CSRF vulnerabilities are still valid

CSRF vulnerabilities are still validCSFR (Sross Site Request Forgery) in translation into Russian is a forgery of cross-site requests.
Mikhail Egorov
( .0ang3el ) In his report at 3-3r38. Highload ++
2017 talked about CSRF-vulnerabilities, about what protection mechanisms are commonly used, and how they can still be circumvented. And in the end, he brought a number of tips on how to properly defend against CSFR-attacks. Under the cut decoding of this speech.
 
 
+ 0 -

Insider Dev Tour: live broadcast

Hello! Today at 10:00 we begin the live broadcast of the conference Insider Dev Tour. For you, our colleagues from Redmond will speak and talk about the company's newest technologies in the areas of development under Windows, web development, machine learning and mixed reality. Join Live at the Cut!
 
 
Insider Dev Tour: live broadcast
 
 

Live broadcast of


 
Below you can watch the live broadcast of the event, which right now takes place in the space Digital October in Moscow.
 
 

 
 
...[/h]
+ 0 -

Released 3CX v15.5 Update 5 Beta and REST-integration with AmoCRM

This week we presented an update to 3CX v15.5 Update 5 BETA. In the update, new types of reports appeared, the record of conversations was improved, new CRM-integration modules (including Russian AmoCRM) and other improvements were added. Let's consider what appeared in this release. See video .
 
Released 3CX v15.5 Update 5 Beta and REST-integration with AmoCRM  
 
This opportunity was often requested by the heads of call centers. Now the supervisor in one report can analyze the work of several groups of operators. If the call center serves several projects - such a report is simply necessary!
 
 

Improvements in the recording of conversations


 
Update ...[/h]
+ 0 -

In anticipation of the race of US and Chinese spacemen

The recent test suborbital flight of a rocket to a private Chinese space company OneSpace has discovered an inconspicuous trend before that - there are spacemen in China and they are developing very actively. In the coming years we will see a new space race of private companies in the US and China. And what do we know about Chinese private traders?
 
 
In anticipation of the race of US and Chinese spacemen  
Photo by Wan Nan /Chongqing Daily /VCG
 
called ExPace (ExPace Technology Corporation), founded in February 2016. But the ...
+ 0 -

A few words about the actual performance of the hypervisor

Users of virtualized systems, and especially service providers, very often wonder: "how to squeeze the maximum out of the existing hardware?" And in this context, we often have to discuss the KVM hypervisor and the differences between the different versions of Virtuozzo. In this post, we will talk about a series of tests of the latest virtualization system along with real-performance estimates for typical loads, as well as Meltdown and Specter patches.
 
 
Enter , you are welcome.
Which hypervisor parameters do you consider more important?
The density of placement is
Support for different ...
+ 0 -

The man is the machine assistant

This blog is usually dedicated to recognizing car numbers. But, working on this task, we came to an interesting solution that can be easily applied for a very wide range of computer vision tasks. About this now and tell you: how to make a recognition system that will not let you down. And if you fail, then you can tell her where the error, retrain and have a slightly more reliable solution than before. Welcome to the cut!
 
 
The man is the machine assistant
 
PowerAI from IBM . It's almost like DIGITS, but you just have to mark out the datasets. Plus, no one optimizes neural networks and solutions. But worked out a lot of cases. The ...
+ 0 -

Gene therapy gives a chance to survive in small patients with muscular atrophy

Gene therapy gives a chance to survive in small patients with muscular atrophy  
 
Fifteen babies born in the United States with a diagnosis of "muscle atrophy" probably could not survive without a new experimental treatment. It allowed to modify the genes of newly born little men.
 
 
The disease, the exact name of which is spinal muscular atrophy (AGR), usually kills its victims before the age of two. And of course, in children with SMA without treatment there is no chance to live up to any conscious age. But thanks to new technique ...
+ 0 -

FIDO2 - Passwords must die

I think all of you have repeatedly heard about the fact that "passwords are dead", "passwords are dying out", "new technology will kill passwords" and the like.
 
 
We in FIDO Alliance just came to inform you that passwords will still die out in authentication.
 
 
FIDO U2F about which I wrote earlier .
 
 
FIDO2 - Passwords must die  
 
That is, the authentication script with U2F is as follows:
 
 

The registration is:


 
- The user registers using a user name (can be better changed to a password, and then user-user?) And password
 
- The server hashes the password using scrypt, argon? bcrypt and stores in the database
 
- T...[/h]
+ 0 -

JOIN in NoSQL databases

In this message, we will look at ways to connect collections in NoSQL databases mongodb, arangodb, orientdb and rethinkdb (in addition to being a NoSQL database, they also have a free version with a fairly loyal license). In relational databases, similar functionality is implemented using SQL JOIN. Despite the fact that CRUD operations in NoSQL databases are very similar and differ only in details, for example, in one database, create ({}) is used to create an object, on the other - insert ({}), and in third - save ({}), - the implementation of a sample of two or more collections in each database ...
+ 0 -

IIA. Storage of medical data

IIA. Storage of medical data  
 
Automation Today, no one is surprised by this word. Every year more and more different programs and mechanisms are created to help a person in his work. Some organizations are better equipped, others are worse, but all without exception seek to reduce production costs, increase profits and improve the quality of the final product. This trend was not ignored by the medical field. Along with the number of diagnostic centers, the demand for corresponding software is also growing. In some centers, LIS (laboratory information system) is used, in others - RIS (radiological information system), and the third ...
+ 0 -