0

Weekend Reads 102122

New research has disclosed what’s being called a security vulnerability in Microsoft 365 that could be exploited to infer message contents due to the use of a broken cryptographic algorithm.

Telcos deal with a considerable amount of multivendor devices. Although many hope/expect that these are equipped with state-of-the-art telemetry technologies, most of the time they’re not

Concerns over a critical authentication bypass vulnerability in certain Fortinet appliances heightened this week with the release of proof-of-concept (PoC) exploit code and a big uptick in vulnerability scans for the flaw.

Cracks and keygens have long been a problem for software vendors in that they allow users to install their products without needing to pay for a legitimate license. As the Internet and website development advanced and became more accessible, the number of sites offering software cracking tools grew.

The result is ChilliRack, a cooling system that Klein believes can address key challenges in the cost of cooling and the low utilization seen in many data centers.

With DevSecOps coming a long way as a discipline, there are now great frameworks and best practices for applying security gates in your CI, and later CD.

LitmusChaos is a dynamic open source chaos engineering platform Continue reading

0

Heavy Networking 652: Why Networkers Should Want Routing Protocols Written In Rustlang

On today’s Heavy Networking episode, I talk with Nick Carter about Flock Networks, his routing protocol stack startup, as well as Nick’s love of the Rust programming language. As a network engineer, maybe you don’t think you care about Rust. Nick’s here to explain why the discerning network engineer might prefer their routing daemons to have been written in Rust. We also talk about the pleasures and travails of startup life.

The post Heavy Networking 652: Why Networkers Should Want Routing Protocols Written In Rustlang appeared first on Packet Pushers.

0

Heavy Networking 652: Why Networkers Should Want Routing Protocols Written In Rustlang

On today’s Heavy Networking episode, I talk with Nick Carter about Flock Networks, his routing protocol stack startup, as well as Nick’s love of the Rust programming language. As a network engineer, maybe you don’t think you care about Rust. Nick’s here to explain why the discerning network engineer might prefer their routing daemons to have been written in Rust. We also talk about the pleasures and travails of startup life.

0

Page Shield can now watch for malicious outbound connections made by third-party JavaScript code

Page Shield can now watch for malicious outbound connections made by third-party JavaScript code

Many websites use third party JavaScript libraries to cut development time by using pre-built features. Common examples include checkout services, analytics tools, or live chat integrations. Any one of these JavaScript libraries may be sending site visitors’ data to unknown locations.

If you manage a website, and you have ever wondered where end user data might be going and who has access to it, starting today, you can find out using Page Shield’s Connection Monitor.

Page Shield is our client side security solution that aims to detect malicious behavior and compromises that affect the browser environment directly, such as those that exploit vulnerabilities in third party JavaScript libraries.

Connection Monitor, available from today, is the latest addition to Page Shield and allows you to see outbound connections being made by your users’ browsers initiated by third party JavaScript added to your site. You can then review this information to ensure only appropriate third parties are receiving sensitive data.

Customers on our business and enterprise plans receive visibility in outbound connections provided by Connection Monitor. If you are using our Page Shield enterprise add-on, you also Continue reading

0

Integration Platform as a Service (iPaaS) in 2023: Top Trends to Know

Since integration is complex, Integration PaaS (iPaaS) has gained widespread adoption of late, and the trend is expected to continue next year.

0

IoT security strategy from those who use connected devices

Freeman Health System has around 8,000 connected medical devices in its 30 facilities in Missouri, Oklahoma, and Kansas. Many of these devices have the potential to turn deadly at any moment. "That’s the doomsday scenario that everyone is afraid of," says Skip Rollins, the hospital chain's CIO and CISO.Rollins would love to be able to scan the devices for vulnerabilities and install security software on them to ensure that they aren't being hacked. But he can't."The vendors in this space are very uncooperative," he says. "They all have proprietary operating systems and proprietary tools. We can't scan these devices. We can't put security software on these devices. We can't see anything they're doing. And the vendors intentionally deliver them that way."To read this article in full, please click here

0

IoT security strategy from those who use connected devices

Freeman Health System has around 8,000 connected medical devices in its 30 facilities in Missouri, Oklahoma, and Kansas. Many of these devices have the potential to turn deadly at any moment. "That’s the doomsday scenario that everyone is afraid of," says Skip Rollins, the hospital chain's CIO and CISO.Rollins would love to be able to scan the devices for vulnerabilities and install security software on them to ensure that they aren't being hacked. But he can't."The vendors in this space are very uncooperative," he says. "They all have proprietary operating systems and proprietary tools. We can't scan these devices. We can't put security software on these devices. We can't see anything they're doing. And the vendors intentionally deliver them that way."To read this article in full, please click here

0

EVPN Multihoming: Taxonomy and Overview

I promised you a blog post explaining the intricacies of implementing MLAG with EVPN, but (as is often the case) it’s taking longer than expected. In the meantime, enjoy the EVPN Multihoming Taxonomy and Overview video from Lukas Krattiger’s EVPN Multihoming versus MLAG presentation (part of EVPN Deep Dive webinar).

0

Using AIOps and Digital Experience Monitoring to Support Converged Networks

Combining AIOps and DEM solutions with a converged network and security platform allows businesses to grow and adapt to evolving business needs while maintaining optimal performance, protection, and availability.

0

SolarWinds’ Observability offers visibility into hybrid cloud infrastructure

SolarWinds, the maker of a well-known and widely used suite of IT management software products, announced this week that it’s expanding to the cloud, with the release of Observability, a cloud-native, SaaS-based IT management service that is also available for hybrid cloud environments.The basic idea of Observability is to provide a more holistic, integrated overview of an end-user company’s IT systems, using a single-pane-of-glass interface to track data from network, infrastructure, application and database sources. The system's  machine learning techniques are designed to bolster security via anomaly detection.To read this article in full, please click here

0

SolarWinds’ Observability offers visibility into hybrid cloud infrastructure

SolarWinds, the maker of a well-known and widely used suite of IT management software products, announced this week that it’s expanding to the cloud, with the release of Observability, a cloud-native, SaaS-based IT management service that is also available for hybrid cloud environments.The basic idea of Observability is to provide a more holistic, integrated overview of an end-user company’s IT systems, using a single-pane-of-glass interface to track data from network, infrastructure, application and database sources. The system's  machine learning techniques are designed to bolster security via anomaly detection.To read this article in full, please click here

0

AMD promises faster and more efficient networking, eventually

This time last year, AMD had no networking products. Today, it has three, thanks to two separate acquisitions. It's a shift that's strengthening the company’s position against competitors like Intel and Nvidia by providing a full suite of silicon, including for the enterprise.To fill out its portfolio and stay competitive, AMD had to build up its offerings of workload accelerators and its networking technologies. It's a very active market, with Nvidia (BlueField), Intel (FPGA-based smartNICs), Marvell Technology (Octeon), and Broadcom (Stingray) all competing for the smartNIC market. AMD risked being left behind.To read this article in full, please click here

0

AMD promises faster and more efficient networking, eventually

This time last year, AMD had no networking products. Today, it has three, thanks to two separate acquisitions. It's a shift that's strengthening the company’s position against competitors like Intel and Nvidia by providing a full suite of silicon, including for the enterprise.To fill out its portfolio and stay competitive, AMD had to build up its offerings of workload accelerators and its networking technologies. It's a very active market, with Nvidia (BlueField), Intel (FPGA-based smartNICs), Marvell Technology (Octeon), and Broadcom (Stingray) all competing for the smartNIC market. AMD risked being left behind.To read this article in full, please click here

0

IT spending to grow, as companies use tech to battle expected recession

Gartner says software and services will drive growth, while data center spending will also increase, though more modestly.

0

IBM sales jump shows the mainframe is not dead, with hybrid cloud alive and well

At a time when most enterprises are planning cloud deployments and many are reportedly sharpening their mainframe exit strategy, IBM is seeing double-digit growth in its big iron business for the quarter ended September.The company, which declared its third quarter results on Wednesday, reported a 98% jump in revenue for its z line of mainframe computer in terms of constant currency (that is, eliminating the effect of currency fluctuations).  IBM, which buckets mainframes under its infrastructure line of business, released the z16 mainframe in April before beginning to sell it in the second quarter.To read this article in full, please click here

0

IBM sales jump shows the mainframe is not dead, with hybrid cloud alive and well

At a time when most enterprises are planning cloud deployments and many are reportedly sharpening their mainframe exit strategy, IBM is seeing double-digit growth in its big iron business for the quarter ended September.The company, which declared its third quarter results on Wednesday, reported a 98% jump in revenue for its z line of mainframe computer in terms of constant currency (that is, eliminating the effect of currency fluctuations).  IBM, which buckets mainframes under its infrastructure line of business, released the z16 mainframe in April before beginning to sell it in the second quarter.To read this article in full, please click here

0

Startup says its chips handle HPC workloads better than GPUs

A semiconductor startup is targeting the high-performance computing (HPC), claiming that in some instances, GPUs aren’t the best fit for the task.The chip is known for now as Thunderbird but will get a formal name when it launches in Q1 of 2023, according to Doug Norton, vice president of business development at InspireSemi. Thunderbird is mounted on a PCI Express card that plugs into a server, just as GPU accelerators from Nvidia and AMD do.The Thunderbird chip contains 2,560 RISC-V cores, and there are two chips per card. GPUs also come with thousands of cores but CPUs have less than 100, except for the Ampere Altra Max, with 128 cores.To read this article in full, please click here

0

Startup says its chips handle HPC workloads better than GPUs

A semiconductor startup is targeting the high-performance computing (HPC), claiming that in some instances, GPUs aren’t the best fit for the task.The chip is known for now as Thunderbird but will get a formal name when it launches in Q1 of 2023, according to Doug Norton, vice president of business development at InspireSemi. Thunderbird is mounted on a PCI Express card that plugs into a server, just as GPU accelerators from Nvidia and AMD do.The Thunderbird chip contains 2,560 RISC-V cores, and there are two chips per card. GPUs also come with thousands of cores but CPUs have less than 100, except for the Ampere Altra Max, with 128 cores.To read this article in full, please click here

0

IPv6 Buzz 112: What’s New With IPv6 At The IETF?

In this episode of IPv6 Buzz, Ed, Scott, and Tom speak with XiPeng Xiao, the new chair of the IETF v6ops working group. We discuss the lastest work in IPv6 at the IETF, whether the IETF should have a role in promoting v6 in the enterprise, and more.

0

IPv6 Buzz 112: What’s New With IPv6 At The IETF?

In this episode of IPv6 Buzz, Ed, Scott, and Tom speak with XiPeng Xiao, the new chair of the IETF v6ops working group. We discuss the lastest work in IPv6 at the IETF, whether the IETF should have a role in promoting v6 in the enterprise, and more.

The post IPv6 Buzz 112: What’s New With IPv6 At The IETF? appeared first on Packet Pushers.