Rural Carriers Want 5G, but Who’s Gonna Pay?
“The only way to make the best of our 5G investments is to look to all of the things under the...
Versa Releases Cloud-Managed SD-WAN Branch and Security
The offering leverages its existing cloud IP suite of services — including routing, SD-WAN, and...
Telefónica Takes On IoT Security
The new business unit leverages the carrier’s existing network infrastructure and its IoT...
South Korea Proves Its 5G Deployment Mettle
KT's 5G network now covers the country’s most populated areas, including Seoul, six other...
Stuff The Internet Says On Scalability For April 12th, 2019
Out sick today, but start saving up for that ticket to Mars (more):
IBM: 77% of Enterprises Don’t Have a Cybersecurity Incident Response Plan
Survey respondents said they lack the headcount to maintain and test their incident response plans.
Building Out The Edge One Datacenter At A Time
Over the last two decades, hyperscale datacenters have reshaped the computing industry, making possible cloud computing, online retail, and media streaming on vast scales. …
Building Out The Edge One Datacenter At A Time was written by Michael Feldman at .
Google Turns To Partners In Cloud Tangle
Google hiring of longtime Oracle executive Thomas Kurian to take over for Diane Greene as the head its cloud unit was a signal that the hyperscale company was serious about generating more enterprise businesses in hopes of better competing with larger public cloud providers Amazon Web Services and Microsoft Azure. …
Google Turns To Partners In Cloud Tangle was written by Jeffrey Burt at .
Heavy Networking 441: Active Network Testing And Service Assurance With Netrounds (Sponsored)
On today’s Heavy Networking we talk with sponsor Netrounds about measuring network performance and user experience through active testing. Netrounds' software generates synthetic traffic to measure actual performance of critical services, provides assurance that KPIs are being met, and identifies where problems occur.
The post Heavy Networking 441: Active Network Testing And Service Assurance With Netrounds (Sponsored) appeared first on Packet Pushers.
Failure Analysis: An Interesting way to Break CAPWAP
I recently stumbled into what I think is a very interesting failure scenario with a Cisco Wireless solution. This was a traditional controller based solution that leveraged a CAPWAP data and control plane. The symptoms were fairly consistent and strange.
Symptoms:
- When issues are occurring, all uploads reduce to about 1.5Mb/s
- Installing a new AP seems to solve the issue
- Issue re-occurs in a few minutes
- Issues only occur for one specific site
- Wireless is configured consistently across 5 sites
- RF is not an issue
Topology:
When I got involved with this, a few people had reviewed the configuration and TAC had been involved for some time. While on-site, I took a look at RF and channel utilization (expecting to find it to be ugly since I knew it was heavily dependent on 2.4Ghz). My first order of business was to spin up a test AP in its own group and advertise a test SSID on a 5Ghz channel. Upon doing so, both iPerf and Speedtest were >50Mb/s. My initial thought was that the density needed to be increased and the radios tweaked to get more clients on 5Ghz. However, a few minutes into my testing–my upload also Continue reading
Intent-Based Networking Resources
Every now and then I get a question along the lines of I’m your subscriber and would like to know more about X, so I decided to start creating technology-specific pages on www.ipSpace.net that would include links to most relevant ipSpace.net blog posts, webinars, sections in our online courses, and interesting third-party resources.
The subscriber triggering this process asked me about Intent-Based Networking, so here’s the relevant resources page.
Master of web puppets: abusing web browsers for persistent and stealthy computation
Master of web puppets: abusing web browsers for persistent and stealthy computation Papadopoulus et al., NDSS’19
You’ve probably heard about crypto-currency mining and the like in hijacked browsers.
From a security perspective, a fundamental problem of web applications is that by default their publisher is considered as trusted, and thus allowed to run JavaScript code (even from third parties) on the user side without any restrictions… On the positive side JavaScript execution so far has been constrained chronologically to the lifetime of the browser window or tab that rendered the compromised or malicious website.
Not any more! This paper shows how modern browsers with support for Service Workers can be stealthily connected into a botnet, with a connection that persists until the user closes the browser completely: “in contrast to previous approaches for browser hijacking, a key feature of MarioNet is that it remains operational even after the user browses away from the malicious webpage.”
MarioNet building blocks: Service Workers and WebRTC
Service Workers are non-blocking modules that reside in the user’s browser. Once registered they can run in the background without requiring the user to continue browsing on the originating site. In addition, service workers have Continue reading
Assange indicted for breaking a password
In today's news, after 9 years holed up in the Ecuadorian embassy, Julian Assange has finally been arrested. The US DoJ accuses Assange for trying to break a password. I thought I'd write up a technical explainer what this means.According to the US DoJ's press release:
Julian P. Assange, 47, the founder of WikiLeaks, was arrested today in the United Kingdom pursuant to the U.S./UK Extradition Treaty, in connection with a federal charge of conspiracy to commit computer intrusion for agreeing to break a password to a classified U.S. government computer.The full indictment is here.
It seems the indictment is based on already public information that came out during Manning's trial, namely this log of chats between Assange and Manning, specifically this section where Assange appears to agree to break a password:
What this says is that Manning hacked a DoD computer and found the hash "80c11049faebf441d524fb3c4cd5351c" and asked Assange to crack it. Assange appears to agree.
So what is a "hash", what can Assange do with it, and how did Manning grab it?
Computers store passwords in an encrypted (sic) form called a "one way hash". Since it's "one way", it can Continue reading
Kernel of Truth season 2 episode 5: The power of community
Subscribe to Kernel of Truth on iTunes, Google Play, Spotify, Cast Box and Sticher!
Click here for our previous episode.
From developer days to hackathons and from events to forums, Slack and social media included- there’s a community out there waiting for you! In this episode, host Brian talks to community evangelist for Nutanix Angelo Luciani and our own Pete Lumbis about the power of community and self-service. What are the perks, both personally and professionally, that you get when you’re actively participating in a community? What are some communities and resources we’ve found useful? Grab a taco, listen and find out. We promise you’ll get the taco reference after listening.
Guest Bios
Brian O’Sullivan: Brian currently heads Product Management for Cumulus Linux. For 15 or so years he’s held software Product Management positions at Juniper Networks as well as other smaller companies. Once he saw the change that was happening in the networking space, he decided to join Cumulus Networks to be a part of the open networking innovation. When not working, Brian is a voracious reader and has held a variety of jobs, including bartending in three countries and working as an extra in a German Continue reading
Canada’s Rogers Spends Big to Secure 600 MHz Spectrum for 5G
Bell decided against buying 600 MHz frequencies but said it looks forward to 3.5 GHz and millimeter...