Big Changes Ahead for Core Internet Protocols – IETF Journal
Excellent summary of what seems to be poorly understood. IPv6 is going nowhere slowly but the higher level protocols are changing today. Now, significant changes to the core Internet protocols are underway. While they are intended to be compatible with the Internet at large (since they won’t get adoption otherwise), they might be disruptive to […]
Big Red Button for Network Automation
A while ago I was enjoying a few beers with a longtime friend of mine who happens to be running the networking team for one of the rare companies that understands how infrastructure should be built and operated.
Of course, I had to ask him what he thinks about the imminent death of CLI and all-encompassing automatic provisioning from some central orchestration system. Here’s the gist of his response:
Read more ...Ansible for Network Automation Tutorial
In this excerpt from "Practical Network Automation," learn how to get started with Ansible for networking.
Take Application Security to the Next Level – VMware and Carbon Black team up
Perhaps you’ve already begun to secure virtualized applications by rolling out micro-segmentation with NSX, but segmentation of the network is only the beginning to embracing least privilege in your environment.
VMware has teamed up with Carbon Black to go beyond network protection and change the way your data center endpoints themselves are protected. By leveraging the unique properties of virtualization and the hypervisor, along with next-generation detection and response, VMware and Carbon Black are able to shrink your environment’s attack surface and respond to detected threats with precision and speed.
Learn more here, and come see the solution in action at the Cloud Force Security road show (coming to a city near you)!
The post Take Application Security to the Next Level – VMware and Carbon Black team up appeared first on Network Virtualization.
Dell EMC Introduces New Certifications to Establish and Validate IT Skills of the Future
Four new certifications help organizations maximize technology investments, modernize IT, build in-house transformation expertise Highest-level certification, Dell EMC Certified Master – Enterprise Architect, validates ability to design and implement secure IT-as-a-Service solutions for the digital economy Additional certifications focused on converged/hyper-converged infrastructure, multi-cloud administration and infrastructure security Dell EMC unveiled new certifications that establish and... Read more →
Accedian Acquires APM, NPM Vendor Performance Vision
Performance Vision’s software will be rebranded as Skylight PVX.
Kublr Kubernetes Distro Update Opens Up Enterprise Container Plans
The company touts easier deployment and management compared with rivals.
How to Begin Integrating AI into Data Center Operations
Data center automation is inevitable. Here's how to do it right from the beginning.
BiB 036: Anuta Launches ATOM For Network Infrastructure Orchestration
Anuta Networks launches its ATOM platform for multi-vendor network infrastructure automation and orchestration.
The post BiB 036: Anuta Launches ATOM For Network Infrastructure Orchestration appeared first on Packet Pushers.
NANOG Keynote: History of the Internet (it was not the bomb)
Scott Bradner retired in late 2016 after more than 50 years in Harvard University IT. Along the way he worked in the IETF for 25 years – 10 on the IESG – and served on the ISOC & ARIN boards.
Validating Leaked Passwords with k-Anonymity
Today, v2 of Pwned Passwords was released as part of the Have I Been Pwned service offered by Troy Hunt. Containing over half a billion real world leaked passwords, this database provides a vital tool for correcting the course of how the industry combats modern threats against password security.
I have written about how we need to rethink password security and Pwned Passwords v2 in the following post: How Developers Got Password Security So Wrong. Instead, in this post I want to discuss one of the technical contributions Cloudflare has made towards protecting user information when using this tool.
Cloudflare continues to support Pwned Passwords by providing CDN and security functionality such that the data can easily be made available for download in raw form to organisations to protect their customers. Further; as part of the second iteration of this project, I have also worked with Troy on designing and implementing API endpoints that support anonymised range queries to function as an additional layer of security for those consuming the API, that is visible to the client.
This contribution allows for Pwned Passwords clients to use range queries to search for breached passwords, without having to disclose a complete unsalted Continue reading
How Developers got Password Security so Wrong
Both in our real lives, and online, there are times where we need to authenticate ourselves - where we need to confirm we are who we say we are. This can be done using three things:
- Something you know
- Something you have
- Something you are
Passwords are an example of something you know; they were introduced in 1961 for computer authentication for a time-share computer in MIT. Shortly afterwards, a PhD researcher breached this system (by being able to simply download a list of unencrypted passwords) and used the time allocated to others on the computer.
As time has gone on; developers have continued to store passwords insecurely, and users have continued to set them weakly. Despite this, no viable alternative has been created for password security. To date, no system has been created that retains all the benefits that passwords offer as researchers have rarely considered real world constraints[1]. For example; when using fingerprints for authentication, engineers often forget that there is a sizable percentage of the population that do not have usable fingerprints or hardware upgrade costs.
Cracking Passwords
In the 1970s, people started thinking about how to better store passwords and cryptographic hashing started to Continue reading
Vectra Raises $123M for Global Push of its AI-Based Security Platform
The startup’s revenue grew 181 percent in 2017 over the previous year.
Swisscom, Ericsson Team on Network Slicing Tests
Public safety groups may benefit from slicing functionality.
Software-Defined Networking Powers Fixed Wireless Network
EOLO built a custom SDN routing appliance for deployment at radio towers.
History of Networking: Policy with Joel Halpern
Policy at Internet scale is a little understood, and difficult (potentially impossible) to solve problem. Joel Halpern joins the History of Networking over at the Network Collective to talk about the history of policy in the Internet at large, and networked systems in general.
Riverbed Updates SD-WAN to Serve Businesses From Cloud to Network Edge
It added integrations with Xirrus WiFi and enhanced its automated cloud connectivity.