Scott Lowe

MAY 17, 2019

Courtesy of Tigera, Alex Pollitt shares some guidelines on when Linux conntrack is no longer your friend. Apparently Dell’s new docking stations support firmware updates via Linux. Operating Systems/Applications. Cindy Sridharan has a good article on health checks and graceful degradation in distributed systems.

Linux 60

Linux Dell Open Source Licensing 60

Scott Lowe

APRIL 12, 2020

Postman is a cross-platform application, so while my post was centered around Postman on Linux ( Ubuntu , specifically) the steps should be very similar—if not exactly the same—when using Postman on other platforms. This post assumes you’ve already installed Paw on your macOS system.

Authentication 78

Authentication Comparison Linux Tools 78

Scott Lowe

NOVEMBER 30, 2018

Christian Kellner provides a brief reminder that not all USB-C ports are Thunderbolt ports, and updates everyone on the status of bolt (Linux utility for working with Thunderbolt ports and peripherals). Operating Systems/Applications. Highly recommended reading. Cloud Computing/Cloud Management. A simple tip, yes, but useful!

Vmware 60

Vmware Authentication Virtualization Storage 60

Scott Lowe

FEBRUARY 19, 2014

Let’s start with passing some JSON data to a REST API to authenticate. Example 1: Authenticating to OpenStack. Let’s say you’re working with an OpenStack-based cloud, and you need to authenticate to OpenStack using OpenStack Identity (“Keystone”). Example 2: Authenticating to VMware NSX.

Authentication 93

Authentication Vmware Examples Applications 93

Linux Academy

MARCH 28, 2019

Vulnerabilities at the operating system level may be exploited by rogue container workloads if not hardened. RBAC (Role Based access Control) has become a standard for the Kubernetes Authentication-Authorization-Admission security paradigm. These suggestions and others are covered in Linux Academy’s Kubernetes Security Course.

Policies 68

Policies Linux Security Virtualization 68

Scott Lowe

JUNE 18, 2021

Via Ivan Pepelnjak, I was pointed to Jon Langemak’s in-depth discussion of working with Linux VRFs. Sonia Cuff provides a set of links for detailed instructions on setting up VPN access from macOS to Microsoft Azure with Azure Active Directory authentication. Operating Systems/Applications. Networking.

Vmware 60

Vmware Hardware Load Balancer Apple 60

Scott Lowe

MARCH 1, 2019

VyOS is an open source Linux-based network operating system.). James Hamilton is back with a more in-depth look at the components of the AWS Nitro System. Part 1 covers auto-unsealing Vault ; part 2 covers authenticating to Vault using instance metadata ; and part 3 discusses authenticating to Vault using an IAM user or role.

Operating Systems 60

Operating Systems Authentication Network Open Source 60

Dataconomy

AUGUST 14, 2023

Disclaimer: The information presented in this article is focused solely on the capabilities and features of Flipper Zero, an innovative device designed for exploring cybersecurity and uncovering vulnerabilities in various systems. Sub-1 GHz: Employed in garage door remotes and remote keyless systems for communication.

Wireless 69

Wireless Banking Programming System 69

Linux Academy

APRIL 15, 2019

Last week, we discussed the use of password managers and multi-factor authentication (MFA). The use of an organization-level password manager for all passwords, such as subscriptions, network devices, systems, applications, etc. Welcome back to our weekly blog post as we look at how to better secure your infrastructure.

Policies 60

Policies Security Backup Linux 60

Scott Lowe

MARCH 2, 2020

Redpill Linpro talks to readers about their new routers running Cumulus Linux. Colleague and teammate Eric Shanks takes readers through what’s necessary to do Active Directory authentication for Kubernetes clusters. Operating Systems/Applications. I need to move it back to Windows from Linux.

Linux 60

Linux Windows Hardware Network 60

Scott Lowe

DECEMBER 27, 2019

Bruce Schneier writes about how some Chinese hackers are bypassing RSA software token authentication (the title is a bit more broad, implying other forms of two-factor authentication are affected, but the article focuses on attacks against the use of RSA software tokens). Operating Systems/Applications.

Open Source 60

Open Source Vmware Authentication Storage 60

Scott Lowe

JUNE 9, 2014

” Docker is announcing a set of ten systems integrator partners to help drive commercial adoption. A key part of Docker Hub is Official Repositories; these are “Dockerized” applications that are maintained, supported, and available to all Docker Hub users. Linux Virtualization LXC' PN Agent Filter.

Virtualization 60

Virtualization Linux Applications Open Source 60

Linux Academy

FEBRUARY 12, 2019

Once loaded, our Ohai plugin could collect data about a specific application or files on the system, and provide it as an attribute on the node in the Chef client run. Custom Knife plugins allow you to add functionality to Knife, while already having access to Chef Server authentication. Chef Handlers. The Chef Server API.

Resources 60

Resources Course Linux Authentication 60

Scott Lowe

MAY 27, 2022

Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. Operating Systems/Applications. This will become even more useful, in my opinion, when Linux support is added. Viktor van den Berg shares his CKAD exam experience and some tips on how to prepare.

Virtualization 79

Virtualization Storage Network Programming 79

Scott Lowe

APRIL 19, 2019

Milind Gunjan shares some tips for troubleshooting Linux bridged networking on a KVM host. Many organizations prefer to use two-factor authentication (2FA) to help protect their systems. ” Operating Systems/Applications. configurations. Servers/Hardware. Nothing this time around!

Open Source 60

Open Source Tools Policies Cloud 60

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). Operating Systems/Applications. Good stuff here—I highly recommend reading this paper. Good stuff Juan!

Vmware 60

Vmware Devops Storage Linux 60

Scott Lowe

JULY 5, 2019

If you’re unfamiliar with public key infrastructure (PKI), digital certificates, or encryption, you may find this Linux Journal article helpful. Lennart Koopmann provides a guide to Yubikey authentication in the real world. Operating Systems/Applications. It provides the basics behind X.509v3

Storage 60

Storage Hardware Open Source Vmware 60

Scott Lowe

MAY 22, 2015

Welcome to Technology Short Take #51, another collection of posts and links about key data center technologies like networking, virtualization, cloud management, and applications/operating systems. Here’s one way , using Ravello Systems. Flavio Leitner has a nice article comparing OVS internal ports with Linux veth devices.

Vmware 60

Vmware Network Virtualization IPv6 60

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). Operating Systems/Applications. Good stuff here—I highly recommend reading this paper. Good stuff Juan!

Devops 60

Devops Vmware Storage Open Source 60

Scott Lowe

OCTOBER 5, 2012

I came across this post on CloudFoundry’s User Account and Authentication Service (the UAA). Operating Systems/Applications. Only a true geek would be interested in this, but here’s some information on running OpenBSD in KVM on Linux. Cloud Computing/Cloud Management. Definitely worth reading, in my view.

Storage 92

Storage Vmware Linux Virtualization 92

ForAllSecure

DECEMBER 2, 2021

She talks about the various ways criminal hackers hide their work, what happens after ransomware hits on a system, how investigators go about looking for recovery information, and what type of skills those practitioners need t o succeed. Even if you think you’re erasing your tracks. Even if you think you’re erasing your tracks.

Examples 52

Examples Operating Systems Course System 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. Calderon: Paulino Calderon, I'm a senior application security consultant with Websec.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. Calderon: Paulino Calderon, I'm a senior application security consultant with Websec.

Internet 52

Internet Research Security Tools 52

ForAllSecure

DECEMBER 17, 2021

Log4j is used in many applications or is present, with dependencies in enterprise applications as well as numerous cloud services, all of which makes updating all the possible uses for it hard, even if coordinated in advance. For example, the number of registrations in any system. And so it's easy to make those assumptions.

Open Source 52

Open Source Software Software Applications 52

ForAllSecure

DECEMBER 16, 2020

Embedded applications are some of the most prolific software out there in the world. Whether it be routers, IoT devices or SCADA systems, they are very varied in architecture, use case, and purpose. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above.

Programming 52

Programming Exercises Linux Authentication 52

ForAllSecure

DECEMBER 15, 2020

Embedded applications are some of the most prolific software out there in the world. Whether it be routers, IoT devices or SCADA systems, they are very varied in architecture, use case, and purpose. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above.

Programming 52

Programming Exercises Linux Authentication 52

ForAllSecure

NOVEMBER 18, 2021

AI is almost good enough at simulating human activity to defeat the biometric systems designed to fight fraud, effectively putting us back at square one. So we include other telemetry that seeks to authenticate that the entity logging in is who they say they are. So that’s why you need multi factor authentication.

Authentication 52

Authentication System Examples Analysis 52

CIO Business Intelligence

DECEMBER 7, 2023

You need to ask the important questions: How will employees and vendors access systems and applications? Systems and data are on premise and in the cloud. So, invest in the right tools to protect your systems and sensitive data. Cutting the cord was painful for her. Where will those resources live?

Enterprise 106

Enterprise Enterprise Disaster Recovery Authentication 106

Scott Lowe

MARCH 20, 2020

This blending of “traditional” network engineering with containers, Linux, and DevOps tooling is how Matt is setting new trends and directions for the networking industry. Chris Wahl touches on the topic of using GitHub personal tokens to authenticate to HashiCorp Vault. Operating Systems/Applications.

Linux 60

Linux Vmware Authentication Storage 60

Scott Lowe

MARCH 10, 2023

William Lam shares news about higher-capacity SODIMMs available for small or ultra small form factor systems. Security Jeff Warren discusses a potential way for malicious players to bypass multi-factor authentication, aka the “Pass the Cookie” attack. Diego Crespo talks about PowerShell on Linux and his experience with it.

IPv6 74

IPv6 Linux Tools Network 74

Dataconomy

MAY 24, 2023

Blockchain technology is a decentralized and distributed ledger system that allows for the secure and transparent recording of transactions across multiple computers or nodes. It is the underlying technology behind cryptocurrencies like Bitcoin, but its applications extend beyond digital currencies. What is blockchain technology?

Network 59

Network Open Source IBM Applications 59

ForAllSecure

NOVEMBER 24, 2020

And how many other serious vulnerabilities like Heartbleed are lurking unknown in the applications we use everyday, in the websites we depend on, and in the devices we carry. And traditional application security tools like static analysis, they couldn’t find it. Then they are security scanning live systems.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

And how many other serious vulnerabilities like Heartbleed are lurking unknown in the applications we use everyday, in the websites we depend on, and in the devices we carry. And traditional application security tools like static analysis, they couldn’t find it. Then they are security scanning live systems.

Open Source 52

Open Source Tools Security Software 52

Linux Academy

APRIL 11, 2019

Modern-day defense in depth strategies revolve around this same concept of making an attacker go through multiple layers of defense, with one key difference: we’re applying that to our computer systems. Identity is the process of assigning each individual user and system their own unique name. Router/switch security.

Authentication 60

Authentication Security Disaster Recovery Firewall 60

CIO Business Intelligence

JULY 19, 2023

Its commitment to Linux turned what might have been a Windows Server-based cloud computing backwater into the Microsoft Azure powerhouse, the only public cloud to give the AWS juggernaut a serious run for its money. Netskope also offers two applications that integrate with MEI.

Microsoft 95

Microsoft Security Enterprise Enterprise 95

ForAllSecure

NOVEMBER 24, 2020

And how many other serious vulnerabilities like Heartbleed are lurking unknown in the applications we use everyday, in the websites we depend on, and in the devices we carry. And traditional application security tools like static analysis, they couldn’t find it. Then they are security scanning live systems.

Open Source 52

Open Source Tools Security Software 52

The Verge

MARCH 5, 2021

Our top pick is free to use across a range of operating systems on mobile and desktop. It’s available across iOS and Android; it has native desktop applications on Windows, macOS, and Linux; and it also integrates with every major browser including Chrome, Safari, Firefox, and Edge. Image: Bitwarden.

Security 107

Security Authentication Mobile Windows 107