A few weeks ago here in the above ground portions of the Gibbs Universal Industries Secret Underground Bunker we got hooked on the British series "Downton Abbey".
Read more
Last year on June 8, 2011 we all experienced World IPv6 Day. This was a 24-hour test for web sites to use both an IPv4 and IPv6 addresses simultaneously for the same URL. One June 6, 2012 there will be World IPv6 Launch in which many organizations will enable IPv6 forever. Enterprises will need to prepare for World IPv6 Launch whether or not they are actively participating and enabling IPv6.
World IPv6 Day Read more
Splunk (SPLK) went public this week and both Infoblox and Palo Alto Networks will soon follow. This could be the start of a security IPO run moving forward. Why? Status quosecurity defenses aren't working so there is a burgeoning market for next-generation security technologies. This market opportunity has driven M&A activities for years but we've recently seen far broader interest in security. HP grabbed ArcSight and started a security business unit. IBM acquired Q1 Labs and did the same. Dell purchased SecureWorks and SonicWall. Read more
A few weeks ago here in the above ground portions of the Gibbs Universal Industries Secret Underground Bunker we got hooked on the British series "Downton Abbey".
Read more
The Wikimedia Foundation, making good on a Dec. 23 promise by Jimmy Wales during the height of the anti-SOPA firestorm, has publicly announced it is transferring all of its domain names from GoDaddy to MarkMonitor as punishment for GoDaddy's early support of the failed anti-piracy legislation. Read more
So, here in Gearhead last week I discussed the problems AT&T has been having in providing me with a reliable DSL service and it seems a significant number of you feel my pain.
Read more
While it's far too early for SOPA opponents to declare victory, a trio of developments late last night and this morning make clear that concerted efforts to block or dramatically alter this ill-conceived antipiracy legislation are having a significant effect.
(Pics of near-riot, egging of Apple store in China)
Those developments: Read more
Having spent a good chunk of the afternoon hopscotching from SOPA-related news story to blog post to social-media forum and back again, I'm thinking it might be worthwhile to point to a handful of the more notable stops. Read more
US law enforcement today said it had smashed what it called a massive, sophisticated Internet fraud scheme that injected malware in more than four million computers in over 100 countries while generating $14 million in illegitimate income. Of the computers infected with malware, at least 500,000 were in the United States, including computers belonging to U.S. government agencies, such as NASA. Read more
My editor is being very understanding because this column is late, late, late. Why? Well, if you recall, last week I was wrestling my 2Wire 2701HG-B DSL Gateway trying to persuade it to recognize a really cool NAS device, the QNAP TS-1079 Pro, so I could enable port forwarding to expose the QNAP to the world.
Read more
"Currently 2Wire does not support Universal Plug and Play (UPnP). 2Wire customizes all gateway products and software to meet the requirements of our ISP partners. If supporting UPNP became a requirement, 2Wire will include the functionality to the system. UPNP allows the OS to control the firewall configuration that could have an adverse effect on any systems running behind a firewall that is being controlled by malicious software operating on a LAN-based computer."
Read more
I stumbled across this way cool app for iOS devices that I just had to cover this week. The app is called Air Display, published by Avatron Software, and it does something really cool: It turns your iPad, iPhone or iPod Touch into an extension of your OS X or Windows desktop, wirelessly!
Read more
Amazon.com is denying widespread reports suggesting that pressure from the office of Sen. Joseph Lieberman, chairman of the Homeland Security Committee, prompted it to boot Wikileaks from Amazon Web Services earlier this week.
Wikileaks replies that Amazon's pants are on fire.
Comcast customers on the East Coast looking to get an early jump on their Cyber Monday shopping last night were stymied by a DNS-related Internet service disruption. However, a number were able to fashion their own fixes to the problem after being directed to alternatives such as OpenDNS and Google Public DNS. Read more
Security practitioners for decades have advised people to limit DNS queries against their DNS servers to only use UDP port 53. The reality is that DNS queries can also use TCP port 53 if UDP port 53 is not accepted. Now with the impending deployment of DNSSEC and the eventual addition of IPv6 we will need to allow our firewalls for forward both TCP and UDP port 53 packets. Read more
Well, my tribulations with the Netgear eight-port Gigabit ProSafe VPN Firewall (model FVS318G) I discussed in the last installment of Gearhead appear to have been caused by faulty hardware.
To recap: I purchased one of these devices for my network and during the first few days of use my FVS318G randomly turned into a brick with pretty flashing lights that made it look like it was working when, in fact, it was not.
Read more
Google is planning on offering a free, public DNS server, adding yet another prong to its many-pronged attack on making the Web faster. With this move, anyone would be able to set up a browser to access Google's public DNS server, rather than using an Internet Service Provider or corporate DNS server. Read more
Today we get to take a look at one of the clever advantages of using SRV resource records in DNS to provide locator information for Active Directory domain controllers. Because Windows clients are “wired” to check DNS to find a DC, Windows can manipulate DNS to fool a client into thinking something that isn’t true! Read more
Earlier this month we discussed how special DNS resource records called SRV (service locator) records help Windows systems find domain controllers so they can authenticate to the domain. Interestingly, SRV records also help Windows systems find other kinds of important computers, too. Read more
Any discussion of DNS and Active Directory must come quickly to a discussion of the AD “signposts” known as the SRV (service locator) records. SRV is just another resource record type, like A and PTR and MX. It is defined in the RFC 2782 document, which states that “The SRV RR allows administrators to use several servers for a single domain, to move services from host to host with little fuss, and to designate some hosts as primary servers for a service and others as backups.” Read more