Scott Lowe

FEBRUARY 1, 2019

The folks over at Cilium took a look at a recent CNI benchmark comparison and unpacked it a bit. Maarten Goet has a few recommendations on securing Kubernetes on Microsoft Azure. Lior Kamrat has an article on securing Azure Container Registry for CI/CD pipelines using Azure service principals. Cloud Computing/Cloud Management.

Network 60

Network Resources Devops Vmware 60

Scott Lowe

MARCH 12, 2021

I recently came across this series on AWS security by ScaleSec. Here’s Chip Zoller’s comparison of Gatekeper and Kyverno. Via TecMint, James Kiarie explains how to use VirtualBox VMs on KVM in Linux. Want/need to better understand IPv6? Denise Fishburne has you covered. There’s a lot here! Virtualization.

IPv6 60

IPv6 Network Storage Policies 60

Scott Lowe

JANUARY 6, 2018

Christian Kellner talks about work done on Thunderbolt 3 security levels for GNU/Linux. Jorge Salamero Sanz (on behalf of Sysdig) provides a similar comparison, this time looking at ECS, Fargate, and EKS. Tony Bourke has a two-part series on ZFS and Linux and encryption ( part 1 , part 2 ). Servers/Hardware.

Linux 60

Linux Vmware Comparison Network 60

Scott Lowe

MARCH 30, 2018

Sean Howard talks about using the NSX Service Compose to create a more elegant ruleset for enforcing security policy. And while we’re discussing the Docker socket, the inimitable Jessie Frazelle shares some useful details on building container images securely on Kubernetes. Tirumarai Selvan has a comparison.

Linux 60

Linux Vmware Windows Applications 60

Scott Lowe

JULY 21, 2016

First up, there’s a great article on using IPVLAN with Docker and Cumulus Linux (with a tie back to sFlow, naturally!). Here’s a walkthrough by Cody Bunch on setting up BGP on Linux with Cumulus Quagga. Kevin Houston has an updated blade server comparison chart that might be helpful in making hardware decisions. Thanks Jason!

Vmware 60

Vmware Linux Storage Hardware 60

Scott Lowe

AUGUST 16, 2017

Anthony Shaw has a good comparison of Ansible, StackStorm, and Salt (with a particular view at applicability in a networking context). These viewpoints—that security via micro-segmentation is a compelling use case for NSX—is one I’ve seen repeated in numerous environments. Check out the GitHub repository.

Open Source 60

Open Source Network Linux Engineering 60

Dataconomy

JUNE 9, 2023

Here is a comparison table of static vs dynamic code analysis: Static code analysis Dynamic code analysis Focuses on examining the code itself to identify potential issues related to logic and techniques. Analyzes the code without executing it, typically through automated tools or manual code review.

Analysis 65

Analysis Software Development Applications Tools 65

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). A moderate security bug in OpenSSH (all releases between 5.4 and 7.1p2) was discovered.

Vmware 60

Vmware Devops Storage Linux 60

Scott Lowe

MARCH 8, 2016

Cumulus Networks recently shifted their pricing and licensing model toward perpetual licenses; this article has more information and a comparison of the old vs. new models. Since we are talking about Docker images: here’s a post on creating a good, secure Docker base image. ZFS will be in the next Ubuntu Linux LTS release.

Vmware 60

Vmware Linux Intel Network 60

Scott Lowe

MARCH 10, 2015

I highly recommend you read the entire post, but in short the five skills Matt recommends are software skills (which includes configuration management and software development tools like Git ), Linux, deep protocol knowledge, hypervisor and container networking, and IPv6. NixOS seems to be an interesting re-think of a Linux distribution.

Vmware 60

Vmware Linux Hardware Software Development 60

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). A moderate security bug in OpenSSH (all releases between 5.4 and 7.1p2) was discovered.

Devops 60

Devops Vmware Storage Open Source 60

Scott Lowe

APRIL 24, 2015

Kevin Houston’s March 2015 blade server comparisons might be a useful place to start. If you’re interested in an update on how Docker security is evolving, this article on Docker security enhancements by Daniel Walsh is a good read. Here are some general guidelines for configuring syslog forwarding on a Cisco ASA firewall.

Vmware 60

Vmware Storage Firewall Network 60

Scott Lowe

AUGUST 22, 2014

You’ll need to be sure that the TCP port you select for Docker to use (I used TCP port 2345) is accessible, so modify any security groups assigned to the instances to allow inbound TCP traffic on that port from the appropriate sources. Interoperability Virtualization Automation Docker Linux OpenStack'

Virtualization 71

Virtualization Linux Network Fashion 71

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Open Source 52

Open Source Tools Security Software 52

Scott Lowe

MARCH 23, 2017

Gabriele Gerbino has a nice write-up about Cisco’s efforts with APIs ; his article includes a brief description of YANG data models and a comparison of working with network devices via SSH or via API. It’s short and light on details, but it does provide an example snippet of Python code to illustrate what can be done with Netmiko.

Open Source 60

Open Source Storage Vmware Network 60

The Verge

JUNE 25, 2021

WSL, which is the part of Windows that lets you run Linux. That’s in comparison to the very controversial 30 percent that Apple charges. To pay for all of that innovation, and software, and security updates, and all those things, Apples takes a cut of what happens in the store. PWAs, which are progressive web apps.

Windows 80

Windows Microsoft Operating Systems System 80

Scott Lowe

APRIL 2, 2021

In this post , Jakub Sitnicki digs way deep into the Linux kernel to uncover the answer to the question, “Why are there no entries in the conntrack table for SYN packets dropped by the firewall?” Linux malware is getting more sophisticated. ” Get ready to get nerdy! Servers/Hardware. Cloud Computing/Cloud Management.

Vmware 60

Vmware Firewall Storage Comparison 60

Scott Lowe

NOVEMBER 28, 2017

With regards to security, EFS offers a number of security-related features. Network access to EFS is controlled via security groups and NACLs. Naim next goes through some pricing comparisons showing how EFS is much cheaper than DIY storage solutions using EC2 instances and EBS volumes. Linux kernel 4.0

System 60

System Storage Linux Architecture 60

ForAllSecure

MARCH 24, 2021

Years ago, I was the lead security software reviewer at ZDNet and then at CNET. The password protected password file clearly was not secure. ” Of course, the security company freaked out, called the editor and chief, threatened to pull their advertising. .” And I was able to repeat the process over and over.

Open Source 52

Open Source Operating Systems Software Software 52

ForAllSecure

MARCH 24, 2021

Years ago, I was the lead security software reviewer at ZDNet and then at CNET. The password protected password file clearly was not secure. ” Of course, the security company freaked out, called the editor and chief, threatened to pull their advertising. .” And I was able to repeat the process over and over.

Open Source 52

Open Source Operating Systems Software Software 52

Dataconomy

FEBRUARY 28, 2023

” The answer is never straightforward, as the choice of blockchain will depend on a range of factors, including the specific use case, performance requirements, and security considerations. Blockchain technology provides a secure and tamper-proof system that enables peer-to-peer transactions without the need for intermediaries.

Programming 36

Programming Tools Security Development 36

Cloud Musings

DECEMBER 28, 2016

This includes evaluating and selecting Platform as a Service (PaaS) solutions and deploying applications to the cloud, as well as maintaining, securing, and optimizing cloud solutions to achieve the best Total Cost of Ownership (TCO) and Return on Investment (ROI). In addition, they must secure, monitor, and optimize those solutions.

Systems Administration 84

Systems Administration Cloud Course Training 84

Scott Lowe

DECEMBER 6, 2012

These articles are a bit long in the tooth, but CSS Corp has a useful series of articles on bundling various Linux distributions for use with OpenStack: bundling CentOS , bundling CentOS with VNC , bundling Debian , and bundling OpenSUSE. has posted a good hypervisor feature comparison document. in the comparison, even though RHEV 3.1

Vmware 109

Vmware Virtualization Storage Hardware 109

The Verge

MAY 13, 2021

Steam Mobile lets players manage games for Windows, Mac, and Linux — but not iPhones or iPads. But right after Apple mentioned the app, a GameClub executive posted (and then deleted) a tweet calling that comparison “absurd beyond measure,” thanks to restrictions on how GameClub can operate.

Apple 98

Apple Mobile Policies Windows 98

ForAllSecure

APRIL 19, 2023

CODEN: Basically, the fundamental issue is look at that early Unix and Linux operating systems that were providing these very basic services that are still the the only things we really need from the operating system today. All kinds of security protections, different things. I was the head of the cybersecurity practice.

Operating Systems 40

Operating Systems System Open Source Applications 40

Scott Lowe

MARCH 5, 2013

This article by Avi Chesla points out a potential security weakness in SDN, in the form of a DoS (Denial of Service) attack where many switching nodes request many flows from the central controller. General KVM Linux Networking OpenFlow OpenStack Puppet RedHat SDN Security Storage Virtualization VMware vSphere'

Virtualization 102

Virtualization Storage Vmware Network 102

Scott Lowe

JUNE 11, 2014

He makes comparisons among server virtualization, 10 Gigabit Ethernet, and SDN, and feels that in order for SDN to really hit this market it needs to be “not a user-facing feature, but rather a means to an end” (his words). Can UCS hold on in the face of a fundamental shift like that? I don’t know. Check out this command.

Vmware 60

Vmware Storage Network Virtualization 60

The Verge

SEPTEMBER 28, 2021

The Astro can only be paired to a single phone at a time — a security measure to help prevent unauthorized access or use. For those interested, the Astro’s functionality is built on top of Fire OS and Linux. The Astro can integrate with Ring’s security alarm system and function much like a Ring camera. Animation: Amazon.

Video 141

Video Cloud Development Software 141

All Things Distributed

FEBRUARY 18, 2013

OpsWorks promotes conventions and sane defaults, such as template security groups, but also supports the ability to customize any aspect of an applicationâ??s You can deploy your application in the configuration you choose on Amazon Linux and Ubuntu. Operational Control â?? s configuration.

Cloud 157

Cloud Applications Web Services Resources 157

Scott Lowe

OCTOBER 22, 2015

Here’s hoping I’ve managed to find something of value and interest to you in this latest collection of links and articles from around the web on networking, storage, virtualization, security, and other data center-related technologies. Networking. Servers/Hardware. Dell is buying EMC. What—you hadn’t heard?

Vmware 60

Vmware Virtualization Guidelines Network 60

Scott Lowe

JUNE 20, 2016

Naturally, Docker has a product that enables CaaS; this is Docker Datacenter (comprising Docker Trusted Registry, Docker Universal Control Plane, integrated security, and the Docker Engine itself). HPE will be bundling Docker with every ProLiant server (though I still haven’t seen anything around the Linux distribution that will be used).

Agile 60

Agile Applications Devops Enterprise 60

Scott Lowe

JUNE 19, 2016

Naturally, Docker has a product that enables CaaS; this is Docker Datacenter (comprising Docker Trusted Registry, Docker Universal Control Plane, integrated security, and the Docker Engine itself). HPE will be bundling Docker with every ProLiant server (though I still haven’t seen anything around the Linux distribution that will be used).

Agile 60

Agile Applications Devops Enterprise 60

The Verge

NOVEMBER 24, 2020

It’s got an ARM processor, and it runs Linux and we’re off to the races. Is there going to be something that keeps all of the local inputs for low latency and other things in my house, and maybe even I want that from a safety and security standpoint, so only the kids in the house can get on Xbox Live, and it’s not out on the open Xbox Live?

Hardware 120

Hardware Retail Microsoft Industry 120