AntiMalware•October 15, 2026•🇷🇺Translated from Russian

Russia Expands Digital Birth Certificates via MAX App for Transport, Healthcare and Public Services

The Russian government has expanded the range of situations in which parents may confirm a minor’s identity using the Digital ID feature inside the MAX service instead of presenting a paper birth certificate.

Electronic confirmation is now permitted when purchasing tickets, arranging free or reduced-fare travel, and boarding transport. The updated list also includes medical assistance under OMS, visits to MFC offices, museums, cultural-educational and sports events, and the purchase of discounted tickets.

The digital option extends to any other service where a parent or child must prove identity. The birth certificate itself is located in the “Family and Children” section of the Digital ID service; a parent displays the QR code and staff scan the data.

This approach is already operating for hotel check-ins, with more than 3,000 hotels across Russia connected to the system. Implementation will proceed gradually as additional organizations integrate the necessary readers, so the presence of a QR code does not guarantee immediate acceptance at every location.

Use of the electronic version is entirely voluntary. The traditional paper birth certificate remains fully valid, giving families the choice to leave the physical document at home during museum visits, sports competitions or medical appointments.

Related articles

Securitylab•Other

Neuromorphic Processors Lag Behind GPUs for Large AI Models Despite Energy Advantages

Neuromorphic chips such as Intel Loihi promise major energy savings by activating only when events occur, yet data centers remain dominated by GPUs optimized for dense matrix operations in generative AI. The mismatch arises because modern large language models rely on high-precision linear algebra, massive memory bandwidth, and mature software stacks that neuromorphic architectures currently lack. Researchers are exploring spiking transformers and on-chip plasticity via mechanisms like STDP, but scaling to billions of parameters remains challenging. Companies including BrainChip, SynSense, and SpiNNaker2 have released commercial neuromorphic hardware, yet the absence of standardized tools and clear performance gains for mainstream workloads slows adoption. Hybrid approaches combining neuromorphic blocks with in-memory computing, analog circuits, and photonic accelerators may define future heterogeneous systems rather than outright replacement of GPUs.

Habr•Other

PT AF Cloud Uses Machine Learning to Detect Shifts in Web Attack Patterns from Millions of WAF Events

Positive Technologies has detailed how its PT AF Cloud service applies anomaly detection to WAF events, turning tens of millions of daily security events into actionable weekly alerts for SOC teams. The system builds traffic profiles based on the distribution of triggered protection rules for each tenant and compares current hourly or daily profiles against a weighted historical baseline using Jensen-Shannon distance. This approach identifies meaningful changes in attack composition even when overall event volume remains stable, catching the start of scans, exploitation of newly published vulnerabilities, or post-release application changes that trigger new rules. Two detection modes operate in parallel: an hourly mode for rapid spikes and a daily mode for gradual shifts distributed across multiple hours. Alerts include comparative tables of top rules, unique attack vectors, and direct links to the relevant events in the PT AF interface. Over four weeks the detector surfaced roughly 1,100 anomalies across the cloud, with expert review confirming that 69 percent indicated either an attack or a protection misconfiguration.

Habr•Other

How to Prepare Your Website for Data Center Outages: Business Resilience Checklist

Following strikes on Yandex data centers, many businesses discovered that their sites and all backups were stored in a single location, leading to complete outages. The article provides a detailed checklist to mitigate such risks by separating critical components across different providers. Key recommendations include moving DNS to an independent provider, lowering TTL values, maintaining a live mirror site on separate hosting, and isolating corporate email. Additional steps cover local backups, monitoring, access management, and CDN usage. The guidance differentiates between virtual hosting, VPS or dedicated servers, and website builders like Tilda, while emphasizing compliance with Russian data localization laws such as 152-FZ.

Securitylab•Other

How to Properly Compare CDNs: TTFB, p95 Latency, Caching, DDoS Protection and True Pricing

Selecting a CDN based solely on the number of points of presence is as unreliable as choosing a car by dashboard buttons. Networks with dozens of global PoPs may underperform for audiences concentrated in Novosibirsk or Yekaterinburg, while smaller regional providers often deliver superior peering with Russian operators. The article evaluates CDNVideo, EdgeCenter, Curator, NGENIX and Yandex Cloud CDN across verifiable features, network design, caching behavior, security controls, operations and commercial models. Performance data is separated because marketing claims cannot substitute for independent measurements from services such as CDNMON. Emphasis is placed on p95 metrics, cache hit ratios, origin shielding, raw logs and API limits rather than marketing scores. The analysis shows that no single universal ranking exists; optimal choice depends on traffic profile, audience geography, security requirements and operational workflows.