Several on KRACK

Three articles of interest on the new WiFi KRACK—

This is not a crypto bug but a protocol bug (a pretty obvious and trivial protocol bug). When a client connects to the network, the access-point will at some point send a random “key” data to use for encryption. Because this packet may be lost in transmission, it can be repeated many times. What the hacker does is just repeatedly sends this packet, potentially hours later. Each time it does so, it resets the “keystream” back to the starting conditions. The obvious patch that device vendors will make is to only accept the first such packet it receives, ignore all the duplicates. —Robert Graham @Errata Security

So this is essentially a replay attack—something that is not taken seriously enough in the security world, by and large.

Researchers this week published information about a newfound, serious weakness in WPA2 — the security standard that protects all modern Wi-Fi networks. What follows is a short rundown on what exactly is at stake here, who’s most at-risk from this vulnerability, and what organizations and individuals can do about it. —Krebs on Security

And, finally, an article on protecting your network from KRACK—

Wi-Fi is Continue reading

Finnish Railways and Accenture Partner to Modernize Key Transportation Apps  

VR Group is the state-owned company that runs Finnish Railways, and provides 82 million passenger train rides and transports 36 million tons of goods per year. The 150+ year old transportation business is broken into separate divisions, each with their own technology departments. Finnish Railways does not have an in-house development team, so each division leverages external vendors and partners for their application development needs.

On Day 2 of DockerCon Europe, Markus Niskanen, Integration Manager at VR Group, and Oscar Renalias, Solutions Architect at Accenture presented their story on how they worked together to modernize critical business applications for Finnish Railways, including the reservation and commuter applications.

Partnership Drives Faster Results

Finnish Railways began working with Accenture, a long-time partner, to design a new common application platform based on Docker Enterprise Edition (EE). Leveraging Accenture’s Container Migration Factory, Finnish Railways had access to hundreds of Docker-trained Accenture architects which meant that this project could be delivered more efficiently. For example, Accenture has customized Terraform scripts that set up a Docker EE environment in AWS in about 25 minutes.

They started with the old reservation system which was running on mainframe and a legacy commuter service application. They rewrote these applications with microservices Continue reading

Tempered Networks extends Bring Your Own Network across the enterprise

Remember when Bring Your Own Device (BYOD) was all the rage? That’s the concept of workers being able to bring their own mobile phones and tablets into the workplace and use them for business-related functions. That quickly evolved into bring your own applications, where workers or lines of business would go get their own apps via the cloud.Also on Network World: 7 must-have network tools So, what else can non-technical people go get on their own? How about a network? That may seem a bit farfetched, as I’ve never seen an application developer bring a router into the office. But that’s exactly what Tempered Networks is enabling with the introduction of Bring Your Own Network (BYON). To read this article in full or to leave a comment, please click here

Tempered Networks extends Bring Your Own Network across the enterprise

Remember when Bring Your Own Device (BYOD) was all the rage? That’s the concept of workers being able to bring their own mobile phones and tablets into the workplace and use them for business-related functions. That quickly evolved into bring your own applications, where workers or lines of business would go get their own apps via the cloud.Also on Network World: 7 must-have network tools So, what else can non-technical people go get on their own? How about a network? That may seem a bit farfetched, as I’ve never seen an application developer bring a router into the office. But that’s exactly what Tempered Networks is enabling with the introduction of Bring Your Own Network (BYON). To read this article in full or to leave a comment, please click here

Cumulus Networks inducted into JPMorgan Chase Hall of Innovation

Roll out the red carpet and get your acceptance speech ready — no, Rocket Turtle hasn’t won an Oscar (yet), but we do have some exciting news. Cumulus Networks is happy to announce that we have been inducted into the JPMorgan Chase Hall of Innovation, which recognizes select emerging tech companies for their innovation, business value and disruptive nature. The Hall of Innovation Award was presented at the 9th Annual J.P. Morgan Technology Innovation Symposium in Menlo Park, California.

Cumulus Networks has received this honor after providing JPMorgan Chase with our NOS Cumulus Linux. In fact, Cumulus Networks is currently the networking standard for Gaia, JPMorgan Chase’s private cloud, and is also pursuing other use cases within the firm. Matthew Liste, Head of Cloud Engineering, stated that “Cumulus Networks has helped the firm reduce capital expenditures, optimize data center network costs, and bring infrastructure to the market faster.” That’s the power of web-scale networking!

When asked for comment about our partnership with JPMorgan Chase, our fearless leader and CEO Josh Leslie had this to say: “For a company with the size and reputation of JPMorgan Chase, it is critical that the network operates with efficiency to keep the Continue reading

Reaper Madness

On October 19th, a team of security researchers warned of a new IoT Botnet that had already infected “an estimated million organizations” and that was poised to “take down the internet”. This report was subsequently picked up by the press and spread quickly via social media. […]

Reaper Madness

On October 19th, a team of security researchers warned of a new IoT Botnet that had already infected “an estimated million organizations” and that was poised to “take down the internet”. This report was subsequently picked up by the press and spread quickly via social media. […]

62% off Etekcity Wireless Bluetooth 4.0 Receiver – Deal Alert

Stream audio from your Bluetooth device to any non-Bluetooth enabled receiver, speaker, or car stereo with this adapter from Etekcity, which is currently discounted 62% down to just $18.88. Simply connect the receiver to your speaker system via a traditional RCA or 3.5mm aux audio input, and pair with your Bluetooth device. Its compact design makes it super portable, and its long lasting battery provides up to 10 hours of streaming before needing a re-charge. See this deal on Amazon.To read this article in full or to leave a comment, please click here

Amazon Discounts Fire Devices Once Again, For a Limited Time – Deal Alert

There's always a reason to celebrate, and Amazon does it with discounts, often times on their own devices. To celebrate Halloween, apparently, Amazon has once again activated a limited time discount on Fire tablet devices. Amazon's devices are packed with features and are suitable low cost alternatives to other high priced devices on the market. If you've been thinking about a tablet for yourself, or for the family, consider these deals:Fire Tablet Halloween Promotion, 10/22 12AM ET to 10/28 11:59PM ET $20 off Fire Kids Edition https://www.amazon.com/dp/B01J90MSDS $30 off Fire HD 8 Kids Edition https://www.amazon.com/dp/B01J94SBEY $50 off Fire Kids Edition 2-pack https://www.amazon.com/dp/B073VVC94R $80 off Fire HD 8 Kids Edition 2-pack https://www.amazon.com/dp/B072BYGPPZ To read this article in full or to leave a comment, please click here

Posts from the Past, October 2017

After over 12 years of writing here, I’ve accumulated a pretty fair amount of content. To help folks discover older content, I thought it might be fun to revisit what I’ve published in October in years past. Here are some “posts from the past,” all from October of previous years. Enjoy!

October 2005

Protecting Against OpenSSL SSLv2 Flaw

October 2006

I was spending a great deal of time with Active Directory back then:

Finding Recently Created Active Directory Accounts
Refined Solaris 10-AD Integration Instructions

October 2007

Storage was the name of the game a decade back:

Sanrad Configuration Basics
VM File-Level Recovery with NetApp Snapshots

October 2008

Quick Note on ESX and ESXi Storage Multipathing
Is Power the Key to Controlling the Cloud?

October 2009

Fibre Channel, FCoE, and InfiniBand, oh my!

New User’s Guide to Managing Cisco MDS Zones via CLI
I/O Virtualization and the Double-Edged Sword
Setting up FCoE on a Nexus 5000

October 2010

Shortening URLs via bit.ly from the CLI
Shortening URLs via bit.ly the Apple Way

October 2011

Content Creation and Mind Mapping

October 2012

In October 2012 I was neck-deep in learning all I could learn about Open vSwitch, and a Continue reading

History Of Networking – Donnie Savage – EIGRP

Donnie Savage joins Network Collective to talk about his role in the history of EIGRP. From its early implementations to moving this formerly fully proprietary protocol through the IETF, Donnie has played a significant role in guiding EIGRP to where it is today.

Donnie Savage
Guest
Jordan Martin
Host
Donald Sharp
Host
Russ White
Host

Outro Music:
Danger Storm Kevin MacLeod (incompetech.com)
Licensed under Creative Commons: By Attribution 3.0 License
http://creativecommons.org/licenses/by/3.0/

The post History Of Networking – Donnie Savage – EIGRP appeared first on Network Collective.

History Of Networking – Donnie Savage – EIGRP

Donnie Savage joins Network Collective to talk about his role in the history of EIGRP. From its early implementations to moving this formerly fully proprietary protocol through the IETF, Donnie has played a significant role in guiding EIGRP to where it is today.

Donnie Savage
Guest
Jordan Martin
Host
Donald Sharp
Host
Russ White
Host

Outro Music:
Danger Storm Kevin MacLeod (incompetech.com)
Licensed under Creative Commons: By Attribution 3.0 License
http://creativecommons.org/licenses/by/3.0/

The post History Of Networking – Donnie Savage – EIGRP appeared first on Network Collective.

What is virtualization?

No advance in information technology in the past six decades has offered a greater range of quantifiable benefits than has virtualization. Many IT professionals think of virtualization in terms of virtual machines (VM) and their associated hypervisors and operating-system implementations, but that only skims the surface. An increasingly broad set of virtualization technologies, capabilities, strategies and possibilities are redefining major elements of IT in organizations everywhere.Virtualization definition Examining the definition of virtualization in a broader context, we define virtualization as the art and science of making the function of an object or resource simulated or emulated in software identical to that of the corresponding physically realized object. In other words, we use an abstraction to make software look and behave like hardware, with corresponding benefits in flexibility, cost, scalability, reliability, and often overall capability and performance, and in a broad range of applications. Virtualization, then, makes “real” that which is not, applying the flexibility and convenience of software-based capabilities and services as a transparent substitute for the same realized in hardware.To read this article in full or to leave a comment, please click here

1 … 1,884 1,885 1,886 1,887 1,888 … 3,876