Russia Weighs Passenger Fees of Up to 1000 Rubles to Fund Domestic Aircraft Leasing
Russian authorities are exploring a new passenger surcharge aimed at financing the leasing and operation of domestically manufactured aircraft. The measure is being developed by Mintrans, Minpromtorg, and Rostec, according to sources cited by Kommersant.
Preliminary proposals set the fee at up to 500 rubles for domestic flights and up to 1000 rubles for international routes. Alternative figures under discussion reach 700 rubles inside Russia and 2000 rubles abroad. No final decisions have been taken on either the exact amounts or the collection mechanism.
At projected 2025 passenger volumes the surcharge could yield between 68 and 84 billion rubles per year. Over the 2027-2030 period authorities expect to collect a total of 200-250 billion rubles. The proceeds would be directed to leasing companies to offset the difference between the high production cost of Russian aircraft and the preferential prices offered to carriers.
Part of the funds may also go to airlines to cover higher operating expenses during the initial years. The first MC-21 airliners are estimated to cost 8.9-11 billion rubles each, compared with roughly 3.4-3.6 billion rubles for an Airbus A320-200. Similarly, the SJ-100 is projected at 5.4 billion rubles versus about 3 billion rubles for an Embraer E190.
Additional compensation for aviation fuel costs is also under consideration. Policymakers anticipate that serial production after 2030 will reduce unit costs and render the surcharge unnecessary, although passengers remain skeptical about the temporary nature of such levies.
Industry analysts warn that the extra charge will increase ticket prices and could depress passenger demand, thereby reducing revenues for airlines, airports, and the state budget. They recommend covering early-stage operating losses directly from the federal treasury instead.
Related articles
VK Tech Rolls Out Unified AI Assistant Across VK WorkSpace Corporate Tools
VK Tech is preparing a unified AI Assistant for its VK WorkSpace platform, along with semantic search and an MCP server to connect autonomous agents. The features target small and medium businesses as well as large corporations by automating routine tasks in messaging, email, and calendar services. Semantic search will allow users to locate documents, emails, and messages by meaning rather than exact titles or phrasing. Meeting recordings will be automatically transcribed with extraction of key topics, decisions, and action items. The AI Assistant launches first in the Messenger module of the On-Premise version, with cloud SaaS availability scheduled for October and later expansion to Mail, Disk, and Calendar. Access remains strictly limited by user permissions and company policies. An MCP server will also be introduced, enabling AI agents to query data, prepare meeting materials, and perform actions inside the platform services, initially supporting Messenger and extending to other modules by year-end.
EVTX Record Recovery: Advanced Carving Techniques for Damaged Windows Event Logs
Positive Technologies researchers detail methods for carving EVTX records directly from raw disk images, memory dumps, and virtual machine snapshots when standard file system access fails. The approach bypasses corrupted MFT structures or wiped partitions by scanning for ElfChnk and record signatures. Their Go-based library parses both intact and damaged EVTX files, recovering events even when checksums mismatch. The article explains the three-layer EVTX structure including file headers, 64 KB chunks, and BinXML records with template substitution for space efficiency. Two carving strategies are presented: chunk-level recovery that restores full field names via per-chunk caches, and record-level extraction that pulls values without templates. The work supports faster incident reconstruction in ransomware cases where attackers encrypt entire VDI or VHDX images.
Google Testing Optional Google Account Unlock for Forgotten Android PINs
Google is developing a backup unlock method that lets Android users regain access to their devices through a linked Google Account instead of performing a full factory reset. The feature, discovered in Android 17 QPR2 Beta 5, appears under the name Unlock with Google Account and would be disabled by default. Users would need to enable it manually in the Device unlock settings before forgetting their PIN, password, or pattern. The change aims to prevent permanent loss of local data such as photos and documents that lack cloud backups. The mechanism revives a capability removed after Android 4.4, when forgotten patterns could be cleared using Google Account credentials. Factory Reset Protection would remain in place after any reset. The code reference is not yet functional, carries no official announcement, and may be altered or dropped before release.
Implementing 2FA Kubernetes Access via Gateway API, Dex and MULTIDIRECTORY
A Russian cybersecurity company replaced static kubeconfig files with corporate accounts and mandatory 2FA for its Talos Linux Kubernetes clusters. The solution routes all authentication through a single FQDN using NGINX Gateway Fabric, Dex as an OIDC provider connected to MULTIDIRECTORY via LDAP, and kube-oidc-proxy for token validation and impersonation. Groups stored in the directory are passed directly into RBAC bindings, eliminating manual certificate management. A lightweight Python service dynamically generates kubeconfig files that contain no secrets. The team documented several Gateway API migration pitfalls including namespace route restrictions and BackendTLSPolicy hostname validation. The approach keeps the entire configuration in Git and avoids modifying kube-apiserver flags.