Search

Amazon Web Services has been seriously bolstering its network to handle the https://www.networkworld.com/article/2092452/gartner-ai-to-drive-10-jump-in-spending-on-data-center-systems.html associated with its AI-based applications and services. In a recent https://www.aboutamazon.com/news/aws/aws-infrastructure-generative-ai, Prasad Kalyanaraman, vice president of infrastructure [...]

Copyright of PC Welt Plus is the property of IDG Communications, Inc. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Byline: Simon Bisson One of the interesting aspects of moving to a top-down, application-centric way of working is rethinking how we do networking. Much as the application model first abstracted [...]

The article discusses the network and system requirements in using the NetInstall service which are ethernet, high-speed network switch and Dynamic Host Configuration Protocol (DHCP). Topics include the ways in connecting NetInstall on a client computer, the capacity of switched ethernet network to support many devices and the steps in setting up DHCP on the server to obtain Internet protocol (IP) address.

While the Zigbee wireless standard has traditionally ruled the roost when it comes to wireless smart bulb protocols, Bluetooth appears to be gaining momentum. [ABSTRACT FROM AUTHOR]

The article discusses the launch of Wireless Protected Access, or WPA encryption service and security protocols announced by Wi-Fi non-profit organization Wi-Fi Alliance.

The article offers information on the Key Reinstallation Attack (KRACK) Wi-Fi vulnerability. It states that it targets third step in four-way authentication handshake when Wi-Fi client device attempts to connect to protected Wi-Fi network. It cites that devices using Wi-Fi will be vulnerable to KRACK. It mentions that updated devices are protected against KRACK.

The article reports on the move of the information technology company Microsoft Corp. to release security updates on the Windows Update service. It states that the update protects customers against the Wi-Fi Protected Access (WPA2) protocol vulnerability called KRACK. It mentions that several devices including iPhones, Android phones, and routers require patches to be protected against KRACK.

The article offers brief information on the Cisco Smart Install (SMI) protocol from networking hardware company Cisco Systems Inc.

The article reports on Mellanox Technologies' plan to launch HDR Infiniband computer-networking communications standard in 2017. Topics covered include the expected 100 increase in the speed of Infiniband to 200 billions bits per second (GbpS), speed that is twice the top speed of Ethernet and comments from Dell'Oro Group analyst Sameh Boujelbene.

The article focuses on the insider previews build of Windows 10. Topics include Windows 10 Insider Preview Build 20211 update allows to search the lists of file types, protocols, and apps when setting a default app for a certain task; and Windows 10 Insider Preview Build 20206 update makes changes to the Windows Emoji Picker by introducing an updated design in keeping with Fluent Design principle.

The article reports on web site security and performance solutions provider CloudFlare Inc.'s early adoption of the Transport Layer Security (TLS) 1.3 secure communications protocol. Topics discussed include the availability of TLS 1.3 in beta versions, the protocol's removal of some vulnerable cryptographic algorithms in TLS 1.2, and the Internet security benefits of the adoption of TLS 1.3.

The article focuses on the suggestions offered by the Cloud Security Alliance for keeping big data secure. Topics discussed include using Kerberos authentication, computer network authentication protocol, for establishing trust against data leakage, using strong encryption methods like Advanced Encryption Standard (AES) and Secure Hash Algorithm 2 (SHA-256) for data; and prediction by market researcher Gartner, related to the improper use of big data analytics.

The article focuses on the success of technology firm Microsoft and the Samba project in fixing a vulnerability in the implementation of the Server Message Block/Common Internet File System (SMB/CIFS) protocol after the flaw was announced under the name Badlock. Topics covered include the announcement of Badlock's existence by Samba consulting firm SerNet, the rating given by Microsoft on the impact of the vulnerability and the response of Trustwave's Karl Sigler to Badlock.

The article reports that Stefan Metzmacher, a core developer of the Samba software, has discovered a critical vulnerability on April 12, 2016 that will affect the Windows and Samba implementations of the Server Message Block (SMB) protocol. SerNet, the company where Metzmacher works, announced on Twitter that on April 12, 2016, SerNet, the Samba Team and Microsoft Corp. will disclose a severe bug that affects almost all versions of Microsoft Windows and Samba.

The article focuses on the Encryption Everywhere program of software firm Symantec. Topics covered include the goal of providing free basic Secure Sockets Layer/ Transport Layer Security (SSL/TLS) certificates to domain owners through Web hosting companies, the partnerships signed by the firm with hosting providers and the opportunity for customers to opt for paid premium packages. Also mentioned is the adoption of the freemium pricing model.

The article reports on the dangers of intentionally weakening encryption based on studies of attacks against Transport Layer Security (TLS) connections. Topics covered include the launch by researchers of the attacks FREAK, Logjam and DROWN, the efforts by the U.S. government to keep cryptography under control, and the emergence of export-grade encryption algorithms. Also mentioned is the impact of intentional encryption weakening on the security of the Internet.

The article reports that the ZigBee Alliance, a group of companies that maintain and publish the ZigBee standard, will start certifying devices that use the Thread network protocol for networking in 2016.

The article reports that researchers from security firm SEC Consult have found that thousands of routers, modems, Internet Protocol (IP) cameras, voice over IP (VoIP) phones and other embedded devices share the same hard-coded Secure Shell (SSH) host keys or HTTP Secure (HTTPS) server certificates. SSH host keys are used to verify the identity of a device, which runs an SSH server.

The article reports on the vulnerability to errors of computers that use the Network Time Protocol (NTP) in keeping the time. Topics discussed include a 2012 incident wherein two servers operated by the U.S. Navy reset their clocks to year 2000, rate-limiting mechanism of NTP, and the attack on the Kiss O'Death packet. The expiration of the Secure Socket Layer/Transport Layer Security (SSL/TLS) is also mentioned.

The article offers brief information on the network protocol Weave application layer from Nest along with Nest Cam API for connected home devices.

The article reports on the warning of Level 3 Communications to make preventive steps in addressing the sudden increase in Distributed Denial of Service (DDoS) attacks on hosting and gaming companies through the use of portmap. Topics covered include the open-source utility RPCbind for Unix systems as well as for Windows for mapping port numbers of networks. Also mentioned are DDoS amplification attacks through network time protocol (NTP) remote code vulnerabilities.

The article reports on possible Disitributed Denial of Service (DDoS) attacks on computers that run BitTorrent programs. Topics covered include the DDoS reflection technique used in attacking User Datagram Protocol (UDP)-based protocols such as the Network Time Protocol (NTP) and Domain Name System (DNS). Also mentioned are attacks on the BitTorrent Sync (BTSync) through the Message Stream Encryption (MSE) and countermeasures such as limiting Micro Transport Protocol (uTP) messages.

The article discusses on the progress of Thread Group's networking protocol which could be the main language for connected home devices and is designed to form, secure, low-power mesh networks out of short-range links among devices like thermostats, light bulbs and security cameras. The Thread group has a membership of more than 160 companies and the wireless technology powerhouse Qualcomm on its board of directors. It also refers to Thread Group and the ZigBee Alliance.

The article reports that the defect in the widely used OpenSSL library is allowing man-in-the-middle attackers to impersonate Hyper Text Transfer Protocol Secure (HTTPS) servers and snoop on encrypted traffic. It mentions that the OpenSSL 1.0.1p and 1.0.2d versions can be used to avoid certain checks and trick OpenSSL to treat any valid certificates as belonging to certificate authorities. According to security engineering manager Tod Beardsley, the vulnerability is used to an active attacker.

The article focuses on the warning given to the server administrators and developers concerning the plan of the computer software company OpenSSL to release security updates for its cryptographic library with the capability of fixing a high severity vulnerability. The cryptographic protocols implemented by OpenSSL include Transport Layer Security (TLS), HTTP Secure (HTTPS), and Internet Message Access Protocol Secure (IMAPS). It adds that a large number of applications were used by OpenSSL.

The article focuses on Distributed Denial of Service Attack (DDoS) which is a malicious attempt to make a server or a network resource unavailable to users, by temporarily interrupting the services of a host connected to the Internet. It mentions that DDoS Attacks was determined in May 2015 at a small office/home office (SOHO) routers that support Routing Information Protocol version 1 (RIPv1) which is designed to allow routers on small networks to exchange information about routes.

The article reports on the plan of technology company Apple, Inc. to release the source code of its Swift programming language. Topics mentioned include possible increase in its user base, a brief history of Swift which was developed by the company to replace the Objective C language used by developers to write applications for Mac and iOS devices, and features of the updated version 2 of the language such as improved error handling, additional protocol extensions, and modular optimization.

The article discusses the availability of the Internet Protocol version 6 (IPv6) which provides an identification and location system for computers on networks and routes traffic in Internet. It stresses the shift of all smartphones with IPv6 capability to improve communication services. It cites the use of Network Address Translation by the users of IPv6.

The article offers information on a report from the Electronic Frontier Foundation revealing that an attack method used in disrupting the code-sharing site GitHub could have been prevented if more websites enabled encryption. Software engineer Bill Budington stresses the importance of using HTTP in preventing any cyber attacks. Information about the Baidu Analytics script is provided.

The article focuses on a research conducted by security researcher Chad Seaman, which shows that some of multicast Domain Name System (mDNS) protocol do not follow the recommendation of official specification and will respond to mDNS queries received from the Internet. It states that mDNS responses can leak sensitive details about the device and its services. It mentions that 100,000 devices respond to mDNS queries and can be used by attackers for distributed denial-of-service (DDoS) attacks.

Several photographs are presented depicting true stories of failures in following security protocol.

The article reports that according to computer security experts, there is a serious security flaw called FREAK that can weaken encrypted connections between computers and Websites. The experts says that the flaw has apparently gone undetected for years and can undermining security across the Internet. It mentions that the flaw affects the widely used Secure Sockets Layer protocol and its successor, Transport Layer Security.

The article offers information regarding the challenges featured in computer systems when tracking accurate time. It mentions software engineer George Neville-Neil who works on the IEEE standard Precision Time Protocol (PTP) to provide financial institutions and time-sensitive organizations with ultra-precise time measurements.

The article discusses the addition of the Hypertext Transfer Protocol (HTTP) Strict Transport Security (HSTS) computer network protocol in Internet explorer from Microsoft Corp.

The article offers information on the financial performance of networking equipment manufacturer Cisco Systems in 2015. Topics discussed include the growth in the sales of its software-defined networking products which surpasses its rival VMware, the increase in the company revenue in the fiscal quarter of January by seven percent, and the growth of Cisco's profit from $1.4 billion to $2.4 billion.

The article reports on the delayed shipment of a component module by Intel Corp., a multinational corporation based in Santa Clara, California for its silicon photonics technology. It mentions that the technology uses pulses of light to move data between servers at extremely high speed. It notes the development of O-PCI (Optical PCI-Express) protocols by Intel which support data transfers.

The article reports on the release of security updates by American multinational computer technology corporation Oracle Corp. for Java to fix 19 vulnerabilities and disable default support for SSL 3.0. It mentions that the said updates were part of the firm's quarterly Critical Patch Update, fixing 169 security issues across hundreds of products. It also notes the deactivation of the SSL 3.0 protocol by default as one of security-related changes in the new Java updates.

The article reports that Tod Beardsley, engineering manager at vulnerability intelligence firm Rapid7, has advised server administrators to upgrade again their OpenSSL open source software to fix new vulnerabilities that include denial-of-service (DoS) vulnerabilities. It states that the flaws are of low and moderate severity. It says that the DoS vulnerabilities only affect the software's implementation of the Datagram Transport Layer Security (DTLS) protocol.

The article reports that trade body Network Time Foundation has released version 4.2.8 of the network time protocol (NTP) to address the remote code execution flaws in the existing version. It states that the remote code execution vulnerabilities can be hacked, compromising servers, infrastructure systems, and embedded devices. It notes that system administrators are urged to install the patches immediately.

The article reports on the removal of protocol Secure Sockets Layer (SSL) version 3.0 by internet services provider Google from Google Chrome 40 due to design flaw in SSL 3.0. Topics include brief description of SSL version 3 along with its features, role of Padding Oracle On Downgraded Legacy (POODLE) security vulnerability in compatibility-driven situation, and views of Google security engineer Adam Langley on the removal of SSLv3.

The article reports that new authentication protocol called Universal 2nd Factor added by Google Inc. that let users protect their accounts against password compromises. Nishit Shah, a Google Security product manager, states that Security Key is a physical USB second factor that only works after verifying the login site is truly a Google website, not a fake site pretending to be Google.

The article reports the possibility that Microsoft will wait until February 14, 2017 before fixing vulnerability in server message block (SMB) network file sharing protocol. It notes that attackers are capable of exploiting the vulnerability by tricking Windows system to connect to malicious SMB services. Once the attackers succeeded, the mrxsmb20.sys driver will crash which will trigger a Blue Screen of Death (BSOD).

The article reports on the plan of technology company, Google, to let anyone use its Network Time Protocol servers to help information technology shops cope with the next leap second after midnight on December 31, 2016. Topics mentioned include the significance of time synchronization to Google's systems, refusal of some Google systems to work when faced with a leap second, and a technique being used by Google called smeared time.

The article reports that Network Time Foundation's Network Time Protocol Project (NTP) has patched multiple denial-of-service vulnerabilities, as of November 2016. It reports that last update to the open source protocol used to synchronise computer clocks was in June 2016. It mentions that NTP is a widely used protocol, and has been hijacked several times over the past two years in distributed denial-of-service attacks.

The article offers tips from the Open Networking User Group's (ONUG) Hybrid Cloud Working Group (HCWG) on the use of hybrid cloud. The HCWG recommends categorization of low, medium, medium+ and high security tier apps, for assigning them with suitable security protocols. ONUG member companies recommend using a cloud broker for security as well as improved performance. When negotiating an enterprise agreement with vendors, a company is suggested to use a professional arbiter.

The article offers information on the denial-of-service attacks that reached unprecedented levels, as the attack allows a laptop to take down high-bandwidth enterprise firewall. It mentions that the attack from BlackNurse, involves sending Internet Control Message Protocol (ICMP) packets of type and code. ICMP is commonly used for the ping network diagnostic utility