Worth Reading: Defeating AMD’s SEV

German security researchers claim to have found a new practical attack against virtual machines (VMs) protected using AMD’s Secure Encrypted Virtualization (SEV) technology that could allow attackers to recover plaintext memory data from guest VMs. —Mohit Kumar @The Hacker News

On the ‘net: Clarifying Disaggregation

Software Defined Networks (SDNs), Network Function Virtualization (NFV), white box, and large-scale fabrics built out of small fixed configuration devices are all trends that seem to be “top of mind” right now in the network engineering world. While these four trends appear to be completely different ideas, they are closely related through a single concept: disaggregation. This article will consider the meaning of disaggregation, and then how this single concept applies to the four previously noted movements. @SearchSDN

Worth Reading: Work-life Balance

“This work-life harmony thing is what I try to teach young employees and actually senior executives at Amazon too. But especially the people coming in,” he said. “I get asked about work-life balance all the time. And my view is, that’s a debilitating phrase because it implies there’s a strict trade-off.” —Kari Paul @Marketwatch

Worth Reading: Kata Containers

Intel has been working on the Clear Containers Project for some time to address security concerns within containers through Intel Virtualization Technology (Intel VT). This essentially offers the capability to launch containers as lightweight virtual machines (VMs), providing an alternative runtime, which is interoperable with popular container environments such as Kubernetes and Docker. —Swapnil Kulkarni @opensourcefouru

Short Take: Practical Career Advice

One problem I’ve heard in the past is that much of the career advice given in the networking world is not practical. In this short take, I take this problem on, explaining why it might be more practical than it initially seems.

Worth Reading: The old switcharoo

The cost of servers keeps going up and up, thanks in large part to memory, flash, and GPU prices rising as too much demand chases too little supply and also due in part to the rising cost of processors. So the server market is booming. And guess who is actually paying for it? Network vendors, who are being ground down like sacks of wheat in the massive granite grist mill of intense competition. —Timothy Prickett Morgan @The Next Platform

Worth Reading: On the essence of foundations

One cannot employ the same “laser focus” building techniques in an unknown area as one would on a city lot. While the prospecting may not be obviously applicable to building the house, it’s essential in remote areas. Finding pitfalls and potential issues for a building site can save hundreds of thousands of dollars later. Finding mineral deposits can bring enormous unexpected wealth. @The Math Citadel

Worth Reading: A high profile outage riles traders

Our technology has become so advanced that markets are never hit by glitches, right? Not at all. The London Stock Exchange’s one-hour delay to its open on Thursday is only the latest high-profile malfunction to rile up traders. —Victor Reklaitis @Marketwatch

At Cisco Live!

The Network Collective crew—Jordan, Eyvonne, and I—will be at Cisco Live this week. You can normally find me hanging around the certifications or social media lounge, or just walking around the floor talking to folks. I’m presenting at the CCDE techtorial on Sunday.

Weekend Reads 060818

Migrating to IPv6 will make you ready for the next stage of the Internet. I was the principal network design engineer and member of the project team for deploying native IPv6 for all residential home users at Vodafone New Zealand two years ago. As an outcome of that project, IPv6 has been deployed for about 80% of residential home Internet users now. —Mansour Ganji @APNIC

After being embroiled into controversies over its data sharing practices, it turns out that Facebook had granted inappropriate access to its users’ data to more than 60 device makers, including Amazon, Apple, Microsoft, Blackberry, and Samsung. —Swati Khandelwal @The Hacker News

Over the past few years, researchers have started to choreograph vulnerability announcements to make a big press splash. Clever names — the e-mail vulnerability is called “Efail” — websites, and cute logos are now common. Key reporters are given advance information about the vulnerabilities. Sometimes advance teasers are released. Vendors are now part of this process, trying to announce their patches at the same time the vulnerabilities are announced. —Bruce Schneier

Yes, there are habits of highly effective cyber-criminals use to be successful! We can leverage the knowledge of these habits to better prepare, Continue reading

Ancient and Modern

Worth Reading: Distraction free reading

The problem with reading in a browser window is that it’s full of distractions. Elements like navigation tools, headers and footers, ads, link boxes, and more can slow your reading and cause frustration. —Scott Nesbitt @opensource.com

Worth Reading: The world’s first cyberattack

The world’s first national data network was constructed in France during the 1790s. It was a mechanical telegraph system, consisting of chains of towers, each of which had a system of movable wooden arms on top. —Tom Standage @1843

Worth Reading: A new report on defending against botnets

On May 11, 2017, the President issued Executive Order (EO) 13800, “Strengthening the Cybersecurity ofFederal Networks and Critical Infrastructure,” calling for “resilience against botnets and otherautomated, distributed threats.”1 The President directed the Secretary of Commerce and the Secretaryof Homeland Security to “lead an open and transparent process to identify and promote action byappropriate stakeholders” with the goal of “dramatically reducing threats perpetrated by automatedand distributed attacks (e.g., botnets).”

On the ‘web: Two Kinds of Design

Information technology design often follows a common sort of process. First you gather the business requirements. While you do your best to gather all the requirements, you know you will miss some, so you assume the project in hand will change over time. As such, you build some “slop” into the schedule and scaling numbers to account for possible changes, based on prior experience. @ECI

Worth Reading: 5G is a delicate balance

How many of you have heard that 5G will change the world as we know it? While this statement may be a bit extreme, there is no doubt that this ‘G’ is a completely different beast than the previous mobile generations. —Hayim Porat @ECI

Worth Reading: The hijacking of 1.1.1.1

At 29-05-2018 08:09:45 UTC, BGPMon (A very well known BGP monitoring system to detect prefix hijacks, route leaks and instability) detected a possible BGP hijack of 1.1.1.0/24 prefix. —Aftab Siddiqui @APNIC

Reaction: The Power of Open APIs

Disaggregation, in the form of splitting network hardware from network software, is often touted as a way to save money (as if network engineering were primarily about saving money, rather than adding value—but this is a different soap box). The primary connections between disaggregation and saving money are the ability to deploy white boxes, and the ability to centralize the control plane to simplify the network (think software defined networks here—again, whether or not both of these are true as advertised is a different discussion).

But drivers that focus on cost miss more than half the picture. A better way to drive the value of disaggregation, and the larger value of networks within the larger network technology sphere, is through increased value. What drives value in network engineering? It’s often simplest to return to Tannenbaum’s example of the station wagon full of VHS backup tapes. To bring the example into more modern terms, it is difficult to beat the bandwidth of an overnight box full of USB thumb drives in terms of pure bandwidth.

In this view, networks can primarily be seen as a sop to human impatience. They are a way to get things done more quickly. In the Continue reading

Worth Reading: How complaining makes us miserable

Complaining can become a state of mind, directing our orientation towards life. Comedian Lily Tomlin once quipped, “Man invented language to satisfy his deep need to complain.” —Barry Brownstein @Intellectual Takeout

Worth Reading: It’s time to replace TCP

TCP congestion control architecture is notorious for degraded performance in numerous real-world scenarios. In this post, we present the recently proposed online learning approach to congestion control — Performance-oriented Congestion Control (PCC). —Michael Schapira @APNIC