Infrastructure and Application Security

Spanish media reported CNI certifies Huawei products for use in critical sectors such as defense.

Since there's a lot of discussion about age verification on various platforms -- like Ubuntu's Canonical^1 I just wanted to highlight one that is the least lame and the most privacy-preserving in existence currently: Mobile Driver’s license (mDL) aka ISO/…

If you needed a nice case study for a CTO presentation on how proactive Linux does work in real life scenarios, here;s one I've just found in my old commits searching for something entirely else - the CVE-2021-43267 published in 2021 in Linux tipc module.

Having watched another round of the British NO2ID debate, which has opposed the introduction of a single national ID document since 2004, I cannot help but notice a rather drastic misconception of the problem, including among many IT professionals.

Linux process auditing using auditd has matured and become a standard feature for host-level intrusion detection.

Having gained quite a lot of practical experience with both Wazuh and CrowdSec host intrustion detection systems, I wanted to share a few notes on how these compare in real life.

The first Bolshevik in the beginning of 20th century can be blamed for may things, but wealth accumulation for personal use certainly wasn't one of them.

With increasing announcements about the introduction of EU Digital Cash, I wanted to demonstrate what this might look like in practice.

There's a lot of chatter about yet another "peace plan" for #Ukraine from #Russia and the #USA, which now seems to be just a repetition of old maximalist demands with no room for compromise.

In 2023 technical social media were shaken by a wave of criticism of EU QWAC (Qualified Website Authentication Certificate) which, according to the critics, was essentially tool of mass surveillance.