Scott Lowe

DECEMBER 27, 2019

Bruce Schneier writes about how some Chinese hackers are bypassing RSA software token authentication (the title is a bit more broad, implying other forms of two-factor authentication are affected, but the article focuses on attacks against the use of RSA software tokens). Operating Systems/Applications.

Open Source 60

Open Source Vmware Authentication Storage 60

Scott Lowe

JUNE 18, 2021

Via Ivan Pepelnjak, I was pointed to Jon Langemak’s in-depth discussion of working with Linux VRFs. Sonia Cuff provides a set of links for detailed instructions on setting up VPN access from macOS to Microsoft Azure with Azure Active Directory authentication. Operating Systems/Applications. Networking.

Vmware 60

Vmware Hardware Load Balancer Apple 60

Scott Lowe

MAY 27, 2022

Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. Operating Systems/Applications. The state of virtualization on Apple Silicon hardware has seen a few developments in recent days and weeks. Programming.

Virtualization 79

Virtualization Storage Network Programming 79

Scott Lowe

JULY 5, 2019

If you’re unfamiliar with public key infrastructure (PKI), digital certificates, or encryption, you may find this Linux Journal article helpful. Lennart Koopmann provides a guide to Yubikey authentication in the real world. Operating Systems/Applications. It provides the basics behind X.509v3 Enjoy your weekend!

Storage 60

Storage Hardware Open Source Vmware 60

Scott Lowe

APRIL 19, 2019

Milind Gunjan shares some tips for troubleshooting Linux bridged networking on a KVM host. Many organizations prefer to use two-factor authentication (2FA) to help protect their systems. ” Operating Systems/Applications. configurations. Servers/Hardware. Nothing this time around!

Open Source 60

Open Source Tools Policies Cloud 60

ForAllSecure

DECEMBER 2, 2021

You’ll want someone with years of pen testing experience, some one who knows the operating system like no other. So in general, an operating system that eventually allows you to gain more information about the context within which attack was made. Maybe your first concern is to make sure the company is functional.

Examples 52

Examples Operating Systems Course System 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. It seemed that once you authenticated through the local network, the app maintain that access, even if you are halfway across the world.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. It seemed that once you authenticated through the local network, the app maintain that access, even if you are halfway across the world.

Internet 52

Internet Research Security Tools 52

Scott Lowe

MARCH 20, 2020

This blending of “traditional” network engineering with containers, Linux, and DevOps tooling is how Matt is setting new trends and directions for the networking industry. Chris Wahl touches on the topic of using GitHub personal tokens to authenticate to HashiCorp Vault. Operating Systems/Applications.

Linux 60

Linux Vmware Authentication Storage 60

ForAllSecure

NOVEMBER 18, 2021

So we include other telemetry that seeks to authenticate that the entity logging in is who they say they are. Without a basic ability to authenticate these characters, there’d be no drama, no romance, no tragedy. So that’s why you need multi factor authentication. Think about it. And important.

Authentication 52

Authentication System Examples Analysis 52

ForAllSecure

DECEMBER 17, 2021

As I produce this episode, there's a dangerous new vulnerability known informally as Log4Shell, it’s a flaw in an open source Java logging library developed by the Apache Foundation and, in the hands of a malicious actor, could allow for remote code injection. Vamosi: The idea behind Open Source is great.

Open Source 52

Open Source Software Software Applications 52

Linux Academy

APRIL 11, 2019

Modern-day defense in depth strategies revolve around this same concept of making an attacker go through multiple layers of defense, with one key difference: we’re applying that to our computer systems. Identity is the process of assigning each individual user and system their own unique name. Domain 7: Physical Security.

Authentication 60

Authentication Security Disaster Recovery Firewall 60

Scott Lowe

APRIL 17, 2017

Turning to focus a bit more on the tools themselves, Hykes starts with tools for developers (arguably Docker’s bread-and-butter audience). Docker, according to Hykes, strives to streamline and remove friction in the development cycle. Hykes says he uses “complaint-driven development.” What is complaint-driven development?

Linux 60

Linux Open Source Windows Security 60

ForAllSecure

MARCH 30, 2022

So the developers of the Jupyter Notebook service found it important that customers cannot access that instance's metadata service IP address. We tried accessing this IMDs URL, Vamosi: IMDS is Instance Metadata Service, and this is what the developers of Jupyter notebook service blocked. Why might that be the case?

Firewall 52

Firewall Virtualization Authentication Linux 52

ForAllSecure

AUGUST 10, 2021

You know with modern vehicles, they're actually becoming like they're running on bluetooth, they're running the Android operating system. Vamosi: What unites these microcontrollers is not an operating system, rather it's a bus. A bus is a communication system that transfers data between components. What's that?

Automotive 52

Automotive Operating Systems System Tools 52

ForAllSecure

OCTOBER 25, 2022

At the time of this podcast, Lockbit accounts for 40% of the ransomware present today and it hits both Windows and Linux machines. We know this because there’s a disgruntled developer who leaked the builder to the general public. Baccio: How the families are built, how the ransomware binary is actually coded and developed.

Malware 40

Malware Network Groups Research 40