RSS Feeds

JSON, который считает сам себя. Ставишь = в ячейку — и она становится формулой. На диске при этом остаётся обычный JSON, который откроет кто угодно.

Доброго времени суток, Хабр! Я ИБтивист Александр, скоро как 10 лет профессионально увлекаюсь информационной безопасностью и применяю свои исследования на практике. Эта статья будет полезна ИТ- и ИБ-специалистам, которые интересуются аспектами логирования (аудита) и мониторинга безопасности в операционных системах семейства Linux. Рассмотрим и сравним классический подход к логированию auditd с осовремененными решениями на базе eBPF – tetragon, kunai, falco и Sysmon for Linux.

Ситуация, знакомая многим командам: в кластере Kubernetes живут обычные бизнес сервисы, нагрузка на которые днём растёт, а ночью падает. Обычно используют два плохих варианта: держать статический пул нод под дневной пик, которые ночью простаивают и стоят денег, или положиться на cluster autoscaling — и тогда при дневном росте нагрузки бизнес-поды проведут в статусе Pending до создания новой ноды.

Проблема ожидания, пока Cluster Autoscaler развернёт новую ноду, решается паттерном node overprovisioning, настраиваемым через PriorityClass и механизмы Cluster Autoscaler: мы заранее запускаем ничего не делающие capacity-overprovisioning поды (в документации Kubernetes они называются placeholder-подами), которые занимают небольшую часть ресурсов нод. Когда приходит нагрузка и реплики бизнес-приложений увеличиваются — поды бизнес-приложений немедленно занимают освободившееся место, вытесняя capacity-overprovisioning под за секунды. Вытесненный capacity-overprovisioning под уходит в Pending, Cluster Autoscaler добавляет ноду.

Ключевая выгода паттерна — экономия. Ночью и утром, когда нагрузка падает, KEDA снижает число реплик бизнес-приложения, Cluster Autoscaler удаляет недозагруженные ноды, и кластер схлопывается до минимального числа нод. Утром при росте нагрузки capacity-overprovisioning поды отдают место мгновенно.

В этой статье разберём, как это устроено внутри, и развернём демо-стенд: от KEDA-автоскейлинга бизнес-приложения по RPS, который генерирует генератор нагрузки, до живого вытеснения capacity-overprovisioning подов, которое можно наблюдать своими глазами в kubectl get events.

A look at the ballroom scene across Maré, Lapa, Gamboa and the city centre. The photographer Juliana Bizzo has documented a movement born from Black and Latinx LGBTQ+ communities in the US that has more recently evolved in Rio, growing from the city’s first ball in 2016

My first encounter with Rio de Janeiro’s ballroom scene was in 2023, during Noite das Estrelas, an artistic occupation that moved through the streets of Maré. From the top of a sound truck, the performer and drag queen Preta Queen B Rull, of the Kiki House of Mamba Negra, sang as people followed her through the neighbourhood. Before we had even reached our destination, the procession had changed the rhythm of the street.

Preta Queen B Rull performs from a sound truck during Noite das Estrelas.

Struggling with Alzheimer’s, the central character sets out on his final journey to a euthanasia clinic

The word “Alzheimer’s” never appears in Switzy, Emma Cline’s third novel, which arrives pre-endorsed as a Booker prize longlistee. But we can be certain that it is the disease afflicting its central character, David Hastings – certain in a way he finds it increasingly hard to be about anything.

When the novel begins, David and his assistant Cody are aboard a private jet flying from his home in the US to the UK. Landing at London City airport (which the book, experiencing its own senior moment, situates in the countryside), they visit David’s daughter and her family before travelling on to Zurich (hence “Switzy”). One more appointment, a catchup with an old boarding school roommate called Tom, awaits just over the French border, after which David will be euthanised at a facility resembling Dignitas.

The long-running drama reaches Hitler’s rise to power in its final season as its creators reflect on the unsettling parallels between Weimar Germany and the present day

It’s the global hit TV series that pulled audiences straight into the chaotic hedonism of 1920s Germany, dramatising the brilliance and brittleness of a newly built democratic system with unprecedented ambition.

But in the 13 years that the German makers of Babylon Berlin have worked on the show, modern democracies from the US to Hungary to South Korea have come under pressure in ways the creators say they could never have imagined when they started.

Технологический прогресс последних двадцати лет превратил секвенирование из дорогостоящей лабораторной процедуры в относительно массовый инструмент, и теперь главный вопрос уже не «можно ли», а «как сделать это ещё дешевле и доступнее». Особенно остро эта проблема стоит для стран, которые хотят внедрить в здравоохранение принципы персонализированной медицины. К таким странам относится и Россия.

Масштаб происходящей трансформации лучше всего отражают цифры. По оценке MarketsandMarkets, мировой рынок секвенаторов нового поколения (NGS) в 2025 году достиг $12,77 млрд, к 2026 году вырастет до $13,81 млрд, а к 2031 году — более чем удвоится, превысив $27 млрд (Рис.1). Другие аналитические агентства дают близкие, хотя и немного различающиеся оценки: Grand View Research прогнозирует рост до $42,25 млрд к 2033 году (около 18 % в год). Быстрее всего растёт сегмент услуг секвенирования (контрактное секвенирование, подготовка библиотек, анализ данных и т.п.). По разным оценкам его годовой прирост составляет 18–23 %.

Andrew Bailey, in role as financial stability watchdog chief, warns advanced models risk destabilising system

The Bank of England’s governor, Andrew Bailey, has joined the throng of figures warning about the global risks posed by the most advanced artificial intelligence technology.

In a two-page letter sent to international finance ministers and central bank governors as part of his role as chair of the international Financial Stability Board (FSB), Bailey said “frontier” AI models were “showing increasingly sophisticated autonomy and problem-solving abilities, as well as threat capabilities”.

Моя домашняя сеть уже давно перестала быть просто «вайфаем в квартире». Сейчас этот зоопарк состоит из: нескольких роутеров, прошитых под на OpenWrt, NAS, МФУ, а также IoT-устройств (робот-пылесос, умные лампочки, бризер, кондиционер, три канарейки, черепаха, золотые рыбки и старый глупый хомяк). А на роутерах ещё куча сервисов крутятся (например, https-over-dns и сервис-который-нельзя-называть).

В какой-то момент я поймал себя на мысли, что трачу кучу времени на рутину: копаться в заметках, вспоминать команды для OpenWrt, вручную проверять сервисы; понял, что выступаю для своей сети сисадмином на побегушках. Так я и решил настроить локально Qwen3.6-35B-A3B + несколько инструментов.

В этой статье я расскажу о MVP моего домашнего Skynet-а: настроенный агент умеет сам ходить по SSH на роутеры, проверять статус сервисов — и сам поддерживает документацию по сети (на основе подхода llm wiki). Чтобы не бояться, что LLM случайно уронит сеть, я выстроил строгие правила: все деструктивные действия требуют моего подтверждения, а любые скрипты, которые агент напишет, я запускаю только после ручного ревью (не самый оптимальный вариант — но для MVP хватило).

Итак, далее вас ждёт пошаговая инструкция для новичков, как поднять подобную систему в вашем контуре. И пример, как с её помощью поднять себе РКН следить за состоянием принтера по протоколу SNMP.

И сразу скажу: я фанат Powershell, так как эта командная оболочка работает и под Windows, и под Linux и построена на основе горячо любимого мною .NET. Поэтому все дальнейшие действия (и генерируемые скрипты) будут приведены для кроссплатформенного Powershell.

Привет, Хабр! (И тебе, случайный читатель, который открыл эту статью в перерыве между двадцатой правкой того, что ты ещё месяц назад гордо назвал финальной версией).

Сегодня давайте без кода и без нытья пофилософствуем на тему:

Когда же продукт готов? И будет ли готов когда-нибудь...?

The long-running drama reaches Hitler’s rise to power in its final season as its creators reflect on the unsettling parallels between Weimar Germany and the present day

It’s the global hit TV series that pulled audiences straight into the chaotic hedonism of 1920s Germany, dramatising the brilliance and brittleness of a newly built democratic system with unprecedented ambition.

But in the 13 years that the German makers of Babylon Berlin have worked on the show, modern democracies from the US to Hungary to South Korea have come under pressure in ways the creators say they could never have imagined when they started.

Police urge mother to attend hospital after baby’s body discovered in Harrow Road in Auburn

• Follow our Australia news live blog for latest updates

• Get our breaking news email, free app or daily news podcast

New South Wales police have appealed for information to find the mother of a newborn baby boy, whose body was discovered in a rubbish bin in Auburn in Sydney’s west on Monday morning.

Police said emergency services responded to reports of the body of a baby located in a rubbish bin at a unit block along Harrow Road in Auburn at 11.20am, with officers from the Auburn police area command finding the body of a newborn boy.

Perrottet disagrees when counsel assisting Peggy Dwyer SC claims brother of former NSW premier is not truthful and ‘constructing evidence’

• Follow our Australia news live blog for latest updates

• Get our breaking news email, free app or daily news podcast

A brother of former New South Wales premier Dominic Perrottet has told Icac he would lie to a property developer about delivering political outcomes “to keep him on side”, but Charles Perrottet has denied lying to the state’s anti-corruption watchdog.

Charles Perrottet, who is among three Liberal figures alleged to have anticipated receiving $2m in prohibited political donations from Jean Nassif, told the Independent Commission Against Corruption (Icac) on Monday that he “made up” updates for the property developer.

In today’s newsletter: As rescuers search for survivors after catastrophic floods, the disaster offers a stark warning about the climate risks facing the region, and the world

Good morning. Over the weekend, rescue workers in Nepal and Tibet raced to find people who are still trapped in villages affected by catastrophic flash floods. As of this morning, the death toll stands at 903, and more than 4,000 people are missing.

For those of you reading this in a place where life continues as usual, the scale of devastation is hard to fathom. In a matter of minutes, a torrent of mud and debris engulfed entire villages, snapped bridges and swept away people’s homes and families. Some survivors are marooned on top of buildings that rescue workers can’t reach. Others are trapped in tunnels beneath the ground. Many have no idea if their loved ones are still alive.

UK politics | PC Andrew Harper’s killers will remain in prison after Andy Burnham announced changes to the early release scheme that will see anyone convicted of unlawful killing, including all forms of manslaughter, excluded from the scheme.

Milo Yiannopoulos | Far-right British media provocateur Milo Yiannopoulos has been deported from the US back to the UK by Immigration and Customs Enforcement (ICE) in connection with what the agency said was expired authorisation to be in the country.

US-Iran | Iran has launched retaliatory strikes on airbases in Jordan after the United States attacked Iranian rocket launchers on an island in the strait of Hormuz, the first such strikes in a month.

Iceland | In a blow to Brussels, Iceland has held a referendum that has narrowly ⁠rejected ⁠the government’s proposal ​to hold ⁠accession talks with ⁠the ​EU.

Nepal-Tibet disaster | A headteacher in Nepal evacuated 900 children from a school moments before a deadly wall of water struck their town amid the devastating flash floods that have killed almost 800 people and left thousands missing.

Tuesday | Justice secretary Alex Norris is due to present the government’s revised plans for the prisoner early release scheme, which includes a headroom review aimed at freeing up more space in the system.

Thursday | In the first UK visit by an EU leader of Andy Burnham’s tenure, the prime minister is will host talks with French president Emmanuel Macron.

Saturday | Officials from Jamaica will visit the UK to lodge a petition with King Charles to seek legal guidance from the privy council on the country’s request for reparations over Britain’s involvement in the slave trade, on the anniversary of the 1781 Zong slave ship departure from West Africa.

Celebrate the flavours of the coming season via this rewarding salad and rich dessert to share

As the days start to shorten and the temperature drops (finally!), the produce becomes richer, sweeter and more comforting, and the onset of autumn is a time of year that naturally brings people together around the table, which is something I’ve always loved about food. At the restaurant, we try to let the ingredients do the talking, and we work closely with growers and producers to make the most of whatever’s in season. Today’s recipes celebrate some of my favourite seasonal flavours: the salad is simple but deeply satisfying, balancing sweet roast squash with bitter greens and a punchy black olive tapenade. For dessert, meanwhile, chocolate mousse with poached fruit is my idea of autumn in a bowl, not least because quince has a beautiful, floral character that develops as it cooks, and pairs perfectly with dark chocolate and the nutty richness of browned butter. The creme fraiche adds freshness and balance, and brings everything together. Both dishes are rooted in the philosophy that guides my cooking: celebrate the season, respect great ingredients and create food that encourages people to slow down and enjoy each other’s company.

More than two dozen teenagers stuck in the Spanish territory of Ceuta shared their reasons for joining the treacherous mass crossing in July

For Fatin, one of the teenage girls now living in limbo in a makeshift camp in the Spanish city of Ceuta, the decision to leave her home in Morocco began to form when she had to give up school.

She wanted to continue studying, she says, but at home she was expected to take responsibility for the housework instead. As classes and learning gave way to domestic chores, the future she had imagined for herself began to feel increasingly distant.

Richer countries might have more resources to deal with catastrophe, but this problem grips the entire planet, however much leaders may want to deny it

Climate breakdown is happening on one Earth, but two different worlds. In one, its impacts increasingly encroach on everyday life; longer periods of discomfort and shorter periods of sharp pain. Endless, hotter summers, and within them sudden wildfires, evacuations, homes burned to cinders in a matter of hours. In another, catastrophe. This summer has been a snapshot of that split-screen. The hottest day on record in parts of Europe, and a wave of water, mud and ice in Nepal that so far has claimed more than 750 lives. Thousands of people are still missing.

The difference is also one of resources. The climate crisis has an economic cost, but some places can absorb it better than others. Responses to this summer of wildfires in Europe included a rapid scrambling by the French government to provide everything from tax breaks for businesses affected by the fires to relocation costs and aid to rebuild homes. The UK government had deployed almost £100m before the summer to strengthen wildfire resilience.

Большой текст пугает: часть читателей уходит на середине, часть пролистывает не читая. Поэтому дальше — только факты, действия и последствия: что изменилось в метаданных, как это изменение попало в production и что в итоге получилось — результат, который до сих пор помогает находить источник проблем.

Leah Stewart, who was bitten while swimming at Coogee beach, says she asked herself ‘which limb am I willing to lose’ as she fought back

An Australian woman who lost an arm after a shark attack at a Sydney beach has described delivering a “left hook” punch to the four-metre great white as its open mouth came within centimetres of her face.

Leah Stewart, 34, a teacher and mother of a one-year-old, was attacked by the shark while on a morning swim at Coogee beach in Sydney’s eastern suburbs on 13 June.

Checks at pharmacies for people aged 40 to 84 are aimed at identifying those at risk of heart attack or stroke

The NHS in England is to offer free finger-prick blood tests for cholesterol on the high street for the first time under plans to reduce heart disease and stroke deaths by a quarter within the next decade.

The seven-minute tests will be available at participating pharmacies as part of a national rollout to spot “ticking timebombs” earlier.

Administrators will be forced to close the business if it fails to secure additional funding, revealing hundreds of staff have not been paid for weeks

• Follow our Australia news live blog for latest updates

• Get our breaking news email, free app or daily news podcast

The administrators of embattled property developer Bathla Group have said the company will fold by the end of the week unless they can secure additional funding to keep it afloat.

The insolvency advisory Teneo assumed control of Bathla’s operations on 25 August after the Sydney-based construction company went into voluntary administration under the weight of almost $3.6bn in debt.

• Mariano Navone wins 7-6 (7-5), 5-7, 4-6, 6-2, 6-1

• Djokovic vomits numerous times and endures cramps

The first night session of the US Open this year was approaching the three-hour mark when Novak Djokovic walked briskly to the corner of the vast Arthur Ashe Stadium court, bent down and vomited the contents of his stomach straight into the towel bin.

This was neither the first nor the last time that Djokovic threw up during an excruciating four hours and 36 minutes of suffering, and his miserable night ended around midnight with the 24-time grand slam champion in tears as he was defeated 7-6 (5), 5-7, 4-6, 6-2, 6-1 by Mariano Navone in the first round.

1. Зачем это нужно

Моя боль как автора (а я не только программист и к. т. н, но еще и писатель в жанре фантастики) – это отсутствие на сайте автор.тудей полноценного анализа статистики. Вся статистика ограничивается просмотрами, временем и средним временем прочтений по дням и главам, в виде шахматки:

Четвёртая часть цикла про TDCV2 — открытый конструктор тестовых данных, который я пишу сам.

Обычно форму случайных значений выбирают из списка: нормальное, экспоненциальное, ещё десяток. Нужного в списке может и не оказаться — суточный профиль нагрузки с двумя горбами разной высоты, разгон и торможение, датчик, у которого к вечеру растёт разброс. Собрать такое формулой вполне можно, вопрос только в цене: смесь распределений, подбор весов, десяток коэффициентов, смысл которых через неделю уже не вспомнишь.

А можно нарисовать. Генератор берёт SVG или скриншот графика, читает контур и раскладывает по нему значения. Нарисуете две линии вместо одной — получите коридор, и разброс тоже станет нарисованным. А поменяете смысл горизонтальной оси — та же картинка превратится в закон распределения. Формулу это не отменяет, просто для некоторых форм выходит заметно короче.

Nationwide research also shows average 14% premium for housing in national landscapes of England and Wales

Housebuyers are paying a premium of almost a quarter to own a property located within a UK national park, with the New Forest the most expensive national park to live in, according to Britain’s biggest building society.

Nationwide found that a property located within a national park cost 24% more on average than a similar property elsewhere, while buyers were also stumping up a 6% premium for homes within three miles of a national park.

Centre for Economics and Business Research calculates effect of inflation and wage stagnation to end of 2027

UK households will have suffered a £2,400 financial hit, on average, from the Iran war by the end of 2027, new analysis shows.

The Centre for Economics and Business Research (CEBR) has calculated that the jump in inflation since the conflict began, and weaker wage growth, will knock £1,100 off the real income of the average UK household in 2026, and by a further £1,300 in 2027.

dnssec-failed.org отдавался как NOERROR: мой резолвер полгода принимал ответы с битыми подписями и выглядел при этом абсолютно здоровым. Нашёл это не мониторинг, а публичный тест DNS-OARC — пять проверок зелёные, шестая красная.

Разбираю, почему отсутствие свойства безопасности не ловится алертами в принципе, как первая попытка включить валидацию уронила unbound в crash-loop (auto-trust-anchor-file требует запись в каталог, а образ работает в chroot под непривилегированным пользователем), чем платит статический trust anchor и сколько валидация стоит в latency.

Замерил: 24 мс на подписанных зонах против 28 мс на неподписанных. То есть нисколько.

There are juggernauts and indie gems aplenty for when the nights draw in, from an ingenious puzzle game to blockbusters such as Marvel’s Wolverine and Call of Duty
• See all of our unmissable autumn arts recommendations here

After 20 years away, Capcom’s hyper kinetic action adventure returns, pitting skilled samurai Miyamoto Musashi against hordes of warriors and demons in Edo-period Kyoto. Master the complex combat then prepare for flashing blades, disembodied limbs and geysers of spraying blood.
• 4 September; PC, PS5, Switch 2, Xbox

Since it was stripped of planetary status, Pluto’s defenders have been fighting the decision – and they’re only getting more passionate

Twenty years ago, Pluto got demoted. After a vote by the International Astronomical Union (IAU) in August 2006, Pluto was relegated from major planet to dwarf planet status. Our solar system dropped from nine planets to eight. At the time, many scientists were unhappy with the decision. Two decades on, the debate is, if anything, even more polarised.

“The definition of a planet they created, you can’t use it at all,” says Philip Metzger, the director of the Stephen W Hawking Centre for Microgravity Research and Education at the University of Central Florida. “It makes the definition of a planet completely non-useful in science.”

An unfair two-tier system is, at last, giving way to universal state care. But private interests and highly paid doctors are resisting

There were no chandeliers in the public ward where I spent my first days as a mother, at the oldest continuously operating maternity hospital in the world. The room echoed with cries, the well-worn floor bouncing under footsteps, the windows looking out on Dublin’s city centre.

Now the Rotunda hospital, where I’m due to give birth again soon, is counting down to its 1 millionth baby. It is also at the centre of a bitter debate over plans to reform Ireland’s two-tier state healthcare system, so that those who pay to “go private” in public hospitals no longer gain an unfair advantage over those who don’t.

Caelainn Hogan is a journalist and the author of Republic of Shame: How Ireland Punished ‘Fallen Women’ and Their Children

As Russia hits another ammunition warehouse, killing at least 38, locals put blame on poorly placed depots

It is a day and a half since a Russian jet-powered drone smashed into an ammunition dump in Myla, a village 15 miles outside central Kyiv. Volodymyr, 61, a security guard, leads visitors from his family’s badly damaged home, its roof blown off, back windows shattered, through the garden towards the impact site 300 metres away.

The garden, like so many in Ukraine’s villages and suburbs, is a sizeable allotment. But today the greenhouse is shattered, a vegetable patch is blackened and crisp underfoot. Several metres of grapevine have been destroyed. Even so, Volodymyr finds two surviving bunches to hand to the Guardian.