Linux Kernel Network TCP Bug Fixed

By

-

August 10, 2018

The denial of service bug had actually been patched in the Linux kernel weeks before news of it was ever announced.

Another day, another bit of security hysteria. This time around the usually reliable Carnegie Mellon University’s CERT/CC, claimed the Linux kernel’s TCP network stack could be “forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (DoS).”

True, this bug, already given the trendy name SegmentSmack, could cause DoS attacks. But it’s already been fixed.

Keynote Sneak Peek for Hyperledger Global Forum – See Who’s Speaking

By

Hyperledger

-

August 10, 2018

Check Out the Initial Lineup of Blockchain Leaders Speaking at Hyperledger Global Forum.

Attend Hyperledger Global Forum to see real uses of distributed ledger technologies for business and to learn how these innovative technologies run live in production networks across the globe today. Hyperledger Global Forum will cut through the hype and focus on adoption. Attendees will see first-hand how the largest organizations in the world go beyond experimentation to lead blockchain production applications with measurable impact. Make your plans now to attend the premier blockchain event of 2018.

Keynote Speakers Include:

Alexis Gauba, Co-Founder, Mechanism Labs and She(256); R&D, Blockchain at Berkeley; R&D, Thunder Token
Leanne Kemp, Founder & CEO, Everledger
Bruce Schneier, Fellow and Lecturer at the Harvard Kennedy School

Get Practical Advice for Enterprise Open Source in Free Ebook from The Linux Foundation

By

The Linux Foundation

-

August 9, 2018

When it comes to running and managing open source in the enterprise, experience-driven advice counts for a lot. It is very likely that your organization already runs open source, but many organizations make the mistake of reacting to the open source ecosystem instead of adopting a proactive strategy that is optimized for success. That’s where the free Enterprise Open Source ebook comes in.

This new 45-page ebook from The Linux Foundation provides a practical approach to establishing an open source strategy by outlining the actions your enterprise can take to accelerate its open source efforts. The information is based on more than two decades of professional, enterprise open source usage and development and will be most beneficial to software engineering executives, development managers, compliance experts, and senior engineers involved in enterprise open source activities.

“The availability of enterprise grade open source software is changing the way organizations develop and deliver products,” the book notes. “The combination of a transparent development community and access to public source code enables organizations to think differently about how they procure, implement, test, deploy, and maintain software. This has the potential to offer a wealth of benefits, including reduced development costs, faster product development, higher code quality standards, and more.”

Linux Deep Learning Expands: Answer Is Still 42

By

ComputerWeekly

-

August 9, 2018

The Linux Foundation Deep Learning Foundation (LF DLF) has announced five new members: Ciena, DiDi, Intel, Orange and Red Hat.

As an umbrella organization of The Linux Foundation itself, the LF DLF supports and sustains open source innovation in Artificial Intelligence (AI), Machine Learning (ML) and Deep Learning (DL).

Deep Learning is defined as an aspect of AI that is concerned with emulating the learning approach that human beings use to gain certain types of knowledge. It can be thought of as a way to automate predictive analytics and is also sometimes known as deep structured learning or hierarchical learning.

It can be supervised, semi-supervised or unsupervised and can be used to build architectures such as deep neural networks, deep belief networks and recurrent neural networks that have been used in fields including computer vision and speech recognition etc.Deep Learning concerns ‘learning data representations’ as opposed to ‘task-specific algorithms’.

WPA3: How and Why the Wi-Fi Standard Matters

By

HPE Blog

-

August 9, 2018

Wi-Fi Protected Access II, or WPA2, is the standard behind wireless security networking. It protects users everywhere, from coffee shops to college campuses to corporate headquarters. WPA2 may be the most widespread security standard in the world that ordinary people encounter.

With all that’s gone on since 2004, when the specification behind WPA2 was adopted, it must be considered a successful standard. But WPA2 does have some important limitations. A new version, WPA3, is a significant improvement. Products to use it are being built now, and certification for them will begin in the third quarter of 2018.

I spoke to Dan Harkins, distinguished technologist at Aruba, a Hewlett Packard Enterprise company, and author of many of the basic standards behind WPA3 to gain insights on what really matters in WPA3.

Harkins says that most of what matters in WPA3 will affect consumer deployments rather than enterprises. The improvements to consumer Wi-Fi use will be substantial and, importantly, invisible to the user.

However, key new enterprise features will appeal to the federal government and organizations that work with government agencies.

Graduation Day for Prometheus, the Open-Source Container Monitoring System

By

Silicon Angle

-

August 9, 2018

The Cloud Native Computing Foundation today officially graduated Prometheus from incubation, opening a new chapter in the popular open-source project’s evolution.

Prometheus is one of the most widely used systems for monitoring software container deployments. As such, the project has taken on an important role in the rise of containers, which are increasingly used to deploy applications because they’re lightweight and can easily move between different kinds of infrastructure.

Prometheus is only the second CNCF project to have graduated so far. The first was Kubernetes, the go-to framework for managing container environments. Prometheus integrates with the framework and was ranked as the most popular monitoring tool among users of the technology in a 2017 survey.

Guy Martin: Open Source Strategy at Autodesk

By

The Linux Foundation

-

August 8, 2018

Companies today can’t get away with not using open source, says Guy Martin, Director, Open@Autodesk, who recently sat down with us for a deep dive into Autodesk’s engagement with and contributions to the open source community.

“Like any company… we consume a lot of open source,” said Martin, “I was brought in to help Autodesk’s open source strategy in terms of how we contribute back more effectively to open source, how we open source code within our environment, which we want to be a standard — code which is non-differentiating and not strategic IP.”

But it’s not easy for a large company like Autodesk to engage with the open source community. Because they also have industry-leading proprietary solutions, they need to be extra careful with consuming and contributing to open source. They need to understand various licenses to avoid legal complexity, and they must be aware that releasing some code may also expose company IP. These are areas where all companies must tread carefully, and developers need to be fully confident that they can use code efficiently without dealing with a heavyweight process to get permissions for using or contributing.

“There needs to be a process around what we are going to open source which involves legal at a very early stage,” Martin said.

How to Be a Stronger DevOps Leader: 9 Tips

By

The Enterprisers Project

-

August 8, 2018

IT leaders and DevOps experts tell us that key considerations around talent, measurement, vision, and IT culture are the real secrets to taking DevOps to the next level. Here we share nine of their best tips for IT leaders. Dig in, and then share yours in the comments below.

1. Make everyone accountable to shared goals

Steve Burton, CD and DevOps evangelist, Harness: “For one thing, stop giving people ‘DevOps’ titles and expecting that to magically increase your release cycles. It’s about making people aware of the business objectives and giving them accountability for shared goals. Got Developers? Make them responsible for how their own code acts in production. Got Ops? Find a way for them to spend their time other than hunching over a console and overseeing each release.

For both of them, align their compensation to business outcomes. When it comes to DevOps, it’s deeds, not words – and hiring 100 people with ‘DevOps Engineer’ titles without shared goals, accountability, and compensation-based incentives is a lot like putting 100 tires on your car and expecting it to go faster.”

First Round of Keynotes Announced for Open Source Summit and ELC + OpenIoT Summit Europe

By

The Linux Foundation

-

August 8, 2018

Announcing the first round of keynote speakers for Open Source Summit and Embedded Linux Conference + OpenIoT Summit Europe!

Keynotes include:

Patrick Ball, Director of Research, Human Rights Data Analysis Group
Eric Berlow, Co-Founder, Chief Science Officer, Vibrant Data Inc.
Linus Torvalds, Creator of Linux & Git, in conversation with Dirk Hohndel, Vice President & Chief Open Source Officer, VMware
Ed Cable, President & Chief Executive Officer, Mifos Initiative
Jonathan Corbet, Author, Kernel Developer and Executive Editor, LWN.net
Johanna Koester, Program Director of Developer Technology and Advocacy, IBM
Dr. Alexander Nitz, Gravitational-wave Researcher, Max Planck Institute for Gravitational Physics
Brenda Romero, Award-Winning Game Designer, Fulbright Scholar & Entrepreneur
Jim Zemlin, Executive Director, The Linux Foundation

The conference schedule will be released on August 14, with additional keynote announcements to follow.

ngrep – A Network Packet Analyzer for Linux

By

Tecmint

-

August 8, 2018

Ngrep (network grep) is a simple yet powerful network packet analyzer. It is a grep-like tool applied to the network layer – it matches traffic passing over a network interface. It allows you to specify an extended regular or hexadecimal expression to match against data payloads (the actual information or message in transmitted data, but not auto-generated metadata) of packets.

This tool works with various types of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP as well as Raw on a number of interfaces. It operates in the same fashion as tcpdump packet sniffing tool.

The package ngrep is available to install from the default system repositories in mainstream Linux distributions using package management tool as shown.

$ sudo apt install ngrep
$ sudo yum install ngrep
$ sudo dnf install ngrep