉื‘ื•ืข ืฉืขื‘ืจ ื‘ื™ื•ื ื—ืžื™ืฉื™ ืฉื™ืฉ ืœื”ื 60 ื™ื•ื ืœืžืฆื•ื [โ€ฆ]

Yandex ืชื›ืฉื™ืจ ืžืคืชื—ื™ื ืฉืœ ืฉื™ืจื•ืชื™ื ื™ืขื™ืœื™ื ื•ืืžื™ื ื™ื ื‘-Python

Yandex ื”ื›ืจื™ื–ื” ืขืœ ื”ืฉืงืช ืฉื ื™ ืคืจื•ื™ืงื˜ื™ื ื—ื™ื ื•ื›ื™ื™ื ืขื‘ื•ืจ ืžืคืชื—ื™ backend ื”ืžืฉืชืžืฉื™ื ื‘ืฉืคืช ื”ืชื›ื ื•ืช ืœืžื˜ืจื•ืช ื›ืœืœื™ื•ืช ื‘ืจืžื” ื’ื‘ื•ื”ื” Python. ื‘ื™ืช ื”ืกืคืจ ืœืคื™ืชื•ื— Backend ื‘ืžืฉืจื” ืžืœืื” ืžื—ื›ื” ืœืžืชื—ื™ืœื™ื, ื•ื”ื”ืชืžื—ื•ืช ื”ืžืงื•ื•ื ืช ื‘-Yandex.Practice ืžื™ื•ืขื“ืช ืœืžืชื—ื™ืœื™ื ืฉืจื•ืฆื™ื ืœืฉืœื•ื˜ ื‘ืžืงืฆื•ืข ืžืืคืก. ื™ืฆื•ื™ืŸ ื›ื™ ื‘ื™ืช ื”ืกืคืจ ื”ื—ื“ืฉ ื™ืคืชื— ืืช ืฉืขืจื™ื• ื‘ืกืชื™ื• ื”ืงืจื•ื‘ ื‘ืžื•ืกืงื‘ื”. ืชื›ื ื™ืช ื”ื”ื›ืฉืจื” ื ืžืฉื›ืช ื—ื•ื“ืฉื™ื™ื. ื”ืชืœืžื™ื“ื™ื ื™ืงืฉื™ื‘ื• [...]