TL&DR: Violating the Betteridge’s Law of Headlines, the answer is “Yes, but the devil is in the details.”
It all started with the following observation by Minh Ha left as a comment to my previous BGP session security blog post:
I’d think it’d be obvious for BGP routers to only accept incoming sessions from configured BGP neighbors, right? Because BGP is the most critical infrastructure, the backbone of the Internet, why would you want your router to accept incoming session from anyone but KNOWN sources?
Following my “opinions are good, facts are better” mantra, I decided to run a few tests before opinionating1.
TL&DR: Violating the Betteridge’s Law of Headlines, the answer is “Yes, but the devil is in the details.”
It all started with the following observation by Minh Ha left as a comment to my previous BGP session security blog post:
I’d think it’d be obvious for BGP routers to only accept incoming sessions from configured BGP neighbors, right? Because BGP is the most critical infrastructure, the backbone of the Internet, why would you want your router to accept incoming session from anyone but KNOWN sources?
Following my “opinions are good, facts are better” mantra, I decided to run a few tests before opinionating1.
Today on the Tech Bytes podcast we talk about techniques to improve user experience and application performance while also securing end users, applications, and devices. Our sponsor is Palo Alto Networks and we’ll talk about how Palo Alto Networks is integrating technologies such as Remote Browser Isolation and application acceleration into Prisma Access, their cloud-delivered security offering.
The post Tech Bytes: Secure Hybrid Workers Without Compromising User Experience (Sponsored) appeared first on Packet Pushers.
Historically, data center servers have used motherboards that included all key components on a single circuit board. The DC-SCM (Datacenter-ready Secure Control Module) decouples server management and security functions from a traditional server motherboard, enabling development of server management and security solutions independent of server architecture. It also provides opportunities for reducing server printed circuit board (PCB) material cost, and allows unified firmware images to be developed.
Today, Cloudflare is announcing that it has partnered with Lenovo to design a DC-SCM for our next-generation servers. The design specification has been published to the OCP (Open Compute Project) contribution database under the name Project Argus.
A baseboard management controller (BMC) is a specialized processor that can be found in virtually every server product. It allows remote access to the server through a network connection, and provides a rich set of server management features. Some of the commonly used BMC features include server power management, device discovery, sensor monitoring, remote firmware update, system event logging, and error reporting.
In a typical server design, the BMC resides on the server motherboard, along with other key components such as the processor, memory, CPLD and so on. This Continue reading
This week's Network Break covers a new set of Layer 1 switches from Arista for high-frequency trading, Ruckus announcing a (pre-ratified) Wi-Fi 7 AP, and AWS planning to require multi-factor authentication starting in mid-2024. MGM Resorts says it will take a $100 million hit due to a security breach, the UK finally fines Equifax for a 2017 breach, and Broadcom may have cleared a China hurdle to its VMware acquisition.
The post Network Break 451: Making A Ruckus About Wi-Fi 7; Arista Announces 25G Layer 1 Switches; AWS To Require MFA appeared first on Packet Pushers.
Bruce Schneier wrote a thoughtful article on the various perceptions of AI Risks including this gem:
As the science-fiction author Ted Chiang has said, fears about the existential risks of AI are really fears about the threat of uncontrolled capitalism, and dystopias like the paper clip maximizer are just caricatures of every start-up’s business plan.
Enjoy!