It's a storage showdown as Jim and Wes bust some performance myths about RAID and ZFS. Plus our favorite features from Fedora 32, and why Wes loves DNF.Links:What's new in Fedora 32 Workstation Fedora 32 ChangeSet Linux distro review: Fedora Workstation 32 TechSNAP 428: RAID Reality Check ZFS versus RAID: Eight Ironwolf disks, two filesystems, one winner Understanding RAID: How performance scales from one disk to eight Find Jim on 2.5 AdminsFind Wes on LINUX UnpluggedTechSNAP 1: First episode of TechSNAP (in 2011!) TechSNAP 300: End of the Allan and Chris era (2017) TechSNAP 301: Enter Dan and Wes  TechSNAP 347: A Farewell to Dan TechSNAP 348: Chris is back! TechSNAP 389: Jim's first time as a guest TechSNAP 390: Jim's second guest appearance TechSNAP 393: Chris says goodbye TechSNAP 395: Jim joins the show

It's a storage showdown as Jim and Wes bust some performance myths about RAID and ZFS. Plus our favorite features from Fedora 32, and why Wes loves DNF.Links:<ul><li><a href="https://fedoramagazine.org/whats-new-fedora-32-workstation/" rel="nofollow" target="_blank">What's new in Fedora 32 Workstation</a> </li><li><a href="https://fedoraproject.org/wiki/Releases/32/ChangeSet" rel="nofollow" target="_blank">Fedora 32 ChangeSet</a> </li><li><a href="https://arstechnica.com/gadgets/2020/05/linux-distro-review-fedora-workstation-32/" rel="nofollow" target="_blank">Linux distro review: Fedora Workstation 32</a> </li><li><a href="https://techsnap.systems/428" rel="nofollow" target="_blank">TechSNAP 428: RAID Reality Check</a> </li><li><a href="https://arstechnica.com/gadgets/2020/05/zfs-versus-raid-eight-ironwolf-disks-two-filesystems-one-winner/" rel="nofollow" target="_blank">ZFS versus RAID: Eight Ironwolf disks, two filesystems, one winner</a> </li><li><a href="https://arstechnica.com/information-technology/2020/04/understanding-raid-how-performance-scales-from-one-disk-to-eight/" rel="nofollow" target="_blank">Understanding RAID: How performance scales from one disk to eight</a> </li><li><a href="https://2.5admins.com/" rel="nofollow" target="_blank">Find Jim on 2.5 Admins</a></li><li><a href="https://linuxunplugged.com/" rel="nofollow" target="_blank">Find Wes on LINUX Unplugged</a></li><li><a href="https://www.youtube.com/watch?v=n7La9Z-XrCE" rel="nofollow" target="_blank">TechSNAP 1: First episode of TechSNAP (in 2011!)</a> </li><li><a href="https://www.jupiterbroadcasting.com/106026/2089-days-uptime-techsnap-300/" rel="nofollow" target="_blank">TechSNAP 300: End of the Allan and Chris era (2017)</a> </li><li><a href="https://www.jupiterbroadcasting.com/106086/the-next-generation-techsnap-301/" rel="nofollow" target="_blank">TechSNAP 301: Enter Dan and Wes </a> </li><li><a href="https://www.jupiterbroadcasting.com/120317/a-farewell-to-dan-techsnap-347/" rel="nofollow" target="_blank">TechSNAP 347: A Farewell to Dan</a> </li><li><a href="https://www.jupiterbroadcasting.com/120687/server-neglect-techsnap-348/" rel="nofollow" target="_blank">TechSNAP 348: Chris is back!</a> </li><li><a href="https://www.jupiterbroadcasting.com/128101/the-future-of-http-techsnap-389/" rel="nofollow" target="_blank">TechSNAP 389: Jim's first time as a guest</a> </li><li><a href="https://techsnap.systems/390" rel="nofollow" target="_blank">TechSNAP 390: Jim's second guest appearance</a> </li><li><a href="https://www.jupiterbroadcasting.com/128656/back-to-our-roots-techsnap-393/" rel="nofollow" target="_blank">TechSNAP 393: Chris says goodbye</a> </li><li><a href="https://www.jupiterbroadcasting.com/128941/the-acme-era-techsnap-395/" rel="nofollow" target="_blank">TechSNAP 395: Jim joins the show</a> </li></ul>

430: All Good Things

Jim and Wes take the latest release of the Caddy web server for a spin, investigate Intel's Comet Lake desktop CPUs, and explore the fight over 5G between the US Military and the FCC.Links:Caddy offers TLS, HTTPS, and more in one dependency-free Go Web server Caddy 2 Caddy v2 Improvements [slightly out of date]Proposal: Permanently change all proprietary licensing to open source · Issue #2786 · caddyserver/caddy Revert "Implement Caddy-Sponsors HTTP response header" by lol768 · Pull Request #1866 · caddyserver/caddy Intel’s 10th generation desktop CPUs have arrived—still on 14nm Intel Comet Lake 10th Gen CPU release date, specs, price, and performance 10th Gen Intel® Core™ Desktop Processors US military is furious at FCC over 5G plan that could interfere with GPS The Pentagon's fight to kill Ligado's 5G network FCC Approves Ligado L-Band Application to Facilitate 5G &amp; IoT

Jim and Wes take the latest release of the Caddy web server for a spin, investigate Intel's Comet Lake desktop CPUs, and explore the fight over 5G between the US Military and the FCC.Links:<ul><li><a href="https://arstechnica.com/gadgets/2020/05/caddy-offers-tls-https-and-more-in-one-dependency-free-go-web-server/" rel="nofollow" target="_blank">Caddy offers TLS, HTTPS, and more in one dependency-free Go Web server</a> </li><li><a href="https://caddyserver.com/v2" rel="nofollow" target="_blank">Caddy 2</a> </li><li><a href="https://github.com/caddyserver/caddy/wiki/v2:-Improvements" rel="nofollow" target="_blank">Caddy v2 Improvements [slightly out of date]</a></li><li><a href="https://github.com/caddyserver/caddy/issues/2786" rel="nofollow" target="_blank">Proposal: Permanently change all proprietary licensing to open source · Issue #2786 · caddyserver/caddy</a> </li><li><a href="https://github.com/caddyserver/caddy/pull/1866" rel="nofollow" target="_blank">Revert "Implement Caddy-Sponsors HTTP response header" by lol768 · Pull Request #1866 · caddyserver/caddy</a> </li><li><a href="https://arstechnica.com/gadgets/2020/05/intels-comet-lake-desktop-cpus-are-here/" rel="nofollow" target="_blank">Intel’s 10th generation desktop CPUs have arrived—still on 14nm</a> </li><li><a href="https://www.pcgamer.com/intel-comet-lake-release-date-specs-performance/" rel="nofollow" target="_blank">Intel Comet Lake 10th Gen CPU release date, specs, price, and performance</a> </li><li><a href="https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-desktop-brief.html" rel="nofollow" target="_blank">10th Gen Intel® Core™ Desktop Processors</a> </li><li><a href="https://arstechnica.com/tech-policy/2020/05/millions-of-gps-devices-at-risk-from-fcc-approved-5g-network-military-says/" rel="nofollow" target="_blank">US military is furious at FCC over 5G plan that could interfere with GPS</a> </li><li><a href="https://www.cnet.com/news/the-pentagons-fight-to-kill-ligados-5g-network/" rel="nofollow" target="_blank">The Pentagon's fight to kill Ligado's 5G network</a> </li><li><a href="https://www.fcc.gov/document/fcc-approves-ligado-l-band-application-facilitate-5g-iot" rel="nofollow" target="_blank">FCC Approves Ligado L-Band Application to Facilitate 5G &amp; IoT</a> </li></ul>

429: Curious About Caddy

We dive deep into the world of  RAID, and discuss how to choose the right topology to optimize performance and resilience. Plus Cloudflare steps up its campaign to secure BGP, and why you might want to trade in cron for systemd timers.Links:AMD Claims World’s Fastest Per-Core Performance with New EPYC Rome 7Fx2 CPUs AMD EPYC 7F52 Linux Performance - AMD 7FX2 CPUs Further Increasing The Fight Against Intel Xeon Review Understanding RAID: How performance scales from one disk to eight New Cloudflare tool can tell you if your ISP has deployed BGP fixes Is BGP safe yet? RPKI - The required cryptographic upgrade to BGP routing Why I Prefer systemd Timers Over Cron – Thomas Stringer systemd/Timers - ArchWiki systemd.time (Time format docs) systemd.timer (Unit docs)

We dive deep into the world of RAID, and discuss how to choose the right topology to optimize performance and resilience. Plus Cloudflare steps up its campaign to secure BGP, and why you might want to trade in cron for systemd timers.Links:<ul><li><a href="https://www.tomshardware.com/news/amd-worlds-fastest-processor-epyc-rome-7fx2-cpus" rel="nofollow" target="_blank">AMD Claims World’s Fastest Per-Core Performance with New EPYC Rome 7Fx2 CPUs</a> </li><li><a href="https://www.phoronix.com/scan.php?page=article&amp;item=amd-epyc-7f52&amp;num=1" rel="nofollow" target="_blank">AMD EPYC 7F52 Linux Performance - AMD 7FX2 CPUs Further Increasing The Fight Against Intel Xeon Review</a> </li><li><a href="https://arstechnica.com/information-technology/2020/04/understanding-raid-how-performance-scales-from-one-disk-to-eight/" rel="nofollow" target="_blank">Understanding RAID: How performance scales from one disk to eight</a> </li><li><a href="https://arstechnica.com/information-technology/2020/04/new-cloudflare-tool-can-tell-you-if-your-isp-has-deployed-bgp-fixes/" rel="nofollow" target="_blank">New Cloudflare tool can tell you if your ISP has deployed BGP fixes</a> </li><li><a href="https://isbgpsafeyet.com/" rel="nofollow" target="_blank">Is BGP safe yet?</a> </li><li><a href="https://blog.cloudflare.com/rpki/" rel="nofollow" target="_blank">RPKI - The required cryptographic upgrade to BGP routing</a> </li><li><a href="https://trstringer.com/systemd-timer-vs-cronjob/" rel="nofollow" target="_blank">Why I Prefer systemd Timers Over Cron – Thomas Stringer</a> </li><li><a href="https://wiki.archlinux.org/index.php/Systemd/Timers" rel="nofollow" target="_blank">systemd/Timers - ArchWiki</a> </li><li><a href="https://www.freedesktop.org/software/systemd/man/systemd.time.html" rel="nofollow" target="_blank">systemd.time (Time format docs)</a> </li><li><a href="https://www.freedesktop.org/software/systemd/man/systemd.timer.html" rel="nofollow" target="_blank">systemd.timer (Unit docs)</a> </li></ul>

428: RAID Reality Check

Jim finally gets his hands on an AMD Ryzen 9 laptop, some great news about Wi-Fi 6e, and our take on FreeBSD on the desktop. Plus Intel's surprisingly overclockable laptop CPU, why you shouldn't freak out about 5G, and the incredible creativity of the Demoscene.Links:Asus ROG Zephyrus G14—Ryzen 7nm mobile is here, and it’s awesomeLinux on Laptops: ASUS Zephyrus G14 with Ryzen 9 4900HSIntel’s 10th-generation H-series laptop CPUs break 5GHz | Ars TechnicaWi-Fi 6E becomes official—the FCC will vote on rules this monthCelebs share rumors linking 5G to coronavirus, nutjobs burn cell towersNot-actually Linux distro review: FreeBSD 12.1-RELEASENot actually Linux distro review deux: GhostBSDMOD (file format) - WikipediaAT&amp;T.MOD (YouTube)DJ Moses Rising—Ice Cream Trance (YouTube)Farbrausch—The Product (64K Intro, 2000)Farbrausch—Poem to a Horse (64K Intro, 2002)Finland accepts the Demoscene on its national UNESCO list of intangible cultural heritage of humanity

Jim finally gets his hands on an AMD Ryzen 9 laptop, some great news about Wi-Fi 6e, and our take on FreeBSD on the desktop. Plus Intel's surprisingly overclockable laptop CPU, why you shouldn't freak out about 5G, and the incredible creativity of the Demoscene.Links:<ul><li><a href="https://arstechnica.com/gadgets/2020/04/asus-rog-zephyrus-g14-ryzen-7nm-mobile-is-here-and-its-awesome/" rel="nofollow" target="_blank">Asus ROG Zephyrus G14—Ryzen 7nm mobile is here, and it’s awesome</a></li><li><a href="https://arstechnica.com/gadgets/2020/04/linux-on-laptops-asus-zephyrus-g14-with-ryzen-9-4900hs/" rel="nofollow" target="_blank">Linux on Laptops: ASUS Zephyrus G14 with Ryzen 9 4900HS</a></li><li><a href="https://arstechnica.com/gadgets/2020/04/intels-10th-generation-h-series-laptop-cpus-break-5-ghz/" rel="nofollow" target="_blank">Intel’s 10th-generation H-series laptop CPUs break 5GHz | Ars Technica</a></li><li><a href="https://arstechnica.com/gadgets/2020/04/fcc-will-vote-on-rules-for-1-2ghz-of-new-wi-fi-6e-spectrum-on-april-23/" rel="nofollow" target="_blank">Wi-Fi 6E becomes official—the FCC will vote on rules this month</a></li><li><a href="https://arstechnica.com/science/2020/04/in-the-uk-pandemic-panic-has-people-burning-cell-phone-towers/" rel="nofollow" target="_blank">Celebs share rumors linking 5G to coronavirus, nutjobs burn cell towers</a></li><li><a href="https://arstechnica.com/gadgets/2020/04/not-actually-linux-distro-review-freebsd-12-1-release/" rel="nofollow" target="_blank">Not-actually Linux distro review: FreeBSD 12.1-RELEASE</a></li><li><a href="https://arstechnica.com/gadgets/2020/04/not-actually-linux-distro-review-deux-ghostbsd/" rel="nofollow" target="_blank">Not actually Linux distro review deux: GhostBSD</a></li><li><a href="https://en.wikipedia.org/wiki/MOD_(file_format)" rel="nofollow" target="_blank">MOD (file format) - Wikipedia</a></li><li><a href="https://www.youtube.com/watch?v=UspabZp09_Q" rel="nofollow" target="_blank">AT&amp;T.MOD (YouTube)</a></li><li><a href="https://www.youtube.com/watch?v=RDDkGZWkEn0" rel="nofollow" target="_blank">DJ Moses Rising—Ice Cream Trance (YouTube)</a></li><li><a href="https://www.youtube.com/watch?v=Y3n3c_8Nn2Y" rel="nofollow" target="_blank">Farbrausch—The Product (64K Intro, 2000)</a></li><li><a href="https://www.youtube.com/watch?v=gNOJhEX9YT0" rel="nofollow" target="_blank">Farbrausch—Poem to a Horse (64K Intro, 2002)</a></li><li><a href="http://demoscene-the-art-of-coding.net/2020/04/15/breakthrough-finland-accepts-demoscene-on-their-national-list-of-intangible-cultural-heritage-of-humanity/" rel="nofollow" target="_blank">Finland accepts the Demoscene on its national UNESCO list of intangible cultural heritage of humanity</a></li></ul>

427: Gigahertz Games

We take a look at Cloudflare's impressive Linux disk encryption speed-ups, and explore how zoned storage tools like dm-zoned and zonefs might help mitigate the downsides of Shingled Magnetic Recording.   Plus we celebrate WireGuard's inclusion in the Linux 5.6 kernel, and fight some exFAT FUD.Links:WireGuard VPN makes it to 1.0.0—and into the next Linux kernel — It's a good day for WireGuard users—DKMS builds will soon be behind us.Linux 5.6 Is The Most Exciting Kernel In Years With So Many New Featuresfs: New zonefs file system — zonefs is a very simple file system exposing each zone of a zoned block device as a file. This is intended to simplify implementation of application zoned block device raw access support by allowing switching to the well known POSIX file API rather than relying on direct block device file ioctls and read/write.Ama-ZNS! Zonefs File-System Will Land with Linux® 5.6What is Zoned Storage and the Zoned Storage Initiative? — Zoned Storage is a new paradigm in storage motivated by the incredible explosion of data. Our data-driven society is increasingly dependent on data for every-day life and extreme scale data management is becoming a necessity. Linux Kernel Support - ZonedStorage.iodm-zoned — The dm-zoned device mapper target exposes a zoned block device as a regular block device.Device Mapper - ZonedStorage.io What are PMR and SMR hard disk drives?Beware of SMR drives in PMR clothing — WD and Seagate are both submarining Drive-managed SMR (DM-SMR) drives into channels, disguised as "normal" drives.Beware of SMR drives in PMR clothing [Reddit]The exFAT filesystem is coming to Linux—Paragon software’s not happy about it — When software and operating system giant Microsoft announced its support for inclusion of the exFAT filesystem directly into the Linux kernel back in August, it didn't get a ton of press coverage. But filesystem vendor Paragon Software clearly noticed this month's merge of the Microsoft-approved, largely Samsung-authored version of exFAT into the VFS for-next repository, which will in turn merge into Linux 5.7—and Paragon doesn't seem happy about it.The New Microsoft exFAT File-System Driver Is Set To Land With Linux 5.7Speeding up Linux disk encryption - The Cloudflare Blog — Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how we made it at least two times faster for ourselves and our customers.Add inline dm-crypt patch and xtsproxy Crypto API patch

We take a look at Cloudflare's impressive Linux disk encryption speed-ups, and explore how zoned storage tools like dm-zoned and zonefs might help mitigate the downsides of Shingled Magnetic Recording. Plus we celebrate WireGuard's inclusion in the Linux 5.6 kernel, and fight some exFAT FUD.Links:<ul><li><a href="https://arstechnica.com/gadgets/2020/03/wireguard-vpn-makes-it-to-1-0-0-and-into-the-next-linux-kernel/" rel="nofollow" target="_blank">WireGuard VPN makes it to 1.0.0—and into the next Linux kernel</a> — It's a good day for WireGuard users—DKMS builds will soon be behind us. </li><li><a href="https://www.phoronix.com/scan.php?page=article&amp;item=linux-56-features&amp;num=1" rel="nofollow" target="_blank">Linux 5.6 Is The Most Exciting Kernel In Years With So Many New Features</a></li><li><a href="https://lwn.net/Articles/793585/" rel="nofollow" target="_blank">fs: New zonefs file system</a> — zonefs is a very simple file system exposing each zone of a zoned block device as a file. This is intended to simplify implementation of application zoned block device raw access support by allowing switching to the well known POSIX file API rather than relying on direct block device file ioctls and read/write.</li><li><a href="https://blog.westerndigital.com/zonefs-file-system-linux-5-6/" rel="nofollow" target="_blank">Ama-ZNS! Zonefs File-System Will Land with Linux® 5.6</a></li><li><a href="https://blog.westerndigital.com/what-is-zoned-storage-initiative/" rel="nofollow" target="_blank">What is Zoned Storage and the Zoned Storage Initiative?</a> — Zoned Storage is a new paradigm in storage motivated by the incredible explosion of data. Our data-driven society is increasingly dependent on data for every-day life and extreme scale data management is becoming a necessity. </li><li><a href="https://www.zonedstorage.io/introduction/linux-support/" rel="nofollow" target="_blank">Linux Kernel Support - ZonedStorage.io</a></li><li><a href="https://www.kernel.org/doc/html/latest/admin-guide/device-mapper/dm-zoned.html" rel="nofollow" target="_blank">dm-zoned</a> — The dm-zoned device mapper target exposes a zoned block device as a regular block device.</li><li><a href="https://zonedstorage.io/linux/dm/#dm-zoned" rel="nofollow" target="_blank">Device Mapper - ZonedStorage.io</a></li><li><a href="https://www.synology.com/en-us/knowledgebase/DSM/tutorial/Storage/PMR_SMR_hard_disk_drives" rel="nofollow" target="_blank"> What are PMR and SMR hard disk drives?</a></li><li><a href="https://zfsonlinux.topicbox.com/groups/zfs-discuss/T759a10612888a9d9-Me469c98023e1a2cb059f9391/beware-of-smr-drives-in-pmr-clothing" rel="nofollow" target="_blank">Beware of SMR drives in PMR clothing</a> — WD and Seagate are both submarining Drive-managed SMR (DM-SMR) drives into channels, disguised as "normal" drives.</li><li><a href="https://www.reddit.com/r/zfs/comments/frsic7/beware_of_smr_drives_in_pmr_clothing/" rel="nofollow" target="_blank">Beware of SMR drives in PMR clothing [Reddit]</a></li><li><a href="https://arstechnica.com/information-technology/2020/03/the-exfat-filesystem-is-coming-to-linux-paragon-softwares-not-happy-about-it/" rel="nofollow" target="_blank">The exFAT filesystem is coming to Linux—Paragon software’s not happy about it</a> — When software and operating system giant Microsoft announced its support for inclusion of the exFAT filesystem directly into the Linux kernel back in August, it didn't get a ton of press coverage. But filesystem vendor Paragon Software clearly noticed this month's merge of the Microsoft-approved, largely Samsung-authored version of exFAT into the VFS for-next repository, which will in turn merge into Linux 5.7—and Paragon doesn't seem happy about it.</li><li><a href="https://www.phoronix.com/scan.php?page=news_item&amp;px=New-exFAT-For-Linux-5.7" rel="nofollow" target="_blank">The New Microsoft exFAT File-System Driver Is Set To Land With Linux 5.7</a></li><li><a href="https://blog.cloudflare.com/speeding-up-linux-disk-encryption/" rel="nofollow" target="_blank">Speeding up Linux disk encryption - The Cloudflare Blog</a> — Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how we made it at least two times faster for ourselves and our customers.</li><li><a href="https://github.com/cloudflare/linux/blob/master/patches/0023-Add-DM_CRYPT_FORCE_INLINE-flag-to-dm-crypt-target.patch" rel="nofollow" target="_blank">Add inline dm-crypt patch and xtsproxy Crypto API patch</a></li></ul>

426: Storage Stories

We take a look at AMD's upcoming line of Ryzen 4000 mobile CPUs, and share our first impressions of Ubuntu 20.04's approach to ZFS on root.  Plus Let's Encrypt's certificate validation mix-up, Intel's questionable new power supply design, and more.Links:Let's Encrypt changes course on certificate revocation Revoking certain certificates on March 4 Let's Encrypt: Incomplete revocation for CAA rechecking bugPass authzModel by value, not reference The Complete Guide to CAA RecordsDNS Certification Authority Authorization AMD's 7nm Ryzen 4000 laptop processors are finally here How Intel is changing the future of power supplies with its ATX12VO spec Single Rail Power Supply ATX12VO Design GuideFreeNAS and TrueNAS are UnifyingFreeNAS and TrueNAS are Unifying [Video Announcement] Ubuntu 20.04's zsys adds ZFS snapshots to package management ubuntu/zsys: zsys daemon and client for zfs systems

We take a look at AMD's upcoming line of Ryzen 4000 mobile CPUs, and share our first impressions of Ubuntu 20.04's approach to ZFS on root. Plus Let's Encrypt's certificate validation mix-up, Intel's questionable new power supply design, and more.Links:<ul><li><a href="https://arstechnica.com/information-technology/2020/03/lets-encrypt-holds-off-on-revocation-of-certificates/" rel="nofollow" target="_blank">Let's Encrypt changes course on certificate revocation</a> </li><li><a href="https://community.letsencrypt.org/t/revoking-certain-certificates-on-march-4/114864" rel="nofollow" target="_blank">Revoking certain certificates on March 4</a> </li><li><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1619179#c7" rel="nofollow" target="_blank">Let's Encrypt: Incomplete revocation for CAA rechecking bug</a></li><li><a href="https://github.com/letsencrypt/boulder/pull/4690/files#diff-2285b0268539881fde96d9928ecef358R1412" rel="nofollow" target="_blank">Pass authzModel by value, not reference</a> </li><li><a href="https://jasonofflorida.com/the-complete-guide-to-caa-records/" rel="nofollow" target="_blank">The Complete Guide to CAA Records</a></li><li><a href="https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization" rel="nofollow" target="_blank">DNS Certification Authority Authorization</a> </li><li><a href="https://arstechnica.com/gadgets/2020/03/amds-7nm-ryzen-4000-laptop-processors-are-finally-here/" rel="nofollow" target="_blank">AMD's 7nm Ryzen 4000 laptop processors are finally here</a> </li><li><a href="https://www.pcworld.com/article/3518831/how-intels-changing-the-future-of-power-supplies-with-its-atx12vo-spec.html" rel="nofollow" target="_blank">How Intel is changing the future of power supplies with its ATX12VO spec</a> </li><li><a href="https://www.intel.com/content/dam/www/public/us/en/documents/guides/single-rail-power-supply-platform-atx12vo-design-guide.pdf" rel="nofollow" target="_blank">Single Rail Power Supply ATX12VO Design Guide</a></li><li><a href="https://www.ixsystems.com/blog/freenas-truenas-unification/" rel="nofollow" target="_blank">FreeNAS and TrueNAS are Unifying</a></li><li><a href="https://www.youtube.com/watch?v=0gK2g8g0btI" rel="nofollow" target="_blank">FreeNAS and TrueNAS are Unifying [Video Announcement]</a> </li><li><a href="https://arstechnica.com/gadgets/2020/03/ubuntu-20-04s-zsys-adds-zfs-snapshots-to-package-management/" rel="nofollow" target="_blank">Ubuntu 20.04's zsys adds ZFS snapshots to package management</a> </li><li><a href="https://github.com/ubuntu/zsys" rel="nofollow" target="_blank">ubuntu/zsys: zsys daemon and client for zfs systems</a> </li></ul>

425: Ryzen Gets Real

Cloudflare recently embarked on an epic quest to choose a CPU for its next-generation server build, so we explore the importance of requests per watt, the benefits of full memory encryption, and why AMD won.   Plus Mozilla's rollout of DNS over HTTPS has begun, a big milestone for Let's Encrypt, and more.Links:Firefox continues push to bring DNS over HTTPS by default for US users - The Mozilla Blog The Facts: Mozilla’s DNS over HTTPs (DoH) Security/DOH-resolver-policy - MozillaWiki HTTPS for all: Let’s Encrypt reaches one billion certificates issued | Ars Technica Let’s Encrypt Has Issued a Billion Certificates - Let’s Encrypt - Free SSL/TLS Certificates Let’s Encrypt: A History - The Morning Paper Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months • The Register Ballot SC22: Reduce Certificate LifetimesGoogle Chrome’s fear of Microsoft Edge is revealing its bad side Microsoft shares a roadmap for the new Microsoft Edge Microsoft Edge: Top Feedback Summary for March 4 Download Microsoft Edge Insider Channels Flaw in billions of Wi-Fi devices left communications open to eavesdropping | Ars Technica kr00k: A serious vulnerability deep inside Wi-Fi encryption Kr00k Paper Technical Details of Why Cloudflare Chose AMD EPYC for Gen X Servers An EPYC trip to Rome: AMD is Cloudflare’s 10th-generation Edge server CPU Cloudflare’s Gen X: Servers for an Accelerated Future Impact of Cache Locality Gen X Performance Tuning Securing Memory at EPYC Scale Intel promises Full Memory Encryption in upcoming CPUs | Ars Technica

Cloudflare recently embarked on an epic quest to choose a CPU for its next-generation server build, so we explore the importance of requests per watt, the benefits of full memory encryption, and why AMD won. Plus Mozilla's rollout of DNS over HTTPS has begun, a big milestone for Let's Encrypt, and more.Links:<ul><li><a href="https://blog.mozilla.org/blog/2020/02/25/firefox-continues-push-to-bring-dns-over-https-by-default-for-us-users/" rel="nofollow" target="_blank">Firefox continues push to bring DNS over HTTPS by default for US users - The Mozilla Blog</a> </li><li><a href="https://blog.mozilla.org/netpolicy/2020/02/25/the-facts-mozillas-dns-over-https-doh/" rel="nofollow" target="_blank">The Facts: Mozilla’s DNS over HTTPs (DoH)</a> </li><li><a href="https://wiki.mozilla.org/Security/DOH-resolver-policy" rel="nofollow" target="_blank">Security/DOH-resolver-policy - MozillaWiki</a> </li><li><a href="https://arstechnica.com/gadgets/2020/02/lets-encrypt-issued-its-billionth-certificate-today/" rel="nofollow" target="_blank">HTTPS for all: Let’s Encrypt reaches one billion certificates issued | Ars Technica</a> </li><li><a href="https://letsencrypt.org/2020/02/27/one-billion-certs.html" rel="nofollow" target="_blank">Let’s Encrypt Has Issued a Billion Certificates - Let’s Encrypt - Free SSL/TLS Certificates</a> </li><li><a href="https://blog.acolyer.org/2020/02/12/lets-encrypt-an-automated-certificate-authority-to-encrypt-the-entire-web/" rel="nofollow" target="_blank">Let’s Encrypt: A History - The Morning Paper</a> </li><li><a href="https://www.theregister.co.uk/2020/02/20/apple_shorter_cert_lifetime/" rel="nofollow" target="_blank">Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months • The Register</a> </li><li><a href="https://scotthelme.co.uk/ballot-sc22-reduce-certificate-lifetimes/" rel="nofollow" target="_blank">Ballot SC22: Reduce Certificate Lifetimes</a></li><li><a href="https://www.laptopmag.com/news/googles-fear-of-microsoft-edge-is-revealing-its-bad-side" rel="nofollow" target="_blank">Google Chrome’s fear of Microsoft Edge is revealing its bad side</a> </li><li><a href="https://www.windowscentral.com/microsoft-shares-roadmap-new-microsoft-edges-upcoming-features" rel="nofollow" target="_blank">Microsoft shares a roadmap for the new Microsoft Edge</a> </li><li><a href="https://techcommunity.microsoft.com/t5/discussions/top-feedback-summary-for-march-4/m-p/1209808" rel="nofollow" target="_blank">Microsoft Edge: Top Feedback Summary for March 4</a> </li><li><a href="https://www.microsoftedgeinsider.com/en-us/download/" rel="nofollow" target="_blank">Download Microsoft Edge Insider Channels</a> </li><li><a href="https://arstechnica.com/information-technology/2020/02/flaw-in-billions-of-wi-fi-devices-left-communications-open-to-eavesdroppng/" rel="nofollow" target="_blank">Flaw in billions of Wi-Fi devices left communications open to eavesdropping | Ars Technica</a> </li><li><a href="https://www.eset.com/int/kr00k/" rel="nofollow" target="_blank">kr00k: A serious vulnerability deep inside Wi-Fi encryption</a> </li><li><a href="https://www.welivesecurity.com/wp-content/uploads/2020/02/ESET_Kr00k.pdf" rel="nofollow" target="_blank">Kr00k Paper</a> </li><li><a href="https://blog.cloudflare.com/technical-details-of-why-cloudflare-chose-amd-epyc-for-gen-x-servers/" rel="nofollow" target="_blank">Technical Details of Why Cloudflare Chose AMD EPYC for Gen X Servers</a> </li><li><a href="https://blog.cloudflare.com/an-epyc-trip-to-rome-amd-is-cloudflares-10th-generation-edge-server-cpu/" rel="nofollow" target="_blank">An EPYC trip to Rome: AMD is Cloudflare’s 10th-generation Edge server CPU</a> </li><li><a href="https://blog.cloudflare.com/cloudflares-gen-x-servers-for-an-accelerated-future/" rel="nofollow" target="_blank">Cloudflare’s Gen X: Servers for an Accelerated Future</a> </li><li><a href="https://blog.cloudflare.com/impact-of-cache-locality/" rel="nofollow" target="_blank">Impact of Cache Locality</a> </li><li><a href="https://blog.cloudflare.com/gen-x-performance-tuning/" rel="nofollow" target="_blank">Gen X Performance Tuning</a> </li><li><a href="https://blog.cloudflare.com/securing-memory-at-epyc-scale/" rel="nofollow" target="_blank">Securing Memory at EPYC Scale</a> </li><li><a href="https://arstechnica.com/gadgets/2020/02/intel-promises-full-memory-encryption-in-upcoming-cpus/" rel="nofollow" target="_blank">Intel promises Full Memory Encryption in upcoming CPUs | Ars Technica</a> </li></ul>

424: AMD Inside

We explore the potential of heat-assisted magnetic recording and get excited about a possibly persistent L2ARC.  Plus Jim's journeys with Clear Linux, and why Ubuntu 18.04.4 is a maintenance release worth talking about.Links:Ubuntu 18.04.4 LTS: here's what's new — It's not as shiny and exciting as entirely new versions, of course, but it does pack in some worthwhile security and bugfix upgrades, as well as support for more and newer hardware.18.04.4 - Ubuntu WikiMobaXterm — Enhanced terminal for Windows with X11 server, tabbed SSH client, network tools and much more.Linux distro review: Intel’s own Clear Linux OS — There's not much question that Clear Linux is your best bet if you want to turn in the best possible benchmark numbers. The question not addressed here is, what's it like to run Clear Linux as a daily driver? We were curious, so we took it for a spin.Clear Linux* Project — Clear Linux OS is an open source, rolling release Linux distribution optimized for performance and security, from the Cloud to the Edge, designed for customization, and manageability.swupd — Documentation for Clear Linux* projectclr-boot-manager: Kernel &amp; Boot Loader ManagementCannot compile zfs for 5.5-rc2 · Issue #9745 · zfsonlinux/zfsPersistent L2ARC might be coming to ZFS on Linux — The primary ARC is kept in system RAM, but an L2ARC device can be created from one or more fast disks. In a ZFS pool with one or more L2ARC devices, when blocks are evicted from the primary ARC in RAM, they are moved down to L2ARC rather than being thrown away entirely. In the past, this feature has been of limited value, both because indexing a large L2ARC occupies system RAM which could have been better used for primary ARC and because L2ARC was not persistent across reboots.Persistent L2ARC by gamanakis · Pull Request #9582 · zfsonlinux/zfs — This feature implements a light-weight persistent L2ARC metadata structure that allows L2ARC contents to be recovered after a reboot. This significantly eases the impact a reboot has on read performance on systems with large caches.LINUX Unplugged 303: Stateless and Dateless — We visit Intel to figure out what Clear Linux is all about and explain a few tricks that make it unique.LINUX Unplugged Blog: Clear Linux OS 2019HAMR don’t hurt ’em: laser-assisted hard drives are coming in 2020 — Although the 2012 "just around the corner" HAMR drives seem to have been mostly vapor, the technology is a reality now. Seagate has been trialing 16TB HAMR drives with select customers for more than a year and claims that the trials have proved that its HAMR drives are "plug and play replacements" for traditional CMR drives, requiring no special care and having no particular poor use cases compared to the drives we're all used to.HAMR Milestone: Seagate Achieves 16TB Capacity on Internal HAMR Test UnitsWestern Digital debuts 18TB and 20TB near-MAMR disk drivesPreviously on TechSNAP 341: HAMR Time — We've got bad news for Wifi-lovers as the KRACK hack takes the world by storm; We have the details &amp; some places to watch to make sure you stay patched. Plus, some distressing revelations about third party access to your personal information through some US mobile carriers. Then we cover the ongoing debate over HAMR, MAMR, and the future of hard drive technology &amp; take a mini deep dive into the world of elliptic curve cryptography.

We explore the potential of heat-assisted magnetic recording and get excited about a possibly persistent L2ARC. Plus Jim's journeys with Clear Linux, and why Ubuntu 18.04.4 is a maintenance release worth talking about.Links:<ul><li><a href="https://arstechnica.com/gadgets/2020/02/ubuntu-18-04-4-lts-released-wednesday-heres-whats-new/" rel="nofollow" target="_blank">Ubuntu 18.04.4 LTS: here's what's new</a> — It's not as shiny and exciting as entirely new versions, of course, but it does pack in some worthwhile security and bugfix upgrades, as well as support for more and newer hardware.</li><li><a href="https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes/ChangeSummary/18.04.4" rel="nofollow" target="_blank">18.04.4 - Ubuntu Wiki</a></li><li><a href="https://mobaxterm.mobatek.net/" rel="nofollow" target="_blank">MobaXterm</a> — Enhanced terminal for Windows with X11 server, tabbed SSH client, network tools and much more.</li><li><a href="https://arstechnica.com/gadgets/2020/02/linux-distro-review-intels-own-clear-linux-os/?comments=1" rel="nofollow" target="_blank">Linux distro review: Intel’s own Clear Linux OS</a> — There's not much question that Clear Linux is your best bet if you want to turn in the best possible benchmark numbers. The question not addressed here is, what's it like to run Clear Linux as a daily driver? We were curious, so we took it for a spin.</li><li><a href="https://clearlinux.org/" rel="nofollow" target="_blank">Clear Linux* Project</a> — Clear Linux OS is an open source, rolling release Linux distribution optimized for performance and security, from the Cloud to the Edge, designed for customization, and manageability.</li><li><a href="https://docs.01.org/clearlinux/latest/guides/clear/swupd.html" rel="nofollow" target="_blank">swupd — Documentation for Clear Linux* project</a></li><li><a href="https://github.com/clearlinux/clr-boot-manager" rel="nofollow" target="_blank">clr-boot-manager: Kernel &amp; Boot Loader Management</a></li><li><a href="https://github.com/zfsonlinux/zfs/issues/9745" rel="nofollow" target="_blank">Cannot compile zfs for 5.5-rc2 · Issue #9745 · zfsonlinux/zfs</a></li><li><a href="https://arstechnica.com/gadgets/2020/02/zfs-on-linux-should-get-a-persistent-ssd-read-cache-feature-soon/" rel="nofollow" target="_blank">Persistent L2ARC might be coming to ZFS on Linux</a> — The primary ARC is kept in system RAM, but an L2ARC device can be created from one or more fast disks. In a ZFS pool with one or more L2ARC devices, when blocks are evicted from the primary ARC in RAM, they are moved down to L2ARC rather than being thrown away entirely. In the past, this feature has been of limited value, both because indexing a large L2ARC occupies system RAM which could have been better used for primary ARC and because L2ARC was not persistent across reboots.</li><li><a href="https://github.com/zfsonlinux/zfs/pull/9582" rel="nofollow" target="_blank">Persistent L2ARC by gamanakis · Pull Request #9582 · zfsonlinux/zfs</a> — This feature implements a light-weight persistent L2ARC metadata structure that allows L2ARC contents to be recovered after a reboot. This significantly eases the impact a reboot has on read performance on systems with large caches.</li><li><a href="https://linuxunplugged.com/303" rel="nofollow" target="_blank">LINUX Unplugged 303: Stateless and Dateless</a> — We visit Intel to figure out what Clear Linux is all about and explain a few tricks that make it unique.</li><li><a href="https://linuxunplugged.com/articles/clear-linux-os-2019" rel="nofollow" target="_blank">LINUX Unplugged Blog: Clear Linux OS 2019</a></li><li><a href="https://arstechnica.com/gadgets/2020/02/hamr-dont-hurt-em-laser-assisted-hard-drives-are-coming-in-2020/" rel="nofollow" target="_blank">HAMR don’t hurt ’em: laser-assisted hard drives are coming in 2020</a> — Although the 2012 "just around the corner" HAMR drives seem to have been mostly vapor, the technology is a reality now. Seagate has been trialing 16TB HAMR drives with select customers for more than a year and claims that the trials have proved that its HAMR drives are "plug and play replacements" for traditional CMR drives, requiring no special care and having no particular poor use cases compared to the drives we're all used to.</li><li><a href="https://blog.seagate.com/craftsman-ship/hamr-milestone-seagate-achieves-16tb-capacity-on-internal-hamr-test-units/" rel="nofollow" target="_blank">HAMR Milestone: Seagate Achieves 16TB Capacity on Internal HAMR Test Units</a></li><li><a href="https://blocksandfiles.com/2019/09/03/western-digital-18tb-and-20tb-mamr-disk-drives/" rel="nofollow" target="_blank">Western Digital debuts 18TB and 20TB near-MAMR disk drives</a></li><li><a href="https://techsnap.systems/341" rel="nofollow" target="_blank">Previously on TechSNAP 341: HAMR Time</a> — We've got bad news for Wifi-lovers as the KRACK hack takes the world by storm; We have the details &amp; some places to watch to make sure you stay patched. Plus, some distressing revelations about third party access to your personal information through some US mobile carriers. Then we cover the ongoing debate over HAMR, MAMR, and the future of hard drive technology &amp; take a mini deep dive into the world of elliptic curve cryptography. </li></ul>

423: Hopeful for HAMR

We take a look at a few exciting features coming to Linux kernel 5.6, including the first steps to multipath TCP.  Plus the latest Intel speculative execution vulnerability, and Microsoft's troubled history with certificate renewal.Links:Oregon company makes top bid for Microsoft check - CNET Microsoft’s failures to renew: Teams, Hotmail, and Hotmail.co.uk | Ars Technica Microsoft Teams goes down after Microsoft forgot to renew a certificate - The Verge Browser review: Microsoft’s new “Edgium” Chromium-based Edge | Ars Technica Linus Torvalds pulled WireGuard VPN into the 5.6 kernel source tree | Ars Technica Ubuntu 20.04 LTS Adds WireGuard Support - Phoronix Multipath TCP Support Is Working Its Upstream - First Bits Landing With Linux 5.6 - Phoronix MultiPath TCP - Linux Kernel implementation Upstreaming multipath TCP LPC2019 - Multipath TCP Upstreaming - YouTube LPC2019 - Multipath TCP Upstreaming - Slides LPC2019 - Multipath TCP Upstreaming - Paper Using MultiPath TCP to enhance home networks Linux 5.6 Crypto Getting AVX/AVX2/AVX-512 Optimized Poly1305Poly1305CacheOut CacheOut PaperIntel Responds to ZombieLoad and CacheOut Attacks | Tom's Hardware New CacheOut Attack Targets Intel CPUs, Leaks Data From VMs And Secure Enclave

We take a look at a few exciting features coming to Linux kernel 5.6, including the first steps to multipath TCP. Plus the latest Intel speculative execution vulnerability, and Microsoft's troubled history with certificate renewal.Links:<ul><li><a href="https://www.cnet.com/news/oregon-company-makes-top-bid-for-microsoft-check/" rel="nofollow" target="_blank">Oregon company makes top bid for Microsoft check - CNET</a> </li><li><a href="https://arstechnica.com/gadgets/2020/02/yesterdays-multi-hour-teams-outage-was-due-to-an-expired-ssl-certificate/" rel="nofollow" target="_blank">Microsoft’s failures to renew: Teams, Hotmail, and Hotmail.co.uk | Ars Technica</a> </li><li><a href="https://www.theverge.com/2020/2/3/21120248/microsoft-teams-down-outage-certificate-issue-status" rel="nofollow" target="_blank">Microsoft Teams goes down after Microsoft forgot to renew a certificate - The Verge</a> </li><li><a href="https://arstechnica.com/gadgets/2020/01/browser-review-microsofts-new-edgium-chromium-based-edge/" rel="nofollow" target="_blank">Browser review: Microsoft’s new “Edgium” Chromium-based Edge | Ars Technica</a> </li><li><a href="https://arstechnica.com/gadgets/2020/01/linus-torvalds-pulled-wireguard-vpn-into-the-5-6-kernel-source-tree/" rel="nofollow" target="_blank">Linus Torvalds pulled WireGuard VPN into the 5.6 kernel source tree | Ars Technica</a> </li><li><a href="https://www.phoronix.com/scan.php?page=news_item&amp;px=Ubuntu-20.04-Adds-WireGuard" rel="nofollow" target="_blank">Ubuntu 20.04 LTS Adds WireGuard Support - Phoronix</a> </li><li><a href="https://www.phoronix.com/scan.php?page=news_item&amp;px=Linux-5.6-Starts-Multipath-TCP" rel="nofollow" target="_blank">Multipath TCP Support Is Working Its Upstream - First Bits Landing With Linux 5.6 - Phoronix</a> </li><li><a href="https://www.multipath-tcp.org/" rel="nofollow" target="_blank">MultiPath TCP - Linux Kernel implementation</a> </li><li><a href="https://lwn.net/Articles/800501/" rel="nofollow" target="_blank">Upstreaming multipath TCP</a> </li><li><a href="https://www.youtube.com/watch?v=Y64n_R14GtI" rel="nofollow" target="_blank">LPC2019 - Multipath TCP Upstreaming - YouTube</a> </li><li><a href="https://linuxplumbersconf.org/event/4/contributions/435/attachments/247/438/LPC2019-Upstreaming-MPTCP-slides.pdf" rel="nofollow" target="_blank">LPC2019 - Multipath TCP Upstreaming - Slides</a> </li><li><a href="https://linuxplumbersconf.org/event/4/contributions/435/attachments/246/428/LPC2019-Upstreaming-MPTCP-paper.pdf" rel="nofollow" target="_blank">LPC2019 - Multipath TCP Upstreaming - Paper</a> </li><li><a href="https://www.sajalkayan.com/post/fun-with-mptcp.html" rel="nofollow" target="_blank">Using MultiPath TCP to enhance home networks</a> </li><li><a href="https://www.phoronix.com/scan.php?page=news_item&amp;px=Linux-5.6-Crypto-AVX-Poly1305" rel="nofollow" target="_blank">Linux 5.6 Crypto Getting AVX/AVX2/AVX-512 Optimized Poly1305</a></li><li><a href="https://en.wikipedia.org/wiki/Poly1305" rel="nofollow" target="_blank">Poly1305</a></li><li><a href="https://cacheoutattack.com/" rel="nofollow" target="_blank">CacheOut</a> </li><li><a href="https://cacheoutattack.com/CacheOut.pdf" rel="nofollow" target="_blank">CacheOut Paper</a></li><li><a href="https://www.tomshardware.com/news/intel-responds-to-zombieload-and-cacheout-attacks" rel="nofollow" target="_blank">Intel Responds to ZombieLoad and CacheOut Attacks | Tom's Hardware</a> </li><li><a href="https://hothardware.com/news/cacheout-attack-intel-cpus-leaks-data-vms-secure-enclave" rel="nofollow" target="_blank">New CacheOut Attack Targets Intel CPUs, Leaks Data From VMs And Secure Enclave</a> </li></ul>

422: Multipath Musings

We explore the latest round of Windows vulnerabilities and Jim shares his journey adding OPNsense to his firewall family.  Plus a look back at Apollo-era audio that's still relevant today with the surprising story of the Quindar tones.Links:Critical Vulnerabilities in Microsoft Windows Operating Systems Win10 Crypto Vulnerability: Cheating in Elliptic Curve Billiards 2 NSA discovers a serious flaw in Windows 10 Exploiting CVE-2020-0601 CVE-2020-0601 POC NSA Cybersecurity Advisory on CryptoAPI Flaw Why can’t I get to the internet on my new OPNsense install?! - Jim's Blog OPNsense: a true open source security platform and more There's An Actual Name And Reason For Those Beeps You Hear In Recordings Of Astronauts In Space Quindar Tones Cap'n Crunch Whistle and the Secrets of the Little Blue Box

We explore the latest round of Windows vulnerabilities and Jim shares his journey adding OPNsense to his firewall family. Plus a look back at Apollo-era audio that's still relevant today with the surprising story of the Quindar tones.Links:<ul><li><a href="https://www.us-cert.gov/ncas/alerts/aa20-014a" rel="nofollow" target="_blank">Critical Vulnerabilities in Microsoft Windows Operating Systems</a> </li><li><a href="https://medium.com/zengo/win10-crypto-vulnerability-cheating-in-elliptic-curve-billiards-2-69b45f2dcab6" rel="nofollow" target="_blank">Win10 Crypto Vulnerability: Cheating in Elliptic Curve Billiards 2</a> </li><li><a href="https://betanews.com/2020/01/14/nsa-discovers-a-serious-flaw-in-windows-10/" rel="nofollow" target="_blank">NSA discovers a serious flaw in Windows 10</a> </li><li><a href="https://blog.sean-wright.com/exploiting-cve-2020-0601/" rel="nofollow" target="_blank">Exploiting CVE-2020-0601</a> </li><li><a href="https://github.com/ollypwn/cve-2020-0601" rel="nofollow" target="_blank">CVE-2020-0601 POC</a> </li><li><a href="https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF" rel="nofollow" target="_blank">NSA Cybersecurity Advisory on CryptoAPI Flaw</a> </li><li><a href="https://jrs-s.net/2020/01/19/why-cant-i-get-to-the-internet-on-my-new-opnsense-install/" rel="nofollow" target="_blank">Why can’t I get to the internet on my new OPNsense install?! - Jim's Blog</a> </li><li><a href="https://opnsense.org" rel="nofollow" target="_blank">OPNsense: a true open source security platform and more</a> </li><li><a href="https://jalopnik.com/theres-an-actual-name-and-reason-for-those-beeps-you-he-1841024797" rel="nofollow" target="_blank">There's An Actual Name And Reason For Those Beeps You Hear In Recordings Of Astronauts In Space</a> </li><li><a href="https://www.hq.nasa.gov/alsj/quindar.html" rel="nofollow" target="_blank">Quindar Tones</a> </li><li><a href="https://telephone-museum.org/telephone-collections/capn-crunch-bosun-whistle/" rel="nofollow" target="_blank">Cap'n Crunch Whistle and the Secrets of the Little Blue Box</a> </li></ul>

421: Firewall Fun

Systems, Network, and Administration Podcast. Every two weeks TechSNAP covers the stories that impact those of us in the tech industry, and all of us that follow it. Every episode we dedicate a portion of the show to answer audience questions, discuss best practices, and solving your problems.

Great Podcast

Hosts are awesome and they know their stuff!

Fantastic tech podcast

TechSNAP

More and more data breaches are leading to blackmail but the stats don’t tell the whole story. We’ll explain. Plus the latest in the Sony hack, and the wider reaction. Plus a great batch of emails &amp; much, much more!

More and more data breaches are leading to blackmail but the stats don’t tell the whole story. We’ll explain. Plus the latest in the Sony hack, and the wider reaction. Plus a great batch of emails &amp; much, much more!

Episode 193: Don’t Fire IT | TechSNAP 193

Lenovo &amp; Google are victims of DNS hijacking, we’ll share the details, Everyone wants you to secure your data, just not from them &amp; how Turbotax profits from Cyber tax fraud! Plus a great batch of your questions, a fantastic round up &amp; much, much more!

Lenovo &amp; Google are victims of DNS hijacking, we’ll share the details, Everyone wants you to secure your data, just not from them &amp; how Turbotax profits from Cyber tax fraud! Plus a great batch of your questions, a fantastic round up &amp; much, much more!

Episode 203: TurboHax | TechSNAP 203

As the rollout of 5G finally arrives, we take some time to explain the fundamentals of the next generation of wireless technology. Plus the surprising performance of eero's mesh Wi-Fi, some great news for WireGuard, and an update on the Librem 5.Links:T-Mobile launches 600MHz 5G across the US, but no one can use it yetStudy confirms AT&amp;T’s fake 5G E network is no faster than Verizon, T-Mobile or Sprint 4G5G on the horizon: Here’s what it is and what’s comingCan 5G replace everybody’s home broadband?The Snapdragon 865 will make phones worse in 2020, thanks to mandatory 5GLibrem 5 backers have begun receiving their Linux phonesAmazon’s inexpensive Eero mesh Wi-Fi kit is shockingly goodWireGuard VPN is a step closer to mainstream adoption

As the rollout of 5G finally arrives, we take some time to explain the fundamentals of the next generation of wireless technology. Plus the surprising performance of eero's mesh Wi-Fi, some great news for WireGuard, and an update on the Librem 5.Links:<ul><li><a href="https://www.theverge.com/2019/12/2/20991566/tmobile-nationwide-5g-600mhz-launch-samsung-oneplus" rel="nofollow" target="_blank">T-Mobile launches 600MHz 5G across the US, but no one can use it yet</a></li><li><a href="https://www.theverge.com/2019/3/22/18277484/att-fake-5g-e-network-lte-study" rel="nofollow" target="_blank">Study confirms AT&amp;T’s fake 5G E network is no faster than Verizon, T-Mobile or Sprint 4G</a></li><li><a href="https://arstechnica.com/information-technology/2019/12/5g-wont-change-everything-or-at-least-probably-not-your-things/" rel="nofollow" target="_blank">5G on the horizon: Here’s what it is and what’s coming</a></li><li><a href="https://arstechnica.com/information-technology/2019/12/5g-as-a-home-broadband-replacement-isnt-a-slam-dunk-yet-but-it-might-be-soon/" rel="nofollow" target="_blank">Can 5G replace everybody’s home broadband?</a></li><li><a href="https://arstechnica.com/gadgets/2019/12/qualcomms-new-snapdragon-865-is-a-step-backwards-for-smartphone-design/" rel="nofollow" target="_blank">The Snapdragon 865 will make phones worse in 2020, thanks to mandatory 5G</a></li><li><a href="https://arstechnica.com/gadgets/2019/12/librem-5-backers-receiving-their-linux-phones/" rel="nofollow" target="_blank">Librem 5 backers have begun receiving their Linux phones</a></li><li><a href="https://arstechnica.com/gadgets/2019/12/amazons-inexpensive-eero-mesh-wi-fi-kit-is-shockingly-good/" rel="nofollow" target="_blank">Amazon’s inexpensive Eero mesh Wi-Fi kit is shockingly good</a></li><li><a href="https://arstechnica.com/gadgets/2019/12/wireguard-vpn-is-a-step-closer-to-mainstream-adoption/" rel="nofollow" target="_blank">WireGuard VPN is a step closer to mainstream adoption</a></li></ul>

418: 5G Fundamentals

From classifying cats to colorizing old photos we share our top tips and tools for starting your machine learning journey. Plus, learn why Nebula is our favorite new VPN technology, and how it can help simplify and secure your network.Links:Introducing Nebula, the open source global overlay network from Slack nebula: A scalable overlay networking tool with a focus on performance, simplicity and security Nebula VPN routes between hosts privately, flexibly, and efficiently How to set up your own Nebula mesh VPN, step by step LINUX Unplugged 329: Flat Network Truthers Cloudy with a chance of neurons: The tools that make neural networks work Welcome To Colaboratory ImageColorizer Notebook DeOldify: A Deep Learning based project for colorizing and restoring old images (and video!)

From classifying cats to colorizing old photos we share our top tips and tools for starting your machine learning journey. Plus, learn why Nebula is our favorite new VPN technology, and how it can help simplify and secure your network.Links:<ul><li><a href="https://slack.engineering/introducing-nebula-the-open-source-global-overlay-network-from-slack-884110a5579" rel="nofollow" target="_blank">Introducing Nebula, the open source global overlay network from Slack</a> </li><li><a href="https://github.com/slackhq/nebula" rel="nofollow" target="_blank">nebula: A scalable overlay networking tool with a focus on performance, simplicity and security</a> </li><li><a href="https://arstechnica.com/gadgets/2019/12/nebula-vpn-routes-between-hosts-privately-flexibly-and-efficiently/" rel="nofollow" target="_blank">Nebula VPN routes between hosts privately, flexibly, and efficiently</a> </li><li><a href="https://arstechnica.com/gadgets/2019/12/how-to-set-up-your-own-nebula-mesh-vpn-step-by-step/" rel="nofollow" target="_blank">How to set up your own Nebula mesh VPN, step by step</a> </li><li><a href="https://linuxunplugged.com/329" rel="nofollow" target="_blank">LINUX Unplugged 329: Flat Network Truthers</a> </li><li><a href="https://arstechnica.com/gadgets/2019/12/so-you-want-to-build-a-neural-network-the-cloud-can-help-with-that/" rel="nofollow" target="_blank">Cloudy with a chance of neurons: The tools that make neural networks work</a> </li><li><a href="https://colab.research.google.com/notebooks/welcome.ipynb" rel="nofollow" target="_blank">Welcome To Colaboratory</a> </li><li><a href="https://colab.research.google.com/github/jantic/DeOldify/blob/master/ImageColorizerColab.ipynb" rel="nofollow" target="_blank">ImageColorizer Notebook</a> </li><li><a href="https://github.com/jantic/DeOldify" rel="nofollow" target="_blank">DeOldify: A Deep Learning based project for colorizing and restoring old images (and video!)</a></li></ul>

419: Nebulous Networking

We go inside the epic takedown of SpamHaus, then we break down why CloudFlare’s Flexible SSL is the opposite of security. Followed by a great batch of questions, our answers &amp; much much more!

We go inside the epic takedown of SpamHaus, then we break down why CloudFlare’s Flexible SSL is the opposite of security. Followed by a great batch of questions, our answers &amp; much much more!

Episode 195: Cloudy With a Chance of SSL | TechSNAP 195

Some new tools will give you better insights into your system under extreme load, and we flash back to the days of AOL and discuss the new way social hackers are spreading malware. Plus the death of a TLD, the return of SamSam, and more!Sponsored By:Ting: Save $25 off a device, or get $25 in service credits! Promo Code: Visit techsnap.ting.comiXSystems: Get a system purpose built for you. Promo Code: Tell them we sent you!Digital Ocean: Apply our promo snapocean after you create your account, and get a $10 credit. Promo Code: snapoceanLinks:psi: pressure stall information for CPU, memory, and IO v2 — PSI aggregates and reports the overall wallclock time in which thetasks in a system (or cgroup) wait for contended hardware resources.Chinese “hackers” are sending malware via snail mail — The trick is simple: a package arrives with a Chinese postmark containing a rambling message and a small CD. The CD, in turn, contains a set of Word files that include script-based malware. These scripts run when the victims access them on their computers, presumably resulting in compromised systems.The death of a TLDSamSam: The (almost) $6 million ransomware — Through original analysis, interviews and research, and by collaborating closely with industry partners and a specialist cryptocurrency monitoring organisation, Sophos has uncovered new details about how the secretive and sophisticated SamSam ransomware is used, who’s been targeted, how it works and how it’s evolving.Open sourcing oomd, a new approach to handling OOMs — As our infrastructure has scaled, we’ve found that an increasing fraction of our machines and networks span multiple generations. One side effect of this multigenerational production environment is that a new software release or configuration change might result in a system running healthily on one machine but experiencing an out-of-memory (OOM) issue on another.Tyler's recent job story

Some new tools will give you better insights into your system under extreme load, and we flash back to the days of AOL and discuss the new way social hackers are spreading malware. Plus the death of a TLD, the return of SamSam, and more!Sponsored By:<ul><li><a href="http://techsnap.ting.com" rel="nofollow" target="_blank">Ting</a>: <a href="http://techsnap.ting.com" rel="nofollow" target="_blank">Save $25 off a device, or get $25 in service credits!</a> Promo Code: Visit <a href="http://techsnap.ting.com" rel="nofollow" target="_blank">techsnap.ting.com</a></li><li><a href="http://ixsystems.com/techsnap" rel="nofollow" target="_blank">iXSystems</a>: <a href="http://ixsystems.com/techsnap" rel="nofollow" target="_blank">Get a system purpose built for you.</a> Promo Code: Tell them we sent you!</li><li><a href="https://do.co/snap" rel="nofollow" target="_blank">Digital Ocean</a>: <a href="https://do.co/snap" rel="nofollow" target="_blank">Apply our promo snapocean after you create your account, and get a $10 credit.</a> Promo Code: snapocean</li></ul>Links:<ul><li><a href="https://lwn.net/Articles/759658/" rel="nofollow" target="_blank">psi: pressure stall information for CPU, memory, and IO v2</a> — PSI aggregates and reports the overall wallclock time in which the tasks in a system (or cgroup) wait for contended hardware resources.</li><li><a href="https://techcrunch.com/2018/07/30/chinese-hackers-are-sending-malware-via-snail-mail/" rel="nofollow" target="_blank">Chinese “hackers” are sending malware via snail mail</a> — The trick is simple: a package arrives with a Chinese postmark containing a rambling message and a small CD. The CD, in turn, contains a set of Word files that include script-based malware. These scripts run when the victims access them on their computers, presumably resulting in compromised systems.</li><li><a href="https://blog.benjojo.co.uk/post/the-death-of-a-tld" rel="nofollow" target="_blank">The death of a TLD</a></li><li><a href="https://nakedsecurity.sophos.com/2018/07/31/samsam-the-almost-6-million-ransomware/" rel="nofollow" target="_blank">SamSam: The (almost) $6 million ransomware</a> — Through original analysis, interviews and research, and by collaborating closely with industry partners and a specialist cryptocurrency monitoring organisation, Sophos has uncovered new details about how the secretive and sophisticated SamSam ransomware is used, who’s been targeted, how it works and how it’s evolving.</li><li><a href="https://code.fb.com/production-engineering/open-sourcing-oomd-a-new-approach-to-handling-ooms/" rel="nofollow" target="_blank">Open sourcing oomd, a new approach to handling OOMs</a> — As our infrastructure has scaled, we’ve found that an increasing fraction of our machines and networks span multiple generations. One side effect of this multigenerational production environment is that a new software release or configuration change might result in a system running healthily on one machine but experiencing an out-of-memory (OOM) issue on another.</li><li><a href="https://pastebin.com/FnfbWygS" rel="nofollow" target="_blank">Tyler's recent job story</a></li></ul>

Episode 377: Linux Under Pressure

To make DNS more secure, we must move it to the cloud! At least that’s what Mozilla and Google suggest. We breakdown DNS-over-HTTPS, why it requires a “cloud” component, and the advantages it has over traditional DNS. Plus new active attacks against Apache Struts, and a Windows 10 zero-day exposed on Twitter.Sponsored By:iXSystems: Get a system purpose built for you. Promo Code: Tell them we sent you!Ting: Save $25 off a device, or get $25 in service credits! Promo Code: Visit techsnap.ting.comDigital Ocean: Apply our promo snapocean after you create your account, and get a $10 credit. Promo Code: snapoceanLinks:Firefox Nightly Secure DNS Experimental Results DNS-over-HTTPSDNS over HTTPSA cartoon intro to DNS over HTTPSDiscussion of draft-ietf-doh-dns-over-https in the IETF's DOH Working GroupHigh performance DNS over HTTPS client &amp; serverCloudflare Resolver for FirefoxActive Attacks Detected Using Apache Struts Vulnerability CVE-2018-11776Windows 10 Zero-Day Vulnerability Exposed On TwitterNetdata: Get control of your servers. — netdata is a system for distributed real-time performance and health monitoring. It provides unparalleled insights, in real-time, of everything happening on the system it runs (including applications such as web and database servers), using modern interactive web dashboards.State of Software Distribution - 2018 — Few enterprises possess the ability to deploy the latest software and security patches at scale, putting their cybersecurity and business performance at risk. In the 2018 State of Software Distribution Report, we explore why IT decision makers say they struggle to keep up with the software distribution needs of the modern enterprise.

To make DNS more secure, we must move it to the cloud! At least that’s what Mozilla and Google suggest. We breakdown DNS-over-HTTPS, why it requires a “cloud” component, and the advantages it has over traditional DNS. Plus new active attacks against Apache Struts, and a Windows 10 zero-day exposed on Twitter.Sponsored By:<ul><li><a href="http://ixsystems.com/techsnap" rel="nofollow" target="_blank">iXSystems</a>: <a href="http://ixsystems.com/techsnap" rel="nofollow" target="_blank">Get a system purpose built for you.</a> Promo Code: Tell them we sent you!</li><li><a href="http://techsnap.ting.com" rel="nofollow" target="_blank">Ting</a>: <a href="http://techsnap.ting.com" rel="nofollow" target="_blank">Save $25 off a device, or get $25 in service credits!</a> Promo Code: Visit <a href="http://techsnap.ting.com" rel="nofollow" target="_blank">techsnap.ting.com</a></li><li><a href="https://do.co/snap" rel="nofollow" target="_blank">Digital Ocean</a>: <a href="https://do.co/snap" rel="nofollow" target="_blank">Apply our promo snapocean after you create your account, and get a $10 credit.</a> Promo Code: snapocean</li></ul>Links:<ul><li><a href="https://blog.nightly.mozilla.org/2018/08/28/firefox-nightly-secure-dns-experimental-results/" rel="nofollow" target="_blank">Firefox Nightly Secure DNS Experimental Results </a></li><li><a href="https://developers.google.com/speed/public-dns/docs/dns-over-https" rel="nofollow" target="_blank">DNS-over-HTTPS</a></li><li><a href="https://en.wikipedia.org/wiki/DNS_over_HTTPS" rel="nofollow" target="_blank">DNS over HTTPS</a></li><li><a href="https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/" rel="nofollow" target="_blank">A cartoon intro to DNS over HTTPS</a></li><li><a href="https://github.com/dohwg/draft-ietf-doh-dns-over-https" rel="nofollow" target="_blank">Discussion of draft-ietf-doh-dns-over-https in the IETF's DOH Working Group</a></li><li><a href="https://github.com/m13253/dns-over-https" rel="nofollow" target="_blank">High performance DNS over HTTPS client &amp; server</a></li><li><a href="https://developers.cloudflare.com/1.1.1.1/commitment-to-privacy/privacy-policy/firefox/" rel="nofollow" target="_blank">Cloudflare Resolver for Firefox</a></li><li><a href="https://www.bleepingcomputer.com/news/security/active-attacks-detected-using-apache-struts-vulnerability-cve-2018-11776/" rel="nofollow" target="_blank">Active Attacks Detected Using Apache Struts Vulnerability CVE-2018-11776</a></li><li><a href="https://www.tomshardware.com/news/windows-10-zero-day-exposed-twitter,37709.html" rel="nofollow" target="_blank">Windows 10 Zero-Day Vulnerability Exposed On Twitter</a></li><li><a href="https://github.com/firehol/netdata" rel="nofollow" target="_blank">Netdata: Get control of your servers.</a> — netdata is a system for distributed real-time performance and health monitoring. It provides unparalleled insights, in real-time, of everything happening on the system it runs (including applications such as web and database servers), using modern interactive web dashboards. </li><li><a href="https://go.kollective.com/state-of-software-distribution.html" rel="nofollow" target="_blank">State of Software Distribution - 2018</a> — Few enterprises possess the ability to deploy the latest software and security patches at scale, putting their cybersecurity and business performance at risk. In the 2018 State of Software Distribution Report, we explore why IT decision makers say they struggle to keep up with the software distribution needs of the modern enterprise.</li></ul>

Episode 381: Here Comes Cloud DNS

We peer into the future with a quick look at quantum supremacy, debate the latest DNS over HTTPS drama, and jump through the hoops of HTTP/3. Plus when to use WARP, the secrets of Startpage, and the latest Ryzen release. Links:Why big ISPs aren’t happy about Google’s plans for encrypted DNS Chromium Blog: Experimenting with same-provider DNS-over-HTTPS upgradeHow to enable DNS-over-HTTPS (DoH) in Google ChromeWhat’s next in making Encrypted DNS-over-HTTPS the Default - Future ReleasesWARP is here The Technical Challenges of Building Cloudflare WARPmmproxy - Creative Linux routing to preserve client IP addresses in L7 proxiesHTTP/3: the past, the present, and the future Cloudflare, Google Chrome, and Firefox add HTTP/3 support | ZDNetQUIC ImplementationsStartpage.com - The world's most private search engineGoogle extends support lifespan for seven Lenovo Chromebooks to 2025 Google’s Quantum Supremacy Announcement Shouldn't Be a Surprise Scott’s Supreme Quantum Supremacy FAQAMD Ryzen Pro 3000 series desktop CPUs will offer full RAM encryption | Ars Technica

We peer into the future with a quick look at quantum supremacy, debate the latest DNS over HTTPS drama, and jump through the hoops of HTTP/3. Plus when to use WARP, the secrets of Startpage, and the latest Ryzen release. Links:<ul><li><a href="https://arstechnica.com/tech-policy/2019/09/isps-worry-a-new-chrome-feature-will-stop-them-from-spying-on-you/" rel="nofollow" target="_blank">Why big ISPs aren’t happy about Google’s plans for encrypted DNS</a> </li><li><a href="https://blog.chromium.org/2019/09/experimenting-with-same-provider-dns.html" rel="nofollow" target="_blank">Chromium Blog: Experimenting with same-provider DNS-over-HTTPS upgrade</a></li><li><a href="https://www.zdnet.com/article/how-to-enable-dns-over-https-doh-in-google-chrome/" rel="nofollow" target="_blank">How to enable DNS-over-HTTPS (DoH) in Google Chrome</a></li><li><a href="https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-dns-over-https-the-default/" rel="nofollow" target="_blank">What’s next in making Encrypted DNS-over-HTTPS the Default - Future Releases</a></li><li><a href="https://blog.cloudflare.com/announcing-warp-plus/" rel="nofollow" target="_blank">WARP is here</a> </li><li><a href="https://blog.cloudflare.com/warp-technical-challenges/" rel="nofollow" target="_blank">The Technical Challenges of Building Cloudflare WARP</a></li><li><a href="https://blog.cloudflare.com/mmproxy-creative-way-of-preserving-client-ips-in-spectrum/" rel="nofollow" target="_blank">mmproxy - Creative Linux routing to preserve client IP addresses in L7 proxies</a></li><li><a href="https://blog.cloudflare.com/http3-the-past-present-and-future/" rel="nofollow" target="_blank">HTTP/3: the past, the present, and the future</a> </li><li><a href="https://www.zdnet.com/article/cloudflare-google-chrome-and-firefox-add-http3-support/" rel="nofollow" target="_blank">Cloudflare, Google Chrome, and Firefox add HTTP/3 support | ZDNet</a></li><li><a href="https://github.com/quicwg/base-drafts/wiki/Implementations" rel="nofollow" target="_blank">QUIC Implementations</a></li><li><a href="https://www.startpage.com/en/" rel="nofollow" target="_blank">Startpage.com - The world's most private search engine</a></li><li><a href="https://www.androidpolice.com/2019/09/25/lenovo-chromebook-update-support-expire/" rel="nofollow" target="_blank">Google extends support lifespan for seven Lenovo Chromebooks to 2025</a> </li><li><a href="https://gizmodo.com/google-s-quantum-supremacy-announcement-shouldnt-be-a-s-1838357278" rel="nofollow" target="_blank">Google’s Quantum Supremacy Announcement Shouldn't Be a Surprise</a> </li><li><a href="https://www.scottaaronson.com/blog/?p=4317" rel="nofollow" target="_blank">Scott’s Supreme Quantum Supremacy FAQ</a></li><li><a href="https://arstechnica.com/gadgets/2019/10/amd-ryzen-pro-3000-series-desktop-cpus-will-offer-full-ram-encryption/" rel="nofollow" target="_blank">AMD Ryzen Pro 3000 series desktop CPUs will offer full RAM encryption | Ars Technica</a> </li></ul>

413: The Coffee Shop Problem

Netflix has learned the hard way how to utilize all the logs, we cover their lessons in their journey to build a fully observable system. Plus the Lazy State FPU bug that cropped up this week, backdoored Docker images, your questions, and more!Sponsored By:Ting: Save $25 off a device, or get $25 in service credits! Promo Code: Visit techsnap.ting.comiXSystems: Get a system purpose built for you. Promo Code: Tell them we sent you!Digital Ocean: Apply our promo snapocean after you create your account, and get a $10 credit. Promo Code: snapoceanLinks:INTEL-SA-00145Colin Percival on TwitterNetBSD Documentation: How lazy FPU context switch worksLazy FPU Save/Restore (CVE-2018-3665)17 Backdoored Docker Images Removed From Docker HubLessons from Building Observability Tools at NetflixJobs at Linux Academy

Netflix has learned the hard way how to utilize all the logs, we cover their lessons in their journey to build a fully observable system. Plus the Lazy State FPU bug that cropped up this week, backdoored Docker images, your questions, and more!Sponsored By:<ul><li><a href="http://techsnap.ting.com" rel="nofollow" target="_blank">Ting</a>: <a href="http://techsnap.ting.com" rel="nofollow" target="_blank">Save $25 off a device, or get $25 in service credits!</a> Promo Code: Visit <a href="http://techsnap.ting.com" rel="nofollow" target="_blank">techsnap.ting.com</a></li><li><a href="http://ixsystems.com/techsnap" rel="nofollow" target="_blank">iXSystems</a>: <a href="http://ixsystems.com/techsnap" rel="nofollow" target="_blank">Get a system purpose built for you.</a> Promo Code: Tell them we sent you!</li><li><a href="https://do.co/snap" rel="nofollow" target="_blank">Digital Ocean</a>: <a href="https://do.co/snap" rel="nofollow" target="_blank">Apply our promo snapocean after you create your account, and get a $10 credit.</a> Promo Code: snapocean</li></ul>Links:<ul><li><a href="https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html" rel="nofollow" target="_blank">INTEL-SA-00145</a></li><li><a href="https://twitter.com/cperciva/status/1007010583244230656" rel="nofollow" target="_blank">Colin Percival on Twitter</a></li><li><a href="http://www.netbsd.org/docs/kernel/lazyfpu.html" rel="nofollow" target="_blank">NetBSD Documentation: How lazy FPU context switch works</a></li><li><a href="https://access.redhat.com/solutions/3485131" rel="nofollow" target="_blank">Lazy FPU Save/Restore (CVE-2018-3665)</a></li><li><a href="https://www.bleepingcomputer.com/news/security/17-backdoored-docker-images-removed-from-docker-hub/" rel="nofollow" target="_blank">17 Backdoored Docker Images Removed From Docker Hub</a></li><li><a href="https://medium.com/netflix-techblog/lessons-from-building-observability-tools-at-netflix-7cfafed6ab17" rel="nofollow" target="_blank">Lessons from Building Observability Tools at Netflix</a></li><li><a href="https://www.linkedin.com/feed/update/urn:li:activity:6413087061917593600" rel="nofollow" target="_blank">Jobs at Linux Academy</a></li></ul>

Episode 372: Logs and Metrics and Traces, Oh My!

Equifax got hacked, some top tips for staying safe &amp; a debate over just who's to blame for vulnerable open source software. Then Google's breaking up with Symantec &amp; we take a little time for Sysadmin 101, this time, ticketing systems.

Equifax got hacked, some top tips for staying safe &amp; a debate over just who's to blame for vulnerable open source software. Then Google's breaking up with Symantec &amp; we take a little time for Sysadmin 101, this time, ticketing systems.

Episode 336: Equihax | TechSNAP 336

Dan does some sleuthing &amp; finds that the story of a major data leak isn't quite what it seems, then a new Talos report that shows a large number of unpatched &amp; unprotected memcached servers. We discuss just how bad that might be. Plus, between some excellent feedback &amp; Dan's recent adventures, we've got a itty bitty ZFS deep dive. And of course your feedback, a fantastic round-up &amp; so much more on this week's episode of TechSNAP.

Dan does some sleuthing &amp; finds that the story of a major data leak isn't quite what it seems, then a new Talos report that shows a large number of unpatched &amp; unprotected memcached servers. We discuss just how bad that might be. Plus, between some excellent feedback &amp; Dan's recent adventures, we've got a itty bitty ZFS deep dive. And of course your feedback, a fantastic round-up &amp; so much more on this week's episode of TechSNAP.

Episode 330: Netflix Lab Rats | TechSNAP 330

A potential solution to Ransomware, the 15 year bug that cost CitiGroup $7 Million dollars, Dropbox’s new middle out compression &amp; another flaw that affects all versions of Windows. Plus your questions, our answers, a packed roundup &amp; more!

A potential solution to Ransomware, the 15 year bug that cost CitiGroup $7 Million dollars, Dropbox’s new middle out compression &amp; another flaw that affects all versions of Windows. Plus your questions, our answers, a packed roundup &amp; more!

Episode 275: Ending Ransomware | TechSNAP 275

We discuss, and struggle to pronounce, the difficulties in deploying HTTP public key pinning &amp; some possible alternatives you should consider. Then we get excited for (n+1)sec, a new protocol for distributed multiparty chat encryption &amp; explore the nuances of setting up home VPN gateway!

We discuss, and struggle to pronounce, the difficulties in deploying HTTP public key pinning &amp; some possible alternatives you should consider. Then we get excited for (n+1)sec, a new protocol for distributed multiparty chat encryption &amp; explore the nuances of setting up home VPN gateway!

Episode 334: HPKP: Hard to Say, Hard to Use | TechSNAP 334

Docker

The man who broke the music business, the major downsides to the container culture &amp; yes, they really are trying to sell you Security Snake Oil. Plus your great questions, our answers &amp; much, much more!

The man who broke the music business, the major downsides to the container culture &amp; yes, they really are trying to sell you Security Snake Oil. Plus your great questions, our answers &amp; much, much more!

Episode 212: Dormant Docker Disasters | TechSNAP 212

TalkTalk gets compromised, Hackers make cars safer &amp; Google plays hardball with Symantec. Plus a great batch of your questions, a rocking round up &amp; much, much more!

TalkTalk gets compromised, Hackers make cars safer &amp; Google plays hardball with Symantec. Plus a great batch of your questions, a rocking round up &amp; much, much more!

Episode 238: Certifiable Authority | TechSNAP 238

Intel's patched a remote execution exploit that’s been lurking in their chips for the past nine years, we’ve got the details &amp; some handy tips to check if you’re affected. Then Dan does a deep dive into friend of the show Tarsnap: what it is, how to use it &amp; why it’s so awesome. Plus we discuss when we use external services versus building ourselves &amp; a few tips for lightweight backup solutions that might work for you. Then your fantastic feedback, a riotous roundup &amp; so much more!

Intel's patched a remote execution exploit that’s been lurking in their chips for the past nine years, we’ve got the details &amp; some handy tips to check if you’re affected. Then Dan does a deep dive into friend of the show Tarsnap: what it is, how to use it &amp; why it’s so awesome. Plus we discuss when we use external services versus building ourselves &amp; a few tips for lightweight backup solutions that might work for you. Then your fantastic feedback, a riotous roundup &amp; so much more!

Episode 317: Some Fishy Chips | TechSNAP 317

We take a look at a few recent zero-day vulnerabilities for iOS and Android and find targeted attacks, bad assumptions, and changing markets. Plus what to expect from USB4 and an upcoming Linux scheduler speed-up for AMD's Epyc CPUs.Links:Google says hackers have put ‘monitoring implants’ in iPhones for years | Technology | The Guardian — Their location was uploaded every minute; their device’s keychain, containing all their passwords, was uploaded, as were their chat histories on popular apps including WhatsApp, Telegram and iMessage, their address book, and their Gmail database.Project Zero: A very deep dive into iOS Exploit chains found in the wild — We discovered exploits for a total of fourteen vulnerabilities across the five exploit chains: seven for the iPhone’s web browser, five for the kernel and two separate sandbox escapes. Project Zero: In-the-wild iOS Exploit Chain 1 — This exploit provides evidence that these exploit chains were likely written contemporaneously with their supported iOS versions; that is, the exploit techniques which were used suggest that this exploit was written around the time of iOS 10. This suggests that this group had a capability against a fully patched iPhone for at least two years.  Project Zero: In-the-wild iOS Exploit Chain 3 — It’s difficult to understand how this error could be introduced into a core IPC library that shipped to end users. While errors are common in software development, a serious one like this should have quickly been found by a unit test, code review or even fuzzing. Project Zero: JSC Exploits — In this post, we will take a look at the WebKit exploits used to gain an initial foothold onto the iOS device and stage the privilege escalation exploits. All exploits here achieve shellcode execution inside the sandboxed renderer process (WebContent) on iOS.Project Zero: Implant Teardown — There is no visual indicator on the device that the implant is running. There's no way for a user on iOS to view a process listing, so the implant binary makes no attempt to hide its execution from the system. The implant is primarily focused on stealing files and uploading live location data. The implant requests commands from a command and control server every 60 seconds.The implant has access to all the database files (on the victim’s phone) used by popular end-to-end encryption apps like Whatsapp, Telegram and iMessage.iPhone Hackers Caught By Google Also Targeted Android And Microsoft Windows, Say Sources — Multiple sources with knowledge of the situation said that Google’s own Android operating system and Microsoft Windows PCs were also targeted in a campaign that sought to infect the computers and smartphones of the Uighur ethnic group in China.Google's Shocking Decision To Ignore A Critical Android Vulnerability In Latest Security Update — Despite immediately acknowledging the vulnerability and confirming in June that it will be fixed, Google had not provided an estimated time frame for the patch.Android Zero-Day Bug Opens Door to Privilege Escalation Attack, Researchers Warn | Threatpost — “In the unlikely event an attacker succeeds in exploiting this bug, they would effectively have complete control over the target device,” he told Threatpost. Once an attacker obtains escalated privileges, “it means they could completely take over a device if they can convince a user to install and run their application,”Why 'Zero Day' Android Hacking Now Costs More Than iOS Attacks | WIRED — "During the last few months, we have observed an increase in the number of iOS exploits, mostly Safari and iMessage chains, being developed and sold by researchers from all around the world. The zero-day market is so flooded by iOS exploits that we've recently started refusing some them"Linux 5.4 Kernel To Bring Improved Load Balancing On AMD EPYC Servers — The scheduler topology improvement by SUSE's Matt Fleming changes the behavior as currently it turns out for EPYC hardware the kernel has failed to properly load balance across NUMA nodes on different sockets. USB4 is coming soon and will (mostly) unify USB and Thunderbolt | Ars Technica — The USB Implementers Forum published the official USB4 protocol specification. If your initial reaction was "oh no, not again," don't worry—the new spec is backward-compatible with USB 2 and USB 3, and it uses the same USB Type-C connectors that modern USB 3 devices do.

We take a look at a few recent zero-day vulnerabilities for iOS and Android and find targeted attacks, bad assumptions, and changing markets. Plus what to expect from USB4 and an upcoming Linux scheduler speed-up for AMD's Epyc CPUs.Links:<ul><li><a href="https://www.theguardian.com/technology/2019/aug/30/hackers-monitoring-implants-iphones-google-says" rel="nofollow" target="_blank">Google says hackers have put ‘monitoring implants’ in iPhones for years | Technology | The Guardian</a> — Their location was uploaded every minute; their device’s keychain, containing all their passwords, was uploaded, as were their chat histories on popular apps including WhatsApp, Telegram and iMessage, their address book, and their Gmail database.</li><li><a href="https://googleprojectzero.blogspot.com/2019/08/a-very-deep-dive-into-ios-exploit.html" rel="nofollow" target="_blank">Project Zero: A very deep dive into iOS Exploit chains found in the wild</a> — We discovered exploits for a total of fourteen vulnerabilities across the five exploit chains: seven for the iPhone’s web browser, five for the kernel and two separate sandbox escapes. </li><li><a href="https://googleprojectzero.blogspot.com/2019/08/in-wild-ios-exploit-chain-1.html" rel="nofollow" target="_blank">Project Zero: In-the-wild iOS Exploit Chain 1</a> — This exploit provides evidence that these exploit chains were likely written contemporaneously with their supported iOS versions; that is, the exploit techniques which were used suggest that this exploit was written around the time of iOS 10. This suggests that this group had a capability against a fully patched iPhone for at least two years.  </li><li><a href="https://googleprojectzero.blogspot.com/2019/08/in-wild-ios-exploit-chain-3.html" rel="nofollow" target="_blank">Project Zero: In-the-wild iOS Exploit Chain 3</a> — It’s difficult to understand how this error could be introduced into a core IPC library that shipped to end users. While errors are common in software development, a serious one like this should have quickly been found by a unit test, code review or even fuzzing. </li><li><a href="https://googleprojectzero.blogspot.com/2019/08/jsc-exploits.html" rel="nofollow" target="_blank">Project Zero: JSC Exploits</a> — In this post, we will take a look at the WebKit exploits used to gain an initial foothold onto the iOS device and stage the privilege escalation exploits. All exploits here achieve shellcode execution inside the sandboxed renderer process (WebContent) on iOS.</li><li><a href="https://googleprojectzero.blogspot.com/2019/08/implant-teardown.html" rel="nofollow" target="_blank">Project Zero: Implant Teardown</a> — There is no visual indicator on the device that the implant is running. There's no way for a user on iOS to view a process listing, so the implant binary makes no attempt to hide its execution from the system. The implant is primarily focused on stealing files and uploading live location data. The implant requests commands from a command and control server every 60 seconds.The implant has access to all the database files (on the victim’s phone) used by popular end-to-end encryption apps like Whatsapp, Telegram and iMessage.</li><li><a href="https://www.forbes.com/sites/thomasbrewster/2019/09/01/iphone-hackers-caught-by-google-also-targeted-android-and-microsoft-windows-say-sources/#374244a44adf" rel="nofollow" target="_blank">iPhone Hackers Caught By Google Also Targeted Android And Microsoft Windows, Say Sources</a> — Multiple sources with knowledge of the situation said that Google’s own Android operating system and Microsoft Windows PCs were also targeted in a campaign that sought to infect the computers and smartphones of the Uighur ethnic group in China.</li><li><a href="https://www.forbes.com/sites/jeanbaptiste/2019/09/05/googles-shocking-decision-to-ignore-a-critical-android-vulnerability-in-its-latest-security-update/#5fa2487213bb" rel="nofollow" target="_blank">Google's Shocking Decision To Ignore A Critical Android Vulnerability In Latest Security Update</a> — Despite immediately acknowledging the vulnerability and confirming in June that it will be fixed, Google had not provided an estimated time frame for the patch.</li><li><a href="https://threatpost.com/android-zero-day-bug-opens-door-to-privilege-escalation-attack-researchers-warn/148014/" rel="nofollow" target="_blank">Android Zero-Day Bug Opens Door to Privilege Escalation Attack, Researchers Warn | Threatpost</a> — “In the unlikely event an attacker succeeds in exploiting this bug, they would effectively have complete control over the target device,” he told Threatpost. Once an attacker obtains escalated privileges, “it means they could completely take over a device if they can convince a user to install and run their application,”</li><li><a href="https://www.wired.com/story/android-zero-day-more-than-ios-zerodium/" rel="nofollow" target="_blank">Why 'Zero Day' Android Hacking Now Costs More Than iOS Attacks | WIRED</a> — "During the last few months, we have observed an increase in the number of iOS exploits, mostly Safari and iMessage chains, being developed and sold by researchers from all around the world. The zero-day market is so flooded by iOS exploits that we've recently started refusing some them"</li><li><a href="https://www.phoronix.com/scan.php?page=news_item&amp;px=Linux-5.4-Improve-EPYC-Balance" rel="nofollow" target="_blank">Linux 5.4 Kernel To Bring Improved Load Balancing On AMD EPYC Servers</a> — The scheduler topology improvement by SUSE's Matt Fleming changes the behavior as currently it turns out for EPYC hardware the kernel has failed to properly load balance across NUMA nodes on different sockets. </li><li><a href="https://arstechnica.com/gadgets/2019/09/usb4-is-coming-soon-and-will-mostly-unify-usb-and-thunderbolt/?comments=1&amp;start=40" rel="nofollow" target="_blank">USB4 is coming soon and will (mostly) unify USB and Thunderbolt | Ars Technica</a> — The USB Implementers Forum published the official USB4 protocol specification. If your initial reaction was "oh no, not again," don't worry—the new spec is backward-compatible with USB 2 and USB 3, and it uses the same USB Type-C connectors that modern USB 3 devices do.</li></ul>

411: Mobile Security Mistakes

With some clever new card skimmer tech we’ve got one more reason to watch your wallet at the gas pump, plus a few handy recommendations for postgres migrations &amp; Dan dives deep into his quest for the ultimate boot and nuke experience.  Plus your feedback, a fantastic round-up &amp; so much more!

With some clever new card skimmer tech we’ve got one more reason to watch your wallet at the gas pump, plus a few handy recommendations for postgres migrations &amp; Dan dives deep into his quest for the ultimate boot and nuke experience. Plus your feedback, a fantastic round-up &amp; so much more!

Episode 332: Leaky Pumps | TechSNAP 332

We’ve got the latest on the ‘Stack Crash’ vulnerability affecting a UNIX OS near you. Plus thanks to a recent RNC data leak we’ve got your name, address, birthday &amp; a lot more personal information! Then Dan does a deep dive on his DNS infrastructure, some recent improvements &amp; his integration with Let’s Encrypt.Plus some fantastic feedback, a robust roundup &amp; so much more!

We’ve got the latest on the ‘Stack Crash’ vulnerability affecting a UNIX OS near you. Plus thanks to a recent RNC data leak we’ve got your name, address, birthday &amp; a lot more personal information! Then Dan does a deep dive on his DNS infrastructure, some recent improvements &amp; his integration with Let’s Encrypt. Plus some fantastic feedback, a robust roundup &amp; so much more!

Episode 324: DNS Mastery | TechSNAP 324

Join Jim and Wes as they battle bufferbloat, latency spikes, and network hogs with some of their favorite tools for traffic shaping, firewalling, and QoS.  Plus the importance of sane defaults and why netdata belongs on every system.Links:Why you want QoS - Netdata Documentation — One of the features the Linux kernel has, but it is rarely used, is its ability to apply QoS on traffic. Even most interesting is that it can apply QoS to both inbound and outbound traffic.FireQOS Wiki — FireQOS is a helper to assist you configure traffic shaping on Linux.FireHOL - Linux firewalling and traffic shaping for humans — FireHOL is a language (and a program to run it) which builds secure, stateful firewalls from easy to understand, human-readable configurations. The configurations stay readable even for very complex setups.tc(8) man page — Traffic Control consists of the following:SHAPINGWhen traffic is shaped, its rate of transmission is under control. Shaping may be more than lowering the available bandwidth - it is also used to smooth out bursts in traffic for better network behaviour. Shaping occurs on egress.SCHEDULINGBy scheduling the transmission of packets it is possible to improve interactivity for traffic that needs it while still guaranteeing bandwidth to bulk transfers. Reordering is also called prioritizing, and happens only on egress.POLICINGWhere shaping deals with transmission of traffic, policing pertains to traffic arriving. Policing thus occurs on ingress.DROPPINGTraffic exceeding a set bandwidth may also be dropped forthwith, both on ingress and on egress.Overview of Traffic Control Concepts — Traffic control is the name given to the sets of queuing systems and mechanisms by which packets are received and transmitted on a router. This includes deciding which (and whether) packets to accept at what rate on the input of an interface and determining which packets to transmit in what order at what rate on the output of an interface.Advanced traffic control - ArchWikiJourney to the Center of the Linux Kernel: Traffic Control, Shaping and QoS — This document describes the Traffic Control subsystem of the Linux Kernel in depth, algorithm by algorithm, and shows how it can be used to manage the outgoing traffic of a Linux system.Netdata Real-time performance monitoring, done right! — Netdata is distributed, real-time, performance and health monitoring for systems and applications. It is a highly optimized monitoring agent you install on all your systems and containers.Add more charts to netdata — To collect non-system metrics, netdata supports a plugin architecture. 

Join Jim and Wes as they battle bufferbloat, latency spikes, and network hogs with some of their favorite tools for traffic shaping, firewalling, and QoS. Plus the importance of sane defaults and why netdata belongs on every system.Links:<ul><li><a href="https://docs.netdata.cloud/collectors/tc.plugin/#why-you-want-qos" rel="nofollow" target="_blank">Why you want QoS - Netdata Documentation</a> — One of the features the Linux kernel has, but it is rarely used, is its ability to apply QoS on traffic. Even most interesting is that it can apply QoS to both inbound and outbound traffic.</li><li><a href="https://github.com/firehol/firehol/wiki/FireQOS" rel="nofollow" target="_blank">FireQOS Wiki</a> — FireQOS is a helper to assist you configure traffic shaping on Linux. </li><li><a href="https://firehol.org/" rel="nofollow" target="_blank">FireHOL - Linux firewalling and traffic shaping for humans</a> — FireHOL is a language (and a program to run it) which builds secure, stateful firewalls from easy to understand, human-readable configurations. The configurations stay readable even for very complex setups.</li><li><a href="https://linux.die.net/man/8/tc" rel="nofollow" target="_blank">tc(8) man page</a> — Traffic Control consists of the following: SHAPING When traffic is shaped, its rate of transmission is under control. Shaping may be more than lowering the available bandwidth - it is also used to smooth out bursts in traffic for better network behaviour. Shaping occurs on egress. SCHEDULING By scheduling the transmission of packets it is possible to improve interactivity for traffic that needs it while still guaranteeing bandwidth to bulk transfers. Reordering is also called prioritizing, and happens only on egress. POLICING Where shaping deals with transmission of traffic, policing pertains to traffic arriving. Policing thus occurs on ingress. DROPPING Traffic exceeding a set bandwidth may also be dropped forthwith, both on ingress and on egress.</li><li><a href="http://tldp.org/HOWTO/Traffic-Control-HOWTO/overview.html" rel="nofollow" target="_blank">Overview of Traffic Control Concepts</a> — Traffic control is the name given to the sets of queuing systems and mechanisms by which packets are received and transmitted on a router. This includes deciding which (and whether) packets to accept at what rate on the input of an interface and determining which packets to transmit in what order at what rate on the output of an interface.</li><li><a href="https://wiki.archlinux.org/index.php/advanced_traffic_control" rel="nofollow" target="_blank">Advanced traffic control - ArchWiki</a></li><li><a href="http://wiki.linuxwall.info/doku.php/en:ressources:dossiers:networking:traffic_control" rel="nofollow" target="_blank">Journey to the Center of the Linux Kernel: Traffic Control, Shaping and QoS</a> — This document describes the Traffic Control subsystem of the Linux Kernel in depth, algorithm by algorithm, and shows how it can be used to manage the outgoing traffic of a Linux system.</li><li><a href="https://github.com/netdata/netdata" rel="nofollow" target="_blank">Netdata Real-time performance monitoring, done right!</a> — Netdata is distributed, real-time, performance and health monitoring for systems and applications. It is a highly optimized monitoring agent you install on all your systems and containers.</li><li><a href="https://github.com/netdata/netdata/blob/master/docs/Add-more-charts-to-netdata.md#add-more-charts-to-netdata" rel="nofollow" target="_blank">Add more charts to netdata</a> — To collect non-system metrics, netdata supports a plugin architecture. </li></ul>

397: Quality Tools

What is this?
1 quote, 3 ideas & 1 question from a carefully curated podcast episode.
Every Monday & Wednesday.

Want a 3rd insight and episode every week? Email me at curation@owltail.com.

OwlTail

OwlTail 1-3-1

The best podcast episodes on physical health. Episodes talk about your diet, sleep, exercise and all the things that people do to improve their physical health and live a healthier life. This topic is for everyone, with applications in all of our everyday lives. Add episodes you're interested into your queue below!