SECURITY

The demo that opens Tailworm starts with an ordinary user account on a Linux server, no sudo, not in the docker group. It runs one command, ssh -L /tmp/relay.sock:/tmp/docker.

On Saturday a researcher told Apple, Google, Microsoft, Mozilla and eMudhra that eight of eMudhra’s intermediate certificate authorities had private keys anyone could recover in under a second.

The 5C Nano sits flush in the side port of my laptop, which is the reason to buy a Nano in the first place.

Brad Gorman’s ARIN workshop laid out where routing security stands today, ROAs you can trust, ASPA shipping, BGPSec quietly retired.

I sat in Brad Gorman’s RPKI workshop at CHI-NOG 13 with the kind of attention you give a talk when somebody on stage just admitted the security model has known holes.

Yet another day brings another meeting about another security product recommending SSL Decryption at our network edge.

Gartner has been saying that “next big thing” in network security is the increased use of artificial intelligence (AI) and machine learning (ML) technologies for years now… Mainly because these …

Whenever I start talking about network visibility and aggreagation taps I can’t help but think of The Matrix.

Since I’ve recently had some fun working with the Cisco 5585-X and the IPS blades, I wanted to document some of the information I learned while getting them online.

Everyone has different views on hardening IOS, and while I do not claim to be an expert, these are the practices that I commonly use when bringing up a new device.

Ever since Cisco released IOS 12.0.1T we’ve had the ability to broaden the reach of the extended ACL to allow the influence of time.

For some, BGP is a rather large obtrusive beast of a protocol that scares them half to death.

This is one of the methods I’ve used in the past to secure a Linux host against brute force ssh attacks.