Russian hackers uses Flash, Windows zero-day flaws

A fresh attack by a long-known hacking group suspected to be linked with Russia did little to mask its activity in an attack a week ago.The computer security firm FireEye wrote on Saturday that the group—called APT 28—attacked an “international government entity” on April 13, using two recently disclosed software flaws, one of which has not been patched.The attack sought to trick victims into clicking on a link that led to a website which attacked their computer. It first used a vulnerability in Adobe Systems’ Flash player, CVE-2015-3043, then used a still unpatched Microsoft vulnerability, CVE-2015-1701, to gain higher privileges on a computer.To read this article in full or to leave a comment, please click here

iPhone 7 rumor rollup: Killer camera on the way?

Apple’s confirmed-but-not-confirmed acquisition this past week of Israeli camera maker LinX has iPhone 7 watchers wishing, begging and hoping that the next great smartphone will incorporate advanced photo-taking technologies. Neither Apple nor LinX is confirming the buyout, estimated at $20 million by the Wall Street Journal, although Apple did give its standard response that it does sometimes acquire small companies and is not compelled to let the public know. Assuming this deal is real, Apple watchers have begun slobbering all over themselves in anticipation of improved camera features for the next iPhone. After all, the iPhone is one of the world’s most popular cameras already, and is Number 1 on photo-sharing site Flickr.To read this article in full or to leave a comment, please click here

Running an etcd-Backed Docker Swarm Cluster

In this post, I’ll build on a couple of previous posts and show you how to build your own Docker Swarm cluster that leverages etcd for cluster node discovery. This post builds on the information presented on how to run an etcd 2.0 cluster on Ubuntu as well as the information found in this post on running a Consul-backed Docker Swarm cluster.

To help you follow along, I’ve created a Vagrant environment that you can use to turn up the configuration described in this blog post. These files are found in the “docker-swarm-etcd” directory of my GitHub learning-tools repository. Feel free to use the files in this directory/repository to help with the learning process.

There are 3 major components to this configuration:

  1. A cluster of three Ubuntu 14.04 systems running etcd 2.0 (specifically, etcd 2.0.9, the last release as of this writing). This etcd cluster serves as a discovery back-end for Docker Swarm.
  2. A set of hosts running the Docker daemon (version 1.4.0 or higher, as required by Swarm). In this particular instance, I’m using CoreOS Linux (version 557.2.0 from the stable branch).
  3. A few containers running on the CoreOS hosts; Continue reading

Indoor Atlas: Smartphones can navigate inside buildings using magnetic fields

Navigating outdoors is easy with GPS and when augmented augmented by WiFi the the accuracy and availability of geolocation increase significantly … until you step inside a building.Once you’re inside and there’s no GPS signal WiFi geolocation might give you a rough fix though usually you’re effectively “off the grid.” But knowing where you are inside a structure can be crucial in large factories or office buildings. It may also be crucial for others to be able to locate you.If you want to build an app that’s capable for geolocation within a building you should take a look at Indoor Atlas, an SDK for iOS and Android, which uses magnetometer data from your smartphone and cloud-based mapping data to locate you to within 2 meters or less in real time.To read this article in full or to leave a comment, please click here

Wordfence plugin secures WordPress sites; solves job from hell

Effectively managing your own passwords under any circumstances is hard work but managing your users’ passwords on a WordPress installation can become the job from hell. Say you’re the admin of a WordPress site and you have a variety of users with accounts on your system. You immediately have a problem because WordPress is insanely popular (it’s used on almost one quarter of all Websites) and has roughly three times more bugs identified than the next largest content management system. Not surprisingly, WordPress is the most attacked CMS. So, unless you like having your WordPress installation hacked you’d better get serious about security.While you can enforce user compliance to password standards through the use of plugins such as No Weak Passwords or Force Strong Passwords, users can still choose passwords that are weaker than you'd like. So, how do you check whether their passwords are “good”? You use the Wordfence plugin published by Feedjit Inc.To read this article in full or to leave a comment, please click here

Upcoming Event: Packet Pushers at ONUG Talking Software Defined WAN

The Packet Pushers are recording a live show on SDN WAN on May 13 in New York in partnership with Viptela. Please join us.

Author information

Greg Ferro

Greg Ferro is a Network Engineer/Architect, mostly focussed on Data Centre, Security Infrastructure, and recently Virtualization. He has over 20 years in IT, in wide range of employers working as a freelance consultant including Finance, Service Providers and Online Companies. He is CCIE#6920 and has a few ideas about the world, but not enough to really count.

He is a host on the Packet Pushers Podcast, blogger at EtherealMind.com and on Twitter @etherealmind and Google Plus.

TwitterFacebookGoogle+LinkedIn

The post Upcoming Event: Packet Pushers at ONUG Talking Software Defined WAN appeared first on Packet Pushers Podcast and was written by Greg Ferro.

What’s Possible

I just read story on Medium. It’s a great use of Social Media to achieve something truly useful.

I wish more people would think differently in my line of work. Some days the resounding echoes of “we’ve always done it this way” really give me a headache.


Google’s Project Loon close to launching thosands of balloons

Google says it’s Project Loon is close to being able to produce and launch thousands of balloons to provide Internet access from the sky.Such a number would be required to provide reliable Internet access to users in remote areas that are currently unserved by terrestrial networks, said Mike Cassidy, the Google engineer in charge of the project, in a video posted Friday.The ambitious project has been underway for a couple of years and involves beaming down LTE cellular signals to handsets on the ground from balloons thousands of feet in the air, well above the altitude that passenger jets fly.“At first it would take us 3 or 4 days to tape together a balloon,” Cassidy says in the video. “Today, through our own manufacturing facility, the automated systems can get a balloon produced in just a few hours. We’re getting close to the point where we can roll out thousands of balloons.”To read this article in full or to leave a comment, please click here

Google’s Project Loon close to launching thousands of balloons

Google says its Project Loon is close to being able to produce and launch thousands of balloons to provide Internet access from the sky. Such a number would be required to provide reliable Internet access to users in remote areas that are currently unserved by terrestrial networks, said Mike Cassidy, the Google engineer in charge of the project, in a video posted Friday. The ambitious project has been underway for a couple of years and involves beaming down LTE cellular signals to handsets on the ground from balloons thousands of feet in the air, well above the altitude that passenger jets fly. “At first it would take us 3 or 4 days to tape together a balloon,” Cassidy says in the video. “Today, through our own manufacturing facility, the automated systems can get a balloon produced in just a few hours. We’re getting close to the point where we can roll out thousands of balloons.”To read this article in full or to leave a comment, please click here

Demystifying myths in the networking industry

I have great respect for my previous company, Cisco Systems, and truly believe that the company has successfully brought a disruptive approach of applying network technologies to answer major business challenges.

Working at Cisco was like being conferred with an honorary doctorate from an Ivy League school in engineering, management, leadership and entrepreneurship simultaneously . The experience of working in multiple lines of businesses was helpful in shaping the mindset on how best to manage innovations and productize them so that it was mutually beneficial to the customers and the company. This productization often required an intense validation process, which resulted occasionally in some really cool technology ideas not ever seeing the light of day. Thoughts presented for the rest of this blog are an attempt to share my experience and possibly dispel some myths in the industry.

Myth – One Vendor Can Answer All Networking Requirements

Network vendors for the longest time have enjoyed a monopoly (or duopoly). If an organization had some IT infrastructure requirements, there were a handful of vendors that would satisfy all their needs. This was great for everyone! As a measure of risk mitigation, a famous unwritten policy surfaced that “you would not lose your Continue reading

FCC faces seventh net neutrality lawsuit

Broadband provider CenturyLink has joined the long list of ISPs and trade groups suing the U.S. Federal Communications Commission over its net neutrality rules.CenturyLink filed its lawsuit Friday, becoming the seventh organization to challenge the rules approved by the FCC in late February. The FCC officially published the rules in the Federal Register, the official publication for U.S. agency rules, earlier this week, prompting a round of lawsuits.The company objected to the FCC’s reclassification of broadband from a lightly regulated information service to a more heavily regulated common-carrier service. CenturyLink spends hundreds of millions of dollars a year to “build, maintain and update an open Internet network and does not block or degrade lawful content,” it said in a statement.To read this article in full or to leave a comment, please click here

US intelligence outfit wants the ultimate quantum qubit

Researchers behind the Intelligence Advanced Research Projects Activity (IARPA) want to gather computer scientists engineers and physicists to define the challenge of “encoding imperfect physical qubits into a logical qubit that protects against gate errors and damaging environmental influences.”A quantum bit or qubit or quantum bit in the quantum computing realm usesqubitsinstead of the usual bits representing 1s or 0s. Ultimately quantum computing efforts should result in super-fast, super secure computers the experts say. [For a good article on why quantum computing can be so damn confusing and why its development is critical, go here.]To read this article in full or to leave a comment, please click here

AMD pulls back: Less ARM in the cloud, more NOC power consumption

I have a certain sadness as I write this. Data center computational densities have incurred a setback.There was a time when it looked as though ARM might give power-hungry Intel designs a run for their money in the world of high-density computing. It's the sort of density that cloud providers need: rack after rack, crammed to the gills, chilled, high-speed buses. But power costs a lot of money, alternate energy initiatives aside.AMD had bought SeaMicro, whose high-density chassis full of power-sipping ARM CPUs form large arrays of calculative strength, without the hefty bill from the power company for oceans of coulombs. HP had initially announced Project Moonshot, the cartridge-based high-density server with ARM, or FPGA cartridges to slowly sip power, but ultimately delivered its chassis with Intel Atom. ARM blades are still available, and FPGAs are said to be shipping.To read this article in full or to leave a comment, please click here

Facebook tries to keep it real by killing more ‘fake’ likes

Facebook has tripled its detection and elimination of “fake” likes, which can artificially inflate a brand’s prominence on the site and deceive users, the company said on Friday.Facebook began improving its processes for eliminating fake likes this past October. They’re a real problem for the site, because they can trick a page owner or business into thinking they’re more popular on Facebook than they really are, fooling regular users along the way.Fraudulent likes originate from click farms, fake accounts and malware, and are sold to page owners who want to boost their exposure on Facebook. But in reality they don’t do much to win them actual customers, fans or increased sales.To read this article in full or to leave a comment, please click here

1 … 3,475 3,476 3,477 3,478 3,479 … 3,783