AntiMalware•October 15, 2026•🇷🇺Translated from Russian

Russia Expands Digital Birth Certificates via MAX App for Transport, Healthcare and Public Services

The Russian government has expanded the range of situations in which parents may confirm a minor’s identity using the Digital ID feature inside the MAX service instead of presenting a paper birth certificate.

Electronic confirmation is now permitted when purchasing tickets, arranging free or reduced-fare travel, and boarding transport. The updated list also includes medical assistance under OMS, visits to MFC offices, museums, cultural-educational and sports events, and the purchase of discounted tickets.

The digital option extends to any other service where a parent or child must prove identity. The birth certificate itself is located in the “Family and Children” section of the Digital ID service; a parent displays the QR code and staff scan the data.

This approach is already operating for hotel check-ins, with more than 3,000 hotels across Russia connected to the system. Implementation will proceed gradually as additional organizations integrate the necessary readers, so the presence of a QR code does not guarantee immediate acceptance at every location.

Use of the electronic version is entirely voluntary. The traditional paper birth certificate remains fully valid, giving families the choice to leave the physical document at home during museum visits, sports competitions or medical appointments.

Related articles

Securitylab•Other

Wireshark Wi-Fi Traffic Analysis: Diagnosing Connectivity Failures in 802.11 Networks

Wireshark captures help distinguish between radio-layer issues, DHCP failures, and application-layer problems when a device connects to Wi-Fi but cannot load pages. The guide explains how to select the right capture point—client, monitor-mode adapter, or wired side of the access point—and why ordinary Ethernet headers often hide critical 802.11 management and control frames. Detailed sections cover CSMA/CA contention, frame types (Management, Control, Data), EAPOL-Key exchanges for WPA2-Personal, and the limitations of retry flags as loss indicators. Practical Linux commands using iw, dumpcap, and NetworkManager demonstrate how to enable monitor mode on channel 6 HT20 and record a two-minute trace. Filters for wlan.addr, eapol, and wlan.fc.retry allow analysts to isolate association failures, key-handshake problems, or DHCP delays. The article also addresses decryption of WPA2 traffic with a known passphrase and warns that Wireshark cannot replace a spectrum analyzer for detecting non-Wi-Fi interference.

Habr•Other

15-Year-Old Developer Restores Social Network After Beget VPS Data Wipe in Cyber Attack

A 15-year-old Russian developer recovered his social network Agora within three hours after hosting provider Beget confirmed that a cyber attack had wiped his VPS, including binary backups. The recovery relied on offsite encrypted PostgreSQL dumps created just one day earlier using pg_dump and GPG, an escrow key for end-to-end encrypted messages, and pre-written migration scripts stored in a repository. The master encryption key stored only in the server environment was lost, rendering old private keys unusable and forcing a full re-encryption of 1218 messages via the escrow mechanism. Additional issues included broken authentication in existing Android builds, dead push notification subscriptions, and a failed monitoring runner hosted on the destroyed server. The incident highlighted the risks of single-provider architecture and insufficient offline key storage while demonstrating effective disaster recovery practices for a self-hosted Supabase stack.

Habr•Other

Developer Creates Personal Task Manager Allowing Claude Code and OpenCode Agents to Autonomously Execute Marked Tasks

A developer has built a personal task management system at shar8.app that integrates directly with AI coding agents including Claude Code, Codex CLI, and OpenCode through the Model Context Protocol. Tasks marked with an 'Agent' flag are automatically picked up by scheduled agent runs, executed locally on the user's machine, and results are written back into the task notes for human review. The system supports both browser-based OAuth authentication and persistent bearer tokens for headless cron or CLI usage, with strict separation between human-initiated and agent-initiated actions. Security measures include treating task text as untrusted data rather than instructions, disabling all tools by default, and requiring explicit allow-lists for any external actions such as web search. The implementation uses a custom MCP server exposing fifteen specific tools for listing, creating, editing, and delegating tasks, while a companion plugin for Claude Code handles scheduled execution via native system schedulers like launchd and systemd timers. The author emphasizes that agents never assign work to themselves and that final task closure always remains with the human user.

AntiMalware•Other

T-Bank Warns Customers of Payment and Transfer Outages

On November 3, T-Bank notified users that payments and transfers may fail due to ongoing technical issues. The bank placed an in-app message stating that the problems are being fixed. Clients confirmed the disruption through reports to Interfax, noting that the online banking interface displays the warning upon login. The outage affects only payments and transfers, while other banking services remain available. No details were provided regarding the root cause, the number of impacted users, or an estimated time for full recovery. Monitoring service DETECTOR404 also recorded the incident, aligning with user complaints and the bank's official notice.