July 2019 - wlug - list.wlug.org.nz

The Infrastructure Mess Causing Countless Internet Outages
by Peter Reutemann 02 Jul '19

02 Jul '19

'Border Gateway Protocol has served the internet well for decades. But when it goes wrong, you notice it. From a report: In a weeks-long stretch in 2014, hackers stole thousands of dollars a day in cryptocurrency from owners. In 2017, internet outages cropped up around the United States for hours. Last year, Google Cloud suffered hours of disruptions. Earlier this month, a large swath of European mobile data was rerouted through the state-backed China Telecom. And on Monday, websites and services around the world -- including the internet infrastructure firm Cloudflare -- experienced hours of outages. These incidents may sound different, but they actually all resulted from problems -- some accidental, some malicious -- with a fundamental internet routing system called the Border Gateway Protocol. The web is distributed, but it's also interconnected. It needs to be so that data can move around worldwide without all being controlled by a single entity. So every time you load a website or send an email, BGP is the system responsible for optimizing the route that data takes across these sprawling, intertwined networks. And when it goes wrong, the whole internet feels it. Originally conceived in 1989 (on two napkins), the version of BGP used today remains largely unchanged since 1994. And though BGP has scaled surprisingly well, there's no denying that the internet is very different than it was 25 years ago. In fact, the way BGP was designed introduces risk of outages, manipulations, and data interception -- all of which have come to pass. The internet's backbone routers -- massive industrial nodes usually run by internet service providers, not the Linksys at your house -- each control a set of IP addresses and routes. ISPs and other large organizations use BGP to announce these routes to the world and calculate paths. Think of it like planning a cross-country drive: You need to know the different route options in each area, so you can stop at all the right corn mazes and the world's largest rocking chair without adding too much extra driving each day. But if your GPS is outdated, you could wind up at a dead end or on a new road that totally bypasses the salt flats.' -- source: https://tech.slashdot.org/story/19/07/01/1316206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Usage on Azure Has Surpassed Windows, Microsoft Developer Reveals
by Peter Reutemann 02 Jul '19

02 Jul '19

'Three and a half years ago, Mark Russinovich, Azure CTO, Microsoft's cloud, said, "One in four [Azure] instances are Linux." Next, in 2017, Microsoft revealed that 40% of Azure virtual machines (VM) were Linux-based. Then in the fall of 2018, Scott Guthrie, Microsoft's executive VP of the cloud and enterprise group, told me in an exclusive interview, "About half Azure VMs are Linux". Now, Sasha Levin, Microsoft Linux kernel developer, in a request that Microsoft be allowed to join a Linux security list, revealed that "the Linux usage on our cloud has surpassed Windows." Shocking you say? Not really. Linux is largely what runs enterprise computing both on in-house servers and on the cloud. Windows Server has been declining for years. In the most recent IDC Worldwide Operating Systems and Subsystems Market Shares report covering 2017, Linux had 68% of the market. Its share has only increased since then.' -- source: https://linux.slashdot.org/story/19/07/01/1333252 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Germany to publish standard on modern secure browsers
by Peter Reutemann 02 Jul '19

02 Jul '19

'Germany's cyber-security agency is working on a set of minimum rules that modern web browsers must comply with in order to be considered secure. The new guidelines are currently being drafted by the German Federal Office for Information Security (or the Bundesamt für Sicherheit in der Informationstechnik -- BSI), and they'll be used to advise government agencies and companies from the private sector on what browsers are safe to use.' -- source: https://www.zdnet.com/article/germany-to-publish-standard-on-modern-secure-… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Ebooks Purchased From Microsoft Will Be Deleted This Month Because You Don't Really Own Anything Anymore
by Peter Reutemann 02 Jul '19

02 Jul '19

'Anyone who bought ebooks through the Microsoft Store is in for a rude shock in the coming days. The good news? You can get a refund. The bad news? All of your books are going to be deleted this month. Microsoft announced in April that it would stop selling ebooks and that any books the company already sold would stop working in early July because the DRM servers were being shut off. Yes, you read that correctly. Those books that you “bought” are going to disappear. Even the “free” books that you downloaded through Microsoft will be deleted.' -- source: https://gizmodo.com/ebooks-purchased-from-microsoft-will-be-deleted-this-mo… Possible solution to keep the books - remove the DRM: https://www.techradar.com/news/software/how-to-remove-ebook-drm-with-calibr… https://apprenticealf.wordpress.com/2012/09/10/drm-removal-tools-for-ebooks/ https://apprenticealf.wordpress.com/2011/01/13/ebooks-formats-drm-and-you-%… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1