NANOG 65 Report

NANOG 65 was once again your typical NANOG meeting: a set of operators, vendors, researchers and others, meeting over 3 days, this time in Montreal in October. Here’s my impressions of the meeting.

Apple draws cloudy line on use of root certs in mobile apps

Apple's removal of several apps from its mobile store on Thursday shows the challenges iOS developers can face when app guidelines shift.Among the apps removed was Choice, developed by the Palo Alto-based company Been. The app interrupted encrypted traffic streams sent to a handful of companies, including Facebook, Google, Yahoo and Pinterest, in order to block in-app ads.Apple said the apps, which it did not name, used root digital certificates that could expose data to untrusted sources.To read this article in full or to leave a comment, please click here

TPP will outlaw security research done without permission, lead to destroyed devices

If you don’t have a DVD or Blu-ray ripper and you want one, then you should consider buying one immediately because tools that assist in the circumvention of DRM could be banned if the Trans-Pacific Partnership (TPP) is ratified. Of course if the finalized TPP text, leaked by WikiLeaks, is ratified, then you could be criminally liable if you circumvent Digital Rights Management. While a worse-case scenario might involve copyright infringement as the TPP sets a copyright term to life plus 70 years, the judicial authorities could also “order the destruction of devices and products found to be involved in the prohibited activity.” The TPP is “all we feared,” according to the EFF.To read this article in full or to leave a comment, please click here

Winston Churchill on IPv6

While researching for another blog post, I stumbled upon this speech by Winston Churchill:

When the situation was manageable it was neglected, and now that it is thoroughly out of hand we apply too late the remedies which then might have effected a cure. There is nothing new in the story. It is as old as the Sibylline Books. It falls into that long, dismal catalogue of the fruitlessness of experience and the confirmed unteachability of mankind. Want of foresight, unwillingness to act when action would be simple and effective, lack of clear thinking, confusion of counsel until the emergency comes, until self-preservation strikes its jarring gong -these are the features which constitute the endless repetition of history.

Obviously mr. Churchill wasn't talking about IPv6 but about way more serious matters… but it's also obvious he was right abut the unteachability of mankind.

Infosec is good people

For all that we complain about drama in our community, we are actually good people. At a small conference yesterday, I met "Kath". She just got her degree in advertising, but has become disillusioned. Her classes in web development and app development has shown her how exploitative online advertising can be. ("PHP has made me cry" -- yes, it's made all of us cry at some point).

She's felt alone, as if it were only her who that those feelings, then she discovered the EFF, and privacy activists like Yan (@bcrypt) who have been fighting for privacy. Kath grew up in the middle of nowhere in Texas, and went to college in another middle-of-nowhere place in Texas. Being a muggle, she's never heard of infosec before -- but she got a ticket and flew to New York to attend this little infosec conference where Yan was speaking. (Well, that and also to apply for the NYU graduate program in media).

She found things she didn't expect. She found, for example, how she can contribute, using her skills in usability to make crypto and privacy better for users. She also found a community that was accepting and approachable. Advertising is a Continue reading

SDN Warriors



SDN Warriors Facebook Group is an open group for any Network Engineer who wants to transform to become SDN & NFV Architect, Network Programmability Engineer and Network DevOps. The group is run by mentors who are currently transforming ourselves and willing to help others to do the same. We have the skills and experiences with various SDN solutions, we have done SDN & NFV projects, we have hosted SDN Hackathon event, we have even created our own SDN products.
Non-SDN related topics will be banned, and please use English only
https://www.facebook.com/groups/sdnwarriors/

Why is double opt-in still not used by everyone?!

Out there in the big wide world there are, beside me, unfortunately, a few other people named “Mark Gibbs” and a number of these individuals don’t know their Gmail addresses. This is a problem as I am the proud owner of “[email protected]” and have been since the start of Gmail while they are not. The trouble with these people is they keep giving my Gmail address to organizations they deal with and more than a few of these organizations fail to do the one thing that they should be doing when it comes to building an email relationship with a customer: Verifying the customer’s email address.To read this article in full or to leave a comment, please click here

Dismal PC business contraction continues; no bounce yet from Windows 10

As expected, Windows 10 provided little if any bounce to PC shipments in the just-concluded September quarter, researchers at IDC and Gartner said yesterday. "Not in terms of driving volume, no," said Loren Loverde of IDC in a Friday interview when asked about Windows 10's impact. "The main inhibiting concern has been the continuing free upgrade." Rival research firm Gartner concurred. "The focus of the Windows launch in the quarter was to upgrade to Windows 10 on existing PCs, rather than ship on new PCs," the company said in a statement. Both IDC and Gartner pegged third-quarter PC shipments as down from the same period in 2014, although they differed slightly on the extent of the contraction. IDC said that shipments declined 11% year-over-year, while Gartner said it was closer to 8%. IDC put shipments at 71 million, Gartner, at 74 million. Part of the difference is how each defines the category: IDC does not include tablets with detachable keyboards, such as Microsoft's Surface Pro, while Gartner does.To read this article in full or to leave a comment, please click here

Dow Jones & Co. discloses breach, incident likely related to Scottrade

On Friday, in a letter to customers, the CEO of Dow Jones & Co. disclosed a data breach affecting 3,500 people. Based on public details, the incident seems similar to a breach reported by Scottrade last week that impacted 4.6 million investors. In his letter, Dow Jones Chief Executive William Lewis said that law enforcement officials informed the company about the potential breach in late July. After bringing in outside help, an investigation turned up a confirmation that the systems housing the customer data was accessed – but there is no proof that data was exfiltrated. The investigators also determined that the attackers had access to the system between August 2012 and July 2015.To read this article in full or to leave a comment, please click here

No Bull. Just Swag.

We're over-the-moon excited to announce the Ansible online store is live. In response to all of the love you've shown us, we had to step up our swag game. The Ansible Store carries a variety of our best items, and we can't wait to see you showing off your Ansible pride. 

Ansible_Store_Homepage

You can find your all-time favorites, like t-shirts, mugs and stickers. Plus, we've added a few exciting new items, like Ansible + Patagonia backpacks and onesies for our youngest fans.

For now we're only shipping throughout the United States while we get up and running. For our international friends, we'll expand shipment in the future. Stay tuned. 

Don't be surprised when you don't see our lovable Ansi-bull on the site. You'll need to attend a meetup or spot us at an event for one of those. 

So what are you waiting for? Start shopping and join the A team. 

Fabric View

The Fabric View application has been released on Github, https://github.com/sflow-rt/fabric-view. Fabric View provides real-time visibility into the performance of leaf and spine ECMP fabrics.
A leaf and spine fabric is challenging to monitor. The fabric spreads traffic across all the switches and links in order to maximize bandwidth. Unlike traditional hierarchical network designs, where a small number of links can be monitored to provide visibility, a leaf and spine network has no special links or switches where running CLI commands or attaching a probe would provide visibility. Even if it were possible to attach probes, the effective bandwidth of a leaf and spine network can be as high as a Petabit/second, well beyond the capabilities of current generation monitoring tools.

Fabric View solves the visibility challenge by using the industry standard sFlow instrumentation built into most data center switches. Fabric View represents the fabric as if it were a single large chassis switch, treating each leaf switch as a line card and the spine switches as the backplane. The result is an intuitive tool that is easily understood by anyone familiar with traditional networks.

Fabric View provides real-time, second-by-second visibility to traffic, identifying top talkers, protocols, tenants, tunneled traffic, Continue reading

Juniper Networks looking to go private?

Juniper Networks has reportedly hired investment banker Goldman Sachs to explore taking the company private.The development has the blessing of activist investor Elliott Management, according to the website Benzinga. Elliott owns 4.5% of Juniper and has encouraged the company to look for ways boost shareholder value through restructurings and product portfolio rationalization.Juniper did reorganize last year at the urging of Elliott after multiple quarters of lackluster performance.To read this article in full or to leave a comment, please click here

Can $1M in damages be accurate in a website defacement?

Corporate security pros should note that journalist Matthew Keys was convicted this week of changing a headline on the LA Times Web site, a case that may help define what can be included when a toting up damages caused by hackers. The bill cited in court came to $929,977 for the cost of changing back the altered headline, which stayed live for less than an hour, but also the cost of assessing what other damage was done and fixing it, which took months. You can read details about the case here and here.To read this article in full or to leave a comment, please click here

Basics: Explaining the Difference Between Software Defined Networking (SDN) and Network Functions Virtualization (NFV)

The next generation of networking is more complex and multi-functional compared to the networks of today. Networks are moving from “connectivity as a service” to “multi- service platform. Takeaways SDN & NFV are complementary technologies NFV depends on SDN to deliver network features that enable it. Both use controller concepts for Operations and Administration (OAM). […]

The post Basics: Explaining the Difference Between Software Defined Networking (SDN) and Network Functions Virtualization (NFV) appeared first on EtherealMind.

1 … 3,223 3,224 3,225 3,226 3,227 … 3,773