Scott Lowe

MAY 27, 2022

Along those lines, one of their latest articles discusses how to achieve identity-based mutual authentication leveraging eBPF. Researchers have uncovered a potential security flaw in Apple Silicon CPUs; more details in this 9to5Mac article. I’m not sure how I feel about security researchers calling this flaw “not that bad.”

Virtualization 79

Virtualization Storage Network Programming 79

Scott Lowe

NOVEMBER 30, 2018

Troy Hunt has a good article on security measures other than just passwords , explaining some of the differences between multi-factor authentication and multi-step authentication (for example). Operating Systems/Applications. Highly recommended reading. Cloud Computing/Cloud Management. Virtualization.

Vmware 60

Vmware Authentication Virtualization Storage 60

Scott Lowe

FEBRUARY 17, 2023

Over the last few weeks, I’ve been collecting articles I wanted to share with readers on major areas in technology: networking, security, storage, virtualization, cloud computing, and OSes/applications. Lee Briggs covers the plethora of ways to authenticate to AWS. Welcome to Technology Short Take #165!

Programming 96

Programming Policies Network Cloud 96

SecureWorld News

JULY 7, 2022

While large and active Ransomware-as-a-Service (RaaS) gangs like Conti, LockBit, and BlackCat always make headlines with their operations, it's important to learn about smaller ransomware families, as they can provide insight and help us understand more about cybercrime gangs as a whole. The report was published on June 7, 2022.

Healthcare 79

Healthcare Fractional CTO Backup Government 79

Scott Lowe

AUGUST 2, 2019

I’ve got a little bit of something for most everyone, except for the storage nerds (I’m leaving that to my friend J Metz this time around). Operating Systems/Applications. David Holder talks briefly about application security with mutual TLS (mTLS) via Istio. Here’s hoping you find something useful!

Storage 60

Storage Applications Programming Firewall 60

Scott Lowe

DECEMBER 27, 2019

Bruce Schneier writes about how some Chinese hackers are bypassing RSA software token authentication (the title is a bit more broad, implying other forms of two-factor authentication are affected, but the article focuses on attacks against the use of RSA software tokens). Operating Systems/Applications.

Open Source 60

Open Source Vmware Authentication Storage 60

Scott Lowe

MARCH 1, 2019

VyOS is an open source Linux-based network operating system.). James Hamilton is back with a more in-depth look at the components of the AWS Nitro System. Part 1 covers auto-unsealing Vault ; part 2 covers authenticating to Vault using instance metadata ; and part 3 discusses authenticating to Vault using an IAM user or role.

Operating Systems 60

Operating Systems Authentication Network Open Source 60

Scott Lowe

JULY 5, 2019

509v3 digital certificates, how they help enable asymmetric (public/private key) encryption, and the connection to Transport Layer Security (TLS). As would be expected with any maturing open source project that is starting to see increased adoption, Kubernetes has seen its share of security vulnerabilities over the last couple of months.

Storage 60

Storage Hardware Open Source Vmware 60

ForAllSecure

APRIL 26, 2023

Social Engineering According to Carnegie Mellon University’s Information Security Office , “Social engineering is the tactic of manipulating, influencing, or deceiving a victim in order to gain control over a computer system, or to steal personal and financial information.

System 40

System Malware How To Engineering 40

Scott Lowe

MARCH 2, 2020

There’s a security vulnerability , so don’t let your smart home get hacked. I recently found this page , and thought it was a great idea—trying to bring improved security to the masses. Operating Systems/Applications. Nick Buraglio introduces readers to sshuttle. Good for the EFF. Both are good articles.

Linux 60

Linux Windows Hardware Network 60

Scott Lowe

APRIL 19, 2019

Tim Hinrichs discusses securing the Kubernetes API with Open Policy Agent. Pod Security Policies (PSPs) are an important security feature in Kubernetes. Many organizations prefer to use two-factor authentication (2FA) to help protect their systems. ” Operating Systems/Applications.

Open Source 60

Open Source Tools Policies Cloud 60

Scott Lowe

OCTOBER 5, 2012

Erik Smith, notably known for his outstanding posts on storage and FCoE, takes a stab at describing some of the differences between SDN and network virtualization in this post. I came across this post on CloudFoundry’s User Account and Authentication Service (the UAA). Operating Systems/Applications. It starts here.

Storage 92

Storage Vmware Linux Virtualization 92

Scott Lowe

NOVEMBER 22, 2019

I found this link in the serverless mullet architectures post, see the “Operating Systems/Applications” section below.). Omer Levi Hevroni discusses how to keep your Kubernetes secrets secure in Git. Roman Sachenko discusses some serverless security risks and how to mitigate them. You’re welcome. (I

Architecture 60

Architecture Operating Systems Applications How To 60

Scott Lowe

MAY 17, 2019

Since we’re on a bit of a security kick this time around, then the recent announcement by HyTrust of HyTrust CloudControl 6.0 This article by Bob Killen provides a good foundation of information on understanding Kubernetes authentication (AuthN) and authorization (AuthZ; implemented via RBAC). Operating Systems/Applications.

Linux 60

Linux Dell Open Source Licensing 60

Dataconomy

MARCH 28, 2023

The ecosystem consists of various components, including devices, communication networks, data storage, and analytics tools, that work together to create an intelligent system that enables automation, monitoring, and control of various processes. They are responsible for ensuring that data is transmitted securely and reliably.

Data 28

Data Storage Security Network 28

Dataconomy

MARCH 28, 2023

The ecosystem consists of various components, including devices, communication networks, data storage, and analytics tools, that work together to create an intelligent system that enables automation, monitoring, and control of various processes. They are responsible for ensuring that data is transmitted securely and reliably.

Data 28

Data Storage Security Network 28

Scott Lowe

JANUARY 14, 2016

This is a fascinating (to me, at least) paper on the implications of non-volatile storage on today’s data centers (and data center hardware). First, he has a post on setting up a multi-node Lightwave domain ; once you have a Lightwave domain running, his post on enabling SSH to authenticate against Lightwave may be useful.

Vmware 60

Vmware Devops Storage Linux 60

Scott Lowe

JULY 13, 2018

Chris Hein shows how to use the Heptio Authenticator with kops to link Kubernetes cluster authentication to AWS IAM. Operating Systems/Applications. Julia Evans provides a quick overview of Wireshark. Cloud Computing/Cloud Management. Here’s a three-part series on Helm ( part 1 , part 2 , and part 3 ).

Load Balancer 60

Load Balancer Virtualization Authentication Tools 60

Scott Lowe

JANUARY 14, 2016

This is a fascinating (to me, at least) paper on the implications of non-volatile storage on today’s data centers (and data center hardware). First, he has a post on setting up a multi-node Lightwave domain ; once you have a Lightwave domain running, his post on enabling SSH to authenticate against Lightwave may be useful.

Devops 60

Devops Vmware Storage Open Source 60

Scott Lowe

MAY 22, 2015

Welcome to Technology Short Take #51, another collection of posts and links about key data center technologies like networking, virtualization, cloud management, and applications/operating systems. There’s a lot of talk about container security, but now there’s something you can actually do about it. Networking. Virtualization.

Vmware 60

Vmware Network Virtualization IPv6 60

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? In 2013, researcher Nitesh Dhanjani found that a popular brand used simple MD5 hashes of the device's MAC addresses for authentication.

Internet 52

Internet Research Security Tools 52

A Screw's Loose

MARCH 5, 2013

Security, no matter where you look everyone is talking about it these days. They started at 64mb and today you can get a flash drive that has a terabyte of storage on it. Let’s build identification and authentication frameworks on which we can then base access to that data. print Tagged as: Enterprise Strategy , Security.

Mobile 60

Mobile Security Enterprise Enterprise 60

SecureWorld News

APRIL 30, 2023

One of the most important responsibilities of security professionals is to avoid data breaches. Many advanced security systems cannot prevent a scenario in which a user takes a screenshot from a confidential document and then sends it via Telegram to an unauthorized recipient. What is Data-Centric Audit and Protection?

System 79

System Data Information Security Security 79

Phil Windley

DECEMBER 16, 2022

A digital identity wallet is a secure, encrypted database that collects and holds keys, identifiers, and verifiable credentials (VCs). This figure shows the relationship between an agent, a wallet, and the underlying operating system. Key management is performed in cooperation with the operating system and underlying hardware.

Operating Systems 95

Operating Systems Authentication Security Storage 95

Kitaboo

MARCH 18, 2024

Below are the top nine features of the top eBook creation software that can significantly enhance your eBook creation process: Cloud-Based Storage and Access Look for the best eBook creation software that comes with cloud-based storage and access capabilities. Let’s dive in! Table of Contents: I.

eBook 78

eBook Software Software Storage 78

The Verge

MARCH 5, 2021

Our top pick is free to use across a range of operating systems on mobile and desktop. Using a password manager is one of the best steps you can take to protect your security online. They generate passwords which they securely store, and they’ll prompt you to save passwords when you use them on websites. Image: Bitwarden.

Security 107

Security Authentication Mobile Windows 107

CTOvision

MARCH 27, 2017

Editor's note: in this post, Cognitio's Marty Meehan provides context on an economical, scalable and highly secure defense in depth solution leveraging PKWARE's Smartcrypt and QuintessenceLabs. - External security threats grow more sophisticated and unpredictable. The stakes get higher every day.

Data 150

Data Policies Security Applications 150

Scott Lowe

MARCH 20, 2020

Chris Wahl touches on the topic of using GitHub personal tokens to authenticate to HashiCorp Vault. And while we are on the topic of Yubico: the company recently released this security advisory related to running a self-hosted one-time password (OTP) validation server. Operating Systems/Applications. Virtualization.

Linux 60

Linux Vmware Authentication Storage 60

CTOvision

DECEMBER 15, 2014

Dynamic link library (DLL) programs redirect all the virtualized application’s calls to the server’s file system. When software is run from the server in this manner, no changes are made to the local computer’s operating system (OS), file system or registry. Artificial Intelligence. Predictive Analytics.

Government 301

Government Artificial Intelligence Virtualization Big Data 301

Scott Lowe

MARCH 10, 2023

William Lam shares news about higher-capacity SODIMMs available for small or ultra small form factor systems. Security Jeff Warren discusses a potential way for malicious players to bypass multi-factor authentication, aka the “Pass the Cookie” attack. ffmpeg is such a useful tool (prompted by this article ).

IPv6 74

IPv6 Linux Tools Network 74

Data Center Knowledge

JULY 16, 2013

More importantly, the One Hybrid Cloud technology adds security features that may make cloud adoption more accessible for enterprise customers with stringent compliance and security requirements. CloudVelocity detects an existing environment, discovering the constituent hosts and blueprinting system components and configuration.

Tools 205

Tools Data Center Disaster Recovery Cloud 205

Sean Daniel

FEBRUARY 1, 2011

As a test, I like to make sure it works for one user first, so let’s find a guinea pig and go from there: With the new Default Printer Policy selected, remove Authenticated Users from the Security filtering and place in the guinea pig user. Select Authenticated Users , and click Remove. Storage Server Essentials. (17).

How To 51

How To Small Business Windows Policies 51

Dataconomy

MAY 19, 2023

It provides a complete desktop experience, including the operating system, applications, and data, all hosted and managed in the cloud. Security considerations are of utmost importance when adopting DaaS in cloud computing to protect sensitive data and prevent unauthorized access What are the different types of DaaS?

Cloud 60

Cloud Disaster Recovery Virtualization Hardware 60

Scott Lowe

APRIL 21, 2016

Bruce Schneier asks the question that society has yet to answer (and may be afraid to answer): “…do we prioritize security over surveillance, or do we sacrifice security for surveillance?”. Mike Foley recently published a two-part series on two factor authentication (2FA) for vSphere ( part 1 is here ; part 2 is here ).

Vmware 60

Vmware Linux Hardware Network 60

Dataconomy

MARCH 20, 2023

It works by exploiting vulnerabilities in the operating system or other software on the target machine to gain access and create copies of itself. Worms can quickly spread to other devices connected to the same network, causing widespread damage and disrupting normal operations.

System 36

System Malware Firewall Operating Systems 36

ForAllSecure

MARCH 30, 2022

In this episode I’ll talk with two security researchers who simply followed the rabbit. Vamosi: Cloud security is relatively new and as such it probably hasn’t gotten as much attention as it deserves. It was a pretty serious vulnerability; a 9 out of 10 in security. And I'm a security researcher at Wiz.

Firewall 52

Firewall Virtualization Authentication Linux 52