Latest OWASP Top 10 looks at APIs, web apps

The new release of the OWASP Top 10 list is out for public comment from the Open Web Application Security Project, and while most of it remains the same there are a couple of new additions, focusing on protections for web applications and APIs.To make room for the new items, a couple of older ones were either removed or merged into new items.The fact that the list hasn't changed much since its first release in 2003 is both good and bad, said Jeff Williams, CTO and co-founder at Contrast Security.To read this article in full or to leave a comment, please click here

Sysadmins: Say No to Compulsive Tuning Disorder

BlackBerry KeyOne to launch in US and Canada in late May

The BlackBerry KeyOne, an Android-based smartphone with a hardware keyboard, will be available in the U.S. and Canada from May 31, the phone's maker said Thursday.TCL Communications, the Chinese company that acquired rights to produce BlackBerry-brand handsets, originally had said the phone would go on sale in April, so the delay may disappoint potential users. This could be a bad time to test the patience of potential buyers, as Samsung and LG are both heavily promoting their new flagship handsets, the S8 and G6.To read this article in full or to leave a comment, please click here

BlackBerry KeyOne to launch in US and Canada in late May

The BlackBerry KeyOne, an Android-based smartphone with a hardware keyboard, will be available in the U.S. and Canada from May 31, the phone's maker said Thursday.TCL Communications, the Chinese company that acquired rights to produce BlackBerry-brand handsets, originally had said the phone would go on sale in April, so the delay may disappoint potential users. This could be a bad time to test the patience of potential buyers, as Samsung and LG are both heavily promoting their new flagship handsets, the S8 and G6.To read this article in full or to leave a comment, please click here

Top techies giving 2017 college commencement speeches

Tomorrow's leadersImage by ThinkstockWith today’s push across the education landscape for more emphasis on STEM studies, it’s not surprising that top leaders and innovators in technology would be a draw as college commencement speakers. Here’s a roundup of some of the bigger names.To read this article in full or to leave a comment, please click here

Top techies giving 2017 college commencement speeches

Tomorrow's leadersImage by ThinkstockWith today’s push across the education landscape for more emphasis on STEM studies, it’s not surprising that top leaders and innovators in technology would be a draw as college commencement speakers. Here’s a roundup of some of the bigger names.To read this article in full or to leave a comment, please click here

Worth Reading: Who Moved My Control Plane?

Jordan Martin published a nice summary of what I’ve been preaching for years: centralized control plane doesn’t work (well) while controller-based network orchestration makes perfect sense.

While I totally agree with what he wrote he got the hype angle wrong:

Update: VMware NSX in Redundant L3-only Data Center Fabric

Short update for those that read the original blog post: it turns out that the answer to the question “Is it possible to run VMware NSX on redundantly-connected hosts in a pure L3 data center fabric?” is still NO.

VTEPs from different ESXi hosts can be in different subnets, but while a single ESXi host might have multiple VTEPs, the only supported way to use them is to put them in the same subnet. I removed the original blog post.

A huge thank you to everyone who pushed me with their comments and emails to find the correct answer.

BGPstream and The Curious Case of AS12389

The world of BGP routing is a fascinating place with lots of interesting BGP events happening every day. It can be challenging to keep track of it all and so two years ago we started the BGPstream website where we keep track of large scale outages and BGP hijacks. We list the events, basic info and visualize it with one of my favorite tools: BGPlay. For those who keep an eye on @bgpstream , you probably noticed a curious series of BGP hijacks today all by the same Autonomous system affecting many well known networks.

Starting at April 26 22:36 UTC till approximately 22:43 UTC AS12389 (PJSC Rostelecom) started to originate 50 prefixes for numerous other Autonomous systems. The 50 hijacked prefixes included 37 unique autonomous systems and the complete list of affected networks can be found below. If your organization is in this list feel free to reach out and we can provide more details if needed. Keep in mind that many of these hijacks are already published on BGPstream.com as well.

So back to this incident, what happened here? What makes the list of affected networks ‘curious’ is the high number of financial institutions such as for example:  MasterCard,Visa, Fortis,Alfa-Bank,card complete Continue reading

Samsung will launch new flagship smartphone months after Galaxy S8

Samsung Electronics said Thursday it was planning to launch in the second half of this year a new flagship phone, leading to speculation that the company is planning an alternative to the ill-fated Galaxy Note7 that had to be recalled last year.The launch of a new flagship smartphone this year and continuing sales of the Galaxy S8 and S8+ will help Samsung counter Apple’s launch of a new version of its iPhone. Apple usually unveils new phones in September."Samsung does announce a S series phone in the first half of the year and a Note series in the second half," said Kiranjeet Kaur, research manager for client devices at IDC Asia/Pacific. "So I am not sure if Samsung is alluding to the next Note or if they want to introduce a new series to avoid any questions or doubts that may arise because of the Note7 debacle."To read this article in full or to leave a comment, please click here

How to check your Uber rating

One of the brilliant things about Uber, and Lyft for that matter, is that it allows riders to rank drivers and for drivers, in turn, to rank passengers. This is a clever way to not only ensure that drivers are up to the task, but to also to provide users with an incentive to refrain from unruly behavior.Historically, Uber has allowed users to check what their own personal rating is, though doing so often required users to jump through a few hoops. Earlier today, however, Uber made the entire process much more seamless. Which is to say, if you're curious as to what Uber drivers think of you as a passenger, it's now easier than ever to access that information.To read this article in full or to leave a comment, please click here

Data center network monitoring best practices part 1: Metrics and alerts

One of the least loved areas of any data center network is monitoring. This is ironic because at its core, the network has two goals: 1) Get packets from A to B 2) Make sure packets got from A to B. It is not uncommon in the deployments I’ve seen for the monitoring budget to be effectively $0, and generally, an organization’s budget also reflects their priorities. Despite spending thousands, or even hundreds of thousands, of dollars on networking equipment to facilitate goal #1 from above, there is often little money, thought and time spent in pursuit of Goal #2. In the next several paragraphs I’ll go into some basic data center network monitoring best practices that will work with any budget.

It is not hard to see why monitoring the data center network can be a daunting task. Monitoring your network, just like designing your network, takes a conscious plan of action. Tooling in the monitoring space today is highly fragmented with over 100+ “best of breed” tools that each accommodate a specific use case. Just evaluating all the tools would be a full time job. A recent Big Panda Report and their video overview of it (38 mins) Continue reading

Juniper finds its head in the clouds; security is another story

In announcing its Q1 earnings yesterday Juniper company executives were delighted about the company’s returns on its cloud computing directions.In the results conference call Juniper CEO Rami Rahim said cloud computing sales grew 25% year-over-year and noted that four of the company’s top 10 accounts were cloud-related. Specifically, the cloud vertical earned $331.6 million in the first quarter, over $264.8 million a year ago.“As the industry evolves, cloud architectures are no longer the exclusive domain of the cloud providers. Customers across all verticals are developing strategies for moving to cloud service delivery models and this aligns with our strategy to power the cloud transformation,” Rahim said [Seeking Alpha has a full transcript of the call here]. “The cloud is a massive paradigm shift that is reshaping all industries, and I'm excited about the opportunity we have in front of us.”To read this article in full or to leave a comment, please click here

Juniper finds its head in the clouds; security is another story

In announcing its Q1 earnings yesterday Juniper company executives were delighted about the company’s returns on its cloud computing directions.In the results conference call Juniper CEO Rami Rahim said cloud computing sales grew 25% year-over-year and noted that four of the company’s top 10 accounts were cloud-related. Specifically, the cloud vertical earned $331.6 million in the first quarter, over $264.8 million a year ago.“As the industry evolves, cloud architectures are no longer the exclusive domain of the cloud providers. Customers across all verticals are developing strategies for moving to cloud service delivery models and this aligns with our strategy to power the cloud transformation,” Rahim said [Seeking Alpha has a full transcript of the call here]. “The cloud is a massive paradigm shift that is reshaping all industries, and I'm excited about the opportunity we have in front of us.”To read this article in full or to leave a comment, please click here

Juniper finds its head in the clouds; security is another story

In announcing its Q1 earnings yesterday Juniper company executives were delighted about the company’s returns on its cloud computing directions.In the results conference call Juniper CEO Rami Rahim said cloud computing sales grew 25% year-over-year and noted that four of the company’s top 10 accounts were cloud-related. Specifically, the cloud vertical earned $331.6 million in the first quarter, over $264.8 million a year ago.“As the industry evolves, cloud architectures are no longer the exclusive domain of the cloud providers. Customers across all verticals are developing strategies for moving to cloud service delivery models and this aligns with our strategy to power the cloud transformation,” Rahim said [Seeking Alpha has a full transcript of the call here]. “The cloud is a massive paradigm shift that is reshaping all industries, and I'm excited about the opportunity we have in front of us.”To read this article in full or to leave a comment, please click here

Internet Society Middle East Regional Bureau Participates in MENOG 17

Ransomware attacks are taking a greater toll on victim’s wallets

The hackers spreading ransomware are getting greedier. In 2016, the average ransom demand to free computers hit with the infection rose to US$1,077, up from $294 the year before, according to security firm Symantec.“Attackers clearly think that there’s more to be squeezed from victims,” Symantec said in a Wednesday report.In addition, the security firm has been detecting more ransomware infection attempts. In 2016, the figure jumped by 36 percent from the year prior.  That doesn’t bode well for the public. Ransomware is notorious for taking over computers, and essentially holding them hostage. To do so, the malicious coding encrypts all the data inside, and then demands a fee, usually in bitcoin, in exchange for releasing the machine.To read this article in full or to leave a comment, please click here

Ransomware attacks are taking a greater toll on victim’s wallets

The hackers spreading ransomware are getting greedier. In 2016, the average ransom demand to free computers hit with the infection rose to US$1,077, up from $294 the year before, according to security firm Symantec.“Attackers clearly think that there’s more to be squeezed from victims,” Symantec said in a Wednesday report.In addition, the security firm has been detecting more ransomware infection attempts. In 2016, the figure jumped by 36 percent from the year prior.  That doesn’t bode well for the public. Ransomware is notorious for taking over computers, and essentially holding them hostage. To do so, the malicious coding encrypts all the data inside, and then demands a fee, usually in bitcoin, in exchange for releasing the machine.To read this article in full or to leave a comment, please click here

IDG Contributor Network: AI goes to the movies to identify content you will want to watch

The digital technology and media and entertainment industries are beginning to come together to solve a common problem—how to extract, unlock, harness and make better use of the massive amounts of video content and data they produce. Anyone who has ever appeared in or produced a movie, commercial or business video is aware that many times a good portion of the footage winds up on the proverbial cutting room floor. The same is true of digital data. It is estimated that more than 80 percent of enterprise data is considered “dark”—created but never used.+ Also on Network World: Machine learning proves its worth to business + What if there were a way to pick up this data equivalent of cutting room discards and turn them into new assets? What if technologies such as IBM Watson could work with video editors to unearth data treasures that benefit and excite both producers and audiences? Sounds like the plot to a blockbuster movie, but it is now more fact than fiction.To read this article in full or to leave a comment, please click here

47% off Cable Organizer Electronics Accessories Travel Bag – Deal Alert

This Universal Electronics Accessories Travel Organizer provides a flexible organization solution for your electronics and computer accessories. It helps make you better organized with all the small items and gadgets.  Made of durable and weather-resistant nylon with well padded semi-flexible covers.  It's compact size of  8.8“ x W 6.1"allows it to easily stored in you laptop bag or backpack.  This travel organizers typical list price of $18.99 has been reduced 47% to just $9.98. See this deal on Amazon.To read this article in full or to leave a comment, please click here