57 posts
GitLab didn't disappoint me, but it didn't wow me either — it's the straight-A student, solid but predictable. There's almost no localization, so no pleasant surprises: powerful features, steep learning curve, incomplete Chinese translation. JiHu still has a long way to go on localization.
A follow-up to my last post, "Post-Mortem: Redis on 6379 Got Hacked, Turned into a Replica and Used to Mine Monero". This one analyzes the attacker's script and reproduces how they exploited unauthorized Redis access to get a shell and mine crypto.
We use Redis at work to cache and speed up static content. Since it was a dev environment I just spun up a Redis image in Docker and skipped setting a password, figuring iptables would keep me safe. Recently it started misbehaving.
On April 6, Debian published a security update fixing a cross-site scripting vulnerability found in the Python HTML sanitizing library bleach. python-bleach is an allowlist-based Python library that sanitizes HTML text by escaping or stripping tags and attributes.
Last week Alibaba Cloud announced a product update: it has joined the Cloudflare Bandwidth Alliance, offering Alibaba Cloud users highly competitive storage pricing — including free traffic from Cloudflare CDN back to OSS origin.
Linux 5.12-rc5, released today, carries more than the average amount of change for this stage of kernel development. If that pace holds, it could add an extra week of testing and an -rc8 before Linux 5.12 final ships — though it's too early to say for certain.
The IETF announced that TLS 1.0 (RFC 2246) and TLS 1.1 (RFC 4346) are formally deprecated. These versions lack support for current and recommended cryptographic algorithms and mechanisms.
MariaDB/MySQL is case-sensitive on Linux, so any mismatch in capitalization between your table or column names and your SQL throws errors. That's why we usually turn case sensitivity off first.
This is a decade-old vulnerability in the sudo tool that can grant any local user root access on Unix-based systems, including macOS Big Sur and earlier. Improper operation grants root privileges to arbitrary local users. To trigger it, a user only needs to rewrite argv[0] or create a symbolic link.
Covers data warehouse concepts; beginner tutorials for Hadoop, ZooKeeper, Hive, Flume, Kafka, Hbase, Sqoop, Oozie, Azkaban, Kylin, CDH, Impala, Hue, ClickHouse, Kettle, Ambari, ELK, Scala and Flink.
