Worth Reading: Blocking Malware with DNS

The Domain Name System (DNS) is known to be a valuable source of threat intelligence. With the mainstream introduction of the Response Policy Zone (RPZ) technology in popular resolver software, there is now a growing market of DNS service providers who are offering DNS firewall-style services. —James Richards @APNIC

What’s wrong with the IETF. And what’s right

I have not counted the IETF’s I have attended; I only know the first RFC on which I’m listed as a co-author was published in 2000, so this must be close to 20 years of interacting with the IETF community, and I’m pretty certain I’ve attended at least two meetings a year across that time, and three meetings a year in most of those years. Across that time, there has never been a time when I have not been told, at least once, “the IETF is broken.” And there has not been a single time I cannot remember agreeing with the sentiment.

So, how is the IETF broken? The trend that bothers me the most right now is the gold rush syndrome. A new technology is brought into the IETF, and if it looks like it might somehow be “important,” there is a “land rush” as people stake out new drafts, find use cases, find corner cases, and work to develop drafts and communities around those drafts. This generally results in a sort of ossification process, where there are clear insiders and outsiders, an entirely new vocabulary is developed, and the drafts fly so fast and furious there is Continue reading

Les débuts des nouveaux droits numériques pour les citoyens finlandais

J’ai le plaisir de vous présenter notre nouveau projet MOOC (Massive Open Online Course) de droits numériques (New Digital Rights) qui enseignera aux citoyens leurs droits en matière de données personnelles à travers les frameworks GDPR et MyData. Il est financé par le programme de financement Beyond the Net de l’Internet Society et rendu possible grâce à des bénévoles.

Le projet est un partenariat entre ISOC Finland Chapter et Open Knowledge Finland. D’autres ONG et associations comme Electronic Frontier Finland, Faktabaari et des organisations d’étudiants seront mobilisées.

Savoir plus (en anglais)

The post Les débuts des nouveaux droits numériques pour les citoyens finlandais appeared first on Internet Society.

The Dawn of New Digital Rights for Finnish Citizens

I’m pleased to introduce our new project New Digital Rights MOOC (Massive Open Online Course), that will teach citizens about  their personal data rights through GDPR and MyData frameworks. It is funded by the Internet Society’s Beyond the Net Funding Programme and made possible with volunteers.

The project is a partnership between ISOC Finland Chapter and Open Knowledge Finland. Other NGO’s and associations like Electronic Frontier Finland, Faktabaari, and student organisations will be engaged.

The aim of the project is to make citizens more aware of their digital rights, initially focusing on explaining GDPR (General Data Protection Regulation) and MyData. The solution is to educate people through a MOOC-platform and series of workshops that create content and train people and organizations to use it.

MyData is the biggest part of our work in Open Knowledge Finland at the moment and we have made a whole conference around this Nordic model of personal data management. It is very much entwined with the changes in the GDPR and we felt that while we made people aware of relevant changes in the European data protection, MyData could be explained in parallel to the GDPR, in a separate, cross-referenced module.

As of now, there will not Continue reading

Turbulence – And Opportunity – Ahead In The Oracle Sparc Base

You can’t swing a good-sized cat without hitting an enterprise running Oracle software in some shape or form. If it’s not Oracle’s ubiquitous database, then it’s one of its middleware platforms or its enterprise applications in the Fusion suite or its predecessors in the Oracle, Siebel, PeopleSoft, and JD Edwards suites.

Currently Oracle boasts 430,000 customers running its software – that’s quite an installed base. And it’s all teed up to become quite a battleground. Why?

Six months or so ago, news broke that Oracle was laying off a large number of hardware folks. Something like 2,500 Sparc and Solaris …

Turbulence – And Opportunity – Ahead In The Oracle Sparc Base was written by Timothy Prickett Morgan at The Next Platform.

The New Way of Generating IPv6 – SLAAC EUI-64 Address Format

There was an old way of generating Interface IPv6 address using SLAAC process (Stateless autoconfiguration). You simply configured that you want SLAAC autoconfiguration and the interface IPv6 was generated by squeezing “FFFE” in hex (11111111 11111110 bits) between two parts of physical MAC address of that interface. Then, after a while, several comments came to IETF about the use of predictable Interface Identifiers in IPv6 addresses. They were pointing to the ease of correlation of host activities within the same network and across multiple networks. If Interface Identifiers are constant across networks this is negatively affecting the privacy and security of

The post The New Way of Generating IPv6 – SLAAC EUI-64 Address Format appeared first on How Does Internet Work.

Construcción de Infraestructura Comunitaria

Cuando Internet no llega a lugares remotos, un modelo que funciona muy bien es aquel en el que la comunidad construye la red para llegar a Internet (no esperar que un proveedor llegue a su comunidad sino construir la red para llegar hasta el proveedor más cercano). Eso implica varios desafíos y requiere cambios tecnológicos, legislativos, nuevos estándares y comunidades que sean capaces de construir y operar la infraestructura comunitaria.

Las redes comunitarias tienen características únicas que requieren una evolución y mudanzas disruptivas tanto en las tecnologías como en la gestión de los recursos (aprovechamiento de la infraestructura pública, gestión del espectro, recursos de Internet, etc.).

Las experiencias prueban que existen muchos modelos que hacen sustentables y efectivas estas redes comunitarias. Ahora debemos comenzar a formalizar y generalizar esos modelos para conseguir la escala e impacto necesarios. Debemos promover cambios en reglamentos y en tecnologías, en gobiernos y en empresas, en fabricantes de equipos y en software open-source. Será necesario organizar y capacitar a las comunidades, involucrar a las ONG para que tengan la capacidad y recursos para ayudarlas, convencer a las empresas que esto no afecta sus negocios y ser sensibles a las necesidades y diferencias de las Continue reading

DDoS Amplification Attacks

The post DDoS Amplification Attacks appeared first on Noction.

IDG Contributor Network: Carrier SD-WAN: SD-WAN should be more than just an MPLS complement

Is it only me who finds it just a bit dubious that carriers are advocating SD-WAN? SD-WAN was practically invented to get away from the clutches of carriers, and now we're supposed to trust them to be the stewards of WAN transformation?Carriers lost that privilege when their business model grew out-of-step with how we do business. We grew tired of being charged double Internet prices for MPLS capacity. In an era of self-service, carriers were still making us wait to troubleshoot problems. And we were astonished that new MPLS circuits could take weeks, even months, to bring into a new site when you could often get started with broadband in a matter of days and upgrade to DIA when ready.To read this article in full, please click here

IDG Contributor Network: Carrier SD-WAN: SD-WAN should be more than just an MPLS complement

Is it only me who finds it just a bit dubious that carriers are advocating SD-WAN? SD-WAN was practically invented to get away from the clutches of carriers, and now we're supposed to trust them to be the stewards of WAN transformation?Carriers lost that privilege when their business model grew out-of-step with how we do business. We grew tired of being charged double Internet prices for MPLS capacity. In an era of self-service, carriers were still making us wait to troubleshoot problems. And we were astonished that new MPLS circuits could take weeks, even months, to bring into a new site when you could often get started with broadband in a matter of days and upgrade to DIA when ready.To read this article in full, please click here

Data-driven development with Cloudflare Mobile SDK

If your app loads critical resources over the network, it's relying on your user's mobile network connection to deliver an engaging experience. Network errors occur in 3 to 12% of app sessions depending on infrastructure reliability and user geography.

How much engagement are you losing in your app to network errors? Chances are, you don't know.

We didn't either, until we built a free tool that helps Android and iOS developers visualize and understand their mobile app's network utilization.

Introducing Cloudflare Mobile SDK

Our SDK helps you identify slowdowns caused by balky or too frequent network calls, so you can focus your development effort on optimizing the lowest-hanging fruit.

Modern app developers already heavily instrument their apps to identify UX impacting events: they measure and collect launch time, session length, crash rates, conversion events, and lots more, using a multitude of different metrics packages and services.

Web developers look at similar data. They also pay tons of attention to their resource waterfall, mapping their critical rendering path, and understanding which resource loads are synchronous, which are not, and which block rendering. JavaScript even exposes an API to collect waterfalls in the browser programmatically.

It's time to bring the same visibility Continue reading

Comment connecter tout le monde à Internet? Une réunion plénière technique de l’IETF 101

Comment connecter tout le monde, partout, à Internet? Quel rôle jouent les «réseaux communautaires» pour aider à connecter plus de gens? Comment pouvons-nous utiliser au mieux le spectre sans fil et quels sont les problèmes avec cela? Comment les satellites peuvent-ils s’intégrer dans l’image? Et quel est l’état de la technologie par satellite? Et qu’en est-il du rôle des “lasers spatiaux”?

Pour savoir plus cliquez ici

The post Comment connecter tout le monde à Internet? Une réunion plénière technique de l’IETF 101 appeared first on Internet Society.

How Do We Connect Everyone to the Internet? An IETF 101 Technical Plenary

How do we connect everyone, everywhere, to the Internet? What role do “community networks” play in helping connect more people? How can we best use wireless spectrum and what are the issues with that? How can satellites fit into the picture? And what is the state of satellite technology? And what about the role of “space lasers”?

All that and more was the subject of yesterday’s featured panel at the Technical Plenary at IETF 101 in London.

Organized by the Internet Architecture Board (IAB) and the Internet Research Task Force (IRTF), the panel was moderated by our Jane Coffin and included these speakers:

• Leandro Navarro Moldes, Associate Professor, Universitat Politècnica de Catalunya (SLIDES)
• Steve Song, Wireless Spectrum Research Associate, Network Startup Resource Center (SLIDES)
• Jonathan Brewer, Consulting Engineer, Telco2 Limited (SLIDES)

You can watch the recording of the session at:

The session began with Leandro Navarro outlining how half the world is still not connected to the Internet and is not Continue reading

Kubernetes Primer: Key Concepts and Terms

Kubernetes Primer: Key Concepts and Terms

Top 6 Features in Windows Server 2019

Because Microsoft has shifted to a more gradual upgrade of Windows Server, many of the features that will become available with Windows Server 2019 have already been in use in live corporate networks, and here are half a dozen of the best.[ Check out REVIEW: VMware’s vSAN 6.6 and hear IDC’s top 10 data center predictions . | Get regularly scheduled insights by signing up for Network World newsletters. ] Enterprise-grade hyperconverged infrastructure (HCI) With the release of Windows Server 2019, Microsoft rolls up three years of updates for its HCI platform. That’s because the gradual upgrade schedule Microsoft now uses includes what it calls Semi-Annual Channel releases – incremental upgrades as they become available. Then every couple of years it creates a major release called the Long-Term Servicing Channel (LTSC) version that includes the upgrades from the preceding Semi-Annual Channel releases.To read this article in full, please click here

What would a regulated-IoT world look like?

The wildfire growth of IoT is arguably the most important trend happening in technology today, but the ease with which bad actors can exploit its manifold security vulnerabilities has been demonstrated many times in just the past couple of years.Despite the generally laissez-faire stance the U.S. takes toward regulating technology companies, the severity of the threat – IoT security issues affect healthcare, infrastructure, transportation and many other crucial parts of society – has some calling for regulation of the IoT.The hands-off approachGiven the speed at which technology, particularly around IoT, develops these days, from drawing board to prototype to production, plenty of people would argue that it’s impossible for a regulatory regime to keep pace.To read this article in full, please click here

Top 6 Features in Windows Server 2019

Because Microsoft has shifted to a more gradual upgrade of Windows Server, many of the features that will become available with Windows Server 2019 have already been in use in live corporate networks, and here are half a dozen of the best.[ Check out REVIEW: VMware’s vSAN 6.6 and hear IDC’s top 10 data center predictions . | Get regularly scheduled insights by signing up for Network World newsletters. ] Enterprise-grade hyperconverged infrastructure (HCI) With the release of Windows Server 2019, Microsoft rolls up three years of updates for its HCI platform. That’s because the gradual upgrade schedule Microsoft now uses includes what it calls Semi-Annual Channel releases – incremental upgrades as they become available. Then every couple of years it creates a major release called the Long-Term Servicing Channel (LTSC) version that includes the upgrades from the preceding Semi-Annual Channel releases.To read this article in full, please click here

Is MLAG an Alternative to Stackable Switches?

Alex was trying to figure out how to use Catalyst 3850 switches and sent me this question:

Is MLAG an alternative to use rather than physically creating a switch stack?

Let’s start with some terminology.

Link Aggregation Group (LAG) is the ability to bond multiple Ethernet links into a single virtual link. LAG (as defined in 802.1ax standard) can be used between a pair of adjacent nodes. While that’s good enough if you need more bandwidth it doesn’t help if you want to increase redundancy of your solution by connecting your edge device to two switches while using all uplinks and avoiding the shortcomings of STP. Sounds a bit like trying to keep the cake while eating it.

VSS Recovery mode

Dual-active Detection (DAD) is designed to prevent a split-brain scenario where both VSS supervisors become active in the event of a VSL link failure. It uses a separate (from the VSL link) secondary communication link to communicate the devices state.
When the VSL link fails the standby switch becomes active and the current active switch is informed of this over the DAD links and goes into recovery mode to stop a split-brain situation occurring.