Good Bear 1.0 Released: Firefox-Based Browser with Isolated Russian PKI Trust Container
Good Bear 1.0 has been released as a Firefox-based browser that isolates trust for the Russian PKI infrastructure. Built on Firefox 156.0, the browser ships only in Russian and provides two official distributions: a .deb package for Ubuntu 24.04 LTS amd64 and an installer for Windows x64.
The core feature is a dedicated container that uses Firefox’s native userContextId and OriginAttributes mechanisms. Ordinary HTTPS sites continue to use the standard Firefox trust store. When certificate validation fails, the browser may perform a narrow secondary check against a pinned Russian root. Successful validation causes the address to reopen inside the isolated container rather than continuing in the default context.
POST, PUT, and PATCH requests never replay automatically; the user must explicitly choose to open only the URL or return. Previously assigned addresses retain their container mapping, but the mapping never silently extends to subdomains. A dedicated transition page appears when a site previously viewed under standard trust now requires the Russian PKI chain.
The container boundary protects cookies, local storage, cache, HTTP authentication, client certificates, and connection reuse. Password storage and autofill are disabled inside the Russian PKI container. Sub-resources using the Russian chain are blocked from loading into ordinary pages, and ordinary pages opened inside the container remain isolated.
The interface displays two independent indicators: a permanent neutral container marker and a separate RU badge that appears only when the Russian PKI chain is active. A security information panel shows the hostname, end-entity certificate, issuer, root, and trust source, with a note that the root is permitted solely inside the container.
Settings include a toggle for Russian PKI support, a list of assigned addresses, and controls to remove individual mappings or clear the list. Disabling the feature removes all Russian PKI behavior and restores standard Firefox validation everywhere.
Good Bear 1.0 deliberately excludes GOST algorithms, global root import, automatic updates, and support for additional platforms. The project is distributed under the Mozilla Public License 2.0 with publicly available patched sources, SBOM in CycloneDX format, and SHA-256 checksums. No affiliation is claimed with Mozilla, Russian government agencies, or any official certification body.
Related articles
Survey of 254 Russian Domains Shows 89% DMARC Adoption but Highlights Gaps in Reporting and Subdomain Policies
A manual review of public DNS records across 254 prominent Russian domains from 17 sectors found strong baseline adoption of email authentication mechanisms. MX records appeared in 96.1% of domains, SPF in 93.7%, DMARC in 89.0%, and DKIM records via common selectors in 62.2%. Among domains with DMARC, 40.7% published a reject policy and 42.9% used quarantine, while 16.4% remained at none. Notably, 19% of DMARC-enabled domains lacked any rua address for aggregate reports, including 33 domains enforcing reject or quarantine. The study also identified cases of inconsistent policies between parent domains and subdomains, as well as SPF records ending in ~all paired with strict DMARC settings. Researchers emphasized that DNS data alone cannot confirm actual mail flow alignment or report consumption.
Server Outage Halts Vehicle Registration Across Smolensk Region
A technical failure on a unified server has temporarily suspended vehicle registration services in the Smolensk region of Russia. The outage affects the interdistrict traffic police department No.1 located on Lavochkina street, preventing new registrations from being processed. Regional UMVD officials confirmed that the problem impacts the single server used for the entire oblast's registration system. According to department head Maxim Zykov, the disruption is considered temporary, though no precise restoration timeline was provided. Applicants who submitted requests through the Gosuslugi portal will receive services in the first working days after the system is restored. The UMVD plans to issue an additional announcement once operations resume.
Pivoting in Legacy Hell: Navigating MIPS Servers, BusyBox, and 2014 Kernels During Internal Network Assessments
The article details a complete methodology for pivoting from an initial SSH compromise on an old Debian MIPS server to reach a hidden web admin panel inside a segmented network. It covers environment enumeration with commands like uname -a and ip route, followed by setting up a Chisel-based SOCKS5 proxy when standard SSH dynamic forwarding is disabled by server configuration. Scanning proceeds via proxychains with nmap using -sT, -Pn, and -n flags or by deploying static MIPS binaries directly on the host. Traffic is then routed through Burp Suite chained to the SOCKS proxy for password guessing against the web interface. The piece emphasizes practical constraints such as BusyBox limitations, kernel version incompatibilities with modern binaries, and the need for careful subnet identification. Readers are directed to replicate the full chain in the Forgotten Server task from the free White Hacker Profession course.
Neuromorphic Processors Deliver Reflex-Like Responses for Robots, Drones and Edge Sensors
Neuromorphic chips are optimized for sparse, event-driven data rather than dense matrix operations, making them ideal for always-on peripheral devices that must react instantly while conserving power. The technology pairs naturally with event cameras and temporal sensors in robotics, drones, automotive systems, medical wearables, industrial monitoring and space applications. Platforms such as Intel Loihi 2, BrainChip Akida, SynSense Speck and SpiNNaker2 already demonstrate working prototypes that activate only on meaningful changes in the input stream. Researchers at TU Delft have flown autonomous drones using spiking networks on Loihi, while NASA has tested radiation-tolerant neuromorphic designs for onboard decision making. The approach complements rather than replaces GPUs and NPUs, creating hybrid systems where the neuromorphic layer handles fast reflexes and conventional accelerators manage complex models.