Risky Business #386 — Katie Moussouris on the (groan) disclosure debate

On this week's show we're checking in with Katie Moussouris of HackerOne. She's an ex Microsoftie who's spent something like a decade working on vulnerability disclosure policies. She even helped get a vuln disclosure ISO standard ratified!

And she'll be joining us this week to discuss disclosure politics, I guess you'd call it... for those of us who've been around infosec for a while, most of us would rather stick our face in a blender than talk about it, but Katie will be along to point out why people should fight their "disclosure debate fatigue" and get involved.

read more

Xirrus Offers New Security Option For Public Wi-Fi

Xirrus is launching a new security feature to encrypt wireless connections between a device and an AP on a public Wi-Fi network. While it's easy to use, it does have limitations.

The post Xirrus Offers New Security Option For Public Wi-Fi appeared first on Packet Pushers.

ONUG And Tech Field Day: A Preview

The impact of open networking on the enterprise will be a hot topic at ONUG and the ONUG Tech Field Day Extra. I'll be reporting from both events.

The post ONUG And Tech Field Day: A Preview appeared first on Packet Pushers.

Back to Basics: How to Rack a Switch

This article is the first in a new mini-series where I will be doing semi-deep dives on some of the simpler, but often overlooked, aspects of network and datacenter engineering. Approx Reading Time: 3-4 Minutes It is quite commonplace these days to see equipment mounted incorrectly in a rack. Even though we are not mechanical […]

The post Back to Basics: How to Rack a Switch appeared first on Packet Pushers.

Polite Malware, Vegetarian Propaganda: This Week On The Internet

This Week On The Internet looks at some unusual IoT malware, why breaks are important, how to become a pro gamer, and vegetarian propaganda.

The post Polite Malware, Vegetarian Propaganda: This Week On The Internet appeared first on Packet Pushers.

Risky Business #385 — Richard Bejtlich talks USA/China espionage agreement

******LANGUAGE WARNING: The f-bomb features, unbleeped, once in this week's show. Just a note for those of you with the kids in the car.

On this week's show we're chatting with FireEye's chief security strategist Richard Bejtlich about this new agreement between China and the USA. The two countries have apparently agreed that they won't hack each other with the aim of stealing IP anymore. Questions to Richard include: Are they kidding? And: How did they announce this with a straight face?

read more

Startup Radar: Datiphy Watches For Database Dangers

Datiphy monitors database transactions to look for potentially malicious behavior. It builds a baseline of normal activity, and alerts if it detects deviations.

The post Startup Radar: Datiphy Watches For Database Dangers appeared first on Packet Pushers.

Bridging Between Cisco VIRL and GNS3 for L2 and Serial Support

One of the known issue for anyone preparing for a Cisco exam is that the solutions available today don’t support all the needed features.  Cisco VIRL supports L2 switching out of the box, whereas GNS3 does not.  GNS3 supports the configuration of serial interfaces on routers whereas Cisco VIRL does not.  For someone starting out in this […]

The post Bridging Between Cisco VIRL and GNS3 for L2 and Serial Support appeared first on Packet Pushers.

Skynet Barbie, Tablet Babysitters: This Week On The Internet

This Week On The Internet looks at an AI Barbie, the effect of mobile devices on young kids, how to fight surveillance, and funny cooking advice.

The post Skynet Barbie, Tablet Babysitters: This Week On The Internet appeared first on Packet Pushers.

An EIGRP Scaling Puzzle

This last week I received an email from a friend asking about scaling. The situation is this: a particular company has well over 100 EIGRP routers on a single L2 service from a provider. Will this scale? What’s more interesting than simply asking about scale, though, is to ask the “why” question — no matter […]

The post An EIGRP Scaling Puzzle appeared first on Packet Pushers.

Cisco Targets SMBs In WLAN War With HP/Aruba

Cisco's new WLAN product, Mobility Express, targets customers who want simple deployment, and gives Cisco a weapon against HP/Aruba.

The post Cisco Targets SMBs In WLAN War With HP/Aruba appeared first on Packet Pushers.

Risky Business #384 — Mark Dowd talks AirDrop pwnage, XCode iOS scandal

We've got a great show for you this week. Mark Dowd drops by to talk about the recent spate of Trojaned iOS apps that made it into Apple's China App Store. We also talk to him about his awesome AirDrop bug. How did it work?

This week's sponsor segment is actually a real cracker. Context IS consultant David Klein tells us how he owned an entire cloud platform by enumerating some shitty 90s-style bugs in some third party libraries they were using. It's comedy gold. This cloud platform that uses security at a selling point. It's bad.

read more

Increased Security Spending: Good Money After Bad?

A couple of recent analyst reports tout significant growth in the information security market. But More security spending on products doesn’t necessarily mean better outcomes for customers.

The post Increased Security Spending: Good Money After Bad? appeared first on Packet Pushers.

The Open Networking Cheat Sheet

A variety of open projects target the network. This cheat sheet keeps track of who's doing what at OpenDaylight, OpenFlow, OVS, OpenStack, ONOS, and Open Compute.

The post The Open Networking Cheat Sheet appeared first on Packet Pushers.

Starbucks On Dune, WiFi Allergies: This Week On The Internet

From pumpkin spice on Dune to WiFi allergies to a giant robot fight and more, here's some interesting stories that crossed my browser this week.

The post Starbucks On Dune, WiFi Allergies: This Week On The Internet appeared first on Packet Pushers.

Risky Business #383 — Inside FireEye’s research gag

On this week's show we take a look at what the hell it happening in Germany, where FireEye sought and obtained an ex parte injunction against a bunch of security researchers over a presentation they were about to do at 44Con. We speak with infosec lawyer Alex Urbelis -- he was at 44Con when all this came to light and he shares his insights.

read more

Brocade Launches SDN Controller 2.0 Built On OpenDaylight

Brocade has launched version 2.0 of its SDN Controller, a commercial distribution of OpenDaylight, the open source project. The company also announced two applications for topology visualization and managing flows.

The post Brocade Launches SDN Controller 2.0 Built On OpenDaylight appeared first on Packet Pushers.

Cisco FlexVPN DMVPN, Part 1 – Overview and Design

This post will introduce a new type of DMVPN – FlexVPN, unofficially called “DMVPN phase 4″ .  We will go through the basic building blocks of Cisco FlexVPN DMVPN and some of the design best practices for a typical enterprise WAN network. FlexVPN Introduction FlexVPN is a configuration framework (a collection of CLI/API commands) aimed to […]

The post Cisco FlexVPN DMVPN, Part 1 – Overview and Design appeared first on Packet Pushers.

This Week On The Internet: Animated AT-AT, Abused Robot

From an animated AT-AT to the need for punchable robots to a post-Internet utopia, here's a selection of strange and interesting items coughed up online.

The post This Week On The Internet: Animated AT-AT, Abused Robot appeared first on Packet Pushers.

HTIRW: The Internet Society

In ending this series — which I hope has been useful for Packet Pusher’s readers to get a solid survey of the entire Internet’s operational structure — we’ll talk about one of the “forgotten” groups of people helping to build and maintain the ‘net as we know it. Without this organization the Internet probably simply […]

The post HTIRW: The Internet Society appeared first on Packet Pushers.