Scott Lowe

MARCH 15, 2024

Ivan Pepelnjak dives deep on DHCP relaying on a Linux host. Rob McBryde shares his story of reviving a 2012 MacBook Pro with Linux. Security In early February a vulnerability was uncovered in a key component of the Linux boot process. Think Linux doesn’t have malware? Rory McCune explains Kubernetes authentication.

Linux 112

Linux Vmware Load Balancer Malware 112

Scott Lowe

MAY 27, 2022

Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. Researchers have uncovered a potential security flaw in Apple Silicon CPUs; more details in this 9to5Mac article. I’m not sure how I feel about security researchers calling this flaw “not that bad.”

Virtualization 79

Virtualization Storage Programming Network 79

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. So, in the book, we have a whole chapter dedicated to safely and lawfully conducting security research.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication. Problem is, MAC addresses are not great for authentication. So, in the book, we have a whole chapter dedicated to safely and lawfully conducting security research.

Internet 52

Internet Research Security Tools 52

Scott Lowe

MAY 22, 2015

Flavio Leitner has a nice article comparing OVS internal ports with Linux veth devices. This topic is the subject of some debate given that some claim OVS internal ports perform much better than Linux veth devices. Flavio’s research shows the performance differential appears to be negligible overall. Get all the details here.

Vmware 60

Vmware Network Virtualization IPv6 60

ForAllSecure

NOVEMBER 24, 2020

And if you could initiate a heartbeat before authentication was complete on the site, you could smash and grab the encrypted information before anyone even knew who you were. In discovering Heartbleed what the researchers got back wasn’t a crash, it wasn’t a fault, it was anomalous behavior. Consistently anomalous behavior.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

And if you could initiate a heartbeat before authentication was complete on the site, you could smash and grab the encrypted information before anyone even knew who you were. In discovering Heartbleed what the researchers got back wasn’t a crash, it wasn’t a fault, it was anomalous behavior. Consistently anomalous behavior.

Open Source 52

Open Source Tools Security Software 52