Dumping Linuxfx customers - A Windows-like distro including the spyware and activation

https://kernal.eu/posts/linuxfx/

/ High-severity vulnerabilities in a mobile framework owned by mce Systems

mce Systems used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote (albeit complex) or local attacks..:

http://www.microsoft.com/security/blog/2022/05/27/android-apps-with-millions-of-downloads-exposed-to-high-severity-vulnerabilities/

Как быстро установить и настроить Redis кластер

В данном случае подразумевается схема master > slave, как итог реализация позволяет восстанавливать ключи-значения, а с реплики читать точно такие-же данные, как на master:

https://sys-adm.in/systadm/980-kak-bystro-ustanovit-i-nastroit-redis-klaster.html

* How to install and configure Redis cluster

[RU] - Мониторинг сервисов при помощи Monit с алертингом в телеграм

Суть статьи: Установка и настройка monit на предмет мониторинга локального REDIS сервера и удаленных HTTPS серверов с отсылкой алертов в телеграм:

* Детали Здесь

[EN] - How to monitor services with Monit with Teleram alerting

Linux and Tiny C Compiler in the browser

https://ja.nsommer.dk/articles/linux-and-tiny-c-compiler-in-the-browser-part-one.html

Dragonfly - A modern replacement for Redis and Memcached

https://github.com/dragonflydb/dragonfly

THIS CRAFTY TOOL CAN EAVESDROP ON 6G WIRELESS SIGNALS

https://www.futurity.org/metasurface-in-the-middle-6g-wireless-signals-2741042-2/

Beware, here is how WhatsApp accounts are getting hacked..

https://www.linkedin.com/posts/fb1h2s_beware-here-is-how-whatsapp-accounts-are-activity-6934386561048264704-NnFf

R4IoT: When Ransomware Meets IoT and OT

Next-generation ransomware report:

https://www.forescout.com/resources/r4iot-next-generation-ransomware-report

Open BLD DNS Updating News: Pre-release BLD, Debian migration and Alerting infrastructure
 
I'm happy to present BLD DNS pre-release services already in production. What's new:

🚀 Speedup:
• Cache and updating process of additional blocking lists, was improved
• Improved memory handling. Redis cluster added.
• Improved DNS prefetching process

🛸 Security:
• Fully removed support olders TLS versions
• All code depenses (include vulnerabilities fixes) was updated
• Added cross check server availability with alerts
• All BLD servers has A statuses in SSLLABS
• All BLD servers divided to specified categories
• Added notifications (alerts) to Telegram Bot

🪚 Stability:
• Added additional systemd timers for watching BLD services statuses
• Added DNS tracking service and automatic restart of BLD services

🚜 Migration:
• All migration (from distro to distro) processes 90% automated
• All CentOS servers deprecated and changed to Debian 🎉

🛰 Today, the BLD infrastructure has 10 servers located around the world 🎈🎈🎉

BLD works without agents or any additional tools, but you can use secure and clean Internet in/on:
• Browsers (Chrome, Brave, Firefox, Edge and etc)
• Mobile devices (Android, iOS)
• Computers or networks (Primaty/Secondary DNS)

If you not tried BLD DNS - get more details on official BLD site:
• https://lab.sys-adm.in

#free #bld #sys-admin #sevices

/ Microsoft Vulnerabilities Report 2022

Historically, the report has delivered a holistic annual view of the vulnerabilities within Microsoft’s platforms and products, and has established an
undeniable business case for the importance of removing admin rights to reduce risk…

NodeJS Security Recommendation Links

- ESLint Plugin Security - https://github.com/nodesecurity/eslint-plugin-security
- Express App Secure with Helmet - https://www.npmjs.com/package/helmet
- 6 Tools for checking vulnerabilitues in Node - https://www.freecodecamp.org/news/6-tools-you-can-use-to-check-for-vulnerabilities-in-node-js/
- Secure coding practices for NodeJS Web Applications - https://auto1.tech/securing-nodejs-applications/
- Top 11 Node.js security best practices - https://blog.sqreen.com/nodejs-security-best-practices/

#node

API Gateway in NodeJS

- Create an API Gateway Using NodeJS and Express - https://medium.com/geekculture/create-an-api-gateway-using-nodejs-and-express-933d1ca23322
- How to build your first RESTful API in Node.js - https://medium.com/@jlrosenberg/how-to-build-a-node-rest-service-a3f280b99c7d

#node

Introducing GitHub Skills

https://github.blog/2022-06-06-introducing-github-skills/

⚙️ Monitor.sh - Script for checking systemd unit status

monitor.sh can run custom noscript / action if unit has stopped or running statuses, examples:

./monitor.sh -u sshd -a "/path/to/action-noscript/action.sh"

or

./monitor.sh -u multipathd -r -a "/usr/local/sbin/test.sh"

or just:

./monitor.sh -u multipathd -r

add this noscript to cron and if your systemd unit will be stopped or disabled, monitor.sh will enable and will try tu restart targeted systemd unit…

* https://github.com/m0zgen/monitor

Knot Resolver - Official Manual (Mar 15, 2022)

Knot Resolver is a minimalistic implementation of a caching validating DNS resolver. Modular architecture keeps the core tiny and efficient, and it provides a state-machine like API for extensions