CloudStack and the HeartBleed vulnerability
•Download as PPTX, PDF•
0 likes•889 views
Slides from my talk about how the HeartBleed OpenSSL vulnerability affects Apache CloudStack and how to mitigate the vulnerability. From CloudStack Collaboration Conference 2014 in Denver, CO
Report
Share
Report
Share
Recommended
Applying OpenStack at iNET use case
The document discusses applying OpenStack at iNET, an IT company in Vietnam. It introduces the author who is leading OpenStack deployment and operations. It then outlines iNET's architecture which uses Mitaka OpenStack with bonded network and Ceph storage. Their plans are to migrate more servers and all customer VPS to OpenStack. Key challenges discussed are selecting an OpenStack version, covering all components, and testing performance with limited lab devices.
Open Source Private Cloud Management with OpenStack and Security Evaluation w...
Nowadays, we hear about terms like, cloud computing, cloud architectures, virtualization technologies, cloud management systems, clustering and cloud security systems. By a first glance these terms are a bit vague, and questions arise about what is a cloud, what is virtualization and finally what is clustering.
OpenStack-Ansible Project Update
The OpenStack-Ansible project provides tools for deploying OpenStack from source using Ansible. It aims to deploy all core OpenStack services in an integrated and tested way. Recent releases have removed proprietary code and support multiple operating systems. Upcoming work includes splitting roles into reusable components, improved testing and security, and supporting additional OpenStack features like Neutron DVR.
Installing OpenStack on Ubuntu LTS
This document provides instructions for installing OpenStack on Ubuntu LTS using DevStack. It outlines downloading the DevStack package from OpenStack.org, running the stack.sh script to build the OpenStack services, and verifying a successful installation by logging into Horizon and checking that instances, networks, and other services are functioning properly. The key OpenStack services that will be installed include Nova, Swift, Glance, Keystone, Horizon, load balancing, databases, and Heat.
TryStack: A Sandbox for OpenStack Users and Admins
Like Chocolate and Peanut Butter: TryStack and the api.openstack.org site. Given by Jay Pipes and Nati Ueno at the OpenStack Conference April 2012.
OpenStack-Ansible Security
The openstack-ansible-security role provides security hardening for OpenStack environments deployed with OpenStack-Ansible.
Openstack trystack
Lab #4 - OpenStack
ET-3010 Connected Services and Cloud Computing
http://eueung.github.io/ET3010/openstack
Deploying OpenStack with Ansible
Deploying OpenStack with ansible. Made possible by the OS-Ansible-Deployment project https://github.com/stackforge/os-ansible-deployment
Recommended
Applying OpenStack at iNET use case
The document discusses applying OpenStack at iNET, an IT company in Vietnam. It introduces the author who is leading OpenStack deployment and operations. It then outlines iNET's architecture which uses Mitaka OpenStack with bonded network and Ceph storage. Their plans are to migrate more servers and all customer VPS to OpenStack. Key challenges discussed are selecting an OpenStack version, covering all components, and testing performance with limited lab devices.
Open Source Private Cloud Management with OpenStack and Security Evaluation w...
Nowadays, we hear about terms like, cloud computing, cloud architectures, virtualization technologies, cloud management systems, clustering and cloud security systems. By a first glance these terms are a bit vague, and questions arise about what is a cloud, what is virtualization and finally what is clustering.
OpenStack-Ansible Project Update
The OpenStack-Ansible project provides tools for deploying OpenStack from source using Ansible. It aims to deploy all core OpenStack services in an integrated and tested way. Recent releases have removed proprietary code and support multiple operating systems. Upcoming work includes splitting roles into reusable components, improved testing and security, and supporting additional OpenStack features like Neutron DVR.
Installing OpenStack on Ubuntu LTS
This document provides instructions for installing OpenStack on Ubuntu LTS using DevStack. It outlines downloading the DevStack package from OpenStack.org, running the stack.sh script to build the OpenStack services, and verifying a successful installation by logging into Horizon and checking that instances, networks, and other services are functioning properly. The key OpenStack services that will be installed include Nova, Swift, Glance, Keystone, Horizon, load balancing, databases, and Heat.
TryStack: A Sandbox for OpenStack Users and Admins
Like Chocolate and Peanut Butter: TryStack and the api.openstack.org site. Given by Jay Pipes and Nati Ueno at the OpenStack Conference April 2012.
OpenStack-Ansible Security
The openstack-ansible-security role provides security hardening for OpenStack environments deployed with OpenStack-Ansible.
Openstack trystack
Lab #4 - OpenStack
ET-3010 Connected Services and Cloud Computing
http://eueung.github.io/ET3010/openstack
Deploying OpenStack with Ansible
Deploying OpenStack with ansible. Made possible by the OS-Ansible-Deployment project https://github.com/stackforge/os-ansible-deployment
Aptira presents OpenStack swift architecture and monitoring
This document discusses OpenStack Swift architecture and monitoring options. It describes the key components of Swift including the proxy server, ring, object/storage nodes, account server, and replication. It recommends monitoring hardware/OS failures, cluster health using tools like swift-dispersion-report, and cluster telemetry using swift-recon. Existing monitoring options that can be used today include Nagios plugins for Swift and the Zenoss OpenStack Swift ZenPack, both of which retrieve metrics via the swift-recon API.
Virt monitoring
The document discusses system monitoring using OMD and check_mk. It explains that monitoring is important to manage limited server resources and service quality. Both the host and guest systems in a virtualized environment should be monitored. Key things to monitor include CPU, disk, memory, and I/O utilization. OMD with check_mk is recommended as it is a turn-key, scalable, and lightweight monitoring solution powered by Nagios. The document provides steps to install OMD on Ubuntu, enable SSL, install the check_mk agent, add a host for monitoring, perform service discovery, and activate and apply the monitoring configuration.
Creating Elasticsearch Snapshots
For Elasticsearch users, backups are done using the Elasticsearch snapshot facility. In this presentation I'll go through the design of an Elasticsearch backup system that you can use to create snapshots of your cluster's indices and documents.
#OSATH Deploy OpenStack: DevStack
This document provides instructions for setting up DevStack, an all-in-one development environment for OpenStack, on a virtual machine. It describes preparing the VM with at least 2GB RAM and a supported OS, setting up the environment by creating a user and cloning the DevStack repository, and executing the stack.sh script to deploy OpenStack services including Nova, Keystone, Glance, and Horizon. It notes that Neutron, Swift, Ceilometer, Heat and Trove are not deployed by default.
High Availability in OpenStack
High availability (HA) is a major need for the vast majority of enterprise software applications. On the other hand, cloud environments are built with the rule that any instance is expected to fail.
What should i do with my workloads that require high availability?
Flexible, simple deployments with OpenStack-Ansible
I gave this talk at the OpenStack Austin Meetup on June 20, 2016. The talk covers the reasons why OpenStack-Ansible exists and the value that it brings for production OpenStack deployments.
Data storage in clouds
Slides from Athens OpenStack User Group meetup.
We visit the concepts of data storage in the cloud computing world and explore the capabilities offered by OpenStack in this regard.
Simple flexible deployments with openstack ansible
OpenStack-Ansible provides simple and flexible deployments of OpenStack using Ansible. It contains roles for each OpenStack service that define standard configuration defaults. The roles are tested together to ensure compatibility. OpenStack-Ansible is built and maintained by OpenStack operators for real-world use cases. It allows OpenStack deployments across one or many hosts, with upgrade and maintenance processes designed for continuous operation.
OSDC 2015: Bernd Erk | Why favour Icinga over Nagios
Most sys admins have a love-hate relationship with Nagios based monitoring solutions. Backed by a sizable community, users have learned to live with it’s shortcomings in scaling, configuration, and modern integration options.
Taking advantage of the tremendous number of supported hard- and software, Icinga leaves all legacy limitations behind. It delivers an easily scalable solution, with clustering, load balancing, automated replication, and even business process monitoring out-of-the-box. Based on a new configuration format with advanced language features - like conditional processing and complex type support - monitoring agile environments works like a breeze. Existing modules for Puppet, Chef and Ansible ramp up the rollout time and ensure a continuous and up to date monitoring environment.
The talk will demonstrate how popular tools such as Graphite, Logstash, or Graylog integrate better and easier than ever before. In addition to that we’ll introduce the new Icinga Web 2 interface and give a brief introduction into the technical architecture.
OMD and Check_mk
This document provides a 15 minute crash course on OMD (Open Monitoring Distribution) and Check_MK. It discusses what OMD and Check_MK are, the data collection process, how to deploy OMD and the Check_MK agent, and provides recommendations. OMD is not a Linux distribution but a set of tools for running multiple monitoring instances per host with separate users. Check_MK is a Nagios addon that provides automatic service detection, hierarchical configuration, and high performance passive checks. It then outlines how to install OMD, install and configure the Check_MK agent, create an OMD instance, and access the multisite interface. Security recommendations include filtering iptables to only allow traffic from the monitoring server.
Mirantis v OpenStack Ansible Dawn of Production
This document discusses different options for deploying OpenStack including Packstack, TripleO, Fuel, and OpenStack Ansible.
Packstack provides an all-in-one installation but lacks support for high availability and complex configurations. TripleO uses OpenStack native projects like Ironic but has a very high learning curve and is mostly CLI-driven. Fuel provides a wizard-driven deployment but has a non-flexible architecture. OpenStack Ansible is flexible, container-based, and easy to customize but network and OS installation must be done manually with no vendor support. The document recommends OpenStack Ansible for development/proof-of-concept and Fuel or TripleO for production-ready deployments.
London HUG 19/5 - Kubernetes and vault
This document discusses using Kubernetes and Vault together to manage secrets. It summarizes that Kubernetes is an open-source system for automating deployment, operations, and scaling of containerized applications, while Vault provides a single source for secrets, access via API and CLI, leasing and renewal of secrets, auditing, access control lists, and secure secret storage. It notes that while Kubernetes has native secrets functionality, Vault is useful for separately managing secrets from applications for improved security and process. An example is provided of using Vault to fetch and renew SSL certificates for a MongoDB deployment in Kubernetes.
Project: OpenStack, #OSATH
We repeat an introductory presentation on the OpenStack project, as many of our new members have asked to receive a complete overview. During this presentation we shall visit the different components and provide a high-level description on the architecture of OpenStack software. We shall also refer to the community around the project and as usual discuss any issues posed by the attendees.
This is a great chance to get to know better the internals of OpenStack, so i highly recommend to share with any interested party.
Fusker - A NodeJS Security Framework
Fusker is a Node.js security framework that detects and logs various types of attacks like SQL injection, XSS, and LFI. It includes modules called "detectives" that analyze incoming data for attack patterns. If an attack is detected, payloads can execute to handle the response like blacklisting IP addresses. Fusker is lightweight, modular, and easy to integrate into servers and frameworks. It also makes it fun to secure Node.js applications.
2014 Security Onion Conference
The document discusses a proof of concept for network security monitoring (NSM) in the cloud. It outlines the challenges of cloud NSM due to lack of network visibility. The proposed solution is a server-side NSM client that would capture full packet data and transfer it to a Security Onion server for analysis. The core design principles are to integrate with Security Onion, maintain NSM principles, support multiple platforms, be open source, and ensure security and long-term sustainability. The document describes the basic architecture using WinTAP and OpenVPN to bridge traffic between cloud servers and the Security Onion sensor. It provides details on installation, performance metrics, validation testing, and real world usage scenarios to demonstrate cloud NSM.
OpenStack!
The document discusses OpenStack, an open source cloud computing platform. It provides details on OpenStack architecture, services like Swift for object storage and Cinder for block storage, and how to deploy and test OpenStack using tools like Mirantis Fuel, VirtualBox, and Postman. The document also covers OpenStack Swift middleware and how it can be used to add new functionality through the WSGI pipeline.
Kwort Linux 4.3 the new stable version is released
November 27, 2015 Kwort Linux 4.3 computer operating is officially released and it includes Chromium 47 web browser is supported with Linux kernel platform.
Apache
Apache is a free and open-source web server software used widely on both Linux and Windows operating systems. It supports many modules that add functionality like user authentication, URL manipulation, and virtual hosting. Apache's modular design allows new modules to extend its core functionality, and it is highly customizable through configuration files and modules.
Introduction to open virtual network Dawid Deja
OVN is a system that provides network abstraction for virtual networks. It uses OpenFlow to provide virtual network abstractions like L2 and L3 overlays and security groups. OVN complements OVS by adding native support for these virtual network abstractions. OVN represents virtual network constructs like ports, bridges and routers logically and uses tunnels between hypervisors to implement this logical view. It works with an OVN controller and database to coordinate the logical to physical mapping and network configuration across multiple hypervisor hosts.
Web Technology Management Lecture IV
This document provides instructions for managing a virtual server using VirtualBox virtualization software. It discusses setting up VirtualBox on a host operating system, installing a Debian guest operating system, configuring networking and services like Apache, PHP, and MySQL. Specific steps include downloading VirtualBox, configuring networking using a bridged adapter, installing updates, and configuring Apache, PHP, and MySQL. The document also provides commands for initial VirtualBox and guest OS configuration, and writing initial web pages.
Osrs
The document provides an overview of the process for contributing code to the OpenStack project. It discusses what OpenStack is, the community and foundation structure, and outlines the steps to set up a development environment, find issues to work on, make code changes, run tests, submit changes for review, and get the changes merged into the project. The key steps are to create a Launchpad and Gerrit account, clone the code repository for the component you want to work on, create a topic branch, make code changes, run tests, commit changes with a descriptive message, and submit the changes for review and merging into the project.
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
Today most networks present one “gateway” to the whole network – The SSL-VPN. A vector that is often overlooked and considered “secure”, we decided to take apart an industry leading SSL-VPN appliance and analyze it to bits to thoroughly understand how secure it really is. During this talk we will examine the internals of the F5 FirePass SSL-VPN Appliance. We discover that even though many security protections are in-place, the internals of the appliance hides interesting vulnerabilities we can exploit. Through processes ranging from reverse engineering to binary planting, we decrypt the file-system and begin examining the environment. As we go down the rabbit hole, our misconceptions about “security appliances” are revealed.
Using a combination of web vulnerabilities, format string vulnerabilities and a bunch of frustration, we manage to overcome the multiple limitations and protections presented by the appliance to gain a remote unauthenticated root shell. Due to the magnitude of this vulnerability and the potential for impact against dozens of fortune 500 companies, we contacted F5 and received one of the best vendor responses we’ve experienced – EVER!
https://www.hackitoergosum.org
More Related Content
What's hot
Aptira presents OpenStack swift architecture and monitoring
This document discusses OpenStack Swift architecture and monitoring options. It describes the key components of Swift including the proxy server, ring, object/storage nodes, account server, and replication. It recommends monitoring hardware/OS failures, cluster health using tools like swift-dispersion-report, and cluster telemetry using swift-recon. Existing monitoring options that can be used today include Nagios plugins for Swift and the Zenoss OpenStack Swift ZenPack, both of which retrieve metrics via the swift-recon API.
Virt monitoring
The document discusses system monitoring using OMD and check_mk. It explains that monitoring is important to manage limited server resources and service quality. Both the host and guest systems in a virtualized environment should be monitored. Key things to monitor include CPU, disk, memory, and I/O utilization. OMD with check_mk is recommended as it is a turn-key, scalable, and lightweight monitoring solution powered by Nagios. The document provides steps to install OMD on Ubuntu, enable SSL, install the check_mk agent, add a host for monitoring, perform service discovery, and activate and apply the monitoring configuration.
Creating Elasticsearch Snapshots
For Elasticsearch users, backups are done using the Elasticsearch snapshot facility. In this presentation I'll go through the design of an Elasticsearch backup system that you can use to create snapshots of your cluster's indices and documents.
#OSATH Deploy OpenStack: DevStack
This document provides instructions for setting up DevStack, an all-in-one development environment for OpenStack, on a virtual machine. It describes preparing the VM with at least 2GB RAM and a supported OS, setting up the environment by creating a user and cloning the DevStack repository, and executing the stack.sh script to deploy OpenStack services including Nova, Keystone, Glance, and Horizon. It notes that Neutron, Swift, Ceilometer, Heat and Trove are not deployed by default.
High Availability in OpenStack
High availability (HA) is a major need for the vast majority of enterprise software applications. On the other hand, cloud environments are built with the rule that any instance is expected to fail.
What should i do with my workloads that require high availability?
Flexible, simple deployments with OpenStack-Ansible
I gave this talk at the OpenStack Austin Meetup on June 20, 2016. The talk covers the reasons why OpenStack-Ansible exists and the value that it brings for production OpenStack deployments.
Data storage in clouds
Slides from Athens OpenStack User Group meetup.
We visit the concepts of data storage in the cloud computing world and explore the capabilities offered by OpenStack in this regard.
Simple flexible deployments with openstack ansible
OpenStack-Ansible provides simple and flexible deployments of OpenStack using Ansible. It contains roles for each OpenStack service that define standard configuration defaults. The roles are tested together to ensure compatibility. OpenStack-Ansible is built and maintained by OpenStack operators for real-world use cases. It allows OpenStack deployments across one or many hosts, with upgrade and maintenance processes designed for continuous operation.
OSDC 2015: Bernd Erk | Why favour Icinga over Nagios
Most sys admins have a love-hate relationship with Nagios based monitoring solutions. Backed by a sizable community, users have learned to live with it’s shortcomings in scaling, configuration, and modern integration options.
Taking advantage of the tremendous number of supported hard- and software, Icinga leaves all legacy limitations behind. It delivers an easily scalable solution, with clustering, load balancing, automated replication, and even business process monitoring out-of-the-box. Based on a new configuration format with advanced language features - like conditional processing and complex type support - monitoring agile environments works like a breeze. Existing modules for Puppet, Chef and Ansible ramp up the rollout time and ensure a continuous and up to date monitoring environment.
The talk will demonstrate how popular tools such as Graphite, Logstash, or Graylog integrate better and easier than ever before. In addition to that we’ll introduce the new Icinga Web 2 interface and give a brief introduction into the technical architecture.
OMD and Check_mk
This document provides a 15 minute crash course on OMD (Open Monitoring Distribution) and Check_MK. It discusses what OMD and Check_MK are, the data collection process, how to deploy OMD and the Check_MK agent, and provides recommendations. OMD is not a Linux distribution but a set of tools for running multiple monitoring instances per host with separate users. Check_MK is a Nagios addon that provides automatic service detection, hierarchical configuration, and high performance passive checks. It then outlines how to install OMD, install and configure the Check_MK agent, create an OMD instance, and access the multisite interface. Security recommendations include filtering iptables to only allow traffic from the monitoring server.
Mirantis v OpenStack Ansible Dawn of Production
This document discusses different options for deploying OpenStack including Packstack, TripleO, Fuel, and OpenStack Ansible.
Packstack provides an all-in-one installation but lacks support for high availability and complex configurations. TripleO uses OpenStack native projects like Ironic but has a very high learning curve and is mostly CLI-driven. Fuel provides a wizard-driven deployment but has a non-flexible architecture. OpenStack Ansible is flexible, container-based, and easy to customize but network and OS installation must be done manually with no vendor support. The document recommends OpenStack Ansible for development/proof-of-concept and Fuel or TripleO for production-ready deployments.
London HUG 19/5 - Kubernetes and vault
This document discusses using Kubernetes and Vault together to manage secrets. It summarizes that Kubernetes is an open-source system for automating deployment, operations, and scaling of containerized applications, while Vault provides a single source for secrets, access via API and CLI, leasing and renewal of secrets, auditing, access control lists, and secure secret storage. It notes that while Kubernetes has native secrets functionality, Vault is useful for separately managing secrets from applications for improved security and process. An example is provided of using Vault to fetch and renew SSL certificates for a MongoDB deployment in Kubernetes.
Project: OpenStack, #OSATH
We repeat an introductory presentation on the OpenStack project, as many of our new members have asked to receive a complete overview. During this presentation we shall visit the different components and provide a high-level description on the architecture of OpenStack software. We shall also refer to the community around the project and as usual discuss any issues posed by the attendees.
This is a great chance to get to know better the internals of OpenStack, so i highly recommend to share with any interested party.
Fusker - A NodeJS Security Framework
Fusker is a Node.js security framework that detects and logs various types of attacks like SQL injection, XSS, and LFI. It includes modules called "detectives" that analyze incoming data for attack patterns. If an attack is detected, payloads can execute to handle the response like blacklisting IP addresses. Fusker is lightweight, modular, and easy to integrate into servers and frameworks. It also makes it fun to secure Node.js applications.
2014 Security Onion Conference
The document discusses a proof of concept for network security monitoring (NSM) in the cloud. It outlines the challenges of cloud NSM due to lack of network visibility. The proposed solution is a server-side NSM client that would capture full packet data and transfer it to a Security Onion server for analysis. The core design principles are to integrate with Security Onion, maintain NSM principles, support multiple platforms, be open source, and ensure security and long-term sustainability. The document describes the basic architecture using WinTAP and OpenVPN to bridge traffic between cloud servers and the Security Onion sensor. It provides details on installation, performance metrics, validation testing, and real world usage scenarios to demonstrate cloud NSM.
OpenStack!
The document discusses OpenStack, an open source cloud computing platform. It provides details on OpenStack architecture, services like Swift for object storage and Cinder for block storage, and how to deploy and test OpenStack using tools like Mirantis Fuel, VirtualBox, and Postman. The document also covers OpenStack Swift middleware and how it can be used to add new functionality through the WSGI pipeline.
Kwort Linux 4.3 the new stable version is released
November 27, 2015 Kwort Linux 4.3 computer operating is officially released and it includes Chromium 47 web browser is supported with Linux kernel platform.
Apache
Apache is a free and open-source web server software used widely on both Linux and Windows operating systems. It supports many modules that add functionality like user authentication, URL manipulation, and virtual hosting. Apache's modular design allows new modules to extend its core functionality, and it is highly customizable through configuration files and modules.
Introduction to open virtual network Dawid Deja
OVN is a system that provides network abstraction for virtual networks. It uses OpenFlow to provide virtual network abstractions like L2 and L3 overlays and security groups. OVN complements OVS by adding native support for these virtual network abstractions. OVN represents virtual network constructs like ports, bridges and routers logically and uses tunnels between hypervisors to implement this logical view. It works with an OVN controller and database to coordinate the logical to physical mapping and network configuration across multiple hypervisor hosts.
Web Technology Management Lecture IV
This document provides instructions for managing a virtual server using VirtualBox virtualization software. It discusses setting up VirtualBox on a host operating system, installing a Debian guest operating system, configuring networking and services like Apache, PHP, and MySQL. Specific steps include downloading VirtualBox, configuring networking using a bridged adapter, installing updates, and configuring Apache, PHP, and MySQL. The document also provides commands for initial VirtualBox and guest OS configuration, and writing initial web pages.
What's hot (20)
Aptira presents OpenStack swift architecture and monitoring
Aptira presents OpenStack swift architecture and monitoring
Flexible, simple deployments with OpenStack-Ansible
Flexible, simple deployments with OpenStack-Ansible
Simple flexible deployments with openstack ansible
Simple flexible deployments with openstack ansible
OSDC 2015: Bernd Erk | Why favour Icinga over Nagios
OSDC 2015: Bernd Erk | Why favour Icinga over Nagios
Kwort Linux 4.3 the new stable version is released
Kwort Linux 4.3 the new stable version is released
Similar to CloudStack and the HeartBleed vulnerability
Osrs
The document provides an overview of the process for contributing code to the OpenStack project. It discusses what OpenStack is, the community and foundation structure, and outlines the steps to set up a development environment, find issues to work on, make code changes, run tests, submit changes for review, and get the changes merged into the project. The key steps are to create a Launchpad and Gerrit account, clone the code repository for the component you want to work on, create a topic branch, make code changes, run tests, commit changes with a descriptive message, and submit the changes for review and merging into the project.
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
Today most networks present one “gateway” to the whole network – The SSL-VPN. A vector that is often overlooked and considered “secure”, we decided to take apart an industry leading SSL-VPN appliance and analyze it to bits to thoroughly understand how secure it really is. During this talk we will examine the internals of the F5 FirePass SSL-VPN Appliance. We discover that even though many security protections are in-place, the internals of the appliance hides interesting vulnerabilities we can exploit. Through processes ranging from reverse engineering to binary planting, we decrypt the file-system and begin examining the environment. As we go down the rabbit hole, our misconceptions about “security appliances” are revealed.
Using a combination of web vulnerabilities, format string vulnerabilities and a bunch of frustration, we manage to overcome the multiple limitations and protections presented by the appliance to gain a remote unauthenticated root shell. Due to the magnitude of this vulnerability and the potential for impact against dozens of fortune 500 companies, we contacted F5 and received one of the best vendor responses we’ve experienced – EVER!
https://www.hackitoergosum.org
Automation with ansible
A hands-on workshop on "Automation with Ansible". Starting from installing and setting up Ansible to managing servers and application deployments.
PVS-Studio in the Clouds: Travis CI
At the moment, cloud CI systems are a highly-demanded service. In this article, we'll tell you how to integrate analysis of source code into a CI cloud platform with the tools that are already available in PVS-Studio. As an example we'll use the Travis CI service.
Linux basics (part 2)
This document provides an overview of various Linux basics including the VIM text editor, networking commands, SSH secure shell, SSH keys, package management, package dependencies, services, Apache web server configuration, MySQL database server, caching, and configuration management tools like Puppet, CFEngine, and Chef. It discusses installing and using the popular Wordpress content management system on a Linux server.
A Survey of Container Security in 2016: A Security Update on Container Platforms
This talk is an update of container security in 2016. It describes the security measures that containers provide, shows how containers provide security measures out of box that are prone to configuration errors when running applications directly on host, and finally lists the ongoing in container security in the community.
Dcjq node.js presentation
Node.js is an asynchronous JavaScript runtime built on Chrome's V8 JavaScript engine. It allows JavaScript to be run on the server-side and is used for real-time web applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. The document discusses how to install Node.js and manage different versions using the nave package manager.
Ansible is the simplest way to automate. MoldCamp, 2015
Ansible is a radically simple IT automation engine. This is new and great configuration management system (like Chef, Puppet) that has been created in 2012 year. Also Ansible is pretty simple and flexible system, that helps you in managing your servers and execute Ad-hoc commands.
During this session I will explain how to start using Ansible in infrastructure orchestration and what are pros and cons of this system. Also I will explain you our experience in deployments, provisioning and other aspects.
Quick-and-Easy Deployment of a Ceph Storage Cluster with SLES
This document discusses quick deployment of a Ceph storage cluster using SUSE Linux Enterprise Server (SLES). It provides an overview of Ceph and its components, and steps for provisioning a Ceph cluster including bootstrapping an initial monitor, adding OSDs, and configuring a PXE boot server for automated installation. It also briefly introduces tools like SUSE Studio for appliance building and SUSE Manager for systems management that can aid in deploying and managing the Ceph cluster.
20100425 Configuration Management With Puppet Lfnw
- Puppet is an open source configuration management tool that allows systems to be declared and configured in code.
- It provides a declarative language to describe system configuration and resources to manage packages, files, services, and other common configuration elements.
- Puppet helps ensure all systems are consistently configured, allows scaling to manage many systems, and provides change management for system modifications.
Openstack
This document provides an overview of OpenStack, including what it is, the main OpenStack services, and how to perform single node and multinode installations using DevStack and PackStack. OpenStack is an open-source cloud computing platform that provides infrastructure as a service. It consists of interrelated components to control hardware resources like processing, storage, and networking. The document describes the main OpenStack services like Dashboard, Compute, Networking, Object Storage, Block Storage, Image Service, Telemetry, and Orchestration. It then covers how to set up single node and multinode OpenStack environments using DevStack and PackStack with steps for network configuration, installing dependencies, and running the installation scripts.
Openstack in 10 mins
This document provides an overview of OpenStack, including what it is, the main OpenStack services, and how to perform single node and multinode installations using DevStack and PackStack. OpenStack is an open-source cloud computing platform that provides infrastructure as a service. It consists of interrelated components to control hardware resources like processing, storage, and networking. The document describes the main OpenStack services like Dashboard, Compute, Networking, Object Storage, Block Storage, Image Service, Telemetry, and Orchestration. It then covers how to do a single node installation on Ubuntu, the networking requirements for multinode, and how to install and configure DevStack and PackStack for OpenStack deployment.
Linux containers and docker
This document provides information about Linux containers and Docker. It discusses:
1) The evolution of IT from client-server models to thin apps running on any infrastructure and the challenges of ensuring consistent service interactions and deployments across environments.
2) Virtual machines and their benefits of full isolation but large disk usage, and Vagrant which allows packaging and provisioning of VMs via files.
3) Docker and how it uses Linux containers powered by namespaces and cgroups to deploy applications in lightweight portable containers that are more efficient than VMs. Examples of using Docker are provided.
Kayobe_desc
This document provides documentation on Kayobe, an open source project that enables the deployment of containerized OpenStack to bare metal using Ansible. It describes Kayobe's features, including its use of OpenStack projects like Bifrost and Kolla Ansible. The documentation covers Kayobe's architecture, installation process from PyPI or source code, and usage of its command line interface.
How to integrate_custom_openstack_services_with_devstack
DevStack is a tool used to quickly deploy OpenStack from source code for development and testing purposes. Plugins allow custom OpenStack services to be integrated with DevStack. A plugin contains scripts that are executed at different points during deployment to install and configure the custom service. Functions are provided to help with common tasks like installing packages or configuring services.
SSL Checklist for Pentesters (BSides MCR 2014)
This document provides a summary of checks that a pentester should perform when evaluating the security of SSL/TLS implementations. It discusses checking for support of outdated and insecure protocols like SSLv2 and SSLv3. It also recommends validating support for newer, more secure versions like TLSv1.1 and TLSv1.2. The document outlines steps to check for vulnerabilities like Heartbleed, BEAST, and CRIME. It also provides guidance on evaluating certificate validity, cipher suites, and renegotiation support. Web application considerations like mixed content and HTTP Strict Transport Security are also covered at a high level. The presenter provides these checks and recommendations from the perspective of a pentester to identify potential issues to consider reporting
Systems administration for coders presentation
A presentation given at Unified Diff in Cardiff in 2013, with the aim of introducing the art & science of systems administration to software developers, based on experiences at the web dev agency.
Leonid Vasilyev "Building, deploying and running production code at Dropbox"
Reproducible builds, fast and safe deployment process together with self-healing services form the basis of stable and maintainable infrastructure. In this talk I’d like to cover, from the Site Reliability Engineering (SRE) perspective, how Dropbox addresses above challenges, what technologies are used and what lessons were learnt during implementation process.
Road to Opscon (Pisa '15) - DevOoops
DevOoops (Increase awareness around DevOps infra security)
DevOps is increasingly blending the work of both application and network security professionals. In a quest to move faster, organisations can end up creating security vulnerabilities using the tools and products meant to protect them. What happens when these tools are used insecurely or - even worse - they are just insecure? Technologies discussed will encompass AWS, Puppet, Hudson/Jenkins, Vagrant, Docker and much, much more. Everything from common misconfigurations to remote code execution.
Using Puppet on Linux, Windows, and Mac OSX
This document summarizes lessons learned from installing a development stack using Puppet on Linux, Mac OSX, and Windows operating systems. It discusses using Puppet to automate the installation of tools like Atlassian, Sonar, Nexus, and MySQL. Puppet was chosen for its declarative syntax that does not require programming skills. Examples are provided for installing Nexus on Ubuntu, CentOS, and OSX. Adapting the Puppet code to different operating systems required handling package and service naming differences as well as command line differences. Significant challenges were encountered when trying to use Puppet on Windows due to the lack of standard commands and limited supported resources. Ruby was used to create new Puppet providers and resources to download
Similar to CloudStack and the HeartBleed vulnerability (20)
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
[HES2013] Virtually secure, analysis to remote root 0day on an industry leadi...
A Survey of Container Security in 2016: A Security Update on Container Platforms
A Survey of Container Security in 2016: A Security Update on Container Platforms
Ansible is the simplest way to automate. MoldCamp, 2015
Ansible is the simplest way to automate. MoldCamp, 2015
Quick-and-Easy Deployment of a Ceph Storage Cluster with SLES
Quick-and-Easy Deployment of a Ceph Storage Cluster with SLES
20100425 Configuration Management With Puppet Lfnw
20100425 Configuration Management With Puppet Lfnw
How to integrate_custom_openstack_services_with_devstack
How to integrate_custom_openstack_services_with_devstack
Leonid Vasilyev "Building, deploying and running production code at Dropbox"
Leonid Vasilyev "Building, deploying and running production code at Dropbox"
More from John Kinsella
Removing the Burden of Securing Microservices Through Automation and Visibility
This document summarizes John Kinsella's presentation on securing microservices through automation and visibility. Some key points include:
- Developers are excited about containers because they enable speed, repeatability, and additive collaboration. However, the volume of new container images poses security challenges.
- Security must automate processes like vulnerability scanning, access control, and runtime protection to keep up with the pace of development and container usage.
- Visibility into what applications are doing, where they are running, and which tools are in use is important but difficult with containers. Instrumentation and monitoring help provide this visibility.
- The container security workflow involves securing images at build time, when stored, during execution requests, and
2019 Infosec World Keynote
This document discusses how containers can improve security posture through automation and visibility. It notes that as applications are containerized, security must also automate to keep up with the volume of new images and containers. The document advocates rebuilding containers rather than patching them when vulnerabilities are found. It emphasizes gaining visibility into what applications are doing and where they are running. The document argues that security should recommend containers, not just react when developers ask to use them. Automation is needed for building, testing, delivery and security activities like vulnerability scanning across the application lifecycle.
An In-depth look at application containers
Slides for a talk I gave to the NIST cloud security working group on the state of container security.
Due to this being a NIST talk, it's without branding or vendor mentions, where possible.
Understanding container security
This document discusses container security, providing a brief history of containers, security benefits and challenges of containers, and approaches to container vulnerability management and responding to attacks. It notes that while containers are not new, their adoption has increased rapidly in recent years. The document outlines security advantages like smaller surface areas but also challenges like managing vulnerabilities across many moving parts. It recommends strategies like using official images, hardening hosts, scanning for vulnerabilities, and practicing incident response for containers.
Docker security configuration
Technical dive into configuring seccomp and linux security capabilities for Docker-based containers.
The real meat for this talk was in the demos - I'm working on a screencast version, and will add a link here once I have that published!
A (fun!) Comparison of Docker Vulnerability Scanners
The document is an introduction to a talk on information security scanning and vulnerability management. It provides biographical information about the speaker, an overview of the topics to be covered including scanning tools and minimizing vulnerabilities in container images. It also includes examples of security product logos and discusses challenges in assessing vulnerabilities across image layers and databases tailored to specific operating systems.
Dont break the glass
My talk on working with the CloudStack Database for data recovery and unintended manipulation. From CloudStack Collaboration Conference North America 2014
CloudStack Secured
John Kinsella discusses security efforts around Apache CloudStack. He details manual code reviews and static analysis that were performed to search for weaknesses. No critical findings were discovered. Incident response procedures are outlined. Additional security measures offered by Stratosec like SSL, VPNs, firewalls, and testing are described. Future work may include two-factor authentication, SELinux, and improved logging. Community help with further security frameworks and plugins is welcomed.
Truly Secure: The Steps a Security Practitioner Took to Build a Secure Public...
My CSA 2011 talk - gives an overview of what one needs to do to review the security if a commercial or open-source cloud stack and feel confident in providing secure cloud services.
Securing the Cloud
This "mini" version of my CSA Congress talk about building a secure cloud was given at the San Francisco Cloud Security Meetup in November, 2011.
I got some great feedback while giving this talk, and will be applying it to an updated version of this deck which will be released during the CSA Congress, November 15th and 16th 2011.
What is Cloud Security, and Can I Have Some?
This document discusses cloud security and deployment models. It defines cloud computing according to NIST and describes the three main types: Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS). The document also covers legal issues around discovery, governance, and compliance in cloud environments. Best practices for cloud security include encrypting data at rest and in transit, implementing strong identity management and access controls, ensuring portability between cloud providers, and understanding data locations.
More from John Kinsella (11)
Removing the Burden of Securing Microservices Through Automation and Visibility
Removing the Burden of Securing Microservices Through Automation and Visibility
A (fun!) Comparison of Docker Vulnerability Scanners
A (fun!) Comparison of Docker Vulnerability Scanners
Truly Secure: The Steps a Security Practitioner Took to Build a Secure Public...
Truly Secure: The Steps a Security Practitioner Took to Build a Secure Public...
Recently uploaded
Video Streaming: Then, Now, and in the Future
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
Mind map of terminologies used in context of Generative AI
Mind map of common terms used in context of Generative AI.
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Discover how MongoDB Atlas and vector search technology can revolutionize your application's search capabilities. This comprehensive presentation covers:
* What is Vector Search?
* Importance and benefits of vector search
* Practical use cases across various industries
* Step-by-step implementation guide
* Live demos with code snippets
* Enhancing LLM capabilities with vector search
* Best practices and optimization strategies
Perfect for developers, AI enthusiasts, and tech leaders. Learn how to leverage MongoDB Atlas to deliver highly relevant, context-aware search results, transforming your data retrieval process. Stay ahead in tech innovation and maximize the potential of your applications.
#MongoDB #VectorSearch #AI #SemanticSearch #TechInnovation #DataScience #LLM #MachineLearning #SearchTechnology
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack.
While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack.
I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:
Introducing Milvus Lite: Easy-to-Install, Easy-to-Use vector database for you...
Join us to introduce Milvus Lite, a vector database that can run on notebooks and laptops, share the same API with Milvus, and integrate with every popular GenAI framework. This webinar is perfect for developers seeking easy-to-use, well-integrated vector databases for their GenAI apps.
Removing Uninteresting Bytes in Software Fuzzing
Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process.
In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds.
- These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
As the digital landscape continually evolves, operating systems play a critical role in shaping user experiences and productivity. The launch of Nitrux Linux 3.5.0 marks a significant milestone, offering a robust alternative to traditional systems such as Windows 11. This article delves into the essence of Nitrux Linux 3.5.0, exploring its unique features, advantages, and how it stands as a compelling choice for both casual users and tech enthusiasts.
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Discover the seamless integration of RPA (Robotic Process Automation), COMPOSER, and APM with AWS IDP enhanced with Slack notifications. Explore how these technologies converge to streamline workflows, optimize performance, and ensure secure access, all while leveraging the power of AWS IDP and real-time communication via Slack notifications.
20 Comprehensive Checklist of Designing and Developing a Website
Dive into the world of Website Designing and Developing with Pixlogix! Looking to create a stunning online presence? Look no further! Our comprehensive checklist covers everything you need to know to craft a website that stands out. From user-friendly design to seamless functionality, we've got you covered. Don't miss out on this invaluable resource! Check out our checklist now at Pixlogix and start your journey towards a captivating online presence today.
GraphSummit Singapore | Graphing Success: Revolutionising Organisational Stru...
Sudheer Mechineni, Head of Application Frameworks, Standard Chartered Bank
Discover how Standard Chartered Bank harnessed the power of Neo4j to transform complex data access challenges into a dynamic, scalable graph database solution. This keynote will cover their journey from initial adoption to deploying a fully automated, enterprise-grade causal cluster, highlighting key strategies for modelling organisational changes and ensuring robust disaster recovery. Learn how these innovations have not only enhanced Standard Chartered Bank’s data infrastructure but also positioned them as pioneers in the banking sector’s adoption of graph technology.
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/building-and-scaling-ai-applications-with-the-nx-ai-manager-a-presentation-from-network-optix/
Robin van Emden, Senior Director of Data Science at Network Optix, presents the “Building and Scaling AI Applications with the Nx AI Manager,” tutorial at the May 2024 Embedded Vision Summit.
In this presentation, van Emden covers the basics of scaling edge AI solutions using the Nx tool kit. He emphasizes the process of developing AI models and deploying them globally. He also showcases the conversion of AI models and the creation of effective edge AI pipelines, with a focus on pre-processing, model conversion, selecting the appropriate inference engine for the target hardware and post-processing.
van Emden shows how Nx can simplify the developer’s life and facilitate a rapid transition from concept to production-ready applications.He provides valuable insights into developing scalable and efficient edge AI solutions, with a strong focus on practical implementation.20240605 QFM017 Machine Intelligence Reading List May 2024
Everything I found interesting about machines behaving intelligently during May 2024
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
ABSTRACT: A prima vista, un mattoncino Lego e la backdoor XZ potrebbero avere in comune il fatto di essere entrambi blocchi di costruzione, o dipendenze di progetti creativi e software. La realtà è che un mattoncino Lego e il caso della backdoor XZ hanno molto di più di tutto ciò in comune.
Partecipate alla presentazione per immergervi in una storia di interoperabilità, standard e formati aperti, per poi discutere del ruolo importante che i contributori hanno in una comunità open source sostenibile.
BIO: Sostenitrice del software libero e dei formati standard e aperti. È stata un membro attivo dei progetti Fedora e openSUSE e ha co-fondato l'Associazione LibreItalia dove è stata coinvolta in diversi eventi, migrazioni e formazione relativi a LibreOffice. In precedenza ha lavorato a migrazioni e corsi di formazione su LibreOffice per diverse amministrazioni pubbliche e privati. Da gennaio 2020 lavora in SUSE come Software Release Engineer per Uyuni e SUSE Manager e quando non segue la sua passione per i computer e per Geeko coltiva la sua curiosità per l'astronomia (da cui deriva il suo nickname deneb_alpha).
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
ここ3000字までしか入らないけどタイトルの方がたくさん文字入ると思います。
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Join Maher Hanafi, VP of Engineering at Betterworks, in this new session where he'll share a practical framework to transform Gen AI prototypes into impactful products! He'll delve into the complexities of data collection and management, model selection and optimization, and ensuring security, scalability, and responsible use.
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AIVladimir Iglovikov, Ph.D.
Presented by Vladimir Iglovikov:
- https://www.linkedin.com/in/iglovikov/
- https://x.com/viglovikov
- https://www.instagram.com/ternaus/
This presentation delves into the journey of Albumentations.ai, a highly successful open-source library for data augmentation.
Created out of a necessity for superior performance in Kaggle competitions, Albumentations has grown to become a widely used tool among data scientists and machine learning practitioners.
This case study covers various aspects, including:
People: The contributors and community that have supported Albumentations.
Metrics: The success indicators such as downloads, daily active users, GitHub stars, and financial contributions.
Challenges: The hurdles in monetizing open-source projects and measuring user engagement.
Development Practices: Best practices for creating, maintaining, and scaling open-source libraries, including code hygiene, CI/CD, and fast iteration.
Community Building: Strategies for making adoption easy, iterating quickly, and fostering a vibrant, engaged community.
Marketing: Both online and offline marketing tactics, focusing on real, impactful interactions and collaborations.
Mental Health: Maintaining balance and not feeling pressured by user demands.
Key insights include the importance of automation, making the adoption process seamless, and leveraging offline interactions for marketing. The presentation also emphasizes the need for continuous small improvements and building a friendly, inclusive community that contributes to the project's growth.
Vladimir Iglovikov brings his extensive experience as a Kaggle Grandmaster, ex-Staff ML Engineer at Lyft, sharing valuable lessons and practical advice for anyone looking to enhance the adoption of their open-source projects.
Explore more about Albumentations and join the community at:
GitHub: https://github.com/albumentations-team/albumentations
Website: https://albumentations.ai/
LinkedIn: https://www.linkedin.com/company/100504475
Twitter: https://x.com/albumentationsClimate Impact of Software Testing at Nordic Testing Days
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
TrustArc Webinar - 2024 Global Privacy Survey
How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024?
In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores.
See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe.
This webinar will review:
- The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey
- The top challenges for privacy leaders, practitioners, and organizations in 2024
- Key themes to consider in developing and maintaining your privacy program
Recently uploaded (20)
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Introducing Milvus Lite: Easy-to-Install, Easy-to-Use vector database for you...
Introducing Milvus Lite: Easy-to-Install, Easy-to-Use vector database for you...
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website
GraphSummit Singapore | Graphing Success: Revolutionising Organisational Stru...
GraphSummit Singapore | Graphing Success: Revolutionising Organisational Stru...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
CloudStack and the HeartBleed vulnerability
- 2. We’re here to talk about…
- 3. What is Vulnerable • Apache CloudStack 4.2 – 4.3 • SystemVMs have vulnerable version of OpenSSL installed • In particular, SSVM is running vulnerable services
- 4. FRIENDS DON’T LET FRIENDS USE REALHOSTIP
- 5. Status • Apache CloudStack has issued patch instructions • We’re working on updated SystemVM templates
- 6. How to patch • ssh to SystemVM • apt-get update • apt-get install openssl libssl1.0.0 • /etc/init.d/apache2 restart
- 7. How to verify dpkg -l|grep ssl ii libssl1.0.0:i386 1.0.1e-2+deb7u6 i386 SSL shared libraries ii openssl 1.0.1e-2+deb7u6 i386 Secure Socket Layer (SSL) binary
- 8. External tests • http://filippo.io/Heartbleed/ • https://gist.github.com/takeshixx/10107280 - run yourself
- 9. Honeypot Using http://packetstormsecurity.com/files/126068/hb_honeypot.pl.txt $ sudo perl heartbleed_honeypot.pl 182.118.60.51 182.118.60.51 182.118.60.51 182.118.60.51
- 10. Honeypot sniff
- 11. Honeypot sniff
- 12. Honeypot sniff
- 13. ASF Infrastructure team: “Thank you for your patience while we have worked to sort this out. We expect to reset all LDAP passwords within the next 48 hours or so, so do not be alarmed when your password stops working.”