Linux Academy

MAY 13, 2019

We have incident response plans so we can quickly address security incidents and eliminate the threat as quickly as possible. We need the ability to respond to security incidents like a well-oiled machine to protect three things: Our data and our clients’ data, such as PHI, PII, and PCI. The server is to remain powered on.

Security 60

Security Exercises Operating Systems Virtualization 60

Scott Lowe

OCTOBER 8, 2021

There’s some networking stuff, a few security links, and even a hardware-related article. Jimmy Mankowitz talks in some detail about using NSX-T in vSphere with Tanzu to secure applications. Operating Systems/Applications. Welcome to Technology Short Take #146! Networking. ” Who will be correct?

IPv6 97

IPv6 Storage Hardware Vmware 97

Scott Lowe

JANUARY 21, 2022

Aidan Steele examines how VPC sharing could potentially improve security and reduce cost. Orca Security discusses the “Superglue” vulnerability in AWS Glue. Sander Rodenhuis wrote an article on security policies in Kubernetes. Sander Rodenhuis wrote an article on security policies in Kubernetes.

Load Balancer 90

Load Balancer Linux Intel Cloud 90

Scott Lowe

AUGUST 27, 2021

I have a fairly diverse set of links for readers this time around, covering topics from microchips to improving your writing, with stops along the way in topics like Kubernetes, virtualization, Linux, and the popular JSON-parsing tool jq. Michael Kashin shares the journey of containerizing NVIDIA Cumulus Linux. Networking. So useful.).

Linux 90

Linux Load Balancer Malware Virtualization 90

Linux Academy

MARCH 28, 2019

To ensure ongoing security site reliability engineers must work hand-in-hand with the CISO’s (Chief Information Security Officer) office to implement Kubernetes security. Vulnerabilities at the operating system level may be exploited by rogue container workloads if not hardened. Implement Pod Security Policy.

Policies 68

Policies Linux Security Virtualization 68

Scott Lowe

FEBRUARY 17, 2023

Over the last few weeks, I’ve been collecting articles I wanted to share with readers on major areas in technology: networking, security, storage, virtualization, cloud computing, and OSes/applications. This post on Cedar—a new policy language developed by AWS—is an interesting read.

Programming 96

Programming Policies Network Cloud 96

CTOvision

JANUARY 31, 2017

Most aren’t the laptops, tablets, and phones we think of as using the internet: they’re appliances like routers, fridges, cameras, and a million others, each of which is equipped with storage space, an operating system, and a connection to the internet. All of which would be fine if the Internet of Things was secure, but it isn’t.

Internet 150

Internet Network Course Linux 150

Scott Lowe

APRIL 29, 2022

My link of links and articles from around the Internet is a bit light on networking and virtualization this time around, but heftier in the security, cloud, and OS/application sections. Daniel Holback talks about the addition of fuzzing to the Flux controllers , to improve the security posture of the Flux project. Enjoy the content!

Linux 74

Linux Storage Programming Applications 74

Scott Lowe

OCTOBER 8, 2021

There’s some networking stuff, a few security links, and even a hardware-related article. Jimmy Mankowitz talks in some detail about using NSX-T in vSphere with Tanzu to secure applications. Operating Systems/Applications. Welcome to Technology Short Take #146! Networking. ” Who will be correct?

IPv6 60

IPv6 Storage Hardware Vmware 60

CIO Business Intelligence

JANUARY 4, 2024

In the fast-evolving world of finance, data security is of paramount importance. The Payment Card Industry Data Security Standard (PCI DSS) is a crucial framework to which financial institutions must adhere. The Payment Card Industry Data Security Standard (PCI DSS) is a crucial framework to which financial institutions must adhere.

Financial 103

Financial Architecture Resources Security 103

Scott Lowe

AUGUST 27, 2021

I have a fairly diverse set of links for readers this time around, covering topics from microchips to improving your writing, with stops along the way in topics like Kubernetes, virtualization, Linux, and the popular JSON-parsing tool jq along the way. Michael Kashin shares the journey of containerizing NVIDIA Cumulus Linux.

Linux 60

Linux Load Balancer Malware Virtualization 60

Scott Lowe

JULY 17, 2020

This is a great read overall, but one sentence in particular really caught my eye: “30 years ago I was able to write a complete multitasking operating system in Z80 assembly code. Jon Langemak is blogging again, and he jumps back into the “blogging saddle” with a post on working with tc on Linux systems.

Linux 60

Linux Apple Operating Systems Policies 60

Scott Lowe

MAY 7, 2021

In this Technology Short Take, I’ve gathered some links for you covering topics like Azure and AWS networking, moving from macOS to Linux (and back again), and more. Stefan Büringer talks about optimizing Open Policy Agent (OPA)-based Kubernetes authorization. Marco Lancini discusses security logging in AWS environments.

Linux 60

Linux Hardware Network Cloud 60

Scott Lowe

DECEMBER 11, 2020

SilentKnight is a set of security tools/checks for macOS. Jonathan Bowman writes about the new crypto policies in Fedora 33 and whether you’ll need to adjust your SSH keys. This list of best practices for securing OpenSSH systems may be useful. Operating Systems/Applications. Lots of geekery in here!

Linux 60

Linux Network Tools Hardware 60

Linux Academy

AUGUST 29, 2019

To continually support you in your mission to learn and grow we are always adding new courses and free resources to begin developing your Linux and Cloud skills. Courses Free in September: Microsoft SQL Server On Linux Quick Start. Linux Networking and Trouble Shooting. Network Routing Fundamentals. Git Quick Start.

Linux 18

Linux Course Devops Big Data 18

Scott Lowe

MAY 29, 2020

Bruce Schneier weighs in on the security and privacy implications of Zoom. Some security vulnerabilities with Thunderbolt were recently discovered and disclosed. Looking for some security tools? Jason Price shares a fully fleshed-out example of Kubernetes Pod Security Policies. Operating Systems/Applications.

Linux 60

Linux Virtualization Security Network 60

Scott Lowe

FEBRUARY 16, 2017

The rise of the disaggregated network operating system (NOS) marches on: this time, it’s Big Switch Networks announcing expanded hardware support in Open Network Linux (ONL) , upon which its own NOS is based. I use OTR with Adium on OS X, and OTR with Pidgin on my Fedora Linux laptop.). Operating Systems/Applications.

Vmware 60

Vmware Linux Storage Load Balancer 60

Scott Lowe

JUNE 18, 2021

Via Ivan Pepelnjak, I was pointed to Jon Langemak’s in-depth discussion of working with Linux VRFs. The first is a post on Cilium and F5 load balancer integration , while the second discusses implementing Kubernetes network policies with Cilium and Linkerd. Operating Systems/Applications.

Vmware 60

Vmware Hardware Load Balancer Apple 60

Scott Lowe

MAY 17, 2019

Courtesy of Tigera, Alex Pollitt shares some guidelines on when Linux conntrack is no longer your friend. Apparently Dell’s new docking stations support firmware updates via Linux. I’m thankful that Bill Demirkapi followed a responsible disclosure policy. Operating Systems/Applications. Networking.

Linux 60

Linux Dell Open Source Licensing 60

Scott Lowe

MARCH 12, 2021

Isovalent, the folks behind Cilium, recently unveiled the Network Policy Editor, a graphical way of editing Kubernetes Network Policies. I recently came across this series on AWS security by ScaleSec. Operating Systems/Applications. Via TecMint, James Kiarie explains how to use VirtualBox VMs on KVM in Linux.

IPv6 60

IPv6 Network Storage Policies 60

ForAllSecure

APRIL 30, 2020

The Decipher Security podcast by Duo Security analyzes the news, explores the impact of the latest risks, and provides informative and educational material for readers intent on understanding how security affects our world. He posits that security, particularly secure software, is a value add to businesses.

Security 52

Security Software Software Development 52

ForAllSecure

APRIL 30, 2020

The Decipher Security podcast by Duo Security analyzes the news, explores the impact of the latest risks, and provides informative and educational material for readers intent on understanding how security affects our world. He posits that security, particularly secure software, is a value add to businesses.

Security 52

Security Software Software Development 52

ForAllSecure

APRIL 30, 2020

The Decipher Security podcast by Duo Security analyzes the news, explores the impact of the latest risks, and provides informative and educational material for readers intent on understanding how security affects our world. He posits that security, particularly secure software, is a value add to businesses.

Security 52

Security Software Software Development 52

Scott Lowe

FEBRUARY 28, 2022

If you aren’t paying attention to the security of your CI/CD pipelines, you probably should. Rory McCune writes about a CVE in the Linux kernel that could allow for container escape in Kubernetes. It’s a shame the site doesn’t appear to have an RSS/Atom feed… Operating Systems/Applications.

Storage 79

Storage Hardware Policies Open Source 79

Scott Lowe

OCTOBER 2, 2020

This time around the content is a tad heavy on the security side, but I’ve still managed to pull in articles on networking, cloud computing, applications, and some programming-related content. Here’s a review of targeted attacks and APTs (advanced persistent threats) on Linux. Operating Systems/Applications.

Linux 60

Linux Programming Cloud Open Source 60

Dataconomy

OCTOBER 31, 2023

The main goal of a business VPN is to ensure that the company’s sensitive data and resources remain safe and secure, even when accessed from multiple locations. So, without the proper security measures in place, cybercriminals can easily intercept employee or company information.

Data 41

Data Internet Resources Network 41

Scott Lowe

OCTOBER 5, 2018

Sathyajith Bhat covers five open source tools for container security. Cory O’Daniel explains how to use role-based access control to assign Pod Security Policies (PSPs) to Kubernetes workloads. Cory O’Daniel explains how to use role-based access control to assign Pod Security Policies (PSPs) to Kubernetes workloads.

Hardware 60

Hardware Open Source Vmware Linux 60

Scott Lowe

DECEMBER 6, 2019

The one caveat to his approach that may be worth mentioning is that some policies (a PodSecurityPolicy or the use of Open Policy Agent) may prevent the user from launching a Pod connected to the host’s network namespace. Joel de la Garza has a post over on the a16z site on 16 steps to securing your data (and life).

Vmware 60

Vmware Network Linux Hardware 60

Scott Lowe

APRIL 19, 2019

Milind Gunjan shares some tips for troubleshooting Linux bridged networking on a KVM host. Tim Hinrichs discusses securing the Kubernetes API with Open Policy Agent. Pod Security Policies (PSPs) are an important security feature in Kubernetes. ” Operating Systems/Applications.

Open Source 60

Open Source Tools Policies Cloud 60

Scott Lowe

FEBRUARY 1, 2019

Maarten Goet has a few recommendations on securing Kubernetes on Microsoft Azure. Lior Kamrat has an article on securing Azure Container Registry for CI/CD pipelines using Azure service principals. Panagiotis Georgiadis explains how to enable PSP (Pod Security Policies) with Traefik. Operating Systems/Applications.

Network 60

Network Resources Devops Vmware 60

Scott Lowe

MARCH 1, 2019

VyOS is an open source Linux-based network operating system.). James Hamilton is back with a more in-depth look at the components of the AWS Nitro System. Stefan Büringer writes about how you can implement “advanced” RBAC functionality in Kubernetes using Open Policy Agent (OPA). Go check out part 2.

Operating Systems 60

Operating Systems Authentication Network Open Source 60

Scott Lowe

MAY 4, 2017

It’s nice to see some folks attempting to help tackle potential security concerns with containers. If you’re trying to wrap your head around AWS IAM policies, I have yet to find a resource I can recommend more strongly than this article on AWS IAM policies in a nutshell. Operating Systems/Applications.

Vmware 60

Vmware Storage Network Examples 60

Scott Lowe

DECEMBER 29, 2016

Andrey Khomyakov shares some information on automating the setup of whitebox switches running Cumulus Linux in part 2 of this series on learning network automation. James Green shares some information on Docker Bench , a tool designed to help secure Docker environments. Operating Systems/Applications. Alpine Linux 3.5

Vmware 60

Vmware Linux Open Source Data Center 60

Scott Lowe

MARCH 30, 2018

Sean Howard talks about using the NSX Service Compose to create a more elegant ruleset for enforcing security policy. And while we’re discussing the Docker socket, the inimitable Jessie Frazelle shares some useful details on building container images securely on Kubernetes. Operating Systems/Applications.

Linux 60

Linux Vmware Windows Applications 60

Scott Lowe

JANUARY 6, 2018

When you’re operating at the scale at which Netflix operates, this is no trivial feat. Christian Kellner talks about work done on Thunderbolt 3 security levels for GNU/Linux. Tim Hinrichs provides some details on Rego , the policy language behind the Open Policy Agent project. Servers/Hardware.

Linux 60

Linux Vmware Comparison Network 60

Scott Lowe

JUNE 2, 2016

The first article provides a blueprint for migrating applications to VMware NSX ; the second article supplies some tips for creating filtering policies in VMware NSX. Operating Systems/Applications. Intel clearly has its sights set on expanding beyond just “servers” into many more platforms, including network hardware platforms.

Vmware 60

Vmware Virtualization Linux Windows 60

Scott Lowe

SEPTEMBER 22, 2017

Vincent Bernat has a really in-depth article on IPv4 route lookup on Linux (and one on IPv6 route lookup as well). Chris Binnie walks you through the process of using user namespaces to help secure your Docker hosts and containers. Operating Systems/Applications. Here’s hoping you find something useful! Networking.

Storage 60

Storage Vmware Load Balancer Network 60