Anatomy of how you get pwned
Today, somebody had a problem: they kept seeing a popup on their screen, and obvious scam trying to sell them McAfee anti-virus. Where was this coming from?
In this blogpost, I follow this rabbit hole on down. It starts with "search engine optimization" links and leads to an entire industry of tricks, scams, exploiting popups, trying to infect your machine with viruses, and stealing emails or credit card numbers.
Evidence of the attack first appeared with occasional popups like the following. The popup isn't part of any webpage.
This is obviously a trick. But from where? How did it "get on the machine"?
There's lots of possible answers. But the most obvious answer (to most people), that your machine is infected with a virus, is likely wrong. Viruses are generally silent, doing evil things in the background. When you see something like this, you aren't infected ... yet.
Instead, things popping with warnings is almost entirely due to evil websites. But that's confusing, since this popup doesn't appear within a web page. It's off to one side of the screen, nowhere near the web browser.
Moreover, we spent some time diagnosing this. We restarted the webbrowser in "troubleshooting mode" with all Continue reading
Blogging Rule#1: Own Your Content
During my interview with David Bombal I made a recommendation I find crucial for anyone serious about blogging:
Make sure you own your content.
There’s a simple reason for that rule: if you want to write quality content, you’ll have to invest a lot of time into it.
Blogging Rule#1: Own Your Content
During my interview with David Bombal I made a recommendation I find crucial for anyone serious about blogging:
Make sure you own your content.
There’s a simple reason for that rule: if you want to write quality content, you’ll have to invest a lot of time into it.
SecureCRT Logging
Use of a terminal emulation programs such as SecureCRT to connect to network equipment is pretty common for networking professionals. One of the advantages of using a terminal emulation program is that they usually have some sort of logging capability. This will be a quick post to...Simplifying Security by Stepping Back
If you can step back and establish security practices that address each of the two types of vulnerabilities, you’ll go a long way toward simplifying security.AMD Hits Intel Below The Belt In The Datacenter Wallet
What Intel calls “cloud digestion” as the cause of the massive pullback in spending in its Data Center Group is looking more and more like a case of “Epyc indigestion” for Intel, not for the hyperscalers and cloud builders. …
AMD Hits Intel Below The Belt In The Datacenter Wallet was written by Timothy Prickett Morgan at The Next Platform.
The Hedge 81: Jana Iyengar and QUIC
QUIC is a middle-aged protocol at this point—it’s several years old, and widely deployed although TCP still dominates the transport layer of the Internet. In this episode of the Hedge, Jana Iyengar joins Alvaro Retana and Russ White to discuss the motivation for developing QUIC, and its ongoing development and deployment.
The Common Room: How an Artist Is Connecting Rural Indonesia One Village at a Time
A young person scrolls through Instagram to see the latest updates on their favorite profiles. To many around the world this doesn’t seem strange, but for a hamlet outside of a small village in Indonesia’s rural southwest, it’s revolutionary. And it’s in part thanks to the work of an Internet entrepreneur named Gustaff Harriman Iskandar. […]
The post The Common Room: How an Artist Is Connecting Rural Indonesia One Village at a Time appeared first on Internet Society.
OpenShifting The Hybrid Cloud Into High Gear
The cloud and the related edge already are rapidly influencing almost every aspect of IT, from the technology that is being adapted and created to how that technology is being consumed, as illustrated by the growing numbers of established hardware vendors – including Hewlett Packard Enterprise, Dell, and Cisco Systems – that now are offering more of their portfolio as services. …
OpenShifting The Hybrid Cloud Into High Gear was written by Jeffrey Burt at The Next Platform.
Day Two Cloud 095: Grappling With The Open Source Business Model
Today on Day Two Cloud we get into a whole lot of things. For example, what is IT's value in the age of cloud? How can IT figure out what's actually providing value to the business vs. undifferentiated heavy lifting? How companies built on open-source software make their money? Our guest is Stu Miniman, Director of Market Insights at Red Hat.Day Two Cloud 095: Grappling With The Open Source Business Model
Today on Day Two Cloud we get into a whole lot of things. For example, what is IT's value in the age of cloud? How can IT figure out what's actually providing value to the business vs. undifferentiated heavy lifting? How companies built on open-source software make their money? Our guest is Stu Miniman, Director of Market Insights at Red Hat.
The post Day Two Cloud 095: Grappling With The Open Source Business Model appeared first on Packet Pushers.
Nokia Lab | LAB 5 RSVP-TE basic |
- basic RSVP-TE configuration
- what we need for RSVP-TE infrastructure?
- configure IGP with TE extension (e.g. OSPF)
- add all p2p and "system" interfaces to MPLS and RSVP context
- Do routers establish RSVP-TE adjacency? Why?
- create LSP from R1 to R6 with an "empty" path
- examine LSP signaling process(use debug or Wireshark)
- capture PATH and RESV messages and examine their content
- describe label signaling process
- examine PSB and RSB (see "useful debug commands" section)
- break some link with active RSVP session and capture PathTear and ResvTear messages
- describe tearing down process and message purpose
- RSVP-TE timers
- break some link with active RSVP session (e.g. LSP to_R6)
- examine LSP on Head-end and check LSP operation status
- What is LSP operation status?
- Continue reading
netsim-tools Release 0.6: BGP, IS-IS, SR-MPLS, FRR
TL&DR: If you want to test BGP, OSPF, IS-IS, or SR-MPLS in a virtual lab, you might build the lab faster with netsim-tools release 0.6.
In the netsim-tools release 0.6 I focused on adding routing protocol functionality:
- IS-IS on Cisco IOS/IOS XE, Cisco NX-OS, Arista EOS, FRR, and Junos.
- BGP on the same set of platforms, including support for multiple autonomous systems, EBGP, IBGP full mesh, IBGP with route reflectors, next-hop-self control, and BGP/IGP interaction.
- Segment Routing with MPLS on Cisco IOS XE and Arista EOS.
You’ll also get: