Antivirus merger: Avast offers $1.3 billion for AVG

Antivirus vendor Avast Software has agreed to buy rival AVG Technologies for US$1.3 billion in cash.The deal will give Avast access to over 400 million "endpoints," or devices running its and AVG's software, 160 million of them phones or tablets, the company said Tuesday.Avast hopes the deal will make the combined company more efficient, as well as allowing it to take advantage of new growth opportunities such as securing the internet of things."This combination is great for our users. We will have over 250 million PC/Mac users enabling us to gather even more threat data to improve the protection to our users," Avast CEO Vincent Stickler wrote on the company blog.To read this article in full or to leave a comment, please click here

The New Strange Behavior for OSPF ‘Redistribute Subnets’

In older IOS Code, there was a specific requirement for redistributing OSPF Subnets. In almost every case, the keyword “subnets” had to be added to the redistribute command.

Older Code Example–

//notice the warning when 'subnets' is omitted
R1(config)#router ospf 1
R1(config-router)#redistribute eigrp 1
% Only classful networks will be redistributed

//and the configuration is stored exactly as it was typed
R1(config-router)#do show run | sec router
router ospf 1
 log-adjacency-changes
 redistribute eigrp 1

//we can change the behavior by adding 'subnets'
R1(config-router)#redistribute eigrp 1 subnets

//after adding, it is stored as one would expect
R1(config-router)#do show run | sec router
router ospf 1
 log-adjacency-changes
 redistribute eigrp 1 subnets

When I tested this in VIRL running 15.6(1S) running inside of IOS XE 3.17, the warning goes away. The question I had is whether it is still relevant or not.

Current Code Example–

//without the 'subnets' keyword
csr1000v-2(config)#router ospf 1
csr1000v-2(config-router)#redistribute eigrp 1
csr1000v-2(config-router)#do show run | sec router
router ospf 1
 redistribute eigrp 1

//with the 'subnets' keyword
csr1000v-2(config-router)#redistribute eigrp 1 subnets
csr1000v-2(config-router)#do show run | sec router
router ospf 1
 redistribute eigrp 1 subnets

I initially spent some time experimenting with this and thought that ‘subnets‘ had Continue reading

Why we use the Linux kernel’s TCP stack

A recent blog post posed the question Why do we use the Linux kernel's TCP stack?. It triggered a very interesting discussion on Hacker News.

I've also thought about this question while working at CloudFlare. My experience mostly comes from working with thousands of production machines here and I can try to answer the question from that perspective.

CC BY 2.0 image by John Vetterli

Let's start with a broader question - what is the point of running an operating system at all? If you planned on running a single application, having to use a kernel consisting of multiple million lines of code may sound like a burden.

But in fact most of us decide to run some kind of OS and we do that for two reasons. Firstly, the OS layer adds hardware independence and easy to use APIs. With these we can focus on writing the code for any machine - not only the specialized hardware we have at the moment. Secondly, the OS adds a time sharing layer. This allows us to run more than one application at a time. Whether it's a second HTTP server or just a bash session, this ability to share resources Continue reading

Overlay Tunneling with Open vSwitch – GRETAP, VXLAN, Geneve, GREoIPsec

Building overlay networks using tunnels was always done to achieve connectivity between isolated networks that needed to share the same policies, VLANs or security domains. In particular, they represent a strong use-case in the data center, where tunnels are created between the hypervisors in different locations allowing virtual machines to be provisioned independently from the physical network.

What cloud security challenges keep CISOs up at night?

Wide awakeImage by Flickr/ Alyssa L. MillerThe cloud is now a mainstream IT platform. Through its unlimited economies of scale and its ability to deliver IT resources dynamically whenever users need them, the cloud’s popularity permeates through businesses of all sizes and industries.To read this article in full or to leave a comment, please click here

Investigation into Hillary Clinton’s personal email system closed without charges

An investigation into the use of a personal email system for official communications by Hillary Clinton, while she was U.S. secretary of state, has been closed with no charges filed, U.S. Attorney General Loretta E. Lynch said Wednesday.The move comes after FBI Director James Comey on Tuesday said he did not recommend bringing charges against her although he described as “extremely careless” the use by her and her aides of unsecured email networks for distribution of  very sensitive, highly classified information.To read this article in full or to leave a comment, please click here

Investigation into Hillary Clinton’s personal email system closed without charges

An investigation into the use of a personal email system for official communications by Hillary Clinton, while she was U.S. secretary of state, has been closed with no charges filed, U.S. Attorney General Loretta E. Lynch said Wednesday.The move comes after FBI Director James Comey on Tuesday said he did not recommend bringing charges against her although he described as “extremely careless” the use by her and her aides of unsecured email networks for distribution of  very sensitive, highly classified information.To read this article in full or to leave a comment, please click here

60% off iKross Tablet and Cellphone Adjustable Car Cup Holder Mount – Deal Alert

This 2-in-1 cellphone and tablet mount from iKross is fairly unique in that it mounts into your car, truck or SUV's cupholder. It averages 4.5 out of 5 stars on Amazon from over 1,300 customers (read reviews), and with the current 60% off deal its list price has been reduced from $60 to just $24. The iKross mount will simply "twist to fit" into most sized cupholders (up to 3.7" diameter), so installation is quick and requires no tools. Once installed, the mount stays secure, stable, and absorbs vibration while being fully adjustable for a wide range of viewing angles. To check compatibility, learn more, and explore buying options, see the discounted iKross cup holder mount's listing now on Amazon.To read this article in full or to leave a comment, please click here

Microsoft targets the iMac with new PCs, reports say

Microsoft is believed to be working on an all-in-one (AIO) PC under the Surface brand. If that’s true, it would put it squarely in competition with HP and Dell, which have their own AIO lines, as well as with the Apple iMac desktop.Both DigiTimes and Windows Central picked up on the story, each citing their own sources. DigiTimes, a Taiwan-based publication with connections to the PC industry over there (but also a very mixed record of accuracy) said the new devices would come in the third quarter of this year. Windows Central, which is a little better when it comes to rumors, said it did not have a solid release date.To read this article in full or to leave a comment, please click here

iPhone 7 will offer twice as much storage as the iPhone 6s

Apple's iPhone 7 unveiling is just about two months away, and it still remains to be seen if the device will offer any exciting new features. While some sources from within the rumor mill have hinted that this year's iPhone refresh cycle will be short on new bells and whistles, the optimists among us hope Apple still has a trick or two up its sleeve come September.In the meantime, iPhone users in the market for an upgrade can smile at the fact that Apple with the iPhone 7 will finally be getting rid of its entry-level 16GB iPhone model. While 16GB may have been more than sufficient back in the early days of the smartphone era, it's decidedly lacking in today's age with 4K video, high-resolution photos and an endless number of apps.To read this article in full or to leave a comment, please click here