Scott Lowe

DECEMBER 27, 2019

Bruce Schneier writes about how some Chinese hackers are bypassing RSA software token authentication (the title is a bit more broad, implying other forms of two-factor authentication are affected, but the article focuses on attacks against the use of RSA software tokens). Give it a look if you’re interested in learning more.

Open Source 60

Open Source Vmware Authentication Storage 60

Scott Lowe

NOVEMBER 20, 2015

Secure Shell, or SSH, is something of a “Swiss Army knife” when it comes to administering and managing Linux (and other UNIX-like) workloads. First, you’ll want to ensure you have public key authentication properly configured, both on the bastion host as well as the remote instances. ssh/bastion_rsa_key ForwardAgent yes.

Linux 60

Linux Authentication Examples Network 60

Scott Lowe

NOVEMBER 30, 2018

Christian Kellner provides a brief reminder that not all USB-C ports are Thunderbolt ports, and updates everyone on the status of bolt (Linux utility for working with Thunderbolt ports and peripherals). Highly recommended reading. Cloud Computing/Cloud Management.

Vmware 60

Vmware Authentication Virtualization Storage 60

Linux Academy

APRIL 15, 2019

Last week, we discussed the use of password managers and multi-factor authentication (MFA). Those will need to be manually changed periodically, or you can use a scripted approach (there are lots of examples for this online). Welcome back to our weekly blog post as we look at how to better secure your infrastructure.

Policies 60

Policies Security Backup Linux 60

Scott Lowe

FEBRUARY 28, 2019

Here’s another example of using AWS as a personal VPN service.). Use two-factor authentication, use a secure OS (I built mine on OpenBSD ), keep it patched/updated, etc. I used this successfully in Beijing, setting up endpoints in Seoul, Singapore, Tokyo, and sometimes Sydney. I did this for several years, and it ran flawlessly.

Real Estate 60

Real Estate Travel Linux Authentication 60

Scott Lowe

MAY 25, 2017

In my case, I only allow public key authentication to “trusted” systems (I vaguely recall an article I read a while ago about a potential concern regarding the key exchange, though I can’t find that article now). ssh/config file, I allow public key authentication only for specific hosts but not for all hosts. So, in my ~/.ssh/config

Authentication 60

Authentication Cloud Examples Google 60

Scott Lowe

MAY 25, 2017

In my case, I only allow public key authentication to “trusted” systems (I vaguely recall an article I read a while ago about a potential concern regarding the key exchange, though I can’t find that article now). ssh/config file, I allow public key authentication only for specific hosts but not for all hosts. So, in my ~/.ssh/config

Authentication 60

Authentication Cloud Examples Google 60

Linux Academy

MARCH 28, 2019

RBAC (Role Based access Control) has become a standard for the Kubernetes Authentication-Authorization-Admission security paradigm. A typical example would be a policy to restrict container workloads from running in privileged mode. These suggestions and others are covered in Linux Academy’s Kubernetes Security Course.

Policies 68

Policies Linux Security Virtualization 68

Scott Lowe

MAY 27, 2022

Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. Bashayr Alabdullah provides an example of building your own admission controllers in Kubernetes using Go. This will become even more useful, in my opinion, when Linux support is added. Programming.

Virtualization 79

Virtualization Storage Programming Network 79

ForAllSecure

DECEMBER 2, 2021

Well, you just want to investigate what has happened so that may for example involve an employee that is in some kind of a way misbehaving, but it's its default role it's of course focusing on the attack. In addition to her knowledge of Windows, she’s equally versed in Linux and other operating systems as well. It's not wrong.

Examples 52

Examples Operating Systems Course System 52

Scott Lowe

APRIL 10, 2020

In any case, I’ve been exploring the APIs using Postman (when on Linux) and Paw (when on macOS), and in this post I’ll share how to use Postman to launch an EC2 instance via API calls. I’ll be using Linux, but since Postman is cross-platform then this post should cover most users. Set up the Postman Environment.

Tools 78

Tools Examples Linux Resources 78

The Verge

JUNE 15, 2020

You can merge disparate email threads into one for easier browsing, for example. (It It will insist that you use two-factor authentication, for example — and via QR code, too; none of that insecure SMS business. It won’t affect the way the recipient views the email on their end.) Hey has other opinions.

Examples 102

Examples Linux Authentication Banking 102

Scott Lowe

AUGUST 16, 2017

Since that time, I’ve been experimenting with ODrive, testing it to see how well it works, if at all, with my Fedora Linux environment. ODrive, if you’re reading this: put some effort into your Linux support and your docs, and you’ll probably get more paying customers.) Fedora, for example, already has ~/.local/bin

Linux 60

Linux Storage Cloud Examples 60

Linux Academy

APRIL 8, 2019

I’m sure most everyone is familiar with the concept of passphrases, which is the use of a phrase instead of a single password — for example, “The moon is made of ch33se!” It also provides a handy browser plugin to fill in credentials for me, once I’ve authenticated to the plugin. Multi-factor authentication (MFA).

Authentication 68

Authentication Security Firewall Backup 68

Scott Lowe

JUNE 8, 2015

Maybe this doesn’t seem like a big deal to you, but having this ability to easily iterate over an Ansible playbook, or to test an Ansible playbook against various Linux distributions, has come in extraordinarily handy as I’ve been learning Ansible. The “trick” here lies in the Ansible configuration file and the Ansible inventory.

Vmware 60

Vmware Linux Authentication Virtualization 60

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). Nir Yechiel posted an article on using the Cumulus VX QCOW2 image with Fedora and KVM. Good stuff Juan!

Vmware 60

Vmware Devops Storage Linux 60

Scott Lowe

MAY 22, 2015

Rick Sherman has an article on using Jinja2 templates for network automation , including a practical example. Flavio Leitner has a nice article comparing OVS internal ports with Linux veth devices. This topic is the subject of some debate given that some claim OVS internal ports perform much better than Linux veth devices.

Vmware 60

Vmware Network Virtualization IPv6 60

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). Nir Yechiel posted an article on using the Cumulus VX QCOW2 image with Fedora and KVM. Good stuff Juan!

Devops 60

Devops Vmware Storage Open Source 60

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. There's a smart IoT enabled toothbrush for example, I mean, a toothbrush is a stick with bristles. In addition to a smart coffee mug.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. There's a smart IoT enabled toothbrush for example, I mean, a toothbrush is a stick with bristles. In addition to a smart coffee mug.

Internet 52

Internet Research Security Tools 52

ForAllSecure

NOVEMBER 18, 2021

So we include other telemetry that seeks to authenticate that the entity logging in is who they say they are. Take for example, that German candy, Gummy Bears. Without a basic ability to authenticate these characters, there’d be no drama, no romance, no tragedy. So that’s why you need multi factor authentication.

Authentication 52

Authentication System Examples Analysis 52

Linux Academy

OCTOBER 30, 2019

Hello Linux Academy learners! That first revision, which was released before my time here at Linux Academy, was more akin to someone learning to code “Hello World” for the first time. Anyways, looking back I was reminded why we – all of us here at Linux Academy – do this in the first place. It was cute.

Mobile 13

Mobile Linux Video Development 13

ForAllSecure

DECEMBER 16, 2020

Example: Netgear N300 a.k.a. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above. Is a MIPS Linux firmware. 0, stripped.

Programming 52

Programming Exercises Linux Authentication 52

ForAllSecure

DECEMBER 15, 2020

Example: Netgear N300 a.k.a. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above. This is a good target to look at because while it is a Linux firmware binary, it presents all of the challenges listed above. Is a MIPS Linux firmware. 0, stripped.

Programming 52

Programming Exercises Linux Authentication 52

ForAllSecure

NOVEMBER 24, 2020

History is filled with failed examples of homegrown encryption, some with disastrous consequences. So, remember our example with the word bird? And if you could initiate a heartbeat before authentication was complete on the site, you could smash and grab the encrypted information before anyone even knew who you were.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

History is filled with failed examples of homegrown encryption, some with disastrous consequences. So, remember our example with the word bird? And if you could initiate a heartbeat before authentication was complete on the site, you could smash and grab the encrypted information before anyone even knew who you were.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

History is filled with failed examples of homegrown encryption, some with disastrous consequences. So, remember our example with the word bird? And if you could initiate a heartbeat before authentication was complete on the site, you could smash and grab the encrypted information before anyone even knew who you were.

Open Source 52

Open Source Tools Security Software 52

CIO Business Intelligence

DECEMBER 7, 2023

Passwordless authentication A modern PAM cybersecurity solution must support several existing passwordless methods such as PKI, SSH keys and certs, and FIDO2 dongles. Building authentication services and MFA into the PAM platform (see above) enables rapid innovation and support for newer standards such as Passkeys.

Enterprise 105

Enterprise Enterprise Disaster Recovery Authentication 105

Scott Lowe

APRIL 17, 2017

Hykes goes on to provide some examples of this process. The first example he mentioned is that container images are too big. The second example Hykes shares is the friction involved in moving apps from the desktop (using something like Docker for Mac) to the cloud (using something like Docker for AWS).

Linux 60

Linux Open Source Windows Security 60

ForAllSecure

DECEMBER 17, 2021

For example, the number of registrations in any system. I guess one example that is easy to understand would be, let's say you're a power company and you've got 10,000 smart meters on people's houses out in the field. So for example, that these three bugs I found were in three different pieces of software. Open to open SSL.

Open Source 52

Open Source Software Software Applications 52

ForAllSecure

MARCH 30, 2022

Vamosi: IPTables is a way to configure the IP packet filter rules of the Linux kernel firewall. This was strange since they were obviously running linux commands in a linux terminal so why is it set to windows? The filters are organized in different tables, which contain chains of rules for how to treat network traffic packets.

Firewall 52

Firewall Virtualization Authentication Linux 52

ForAllSecure

NOVEMBER 2, 2021

So we have far less users for Mac and Linux than we have on Windows. Vamosi: Most antivirus products are found on Windows, much less so on Mac and Linux. For example, for the IAS research I mentioned before scanning port 80 was sufficient because like most IIS servers will listen on port 80.

Internet 52

Internet Malware Research Linux 52

Scott Lowe

APRIL 21, 2016

Mike Foley recently published a two-part series on two factor authentication (2FA) for vSphere ( part 1 is here ; part 2 is here ). There’s been a fair amount of noise recently about running OpenStack on Kubernetes ( here’s one example ). Now you have no excuses for not using 2FA with your vSphere environment. Ubuntu 16.04

Vmware 60

Vmware Linux Hardware Network 60

Scott Lowe

SEPTEMBER 19, 2017

Sanders also announces that moving forward Terraform will be pre-installed in the Linux containers that power Microsoft’s Azure Cloud Shell (a CLI environment for Azure). Examples of things that HC has done to improve collaboration include remote state backends and state locking. This is really powerful, in my humble opinion.

Policies 60

Policies Enterprise Enterprise Examples 60

Dataconomy

MAY 24, 2023

The platform utilizes the native AVAX token to streamline transactions and allocate system rewards, making it a prime example of the most efficient blockchain technology available. As an initiative championed by the Linux Foundation, it was purpose-built with a focus on enterprise distributed ledger use cases.

Network 59

Network Open Source IBM Applications 59

Scott Lowe

AUGUST 20, 2014

While the example I’m going to provide here is fairly simple, it should serve as a reasonable basis upon which to build later. The fleetctl doesn’t expose any options to configure the SSH connection, and it assumes you’ll be using public key authentication. Admittedly, this is a very simple example.

Linux 61

Linux System Load Balancer Examples 61

Phil Windley

MARCH 13, 2020

This allows any holder to present a verified credential stored in their digital wallet—such as a driver’s license—anywhere and at any time in order to prove an attribute about themselves—such as their age—as needed, for example, to purchase a product requiring a legal minimum age. DIDs resolve to DID Documents.

Government 59

Government Network Open Source Policies 59