2018年3月13日 星期二

Firefox 57 “Quantum”, Faster and Higher

The new Firefox is described as twice as fast as the version released a year ago, with a 30 percent savings in memory usage. In addition, Firefox 57 is supposed to be as fast as Google Chrome.

REF: http://www.linux-magazine.com/Issues/2018/209/Web-Performance

Learn How to Develop Applications in Python



Why Python and why Python 3
Python has been around for quite some time now. It has become a widely used programming language very popular with machine learning for example. In this course, we will teach you to start using the language, but jump really fast to more complex examples. Hence, if you are not familiar with Python, maybe you should consider looking into Practical Python 3.6 - Learn to Program using Python.
INSIDE
Module 1 (Module 1 will be available online on Monday, the last changes are incorporated)
  • Why Python and why Python 3
  • Introduction to Python programming language
  • Python 3 and why you should use it
  • Why Python is widely used (machine learning, etc.)
Hands On
  • Install python 3
  • Install and use virtualenv
Right tools for development
  • Editors
  • PEP8
  • Pylint
  • Testing and TDD
Skills acquired after module 1:
  • A better understanding of the language, including how to install it.
  • Creating virtualenvs
  • Creating a python file and tests
Module 2
  • Starting a new app
  • Defining the app
  • Using version control: creating a repo in github
  • Structure your python package (http://docs.python-guide.org/en/latest/writing/structure/)
  • Explain the several config parameters of the setup.py
  • Config file Parsing
Skills acquired after module 2:
  • Knowing what you are doing before doing it
  • Creating a repository and commit to your code
  • Starting a python package with the needed structure for packaging it later
  • Understanding the package components
Module 3
  • App Development
  • Command line argument parsing
  • Config file
  • Exporting data (csv, text)
  • Accessing an external REST api
Skills acquired after module 3:
  • Creating a binary that can parse command line arguments
  • Using a config file with the app
  • Saving files in csv
  • Reading data from an REST api
Module 4
  • Testing the App
  • Create tests for the app
Skill acquired after module 4:
  • Testing the app to guarantee that it works as intended
Module 5
Final Exam
This test is made up of 20 questions in total. You can take as long as you need to answer each question.

Plex Live TV & DVR for sports!

You don’t have to miss out on any of your highly-anticipated matches or games when you cut the cord. With Plex Live TV & DVR, all you need is a supported antenna and tuner to watch any of the games broadcasted free over-the-air. Our easy-to-use program guide and powerful search help you easily find matches you want—to watch live on any device, or record for later—AND time shift, or get rid of commercials. All of this in HD glory (where available)! Don’t miss out!
REF: https://www.plex.tv/ad/sports/

Azure offers for SUSE Linux Enterprise Server (SLES)

Microsoft and SUSE are implementing a few changes to SUSE Linux Enterprise Server (SLES) virtual machine (VM) offers on Azure. These changes improve the clarity of the different SLES offers in respect to the support provided, and will be effective on April 2, 2018. 
 
✓Basic VM Support Hours for SLES are available on Azure at no extra charge for all VM families.
✓The Premium VM Support Hours for SLES will be renamed “Priority VM Support Hours” to improve the clarity of the support offer.
✓The SLES offerings for SAP will also be renamed to Priority, with no changes in pricing.
✓The legacy SLES offers named XS, M, L, XL, and A9 will be renamed to reflect the actual number of cores: 1, 2, 4, 8, and 16 cores, respectively.

For more detailed information, learn more on the SUSE Linux Enterprise Server (SLES) Name Change webpage. 

TrendLabs: Campaign Possibly Connected to “MuddyWater” Surfaces in the Middle East and Central Asia

 Figure 12. When the threat actor discovers the researcher via an improper request
Figure 12. When the threat actor discovers the researcher via an improper request
REF: https://blog.trendmicro.com/trendlabs-security-intelligence/campaign-possibly-connected-muddywater-surfaces-middle-east-central-asia/

2018年3月2日 星期五

DebConf18 in Hsinshu

The organisation of DebConf18 (Hsinshu, Taiwan, 29 July–5 August 2018)
is going on. DebConf18 will be preceded by one week of DebCamp,
Saturday, July 21 through Friday, July 27. The Call for Proposals [39]
was published on 7 February 2018. You can now sign into the website [40]
and submit an event, or write to the content team at
<content@debconf.org> [41] to suggest an invited speaker. Talk proposals
must be submitted by Sunday 17 June 2018 at the latest. Registration
will open soon and you can subscribe to debconf-announce [42] to be
notified when registration opens. Bursary applications will be available
together with registration and must be submitted by 13 April. As of now,
eleven companies or organisations have decided to support the event, and
DebConf18 is still accepting [43] sponsors; visit its website [44] for
more details.

   39: https://bits.debian.org/2018/02/debconf18-cfp.html
   40: https://debconf18.debconf.org/
   41: content@debconf.org
   42: https://debconf18.debconf.org/about/registration/
   43: https://bits.debian.org/tag/debconf18.html
   44: https://debconf18.debconf.org

NIST Cybersecurity framework


  • identify  protect detect respond recover
  • exploit code determines effectness
  • E-mail, web isolation -> docker as rendering proxy
  • SOC vs CISRT (CERT)
  • Indicator of Compromise (IOC, pattern, hash based)
  • Indicator of Attack (IOA, malicious behavior checks)