Wowza ClearCaster appliance

Wowza ClearCaster is an exciting new appliance, purpose-built to ensure successful broadcasts on Facebook Live. Designed in collaboration with Facebook, this rack-mountable device easily integrates with your existing production workflow. Just plug it in, and ClearCaster auto-configures to provide highly reliable, broadcast-quality streams.

Android getting “DNS over TLS”

DNS over TLS is a protocol where DNS queries will be encrypted to the same level as HTTPSand thus a DNS can’t actually log or see the websites you visit. This uses TLS, or Transport Layer Security, to achieve this encryption. This does require the DNS you are using to have DNS over TLS support, though, but it’s a start. Users can switch to Google’s DNS if they wish to benefit from DNS over TLS.

It appears that “DNS over TLS” support is being added to Android, according to several commits added to the Android Open Source Project (AOSP). The addition in the Android repository shows that a new setting will be added under Developer Options allowing users to turn on or off DNS over TLS. Presumably, if such an option is being added to Developer Options, then that means it is in testing and may arrive in a future version of Android such as version 8.1.

REF: https://www.xda-developers.com/android-dns-over-tls-website-privacy/

TrendLabs: Bad Rabbit Ransomware

Figure 1: Bad Rabbit Infection Chain

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/bad-rabbit-ransomware-spreads-via-network-hits-ukraine-russia/

Proxmox VE 5.1 with Ceph Luminous

Proxmox VE 5.1

• based on the latest Debian 9.2a 
• modern Linux Kernel 4.13 with ZFS 0.7.2
• Ceph v12.2 Luminous
• BlueStore storage backend as default
• ZFS: resumable “zfs send/receive” and hardware accelerated check 
• many notable changes on the GUI

REF: http://www.proxmox.com

New Safari privacy issue

Safari is not free software, so while Apple has taken a step in the right direction by trying to help computer users avoid being tracked by advertisers, it's not enough (and it doesn't negate the fact that there are many other reasons to avoid Apple). And although being able to avoid third-party cookies is the best anti-tracking measure a Web browser can offer, Safari and other widely used browsers, including Chrome, Chromium, Mozilla, and Internet Explorer, all still allow them. (Riseup offers a useful browser privacy scorecard that evaluates some of the most popular Web browsers.)

Fortunately, there is a better option for privacy-respecting Web browsing: GNU IceCat.

REF: https://www.fsf.org/blogs/community/intelligent-tracking-prevention-new-safari-privacy-measure-still-doesnt-measure-up-to-gnu-icecat

Splunk ITSI 3.0 Modernizes Event Management

Splunk IT Service Intelligence (ITSI) 3.0 delivers inbuilt machine learning, so your team can find actionable events and respond to business-impacting issues faster. 

Learn how Leidos, a Fortune 500 global science and technology leader, replaced its ineffective event management solution.  The company now uses correlations and rules engines in Splunk ITSI 3.0 to better manage and prioritize its flood of events - so it can fix the most important issues first. 

Plex for Android Auto

Plex is now available on Android Auto, so you can enjoy your music safely on the road using your car's touchscreen or from your phone. With larger touch areas, a simplified interface, and intuitive voice commands, you can quickly and easily start enjoying your music and safely get to where you need to go.

TrendLabs: Ransomware’s Recent Spam

Figure 1: A timeline of Locky ransomware detections based on partial feedback from our email-based sensors
REF:http://blog.trendmicro.com/trendlabs-security-intelligence/look-locky-ransomwares-recent-spam-activities/

ResourceSpace: innovation for product marketing

Could DAM software innovate your approach to product marketing?

The Librem 5 Free Phone

Figure 1: A mockup of what the Librem 5 phone will look like.
REF: http://www.linux-magazine.com/Online/Features/Librem-5-and-the-Challenge-of-the-Free-Phone

NDI Version 3

Version 3 of NDI represents the largest incremental change to the NDI SDK since its launch nearly two years ago. Here are some highlights chosen from among the dozens of changes, additions, and improvements: Multicast Support with Forwards Error Correction High Efficiency Mode – NDI|HX Pan / Tilt / Zoom camera support Improved Encoding Performance Available as an easy-to-use SDK that can be downloaded and integrated into any application

REF: https://www.newtek.com/ndi/sdk/

NewTek Connect Spark

Independent Review of NewTek Connect Spark™ Lon Seidman, tech reviewer, and proprietor of YouTube channel Lon.TV, purchased a NewTek Connect Spark™ HDMI-to-NDI converter to add to his TriCaster® Mini based studio, and after taking time to work with it has now reviewed it for his channel. He gives a very thorough tour of setup and operation in the video.

TrendLabs: A Closer Look at North Korea’s Internet

Figure 4. Popularity chart of websites in North Korea as of July 2017. Source: Trend Micro’s Smart Protection Network.

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/a-closer-look-at-north-koreas-internet/

NVIDIA GPUs for Google Compute Engine

Compared to traditional solutions, Cloud GPUs provide an unparalleled combination of flexibility, performance and cost-savings:
REF: https://cloudplatform.googleblog.com/2017/09/introducing-faster-GPUs-for-Google-Compute-Engine.html

Google Drive backup with Rclone

Completed binary packages for Linux, Windows, Mac OS, the BSDs, Plan 9, and Solaris can be downloaded from Rclone's website [1]. If you would prefer to build your own and you have a Go compiler on your system, you can proceed with the command

go get -u -v github.com/ncw/rclone

REF: http://www.linux-magazine.com/Issues/2017/204/The-sys-admin-s-daily-grind-Rclone

Wowza Showcases New Streaming Technologies at IBC 2017

The annual IBC Conference and Exhibition is the top global destination for media, technology and entertainment. This year saw a record 57,000+ attendees, and Wowza generated some intense buzz and stood out from the crowd. We announced some major product releases, including: The Wowza ClearCaster appliance. The Wowza Streaming Cloud Ultra Low Latency Service. SRT (Secure Reliable Transport) ingest into Wowza Streaming Engine software. REF: https://www.wowza.com/blog/wowza-showcases-new-streaming-technologies-at-ibc-2017

Software-defined wide area networks Versatile Connections

The term "software-defined" usually refers to a technology that entered the IT market in the 2000s: virtualization. Although virtualization has been customary in a server environment for many years, the question arises as to how such basic structures as wide area network (WAN) routes can be virtualized and what their inherent benefits might be. A software-defined WAN (SD-WAN) comprises multiple components:

• Virtualization: frees the network from the physical infrastructure.
• Zero-touch provisioning: allows the timely addition of routes to the virtual infrastructure.
• Centralized management, automation, and the technologies of dynamic path conditioning.
• WAN optimization technologies: compression and deduplication, as well as high-speed TCP packet order correction and forward error correction.

REF: http://www.admin-magazine.com/Articles/Software-defined-wide-area-networks

Why ResourceSpace is free - and always will be

9TH OCTOBER 2017

REF: https://www.resourcespace.com/feed?61

TrendLabs: WannaCry Sold in Middle Eastern and North African

Figure 1: Advertisement for WannaCry ransomware in the Middle Eastern and North African underground

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/wannacry-ransomware-middle-eastern-north-african-underground/

Scalable network with BGP

Figure 1: Classic network architectures that follow a tree structure are not suitable for scale-out platforms.
REF: http://www.admin-magazine.com/Articles/Scalable-network-infrastructure-in-Layer-3-with-BGP

Reddit Closing Doors to Open Source

Reddit was open source in 2008, roughly 10 years ago, when it was a new company, because they wanted the source code of their product to be available as open source.

However, as the company grew, they found it difficult to keep up with their open source code, and their GitHub repo had not been updated for a long time. The company provided many reasons behind "doing a bad job of keeping their open-source product repos up to date."

REF: http://www.linux-magazine.com/Issues/2017/204/News

TrendLabs: Dnsmasq: A Reality Check and Remediation Practices

Figure 2. Heatmap of the 1,155,555 devices potentially running Dnsmasqwith port 53 open (according to Shodan data as of October 9)

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/dnsmasq-reality-check-remediation-practices/

OpenBSD 6.2 released: Oct 9, 2017

---------- Forwarded message ----------
From: Theo de Raadt
Date: Mon, Oct 9, 2017 at 10:43 PM
Subject: OpenBSD 6.2 released: Oct 9, 2017
To: announce@openbsd.org

---------------------- OpenBSD 6.2 RELEASED ------------------------
October 9, 2017.

We are pleased to announce the official release of OpenBSD 6.2.
This is our 43rd release.  We remain proud of OpenBSD's record of more
than twenty years with only two remote holes in the default install.

TrendLabs: Backdoor Uses FTP as C&C

Figure 6. Listing of all files in cabinet archive

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/syscon-backdoor-uses-ftp-as-a-cc-channel/

ResourceSpace: Change the way you manage assets

2ND OCTOBER 2017

REF: https://www.resourcespace.com/feed?60

OpenBSD Errata: October 4th, 2017 (xrstor_resume)

from: T.J. Townsend
to: announce@openbsd.org
date: Thu, Oct 5, 2017 at 2:22 AM

A kernel executable address was leaked to userland.

Binary updates for the amd64 platform are available via the syspatch
utility. Source code patches can be found on the respective errata
pages:

  https://www.openbsd.org/errata60.html
  https://www.openbsd.org/errata61.html

As this affects the kernel, a reboot will be needed after patching.

Wowza critical update

These potential vulnerabilities could be exploited by a third party to negatively impact your streaming applications and gain access to your server. This does not impact Wowza Streaming Cloud or any other Wowza software.

REF: https://www.wowza.com/support/critical-update

OpenSSH 7.6 released

This is primarily a bugfix release. It also contains substantial
internal refactoring.

Security
--------

 * sftp-server(8): in read-only mode, sftp-server was incorrectly
   permitting creation of zero-length files. Reported by Michal
   Zalewski.

New Features
------------
REF: http://www.openssh.com/

Official OpenBSD 6.1 CD - There's only One!

The CD set is hand made and signed by Theo de Raadt.

REF: http://undeadly.org/cgi?action=article&sid=20170503203426&mode=expanded

DevOps: the Phoenix Project

The Phoenix Project is a novel about IT management. Writing a fictional account is a powerful effective way to get the message across, used by others such as Ely Goldratt with The Goal. It is written by Gene Kim, Kevin Behr and George Spafford, the team who gave us Visible Ops, one of the more talked-about books in IT (I really must review that one day).

REF: http://www.itskeptic.org/content/book-review-phoenix-project

GCP region expanded to Frankfurt

To help reduce latency by up to 50% for end users in Germany, Switzerland, Austria, and Eastern Europe, a new region has been launched in Frankfurt (europe-west3). European companies east of Frankfurt should see better app performance.

REF: https://cloud.google.com/about/locations/