Grand Staircase

The post Grand Staircase appeared first on 'net work.

Worth Reading: The biggest attack in internet history

For a long time, Akamai offered their DOS protection service to Krebs pro bono, both as a public service and because it’s fantastic advertising. Brian is perhaps the most high-profile target for cyber-criminals: if Akamai can defend his site, they can defend anybody’s. But it would appear Brian’s latest round of reporting—including both the Israeli arrests and outing the fact that an anti-DOS service’s former owner appeared to control a huge DOS botnet—has managed to annoy someone enough to launch a DOS attack that not only disrupted Kreb’s site but actually caused disruption to Akamai’s other services! This attack was so disruptive that Akamai had to prioritize their paying customers and stop supporting Kreb’s site. —LawFare

The post Worth Reading: The biggest attack in internet history appeared first on 'net work.

Worth Reading: A digital rumor should never lead to a police raid

If police raided a home based only on an anonymous phone call claiming residents broke the law, it would be clearly unconstitutional. Yet EFF has found that police and courts are regularly conducting and approving raids based on the similar type of unreliable digital evidence: Internet Protocol (IP) address information. In a whitepaper released today, EFF challenges law enforcement and courts’ reliance on IP addresses, without more, to identify the location of crimes and the individuals responsible. —EFF

The post Worth Reading: A digital rumor should never lead to a police raid appeared first on 'net work.

Worth Reading: the growing problem of bots that fight on line

“An increasing number of decisions, options, choices, and services depend now on bots working properly, efficaciously, and successfully,” say Taha Yasseri and pals at the University of Oxford in the U.K. “Yet, we know very little about the life and evolution of our digital minions.” This raises an interesting question. How do bots interact with each other? And how do these interactions differ from the way humans interact? —MIT Technology Review

The post Worth Reading: the growing problem of bots that fight on line appeared first on 'net work.

Worth Reading: Upstream surveillence

First disclosed as part of the Snowden revelations, Upstream surveillance involves the NSA’s bulk interception and searching of Americans’ international Internet communications — including emails, chats, and web-browsing traffic — as their communications travel the spine of the Internet between sender and receiver. If you send emails to friends abroad, message family members overseas, or browse websites hosted outside of the United States, the NSA has almost certainly searched through the contents of your communications — and it has done so without a warrant. —Just Security

The post Worth Reading: Upstream surveillence appeared first on 'net work.

But it’s a Virtual Ocean

The post But it’s a Virtual Ocean appeared first on 'net work.

Worth Reading: Hollywood and ‘net neutrality

70% of all U.S. bandwidth – is consumed by video streaming. Netflix all by itself – uses 37%. Netflix and YouTube-owning-Google all by themselves – use 50%. And Amazon – in addition to their inordinately busy online shopping mega-mall – offers video-content-streaming Amazon Prime. And thanks to uber-stupid Net Neutrality – these bandwidth hogs don’t have to pay for their unlimited time at the trough. Even though they’re consuming more than half the bill of fare. —Heartland

The post Worth Reading: Hollywood and ‘net neutrality appeared first on 'net work.

Worth Reading: Project autobuild

LinkedIn’s data center infrastructure has grown at a massive scale. Starting with one server setup, one cabinet at a time, we’re now powering on hundreds of servers at a time and seeing them come online automatically. You could call it “Zero Touch Provisioning” for systems. This evolution presented us with many challenges, however. This post will describe how our Systems Platform team solved several of the problems they faced during this transformation by using a combination of innovations from the open source community and the team’s own technical talent. —LinkedIn Engineering Blog

The post Worth Reading: Project autobuild appeared first on 'net work.

Being an Effective Interviewer

One challenging aspect of being an engineer is interviewing other engineers. The interview process is rife with various problems, including the discomfort of interviewing someone who you perceive as being a better engineer than you are, or figuring out how to draw out actual engineering skill versus simply finding out how much someone has memorized. Does that CCIE or degree on their resume really mean anything? What does an effective network engineering interview look like?

There are, of course, several different theories “out there.” For instance, some companies focus on giving candidates “real world” problems to solve, and checking with them several days later to see how they’ve done. This is potentially useful, but quite often I find my best work is done with a team, rather than by myself. Such systems seem to tend towards pitting the candidate against well known or well established problem sets, which can easily revert back to memorization skills, or towards difficult/obtuse problems. Either way, this doesn’t test the candidate’s ability to work in a team, or interact with others in solving difficult problems.

What about tossing other sorts of puzzles towards the candidate to see how they do? This also seems problematic Continue reading

Worth Reading: Pre-Internet digital communications

The Internet is a platform for universal communication. You can plug a device into any Internet connection, and provided it speaks TCP/IP, you can communicate with any other point on earth. But before the Internet, even before ARPANET, people and devices needed to talk. I thought I would take a look at some of the technologies which enabled people to communicate in a pre-Internet world. —eager

The post Worth Reading: Pre-Internet digital communications appeared first on 'net work.

Worth Reading: The Internet revolution is nothing to email home about

Economist Robert Gordon argues that the Second Industrial Revolution, entailing developments in electricity, internal combustion engines, modern communications, entertainment, petroleum/hydrocarbons, and chemicals, has had the most impact on productivity and living standards. By comparison, the Third Industrial Revolution, based around computing and the internet, appears to be less important. —Market Watch

The post Worth Reading: The Internet revolution is nothing to email home about appeared first on 'net work.

snaproute Go BGP Code Dive (11): Moving to Open Confirm

In the last post in this series, we began considering the bgp code that handles the open message that begins moving a new peer to open confirmed state. This is the particular bit of code of interest—

case BGPEventBGPOpen:
  st.fsm.StopConnectRetryTimer()
  bgpMsg := data.(*packet.BGPMessage)
  if st.fsm.ProcessOpenMessage(bgpMsg) {
    st.fsm.sendKeepAliveMessage()
    st.fsm.StartHoldTimer()
    st.fsm.ChangeState(NewOpenConfirmState(st.fsm))
  }

We looked at how this code assigns the contents of the received packet to bgpMsg; now we need to look at how this information is actually processed. bgpMsg is passed to st.fsm.ProcessOpenMessage() in the next line. This call is preceded by the st.fsm, which means this function is going to be found in the FSM, which means fsm.go. Indeed, func (fsm *FSM) ProcessOpenMessage... is around line 1172 in fsm.go—

func (fsm *FSM) ProcessOpenMessage(pkt *packet.BGPMessage) bool {
 body := pkt.Body.(*packet.BGPOpen)

 if uint32(body.HoldTime) < fsm.holdTime {
  fsm.SetHoldTime(uint32(body.HoldTime), uint32(body.HoldTime/3))
 }

 if body.MyAS == fsm.Manager.gConf.AS {
  fsm.peerType = config.PeerTypeInternal—
 } else {
  fsm.peerType = config.PeerTypeExternal
 }

 afiSafiMap := packet.GetProtocolFromOpenMsg(body)
 for protoFamily, _ := range afiSafiMap {
  if fsm. Continue reading

Worth Reading: Source code is not standards

One of the oft-repeated messages of the Software-Defined Pundits is “Standard bodies are broken, (open) source code is king”… and I’d guess that anyone who was too idealistic before being exposed to how the sausage is being made within IETF has no problems agreeing with them. However… —ipspace

The post Worth Reading: Source code is not standards appeared first on 'net work.

Worth Reading: Organizational Doxing and Disinformation

In the past few years, the devastating effects of hackers breaking into an organization’s network, stealing confidential data, and publishing everything have been made clear. It happened to the Democratic National Committee, to Sony, to the National Security Agency, to the cyber-arms weapons manufacturer Hacking Team, to the online adultery site Ashley Madison, and to the Panamanian tax-evasion law firm Mossack Fonseca. —Schneier on Security

The post Worth Reading: Organizational Doxing and Disinformation appeared first on 'net work.

Plastic Frog on a Plastic Log

The post Plastic Frog on a Plastic Log appeared first on 'net work.

Worth Reading: Google as an advertising gatekeeper

When Google decided in May to stop accepting online ads for short-term, ultra-high-cost personal loans known as payday loans, some people wondered whether the company was acting more like a publisher exercising editorial control than a supposedly neutral search engine. Now that Google’s policy has gone into effect, it’s worth asking: To what extent should the company be a gatekeeper, judging which online ads are okay and which are not? And if the world’s largest Internet search engine is going to be selective about accepting ads, where does it draw the line? —MIT Technology Review

The post Worth Reading: Google as an advertising gatekeeper appeared first on 'net work.

Worth Reading: Slack is less bad than the rest

A topic I complain about with some regularity is my inability to keep up with incoming messages. I’m too busy creating something for someone else to consume to bother trying to keep up. That’s the way of things. If I successfully keep up with all the input, I never achieve useful output. In this world of message misery, Slack is my friend. I find that Slack is better at managing input than most other forms of communication. —Ethan Banks

The post Worth Reading: Slack is less bad than the rest appeared first on 'net work.

On the ‘net: Author Interview at the LeanPub Blog

Len: Hi, I’m Len Epp from Leanpub, and in this Leanpub podcast I’ll be interviewing Daniel Dib and Russ White. Russ is based in North Carolina and has been working with large-scale networks for more than 20 years and written a number of books, co-authored over 40 software patents, and spoken at many different venues around the world. His blog is called Network and you can find it at ntwrk.guru. He’s currently on the architecture team at LinkedIn, where he works on next-generation data-centric designs, complexity, security, and privacy. —LeanPub Blog

The post On the ‘net: Author Interview at the LeanPub Blog appeared first on 'net work.

Worth Reading: Cryptocurrency mining malware infecting NAS’

A malware variant named Mal/Miner-C (also known as PhotoMiner) is infecting Internet-exposed Seagate Central Network Attached Storage (NAS) devices and using them to infect connected computers to mine for the Monero cryptocurrency. Miner-C, or PhotoMiner, appeared at the start of June 2016, when a report revealed how this malware was targeting FTP servers and spreading on its own to new machines thanks to worm-like features that attempted to brute-force other FTP servers using a list of default credentials. —Softpedia

The post Worth Reading: Cryptocurrency mining malware infecting NAS’ appeared first on 'net work.

Worth Reading: The lean and antifragile data center

Cloud is a new technology domain, and data centre engineering is still a developing discipline. I have interviewed a top expert in cloud infrastructure, senior leader and consultant, Pete Cladingbowl of Skozo. He has a vision of the ‘lean’ data centre and a better kind of Internet for users to reach it. He also has a roadmap for how these can be practically realised. The key is to apply established theories of value flow from more mature industries. —CircleID

The post Worth Reading: The lean and antifragile data center appeared first on 'net work.