tag:blogger.com,1999:blog-87315069394808950682024-11-10T16:15:44.806-08:00WirelessPhreakWirelessPhreak.com is my personal blog where I post topics related to Technology, Security, Travel, and other random stuff. I am also a co-host on the podcast "The NBD Show" so go check it out.Unknownnoreply@blogger.comBlogger139125tag:blogger.com,1999:blog-8731506939480895068.post-60100059309699238032024-10-25T21:41:00.002-07:002024-10-25T21:44:00.959-07:00Unlock Netflix Hidden Genres: Complete Guide to Secret Codes (2024)
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgi-3xIy2obQNXwz8KxusywCSAYaW-3HnTnBtp8fv95j43m6p5FINX-Lb1CVhavGq9jDhCTWx-SI8ceAI4iHtJ8VqGeS7DDIH-QVRUXBzjIYIDxLDLNNR5exWMakk2i9_Vlb07O1FunmFAzvZuWFiWbclbgGytqNuvRFNqeHZis_gF8JUPFuOTvQUbDN7MR/s1200/netflix-secret-genre-codes-opener-UD.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="800" data-original-width="1200" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgi-3xIy2obQNXwz8KxusywCSAYaW-3HnTnBtp8fv95j43m6p5FINX-Lb1CVhavGq9jDhCTWx-SI8ceAI4iHtJ8VqGeS7DDIH-QVRUXBzjIYIDxLDLNNR5exWMakk2i9_Vlb07O1FunmFAzvZuWFiWbclbgGytqNuvRFNqeHZis_gF8JUPFuOTvQUbDN7MR/w640-h426/netflix-secret-genre-codes-opener-UD.jpg" width="640" /></a></div><br /><div style="text-align: left;"><br /></div><h3 style="text-align: left;">Whats the Problem?</h3><div style="text-align: left;"><div style="text-align: left;">Everyone knows how difficult it is to find something to watch on streaming TV. You scroll and scroll to only see what Netflix thinks you want to see, you literally end up seeing the same 20 or 30 show and movies in every section of the Netflix app. But there is a secret weapon that may just save you some time and help you find something more interesting to watch. </div><div style="text-align: left;"><br /></div><h3 style="text-align: left;">How does it work ?</h3><div>Once you've found the code for the category that you're searching, just put the code in your Netflix search field or you can replace the xx in this link https://netflix.com/browse/genre/xx with the code if you are viewing in your browser.</div></div><h2 style="text-align: left;"><br /></h2><h2 style="text-align: center;">Movie Categories</h2><div><br /></div>
<section>
<h3 style="text-align: left;">Action & Adventure</h3>
<ul>
<li>1365 - Action & Adventure</li>
<li>43040 - Action comedies</li>
<li>1568 - Action sci-fi & fantasy</li>
<li>43048 - Action thrillers</li>
<li>7442 - Adventures</li>
<li>77232 - Asian action movies</li>
<li>46576 - Classic Action & Adventure</li>
<li>10118 - Comic book and superhero movies</li>
<li>9584 - Crime action & adventure</li>
<li>11828 - Foreign action & adventure</li>
<li>20541 - Hijacking movies</li>
<li>8985 - Martial arts movies</li>
<li>2125 - Military action & adventure</li>
<li>10702 - Spy action & adventure</li>
<li>7700 - Westerns</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Anime</h3>
<ul>
<li>7424 - Anime</li>
<li>11881 - Adult animation</li>
<li>5507 - Animal tales</li>
<li>2729 - Anime Sci-Fi</li>
<li>2653 - Anime action</li>
<li>9302 - Anime comedies</li>
<li>452 - Anime dramas</li>
<li>11146 - Anime fantasy</li>
<li>3063 - Anime features</li>
<li>10695 - Anime horror</li>
<li>6721 - Anime series</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Children & Family Movies</h3>
<ul>
<li>783 - Children & family movies</li>
<li>5507 - Animal tales</li>
<li>67673 - Disney</li>
<li>10659 - Education for kids</li>
<li>51056 - Family features</li>
<li>52843 - Kids Music</li>
<li>27346 - Kids' TV</li>
<li>10056 - Movies based on children's books</li>
<li>6796 - Movies for ages 0 to 2</li>
<li>6962 - Movies for ages 11 to 12</li>
<li>6218 - Movies for ages 2 to 4</li>
<li>5455 - Movies for ages 5 to 7</li>
<li>561 - Movies for ages 8 to 10</li>
<li>11177 - TV cartoons</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Christmas</h3>
<ul>
<li>1527064 - British christmas children & family films</li>
<li>1721544 - Canadian christmas children & family films</li>
<li>1474017 - Christmas children & family films</li>
<li>1477206 - Christmas children & family films for ages 11 to 12</li>
<li>1477201 - Christmas children & family films for ages 5 to 7</li>
<li>1477204 - Christmas children & family films for ages 8 to 10</li>
<li>1476024 - Christmas children & family films from the 1990s</li>
<li>1527063 - European christmas children & family films</li>
<li>1394522 - Family-friendly christmas films</li>
<li>1475066 - Feel-good christmas children & family films</li>
<li>1475071 - Goofy christmas children & family films</li>
<li>1394527 - Romantic christmas films</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Classic Movies</h3>
<ul>
<li>31574 - Classic Movies</li>
<li>47147 - Classic sci-fi & fantasy</li>
<li>46553 - Classic TV shows</li>
<li>46576 - Classic action & adventure</li>
<li>31694 - Classic comedies</li>
<li>29809 - Classic dramas</li>
<li>32392 - Classic musical comedy</li>
<li>31273 - Classic romantic movies</li>
<li>46588 - Classic thrillers</li>
<li>48744 - Classic war movies</li>
<li>47465 - Classic westerns</li>
<li>52858 - Epics</li>
<li>7687 - Film Noir</li>
<li>53310 - Silent Movies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Comedies</h3>
<ul>
<li>6548 - Comedies</li>
<li>9302 - Anime comedies</li>
<li>869 - Dark comedies</li>
<li>4426 - Foreign Comedies</li>
<li>89585 - Horror comedies</li>
<li>1402 - Late Night Comedies</li>
<li>26 - Mockumentaries</li>
<li>13335 - Musicals comedies</li>
<li>2700 - Political comedies</li>
<li>5475 - Romantic Comedies</li>
<li>4922 - Satires</li>
<li>9702 - Screwball Comedies</li>
<li>10256 - Slapstick comedies</li>
<li>5286 - Sports comedies</li>
<li>11559 - Stand-up Comedy</li>
<li>3519 - Teen Comedies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Documentaries</h3>
<ul>
<li>6839 - Documentaries</li>
<li>3652 - Biographical documentaries</li>
<li>9875 - Crime documentaries</li>
<li>5161 - Foreign documentaries</li>
<li>5349 - Historical documentaries</li>
<li>4006 - Military documentaries</li>
<li>90361 - Music & concert documentaries</li>
<li>7018 - Political documentaries</li>
<li>10005 - Religious documentaries</li>
<li>2595 - Science & nature documentaries</li>
<li>3675 - Social & cultural documentaries</li>
<li>2760 - Spirituality documentaries</li>
<li>180 - Sports documentaries</li>
<li>1159 - Travel & adventure documentaries</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Dramas</h3>
<ul>
<li>5763 - Dramas</li>
<li>11 - Army dramas</li>
<li>3179 - Biographical dramas</li>
<li>6889 - Crime dramas</li>
<li>4961 - Dramas based on books</li>
<li>3653 - Dramas based on real life</li>
<li>500 - LGBT+ Dramas</li>
<li>6616 - Political Dramas</li>
<li>1255 - Romantic dramas</li>
<li>5012 - Showbiz dramas</li>
<li>3947 - Social issues dramas</li>
<li>7243 - Sports dramas</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Foreign Movies</h3>
<ul>
<li>78367 - Foreign movies</li>
<li>3761 - African Movies</li>
<li>77232 - Asian action movies</li>
<li>5230 - Australian movies</li>
<li>262 - Belgian movies</li>
<li>10757 - British movies</li>
<li>3960 - Chinese movies</li>
<li>32473 - Classic Foreign Movies</li>
<li>10606 - Dutch movies</li>
<li>5254 - Eastern European movies</li>
<li>6485 - Foreign Sci-Fi & fantasy</li>
<li>11828 - Foreign action & adventure</li>
<li>4426 - Foreign comedies</li>
<li>5161 - Foreign documentaries</li>
<li>2150 - Foreign dramas</li>
<li>8243 - Foreign LGBTQ+ movies</li>
<li>8654 - Foreign horror movies</li>
<li>10306 - Foreign thrillers</li>
<li>58807 - French movies</li>
<li>58886 - German movies</li>
<li>61115 - Greek movies</li>
<li>10463 - Indian movies</li>
<li>58750 - Irish movies</li>
<li>8221 - Italian Movies</li>
<li>10398 - Japanese movies</li>
<li>5685 - Korean movies</li>
<li>1613 - Latin american movies</li>
<li>5875 - Middle Eastern movies</li>
<li>63782 - New Zealand movies</li>
<li>7153 - Romantic foreign movies</li>
<li>11567 - Russian movies</li>
<li>9292 - Scandinavian movies</li>
<li>9196 - Southeast Asian Movies</li>
<li>58741 - Spanish movies</li>
<li>434295 - Taiwanese movies</li>
<li>107570 - Thai Movies & TV</li>
<li>1133133 - Turkish movies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Horror Movies</h3>
<ul>
<li>8711 - Horror movies</li>
<li>10944 - Cult horror movies</li>
<li>45028 - Deep sea horror movies</li>
<li>8654 - Foreign horror movies</li>
<li>89585 - Horror comedy</li>
<li>947 - Monster movies</li>
<li>6998 - Satanic stories</li>
<li>8646 - Slasher and serial killer movies</li>
<li>42023 - Supernatural horror movies</li>
<li>52147 - Teen screams</li>
<li>75804 - Vampire horror movies</li>
<li>75930 - Werewolf horror movies</li>
<li>75405 - Zombie horror movies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Independent Movies</h3>
<ul>
<li>7077 - Independent movies</li>
<li>11079 - Experimental movies</li>
<li>11804 - Independent action & adventure</li>
<li>4195 - Independent comedies</li>
<li>384 - Independent dramas</li>
<li>3269 - Independent thrillers</li>
<li>9916 - Romantic independent movies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">LGBTQ+</h3>
<ul>
<li>5977 - LGBTQ+</li>
<li>7120 - LGBTQ+ Comedies</li>
<li>4720 - LGBTQ+ Documentaries</li>
<li>500 - LGBTQ+ Dramas</li>
<li>65263 - LGBTQ+ TV Shows</li>
<li>3329 - Romantic LGBTQ+ Movies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Music</h3>
<ul>
<li>1701 - Music</li>
<li>32392 - Classic musicals</li>
<li>1105 - Country & western/folk</li>
<li>59433 - Disney musicals</li>
<li>10271 - Jazz & easy listening</li>
<li>52843 - Kids music</li>
<li>10741 - Latin music</li>
<li>13335 - Musicals</li>
<li>3278 - Rock & pop concerts</li>
<li>13573 - Showbiz musicals</li>
<li>55774 - Stage musicals</li>
<li>9472 - Urban & dance concerts</li>
<li>2856 - World music concerts</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Others</h3>
<ul>
<li>34399 - All movies</li>
<li>29764 - Art House Movies</li>
<li>52858 - Epics</li>
<li>11079 - Experimental movies</li>
<li>52804 - Faith & spirituality movies</li>
<li>9744 - Fantasy movies</li>
<li>7687 - Film noir</li>
<li>31851 - Gangster movies</li>
<li>839338 - Only on Netflix</li>
<li>6998 - Satanic stories</li>
<li>4922 - Satires</li>
<li>11559 - Stand-up comedies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Romantic Movies</h3>
<ul>
<li>8883 - Romantic movies</li>
<li>31273 - Classic romantic movies</li>
<li>36103 - Quirky romance</li>
<li>5475 - Romantic comedies</li>
<li>1255 - Romantic dramas</li>
<li>502675 - Romantic favorites</li>
<li>7153 - Romantic foreign movies</li>
<li>9916 - Romantic independent movies</li>
<li>35800 - Steamy romantic movies</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Sci-Fi & Fantasy</h3>
<ul>
<li>1492 - Sci-Fi & Fantasy</li>
<li>1568 - Action Sci-Fi & fantasy</li>
<li>3327 - Alien Sci-Fi</li>
<li>47147 - Classic Sci-Fi & fantasy</li>
<li>4734 - Cult Sci-Fi & fantasy</li>
<li>9744 - Fantasy movies</li>
<li>6485 - Foreign Sci-Fi & fantasy</li>
<li>6926 - Sci-Fi adventure</li>
<li>3916 - Sci-Fi dramas</li>
<li>1694 - Sci-Fi horror movies</li>
<li>11014 - Sci-Fi thrillers</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Sports Movies</h3>
<ul>
<li>4370 - Sports movies</li>
<li>12339 - Baseball movies</li>
<li>12762 - Basketball movies</li>
<li>12443 - Boxing movies</li>
<li>12803 - Football movies</li>
<li>8985 - Martial arts movies</li>
<li>6695 - Martial arts, boxing & wrestling</li>
<li>12549 - Soccer movies</li>
<li>9327 - Sports & Fitness</li>
<li>5286 - Sports comedies</li>
<li>180 - Sports documentaries</li>
<li>7243 - Sports dramas</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">TV Shows</h3>
<ul>
<li>83 - TV Shows</li>
<li>52117 - British TV Shows</li>
<li>46553 - Classic TV shows</li>
<li>26146 - Crime TV shows</li>
<li>74652 - Cult TV shows</li>
<li>72436 - Food & travel</li>
<li>27346 - Kids' TV</li>
<li>67879 - Korean TV shows</li>
<li>25804 - Military TV shows</li>
<li>4814 - Miniseries</li>
<li>9833 - Reality TV</li>
<li>52780 - Science & nature</li>
<li>1372 - TV Sci-Fi & fantasy</li>
<li>10673 - TV action & adventure</li>
<li>10375 - TV comedies</li>
<li>10105 - TV documentaries</li>
<li>11714 - TV dramas</li>
<li>83059 - TV horror</li>
<li>4366 - TV mysteries</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Teen TV Shows</h3>
<ul>
<li>60951 - Teen TV shows</li>
<li>3519 - Teen comedies</li>
<li>9299 - Teen dramas</li>
<li>52147 - Teen screams</li>
</ul>
</section>
<section>
<h3 style="text-align: left;">Thrillers</h3>
<ul>
<li>8933 - Thrillers</li>
<li>43048 - Action thrillers</li>
<li>46588 - Classic thrillers</li>
<li>10499 - Crime thrillers</li>
<li>10306 - Foreign thrillers</li>
<li>31851 - Gangster movies</li>
<li>3269 - Independent thrillers</li>
<li>9994 - Mysteries</li>
<li>10504 - Political thrillers</li>
<li>5505 - Psychological thrillers</li>
<li>11014 - Sci-Fi thrillers</li>
<li>9147 - Spy thrillers</li>
<li>972 - Steamy thrillers</li>
<li>11140 - Supernatural thrillers</li>
</ul>
</section>
Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-22836102843730902792024-08-13T19:37:00.000-07:002024-08-13T19:40:05.835-07:00Ultimate Guide to Protecting Your Online Identity: Password Security, Two-Factor Authentication, and Credit Freezing<p> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_wy9331UQD_wWvk-WXlqfPqTKdBUXVigoiz_pnOg2GwsG0Cd2AAniNdoGAv5F1gassEMc-kNYNPt1a4d3i-NvcFHBUdW3Q0HWf1VNlnZh84DhV844p4naeDfl6JhghjONEhTUAPZiVtnxB4qFoHLN4-V5MDVXC1pt1_TqFxd8u2VFZ9LtzkrRhMSkdiaw/s1280/ai-generated-8018489_1280.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="717" data-original-width="1280" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_wy9331UQD_wWvk-WXlqfPqTKdBUXVigoiz_pnOg2GwsG0Cd2AAniNdoGAv5F1gassEMc-kNYNPt1a4d3i-NvcFHBUdW3Q0HWf1VNlnZh84DhV844p4naeDfl6JhghjONEhTUAPZiVtnxB4qFoHLN4-V5MDVXC1pt1_TqFxd8u2VFZ9LtzkrRhMSkdiaw/w640-h358/ai-generated-8018489_1280.png" width="640" /></a></p><p> </p><p>With the many data breeches and most recently the 2.9billions records leaked from the National Public Data Breach its safe to assume your information is public. Safeguarding your personal information is more crucial than ever. With cyber threats evolving and becoming increasingly sophisticated, adopting these three simple security measures can make a significant difference in protecting your online identity. One of the most effective strategies is to avoid reusing passwords across multiple accounts. Similarly, enabling two-factor authentication (2FA) adds an essential layer of security, making unauthorized access far more challenging. Furthermore, freezing your credit reports can prevent identity thieves from opening new accounts in your name, offering you peace of mind and control over your financial information. By integrating these practices into your online security routine, you can substantially reduce the risk of identity theft and enhance your overall protection in the interconnected world we live in.</p><p></p><p> </p><ol style="text-align: left;"><li><p><b>Don't Reuse Passwords:</b></p><ul><li><b>Explanation:</b> Using the same password across multiple accounts poses a significant security risk. If one account is compromised, all other accounts with the same password become vulnerable. Cybercriminals often try to exploit this common practice to gain unauthorized access to various online services. By using unique and complex passwords for each account, you minimize the potential impact of a security breach.</li><ul><li><p><b>Security Breaches</b>: If one of the websites where you use your password experiences a security breach, hackers can obtain your password. If you reuse that password on multiple sites, hackers can easily access all those accounts, putting your sensitive information at risk.</p></li><li><p><b>Compromised Accounts</b>: Reusing passwords increases the likelihood of multiple accounts being compromised. Once hackers gain access to one account, they can attempt to access other accounts using the same credentials, potentially causing widespread damage.</p></li><li><p><b>Data Privacy</b>: Different websites have different levels of security measures in place to protect your password. If you reuse passwords across multiple sites, you're essentially entrusting your sensitive information to the security practices of the least secure website.</p></li><li><p><b>Identity Theft</b>: Reusing passwords makes it easier for cybercriminals to steal your identity. They can impersonate you on various platforms, access your personal information, and even engage in fraudulent activities using your credentials.</p></li><li><p><b>Financial Loss</b>: With access to multiple accounts, hackers can exploit your financial information, make unauthorized transactions, or steal your funds. Reusing passwords amplifies the risk of financial loss across various platforms.</p></li><li><p><b>Reputation Damage</b>: If hackers gain access to your accounts and use them to spread malicious content or engage in inappropriate behavior, it can tarnish your reputation, both personally and professionally.</p></li><li><p><b>Lack of Control</b>: Reusing passwords means you have less control over your online security. You're essentially relying on the security measures of other websites to protect your accounts, rather than taking proactive steps to safeguard your information.</p></li><li><p><b>Difficulty in Recovery</b>: If multiple accounts are compromised due to password reuse, the process of recovering them can be complex and time-consuming. It may involve contacting customer support, providing proof of identity, and resetting passwords for each affected account.</p></li><li><p><b>Ease of Guessing</b>: If a hacker discovers one of your passwords, they may try it across other accounts, especially if they notice a pattern of password reuse. Using unique passwords for each account makes it more difficult for hackers to guess or crack your credentials.</p></li><li><p><b>Best Practice</b>: Following security best practices, such as using unique passwords for each account, is essential for protecting your digital identity and maintaining online security in today's interconnected world.</p></li></ul></ul></li><li><p><b>Enable Two-Factor Authentication (2FA) on Accounts:</b></p><ul><li><b>Explanation:</b> Two-factor authentication adds an extra layer of security by requiring users to provide a second form of identification in addition to their password. This could be a temporary code sent to your mobile device, a biometric scan, or a hardware token. Even if someone manages to obtain your password, they would still need the second factor to access your account. Enabling 2FA significantly reduces the risk of unauthorized access and enhances the overall security of your accounts.</li></ul></li><ol><ul><li><p><b>Enhanced Security</b>: 2FA adds an extra layer of security beyond just a username and password, requiring a second form of authentication such as a code sent to your phone or generated by an authentication app. This makes it significantly harder for attackers to gain unauthorized access to your accounts, even if they have your password.</p></li><li><p><b>Protection Against Password Theft</b>: Even if your password is compromised through means such as phishing attacks or data breaches, 2FA can prevent unauthorized access because the attacker would also need access to your second factor of authentication (e.g., your phone).</p></li><li><p><b>Reduced Risk of Account Takeover</b>: Account takeover (ATO) is a common cyber threat where attackers gain unauthorized access to user accounts. Enabling 2FA significantly reduces the risk of ATO because even if attackers obtain your password, they would still need the second factor to access your account.</p></li><li><p><b>Compliance Requirements</b>: Some organizations, particularly in regulated industries such as finance and healthcare, may require users to enable 2FA as part of compliance measures to enhance security and protect sensitive information.</p></li><li><p><b>Prevention of Identity Theft</b>: By adding an extra layer of authentication, 2FA helps prevent identity theft by ensuring that only authorized users can access your accounts, reducing the likelihood of fraudulent activities.</p></li><li><p><b>Peace of Mind</b>: Knowing that your accounts are protected with an additional layer of security can provide peace of mind, especially considering the increasing prevalence of cyber threats and data breaches.</p></li><li><p><b>Support from Major Platforms</b>: Many popular online services and platforms offer 2FA as an option, making it easy to implement and integrate into your security practices. This includes social media platforms, email services, online banking, and more.</p></li><li><p><b>Ease of Use</b>: While adding an extra step to the login process, 2FA is relatively easy to set up and use. Once configured, it typically only requires a few seconds to enter the additional authentication code, providing a significant security benefit for minimal inconvenience.</p></li><li><p><b>Adoption of Advanced Authentication Methods</b>: Beyond traditional SMS-based 2FA, many platforms support more secure authentication methods such as authenticator apps (e.g., Google Authenticator, Authy) or hardware tokens (e.g., YubiKey), further enhancing security.</p></li><li><p><b>Protection Across Multiple Devices</b>: With 2FA, even if you access your accounts from multiple devices, each device can be set up to require the second factor of authentication, ensuring consistent security across all your devices.</p><p>Overall, enabling 2FA is a crucial step in safeguarding your online accounts and personal information against unauthorized access and cyber threats.</p></li></ul></ol></ol><ol style="text-align: left;"><li><b>Freeze Credit Reporting Accounts:</b></li></ol><ul style="margin-left: 40px; text-align: left;"><li><b>Explanation:</b> Freezing your credit reports prevents unauthorized individuals from opening new financial accounts or lines of credit in your name. When your credit is frozen, potential creditors can't access your credit report, making it challenging for identity thieves to apply for credit using your personal information. This is a proactive measure to protect your financial identity and prevent fraud. If you need to apply for new credit, you can temporarily lift the freeze using a unique PIN provided by the credit reporting agency.</li><ul><li><p><b>Preventing Identity Theft</b>: Freezing your credit makes it extremely difficult for identity thieves to open new accounts or lines of credit in your name. Since lenders typically check your credit report before approving new credit applications, a frozen credit report prevents unauthorized individuals from opening accounts using your identity.</p></li><li><p><b>Enhancing Security After a Data Breach</b>: If your personal information has been compromised in a data breach (e.g., from a hacked website or company), freezing your credit can prevent cybercriminals from exploiting that data to open fraudulent accounts or loans in your name.</p></li><li><p><b>Protecting Against Unauthorized Inquiries</b>: Freezing your credit prevents unauthorized parties from accessing your credit report, which can help prevent unauthorized credit inquiries. This can be particularly useful if you're not actively seeking new credit and want to minimize the risk of unauthorized activity.</p></li><li><p><b>Peace of Mind</b>: Knowing that your credit accounts are frozen adds an extra layer of security and peace of mind. You can feel more confident that your financial information is protected, even if your personal data is compromised through a data breach or other means.</p></li><li><p><b>Control Over Access to Your Credit Report</b>: When you freeze your credit, you have control over who can access your credit report. You can temporarily lift the freeze when you need to apply for new credit, then re-freeze it afterward, giving you greater control over who can view your credit information.</p></li><li><p><b>No Impact on Existing Accounts</b>: Freezing your credit does not affect your existing credit accounts or credit score. You can continue to use your existing credit cards and loans as usual. The freeze only applies to new credit applications.</p></li><li><p><b>Cost-Effective Security Measure</b>: In many cases, freezing your credit is a relatively inexpensive security measure. Depending on where you live, there may be nominal fees associated with placing or lifting a freeze, but the protection it provides can outweigh these costs.</p></li><li><p><b>Alternative to Credit Monitoring</b>: While credit monitoring services can alert you to suspicious activity on your credit report, freezing your credit provides a more proactive and comprehensive form of protection. It prevents unauthorized access to your credit report altogether, rather than simply monitoring for potential fraud.</p></li><li><p><b>Legal Protection</b>: In some jurisdictions, freezing your credit may provide legal protections in the event of identity theft or unauthorized credit activity. Check the laws in your area to understand the specific protections available to you.</p></li><li><p><b>Flexibility</b>: You have the flexibility to freeze and unfreeze your credit at any time, allowing you to tailor your security measures to your individual needs and circumstances.</p></li></ul></ul><p style="text-align: left;">By incorporating these practices into your online habits, you can significantly reduce the risk of identity theft and enhance the security of your personal information. Additionally, staying informed about cybersecurity best practices and regularly updating your passwords further strengthens your defense against potential threats.</p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-14268511771607718932024-08-12T22:57:00.000-07:002024-08-12T23:03:36.659-07:00Top Online Resources to Immerse Yourself in Tiki Culture: From Cocktails to Decor<p style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilgkKTghGWIXsVWkmlDboXItatGeptjnYp8rUJzWOGYvhb1652wfsnEkNMPz-fda7K23pq7c_vTan52q17OcpkXl3B_mgeY5sVWl3n7LA6QNRwgmtoAu9gMxR7sv1yqrl5g3q3x1eNaZKNfkt_KKTDd4XBtKPkCR2rTw1UIY-sHMlD89Uync6_ANOUuO10/s2048/1b2bf90f-3b99-44eb-b584-508e491d4e85-1.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="2048" data-original-width="2048" height="640" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilgkKTghGWIXsVWkmlDboXItatGeptjnYp8rUJzWOGYvhb1652wfsnEkNMPz-fda7K23pq7c_vTan52q17OcpkXl3B_mgeY5sVWl3n7LA6QNRwgmtoAu9gMxR7sv1yqrl5g3q3x1eNaZKNfkt_KKTDd4XBtKPkCR2rTw1UIY-sHMlD89Uync6_ANOUuO10/w640-h640/1b2bf90f-3b99-44eb-b584-508e491d4e85-1.png" width="640" /></a></p><article class="w-full text-token-text-primary focus-visible:outline-2 focus-visible:outline-offset-[-4px]" data-scroll-anchor="false" data-testid="conversation-turn-3" dir="auto" tabindex="0"><div class="text-base py-[18px] px-3 md:px-4 m-auto md:px-5 lg:px-1 xl:px-5"><div class="mx-auto flex flex-1 gap-4 text-base md:gap-5 lg:gap-6 md:max-w-3xl lg:max-w-[40rem] xl:max-w-[48rem]"><div class="group/conversation-turn relative flex w-full min-w-0 flex-col agent-turn"><div class="flex-col gap-1 md:gap-3"><div class="flex max-w-full flex-col flex-grow"><div class="min-h-[20px] text-message flex w-full flex-col items-end gap-2 whitespace-pre-wrap break-words [.text-message+&]:mt-5 overflow-x-auto" data-message-author-role="assistant" data-message-id="fdcb2d05-6ea6-4276-81f1-0b7cb1bf1b72" dir="auto"><div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]"><div class="markdown prose w-full break-words dark:prose-invert dark"><p> </p><p>Recently I have been re-reading Smugglers Cove and just finished the section that talks about online resources. So whether you're a seasoned tiki enthusiast or just beginning your journey, the internet is brimming with resources to help you explore this fascinating subculture. Here's a roundup of some of the best online resources to get you started.</p><p> </p><h3>1. <b>Tiki Central</b></h3><ul><li><b>Website:</b> <a href="https://www.tikicentral.com/" rel="noreferrer" target="_blank"><i>tikicentral.com</i></a></li><li><b>Overview:</b> A vibrant online community dedicated to tiki culture. It features forums where enthusiasts share ideas, recipes, DIY projects, and discuss tiki bars and events.</li></ul><h3>2. <b>The Atomic Grog</b></h3><ul><li><b>Website:</b> <i><a href="http://atomicgrog.com" target="_blank">atomicgrog.com</a></i></li><li><b>Overview:</b> A blog focusing on tiki cocktails, bar reviews, and news related to tiki culture. It also includes detailed recipes for classic and modern tiki drinks.</li></ul><h3>3. <b>Tiki Drink Books</b></h3><ul><li><b>Recommendation:</b> Books like <a href="https://a.co/d/gEyDOst" target="_blank"><i>Smuggler’s Cove: Exotic Cocktails, Rum, and the Cult of Tiki</i></a> by Martin Cate and <i><a href="https://a.co/d/a8xyvIG" target="_blank">Tiki Pop: America Imagines Its Own Polynesian Paradise </a></i>by Sven Kirsten offer both historical context and practical guides.</li></ul><h3>4. <b>Instagram and Pinterest</b></h3><ul><li><b>Search Tags:</b> Use tags like #tiki, #tikidrinks, #tikibar, and #tikiculture to find inspiration and connect with other tiki enthusiasts.</li></ul><h3>5. <b>YouTube Channels</b></h3><ul><li><b>Example:</b> <i><a href="https://www.youtube.com/@TheEducatedBarfly" target="_blank">The Educated Barfly</a> </i>and <i><a href="https://www.youtube.com/@howtodrink" target="_blank">How to Drink </a></i>regularly feature tiki cocktail recipes and techniques.</li><li><b>Overview:</b> These channels offer video tutorials on how to make tiki drinks, often with historical context and modern twists.</li></ul><h3>6. <b>Online Tiki Shops</b></h3><ul><li><b>Example:</b> <i><a href="https://www.tikifarm.com/" rel="noreferrer" target="_blank">Tiki Farm</a></i> and <br /></li><li><b>Overview:</b> These shops offer tiki mugs, decor, and other tiki-themed items, perfect for setting up your own tiki bar.</li></ul><h3>7. <b>Reddit</b></h3><ul><li><b>Subreddit:</b> <a href="https://www.reddit.com/r/Tiki/" target="_blank">r/Tiki</a><br /></li><li><b>Overview:</b> A community of tiki enthusiasts sharing photos, recipes, and tips. It’s a great place to ask questions and share your own creations.</li></ul><h3>8. <b>Exotic Tiki Island Podcast</b></h3><ul><li><b>Website:</b> <a href="http://www.exotictikiisland.com/" rel="noreferrer" target="_blank"><i>exotictikiisland.com</i></a></li><li><b>Overview:</b> A podcast that immerses listeners in the sounds and stories of tiki culture, featuring music, interviews, and tiki history.</li></ul><h3>9. <b>Beachbum Berry's Tiki Resources</b></h3><ul><li><b>Website:</b> <i><a href="http://www.beachbumberry.com/" rel="noreferrer" target="_blank">beachbumberry.com</a></i></li><li><b>Overview:</b> Jeff "Beachbum" Berry is a renowned tiki historian and cocktail expert. His site offers a wealth of knowledge on tiki drinks, history, and his books, such as <i>Beachbum Berry’s Sippin’ Safari</i>.</li></ul><h3>10. <b>Tiki Magazine</b></h3><ul><li><b>Website:</b> <i><a href="http://www.tikimagazine.com/" rel="noreferrer" target="_new">tikimagazine.com</a></i></li><li><b>Overview:</b> A magazine dedicated to tiki culture, covering art, events, music, and tiki bars. It's a great resource for staying updated on the latest in the tiki scene.</li></ul><h3>11. <b>Tiki-Tastic YouTube Channels</b></h3><ul><li><b>Example:</b> <a href="https://www.youtube.com/@TikiWithRay" target="_blank"><i>Tiki with Ray</i></a></li><li><b>Overview:</b> This channel offers a mix of tiki bar reviews, interviews with tiki experts, and tutorials on creating tiki decor and cocktails.</li></ul><h3>12. <b>Facebook Groups</b></h3><ul><li><b>Examples:</b> <i><a href="https://www.facebook.com/tikioasis/" target="_blank">Tiki Oasis</a></i>, <i><a href="https://www.facebook.com/groups/905097959514265/" target="_blank">Tiki Recipes and Culture</a>, <a href="https://www.facebook.com/groups/169558449730736/" target="_blank">Sacramento Ohana</a></i></li><li><b>Overview:</b> These groups provide a community space for sharing recipes, decor ideas, and event information related to tiki culture.</li></ul><h3>13. <b>Tiki Oasis</b></h3><ul><li><b>Website:</b><i> <a href="https://www.tikioasis.com/" rel="noreferrer" target="_blank">tikioasis.com</a></i></li><li><b>Overview:</b> Tiki Oasis is the largest and longest-running tiki event in the world, featuring a mix of music, art, culture, and tiki enthusiasts. Their website provides event information, photos, and resources.</li></ul><h3>14. <b>Tiki Cocktail Apps</b></h3><ul><li><b>Example:</b> <a href="https://apps.apple.com/us/app/beachbum-berrys-total-tiki/id835148977" target="_blank"><i>Total Tiki</i> </a>by Beachbum Berry</li><li><b>Overview:</b> An app that provides recipes from Beachbum Berry's extensive collection of tiki drinks. It's perfect for anyone looking to mix up authentic tiki cocktails at home.</li></ul><p> </p><p>Whether you're looking to craft the perfect tiki cocktail, discover the history behind this vibrant subculture, or connect with a community of enthusiasts, these online resources offer everything you need. So, grab your favorite tiki mug, mix up a classic drink, and start exploring the rich world of tiki culture today!</p></div></div></div></div></div></div></div></div></article><article class="w-full text-token-text-primary focus-visible:outline-2 focus-visible:outline-offset-[-4px]" data-scroll-anchor="true" data-testid="conversation-turn-5" dir="auto" tabindex="0"><div class="text-base py-[18px] px-3 md:px-4 m-auto md:px-5 lg:px-1 xl:px-5"><div class="mx-auto flex flex-1 gap-4 text-base md:gap-5 lg:gap-6 md:max-w-3xl lg:max-w-[40rem] xl:max-w-[48rem]"><div class="flex-shrink-0 flex flex-col relative items-end"><div><div class="pt-0"><div class="gizmo-bot-avatar flex h-8 w-8 items-center justify-center overflow-hidden rounded-full"><div class="relative p-1 rounded-sm flex items-center justify-center bg-token-main-surface-primary text-token-text-primary h-8 w-8"><svg class="icon-md" fill="none" height="41" viewbox="0 0 41 41" width="41" xmlns="http://www.w3.org/2000/svg"><text x="-9999" y="-9999">ChatGPT</text></svg></div></div></div></div></div></div></div></article><p> </p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-11398854494723259202024-07-19T10:39:00.000-07:002024-08-01T15:48:42.065-07:00How to Remove Affected Updates in CrowdStrike: Safe Mode Workaround<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf2v6boMSKVF30fzQj85drfSGHxYIhVXPuSM-Aqo6SUNnwllEyQgPPVMsS_q9HvlO4DSq-lY0i2OeX5qdx6Xsk0nJt9nd2Xrp45GCzpgEnzd7HRlh1eEpEMUMC4Y0f1p04Aa_uWdOri_5S9c85Ye_SPUenhg05WShguvqUuYNhLXZApm-boMwtMrUsSSL1/s710/image001.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="362" data-original-width="710" height="326" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf2v6boMSKVF30fzQj85drfSGHxYIhVXPuSM-Aqo6SUNnwllEyQgPPVMsS_q9HvlO4DSq-lY0i2OeX5qdx6Xsk0nJt9nd2Xrp45GCzpgEnzd7HRlh1eEpEMUMC4Y0f1p04Aa_uWdOri_5S9c85Ye_SPUenhg05WShguvqUuYNhLXZApm-boMwtMrUsSSL1/w640-h326/image001.jpeg" width="640" /></a></div><p></p><p><br /></p><p>This will be short and sweet, if you have privileges to boot your PC into safe mode you can follow the following steps to delete the affected update.</p><p><br /></p><div class="md text-14 rounded-[8px] pb-2xs" id="t1_ldwcj1q-comment-rtjson-content"><div class="py-0 xs:mx-xs mx-2xs inline-block max-w-full" id="-post-rtjson-content" style="--emote-size: 20px;"><p>
Crowd Strike Workaround Steps:
</p><ol><li>
<p>
Boot Windows into Safe Mode or the Windows Recovery Environment
</p>
</li><li>
<p>
Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
</p>
</li><li>
<p>
Locate the file matching “C-00000291*.sys”, and delete it.
</p>
</li><li>
<p>
Boot the host normally.
</p>
</li></ol>
</div>
</div><p> </p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-80031471222687328102024-05-08T15:34:00.000-07:002024-08-13T19:42:32.852-07:00How to Configure GlobalProtect VPN for Intune MDM: Pre-Login Security Policies Explained<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-WbwSETR521YhMB9EqcJGg-MnPZgyKU7o68sR0WRTryKFsr7suTuhewq09akUK7Hf0xLYXW3TGmIlqfy4VBPpj0pgSKkUVXOegsuVZBfaVAEuCg907D5jalUzMve7hxQ3cAXU1vRBZtrlhnDMc3eB3r6zG2X685Xh8Kei3XtZykxeW6F2wZePwN0MKwOp/s720/Batch-2-Comic_mobile-experience.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="600" data-original-width="720" height="534" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-WbwSETR521YhMB9EqcJGg-MnPZgyKU7o68sR0WRTryKFsr7suTuhewq09akUK7Hf0xLYXW3TGmIlqfy4VBPpj0pgSKkUVXOegsuVZBfaVAEuCg907D5jalUzMve7hxQ3cAXU1vRBZtrlhnDMc3eB3r6zG2X685Xh8Kei3XtZykxeW6F2wZePwN0MKwOp/w640-h534/Batch-2-Comic_mobile-experience.jpg" width="640" /></a></div><p> </p><p>**Disclamer: This is only a guide please work with Microsoft and or Palo Alto Networks if you have any concerns. **</p><p> <br /></p><p>GlobalProtect VPN can be deployed in different connection configurations. One of the most secure is the always-connected model. When 'always on' is configured, the GlobalProtect agent will force all traffic over the VPN tunnel, even when a user is not logged in. This ensures that all traffic from the device is inspected by a firewall and allows desktop support staff to manage the device. One downfall is that it complicates communications with MDM solutions.</p><p> </p><p>MDM software runs all the time, even when users are not logged in. What this means is the software needs to be allowed to access MDM resources 24x7. In GlobalProtect, this is accomplished with a mechanism called pre-login security policies. Pre-login policies are security policies that allow devices authenticated with a machine certificate to connect to generally a more restricted set of resources. Once a user authenticates the VPN connection, it is promoted to a known-user state and corporate firewall policies are applied to the traffic.</p><p> </p><p>What I want to focus on in this write-up is the pre-login security policies that allow Intune software to communicate with its required Microsoft cloud resources.</p><p><br /></p><p>1. The first thing that needs to happen is to determine which endpoints the
Intune client will need to communicate with. This can be accomplished
by running a PowerShell command on an endpoint, which will output the
endpoints you will need to configure in your firewall. Here is a link to
the Microsoft documentation for running the PowerShell commands. <a href="https://tinyurl.com/MS-Intune-Doc" target="_blank">https://tinyurl.com/MS-Intune-Doc</a></p><p> </p><p>2. Once you receive the endpoints, you will need to create a custom URL category and two address object groups. <br /></p><p> </p><p style="text-align: left;"><span> </span>a. The URL category you need to create is for the *.manage.microsoft.com
domain. Because this is a wildcard URL, you cannot create an FQDN object
and will need to create a second security policy just for this. <br /></p><p style="text-align: left;"> </p><p style="text-align: left;"></p><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilmvMl05DWpIpm-PxGHTV_3Us5LW3oVZ8_ZeZRzZfNg8Md9FmKgbMwmKlhytrQ_0T4Z7Z0ShdyqTM6vQmqVpzYOQ1Cup4zFKeAWZ42Dj8Gkh1NUM8SIrQABXWhDygmgHvss3YDYUpzhigDVRqe9RwDoGyZEYoOzjd5wsxUVmfGAtkrHbPYba35EDKXQN2i/s679/url.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="671" data-original-width="679" height="316" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilmvMl05DWpIpm-PxGHTV_3Us5LW3oVZ8_ZeZRzZfNg8Md9FmKgbMwmKlhytrQ_0T4Z7Z0ShdyqTM6vQmqVpzYOQ1Cup4zFKeAWZ42Dj8Gkh1NUM8SIrQABXWhDygmgHvss3YDYUpzhigDVRqe9RwDoGyZEYoOzjd5wsxUVmfGAtkrHbPYba35EDKXQN2i/s320/url.png" width="320" /></a></div><p></p><p style="text-align: left;"><span> </span></p><p style="text-align: left;"><span> </span>b. You will need to create an Intune-FQDN address object group and add the FQDNs that were part of the above PowerShell output.</p><p style="text-align: left;"> </p><p style="text-align: left;"></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimmc9GbEhQnZ2RSOyN29SEjXMsavaF1YsMrgrKwsktZ_kpRsubIogZ3y1g5fyXH6bIf_ckCO48YMSz0Vnh6op6eL1Q9eHlNZPhI0Udki_GXH-pZNdI1_iRDT37o2fOrRJseoeulMbK_qW2_Z-wrySxNfM0GYHhAGKwtlZqRe50ZlFhSTecydLKb3X0LJiL/s655/fqdn.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="655" data-original-width="573" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimmc9GbEhQnZ2RSOyN29SEjXMsavaF1YsMrgrKwsktZ_kpRsubIogZ3y1g5fyXH6bIf_ckCO48YMSz0Vnh6op6eL1Q9eHlNZPhI0Udki_GXH-pZNdI1_iRDT37o2fOrRJseoeulMbK_qW2_Z-wrySxNfM0GYHhAGKwtlZqRe50ZlFhSTecydLKb3X0LJiL/s320/fqdn.png" width="280" /></a></div><br /><p></p><p style="text-align: left;"><span> </span>c. Lastly, you will need to create an Intune-Network address object group and add the network address objects that where generated in the above PowerShell output.</p><p style="text-align: left;"> </p><p style="text-align: left;"></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9w2XTv38V02TuAZc-mjw5KUS_96QB0l6bA7AR6kt98FKpyfbXNs-uYvxLTDAXgH1YTRG9ebUOkQozdcBUvvv1elhcUpgr0NLSF0HlrHjLZS45wyip2NKRQRYUxak-05Ock8JyKS3uU46HCfuRZB1_R72dtpVu4k10E_ZK1hgVlJ_bWBna7WkpqLEOYJ8K/s655/ip.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="655" data-original-width="575" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9w2XTv38V02TuAZc-mjw5KUS_96QB0l6bA7AR6kt98FKpyfbXNs-uYvxLTDAXgH1YTRG9ebUOkQozdcBUvvv1elhcUpgr0NLSF0HlrHjLZS45wyip2NKRQRYUxak-05Ock8JyKS3uU46HCfuRZB1_R72dtpVu4k10E_ZK1hgVlJ_bWBna7WkpqLEOYJ8K/s320/ip.png" width="281" /></a></div><br /><p></p><p>3. Configure security policies to utilize the address and URL categories you created above. <br /></p><p> </p><p><span> </span>a. The first security policy you need to configure is one that leverages
your custom URL category. You will also want to leverage the applicable
App-IDs. <br /></p><p><br /></p><p><span> </span>b. The second policy will use the same App-IDs but will restrict the destination to the two address objects you created earlier.</p><p> </p><p><br /></p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijiimA4VPvhxvMv5J3S9ri18GSU_-AN-5rIjAFFMBaYfbpCVrtE_3U__BUjDbOCZLA99FmvuQRFEeX1da1KhVNp9HfjoQHO7PgpKHA0ZXM-s580n4_WHe4HokrZKGv8WlpmAoVZF2r0pvqvBtqi_xdC4fSrnr2gLXzjyLgNx7wg3ykN1Oslu4bcK6cuhT3/s1640/policies.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="428" data-original-width="1640" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijiimA4VPvhxvMv5J3S9ri18GSU_-AN-5rIjAFFMBaYfbpCVrtE_3U__BUjDbOCZLA99FmvuQRFEeX1da1KhVNp9HfjoQHO7PgpKHA0ZXM-s580n4_WHe4HokrZKGv8WlpmAoVZF2r0pvqvBtqi_xdC4fSrnr2gLXzjyLgNx7wg3ykN1Oslu4bcK6cuhT3/w640-h168/policies.png" width="640" /></a></div><p></p><p><span> </span></p><p><span> </span>c. One thing I want to highlight is that in the user category, you see
pre-login defined as the user. This is important as it ensures that
certificate-authenticated devices can leverage these policies even
though the users are not logged in. <br /></p><p> </p><p>Once these policies are configured, you will see Intune devices connect
to your Intune console, and you will be able to utilize the core Intune
services. <br /></p><p></p><p><br /> </p><p><br /></p><p><br /></p><p><br /></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-45407104435892437892023-06-07T15:03:00.000-07:002024-08-13T19:45:05.463-07:00Streamline Your Container Management with Portainer CE and Nginx Proxy Manager: A Beginner's Guide<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7VU7uYOgqaij-LNaKAxoPS__4ASj9JOitRxqAkyXzPdX8PyCwnS_mq3fN1IAEG8rTSLzztuCqPdWXlVm56I5mnrNWl0FTyy3_Qm-BJ4DsjoIQg7_9g_vWJbU7E-0wU2hc9IOORhRvXPtI2Oa_dnhEYIx44Vo-Eotv_E-mLF-hZXmpmU3lITKadnCLLw/s480/iStock-1284852950_480x480.webp" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="320" data-original-width="480" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7VU7uYOgqaij-LNaKAxoPS__4ASj9JOitRxqAkyXzPdX8PyCwnS_mq3fN1IAEG8rTSLzztuCqPdWXlVm56I5mnrNWl0FTyy3_Qm-BJ4DsjoIQg7_9g_vWJbU7E-0wU2hc9IOORhRvXPtI2Oa_dnhEYIx44Vo-Eotv_E-mLF-hZXmpmU3lITKadnCLLw/w640-h426/iStock-1284852950_480x480.webp" width="640" /></a></div><p></p><p style="text-align: center;"><b><span style="font-size: large;">Self hosting apps and building out your home lab!</span></b></p><p style="text-align: left;"><span style="font-size: small;">I wanted to create this blog post not as a step-by-step guide but as a high-level outline and links to the resources you can use to build your container environment. I have wanted to get into containers and Docker for a while. I have played with Docker in the past and had not had much success. I could get stuff running but to be able to manage the health of my containers and easily deploy and destroy them was not intuitive for a dumb network guy like myself. <br /></span></p><p style="text-align: left;"><span style="font-size: small;"><br /></span></p><p style="text-align: center;"><b>So I found a better way!</b></p><span data-preserver-spaces="true" style="background: transparent; color: #0e101a; margin-bottom: 0pt; margin-top: 0pt;">A friend of mine turned me on to Portainer CE and Nginx Proxy Manger, my world was turned upside down. </span><strong style="background: transparent; color: #0e101a; margin-bottom: 0pt; margin-top: 0pt;"><span data-preserver-spaces="true" style="background: transparent; color: #0e101a; margin-bottom: 0pt; margin-top: 0pt;"> </span></strong><span data-preserver-spaces="true" style="background: transparent; color: #0e101a; margin-bottom: 0pt; margin-top: 0pt;">Portainer and NPM streamline and simplifies container deployment and management to a level most anyone can understand. At a high level, Portainer is a universal container management tool that can work with both Docker and Kubernetes to make the deployment and management of containerized applications and services easier and more efficient.</span><p style="text-align: left;"><br /></p><p style="text-align: left;">The second piece that streamlines the home lab setup is Nginx Proxy Manager. This is a user Interface to the powerful Nginx web server. The NPM project has scripted many of the configurations you would have had to manually build out in the past and fronted it with a super intuitive user interface. NPM can even generate and manage your let's encrypt certificates. I can't say enough good things about NPM. <br /></p><p style="text-align: left;"> </p><p style="text-align: center;"><b>So what you need to get started</b></p><div style="text-align: left;"><ol style="text-align: left;"><li>You will need a computer or even a Raspberry Pi (the Pi si a little under powered though)<b>. </b>You can run Windows, Apple OS, or Linux. I used Linux there seems to be much more documentation running it in linux. </li><li>Own a domain name so you can manage and create your own DNS records.</li><li>Set up port forwarding on your home router to roward traffci to your new container server.</li><li>Allow port 443 access on your local firewall if you are running in a VPS or at home.</li><li>Install Docker link to install Docker. <a href="https://docs.docker.com/engine/install/ubuntu/" target="_blank">https://docs.docker.com/engine/install/ubuntu/</a><br /></li><li>Install Portainer here is a link their really great install docs. <a href="https://docs.portainer.io/start/install-ce/server/docker/linux" target="_blank">https://docs.portainer.io/start/install-ce/server/docker/linux</a></li><li>Install Nignx Proxy Manager <a href="https://nginxproxymanager.com/setup/#running-the-app" target="_blank">https://nginxproxymanager.com/setup/#running-the-app</a></li></ol><p>Once this has all been build out you have the basic framework to deploy containerized applications at will. </p><p> </p><p style="text-align: center;"><b>High level diagram of what your environment will look like</b></p><p style="text-align: center;"></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtMCWN1YiL-WxpgBociLhJLrtIUCU_zXVYFGr1hiRkxiYZLWN4QrnSuEHjqafBMOWhkuTPYguhBFi1wMrxNbnkqAhbcpinYEu5uP9Bu2eRt-MANxeKfzTEMF9CoyTzXNb4XWYl0ZYBJG1hhrrRD3G7WgLiFGv0DxPhCRFJ4U7uPmOXTgoKm-3IXR5pYw/s541/Home_Lab.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="541" data-original-width="471" height="640" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtMCWN1YiL-WxpgBociLhJLrtIUCU_zXVYFGr1hiRkxiYZLWN4QrnSuEHjqafBMOWhkuTPYguhBFi1wMrxNbnkqAhbcpinYEu5uP9Bu2eRt-MANxeKfzTEMF9CoyTzXNb4XWYl0ZYBJG1hhrrRD3G7WgLiFGv0DxPhCRFJ4U7uPmOXTgoKm-3IXR5pYw/w558-h640/Home_Lab.png" width="558" /></a></div><b><br /></b><p></p><p style="text-align: center;"><b> <br /></b></p><p style="text-align: center;"><b>Helpful Hint</b></p><ul style="text-align: left;"><li>When you deploy a container you need to add the container to the NGINX Proxy Manager Default network if you want the app to be fronted by NPM<br /></li><li>When you configure NPM you need to use a fully qualified name that will route to your public IP that will in turn forward it to the server and then from NPM to the correct container. </li><li>You can define the container in the NPM config by the name portainer assigns it. You don't have to use the IP it was assigned. </li><li>NPM will perform port translation (your application can be presented on port 443 even though it listens on 8080.)</li><li>NPM will offload SSL and force SSL redirects for apps that don't know they are behind a proxy.</li></ul><p> </p><p style="text-align: center;"><b> Some Self Hosted App Resources</b></p><p style="text-align: center;"><a href="https://www.reddit.com/r/selfhosted/" target="_blank"> https://www.reddit.com/r/selfhosted/</a></p><p style="text-align: center;"><a href="https://github.com/awesome-selfhosted/awesome-selfhosted" target="_blank"> https://github.com/awesome-selfhosted/awesome-selfhosted</a></p><p style="text-align: center;"> </p><p style="text-align: center;">Lastly if your interested in an awesome Virtual Private Server (VPS) with unlimited bandwidth check out Frantech. They are super cheap and super reliable, and they have awesome customer service. </p><p style="text-align: center;">FYI this is an affiliate link so I will score a little cash if you buy. :)</p><p style="text-align: center;"><a href="https://my.frantech.ca/aff.php?aff=6135" target="_blank">FranTech </a><br /></p></div><div style="text-align: left;"><br /><p> </p><p> </p><p> </p><p> </p><p> </p><p> </p><p> </p></div>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-40417193934467774892023-05-06T23:43:00.002-07:002024-08-13T19:50:01.879-07:00Why Log Everything? Benefits of SSH Session Logging for Troubleshooting and Security<p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmxa2tvLo0WmPHmgoPwUwapScWJlNBIQ5PeKwNNnnSxugDJxujKNMgJb9dRpOWKAUxaFWUJPHkXlHB37bZozyxFkUmOIxMabi0ln16ZNESi4QUB5HqIrjXrp0EL7OyQ2y6vKUZXz3wn8j0k7JaQVDDlZsj_3b3LUSxT-xmjttfLu1DccMlwqPS7Az7CQ/s498/you_log_everything.gif" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="278" data-original-width="498" height="357" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmxa2tvLo0WmPHmgoPwUwapScWJlNBIQ5PeKwNNnnSxugDJxujKNMgJb9dRpOWKAUxaFWUJPHkXlHB37bZozyxFkUmOIxMabi0ln16ZNESi4QUB5HqIrjXrp0EL7OyQ2y6vKUZXz3wn8j0k7JaQVDDlZsj_3b3LUSxT-xmjttfLu1DccMlwqPS7Az7CQ/w640-h357/you_log_everything.gif" width="640" /></a></div><p></p><p><b> The question is “why log everything?”</b><br /><br />Logging your local SSH sessions can provide valuable information for troubleshooting, record-keeping, security, and auditing purposes. It is recommended to enable session logging as part of your SSH client configuration. Logging can save your bacon, for instance when:<br /></p><ul style="text-align: left;"><li>The telnet/SSH client buffer is full</li><li>Something goes wrong</li><li>You mistakenly close SecureCRT</li><li>You want to check what you have done</li></ul><p><br />The original guide was posted on Ciscozine.com. It was such a good article I wanted to capture it here and add some Apple screenshots for everyone.<br /><br />Below the steps to configure it:<br /><br />1. Open the software.<br /><br />2. On the top bar click “Options”then “Global Options”.<br /></p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjujFJKBwQ5s623oWkbPflqPqkOd3ckdulUM4ktG66pUMHe_5hF2BLRst4gtBhrYy89CRUWFmPq0o7rD3-7s5sBRLYBvI_hwF3qKMypHOOiSJHAiBkVhldF0OQtcZ05AnCxl_ZeoD29kCtbyy-LuqWbgxnxYW7ArA3QbPmNZN0k05SRchjdNpb2mMHFA/s1009/Screenshot%202023-04-21%20at%209.44.07%20AM.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="650" data-original-width="1009" height="412" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjujFJKBwQ5s623oWkbPflqPqkOd3ckdulUM4ktG66pUMHe_5hF2BLRst4gtBhrYy89CRUWFmPq0o7rD3-7s5sBRLYBvI_hwF3qKMypHOOiSJHAiBkVhldF0OQtcZ05AnCxl_ZeoD29kCtbyy-LuqWbgxnxYW7ArA3QbPmNZN0k05SRchjdNpb2mMHFA/w640-h412/Screenshot%202023-04-21%20at%209.44.07%20AM.png" width="640" /></a></div><br /><p>3. Select “Default Session”, click “Edit Default Settings…”; then select “Log File”.<br /></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHGTSOWK8C7XgWu5wSqWFW7ojaYBxXfzpCWK9CIrFPSp5XyuBkE_thmC74Mme--6etfgk4bvDorvuSrhX_-WzKD9Sn2QDWz75Xlti5mlT2ko9lLwulLbKCB7L8MAo5OxGPFzh3nPESx9UcbLQpnhmj8DJ_xpLkB3QTaPYUJq6vpJq1KIPwmg8IkzXUJA/s782/Screenshot%202023-04-21%20at%209.44.59%20AM.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="557" data-original-width="782" height="456" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHGTSOWK8C7XgWu5wSqWFW7ojaYBxXfzpCWK9CIrFPSp5XyuBkE_thmC74Mme--6etfgk4bvDorvuSrhX_-WzKD9Sn2QDWz75Xlti5mlT2ko9lLwulLbKCB7L8MAo5OxGPFzh3nPESx9UcbLQpnhmj8DJ_xpLkB3QTaPYUJq6vpJq1KIPwmg8IkzXUJA/w640-h456/Screenshot%202023-04-21%20at%209.44.59%20AM.png" width="640" /></a></div><br /><p>There are many customization's:Log file name: where to save the log file.<br />Upon connect: text at the beginning of the file.<br />Upon disconnect: text at the end of the file.<br />On each line: text added on each line.<br /><br />These fields accept several variables; a complete list is shown below:%H – hostname<br />%S – session name<br />%Y – four-digit year<br />%M – two-digit month<br />%D – two-digit day of the month<br />%h – two-digit hour<br />%m – two-digit minute<br />%s – two-digit seconds<br />%t – three-digit milliseconds<br />%% – percent (%)<br />%envvar% – environment variable (for instance %USERNAME%)<br /><br />Note: These settings will be applied ONLY on new sessions!<br /><br />4. If you would apply these settings on the current saved sessions click “File” on the top bar then “Connect…”. Select the devices or the group of devices, right click and select “Properties”. A new window will appear:<br /></p><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHGTSOWK8C7XgWu5wSqWFW7ojaYBxXfzpCWK9CIrFPSp5XyuBkE_thmC74Mme--6etfgk4bvDorvuSrhX_-WzKD9Sn2QDWz75Xlti5mlT2ko9lLwulLbKCB7L8MAo5OxGPFzh3nPESx9UcbLQpnhmj8DJ_xpLkB3QTaPYUJq6vpJq1KIPwmg8IkzXUJA/s782/Screenshot%202023-04-21%20at%209.44.59%20AM.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="557" data-original-width="782" height="456" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHGTSOWK8C7XgWu5wSqWFW7ojaYBxXfzpCWK9CIrFPSp5XyuBkE_thmC74Mme--6etfgk4bvDorvuSrhX_-WzKD9Sn2QDWz75Xlti5mlT2ko9lLwulLbKCB7L8MAo5OxGPFzh3nPESx9UcbLQpnhmj8DJ_xpLkB3QTaPYUJq6vpJq1KIPwmg8IkzXUJA/w640-h456/Screenshot%202023-04-21%20at%209.44.59%20AM.png" width="640" /></a></div><p> </p><p>You can customize each field as you prefer. In my case, I have used the previous settings.<br /><br />Below an example of a saved session: <br />19:19:58.965 $ Start recording Test_Switch (192.168.0.10) - 19:19:58 <br />19:19:58.983 $ C <br />19:19:58.983 $ * <br />19:19:58.984 $ * <br />19:19:58.984 $ * Test_Switch <br />19:19:58.984 $ * <br />19:19:58.985 $ <br />19:20:00.950 $ Username: Cisco <br />19:20:00.980 $ Password: <br />19:20:00.980 $ <br />19:20:48.403 $ Test_Switch#sh ver<br />19:20:48.620 $ Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9-M), Version 15.1(2)SY, RELEASE SOFTWARE (fc4) 19:20:48.620 $ Technical Support: http://www.cisco.com/techsupport <br />19:20:48.620 $ Copyright (c) 1986-2013 by Cisco Systems, Inc.<br />19:20:48.620 $ Compiled Wed 04-Sep-13 13:05 by prod_rel_team <br />19:20:48.620 $ <br />19:20:48.621 $ ROM: System Bootstrap, Version 12.2(17r)SX7, RELEASE SOFTWARE (fc1) <br />19:20:48.621 $ 19:20:48.621 $ SW-6500-VSS uptime is 23 weeks, 2 hours, 8 minutes <br />19:20:48.621 $ Uptime for this control processor is 23 weeks, 2 hours, 0 minutes <br />19:20:48.621 $ System returned to ROM by reload at 12:16:02 UTC Fri May 23 2014 (SP by reload) <br />19:20:48.622 $ System restarted at 14:20:04 CST Fri May 23 2014 <br />19:20:48.622 $ System image file is "sup-bootdisk:s72033-adventerprisek9-mz.151-2.SY.bin" <br />19:20:48.622 $ Last reload reason: Admin reload CLI <br />19:20:48.622 $ <br />19:20:48.622 $ <br />19:20:48.624 $ <br />19:20:48.624 $ This product contains cryptographic features and is subject to United <br />19:20:48.625 $ States and local country laws governing import, export, transfer and <br />19:20:48.625 $ use. Delivery of Cisco cryptographic products does not imply <br />19:20:48.625 $ third-party authority to import, export, distribute or use encryption. <br />19:20:48.625 $ Importers, exporters, distributors and users are responsible for <br />19:20:48.626 $ compliance with U.S. and local country laws. By using this product you <br />19:20:48.626 $ agree to comply with applicable laws and regulations. If you are unable <br />19:20:48.626 $ to comply with U.S. and local laws, return this product immediately. <br />19:20:48.626 $ <br />19:20:48.626 $ A summary of U.S. laws governing Cisco cryptographic products may be found at: <br />19:20:48.626 $ http://www.cisco.com/wwl/export/crypto/tool/stqrg.html <br />19:20:48.626 $ <br />19:20:48.627 $ If you require further assistance please contact us by sending email to <br />19:20:48.627 $ export@cisco.com. <br />19:20:48.627 $ <br />19:20:48.627 $ cisco WS-C6509-E (R7000) processor (revision 1.6) with 983008K/65536K bytes of memory. <br />19:20:48.627 $ Processor board ID SMC17330086 <br />19:20:48.957 $ SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache 19:20:48.958 $ Last reset from s/w reset <br />19:20:48.958 $ 12 Virtual Ethernet interfaces <br />19:20:48.958 $ 216 Gigabit Ethernet interfaces <br />19:20:48.958 $ 36 Ten Gigabit Ethernet interfaces <br />19:20:48.958 $ 1917K bytes of non-volatile configuration memory. <br />19:20:48.958 $ 19:20:48.959 $ 65536K bytes of Flash internal SIMM (Sector size 512K). <br />19:20:48.959 $ Configuration register is 0x2102 <br />19:20:48.960 $ 19:20:59.632 $ Test_Switch# <br />19:22:23.284 $ Test_Switch#exit <br />19:22:23.585 $ Stop recording Test_Switch (192.168.0.10) - 19:22:23<br /><br />As you can see, each line start with the time. The “$” is used for two reasons:If you import the log file in Excel or similar, you can use this symbol as a delimiter.<br />I use the “$” and not the “,” because in some configuration the “,” is present, so it would not be possible to use this symbol like a delimiter.<br /><br /></p><br /><br />Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-37683807350664261812022-11-25T08:15:00.000-08:002024-08-13T19:54:30.791-07:00How to Make Hot Buttered Rum Batter | Classic Recipe & Smuggler's Cove Cocktail<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-4svuwpDXZQaSkSzcVb23JvmJKYzA811tFtw2mNFSTlSKE9tk4Ndc5bJlzgG1bBWpt35p5gpEagN5UZ5WZiFtskCLG3eiVEx2ja_u1B6O-xB7jnCaXSl0EP1KkMzpqLSIlM6wyTaZg3ZRt0ynz26wKnwUqPeHtyoZHMQedtM1AxLM72BnSPHpxhDPKw/s1440/70CE8F5F-7AF3-493B-9B7F-2C2F7F58525E.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1106" data-original-width="1440" height="492" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-4svuwpDXZQaSkSzcVb23JvmJKYzA811tFtw2mNFSTlSKE9tk4Ndc5bJlzgG1bBWpt35p5gpEagN5UZ5WZiFtskCLG3eiVEx2ja_u1B6O-xB7jnCaXSl0EP1KkMzpqLSIlM6wyTaZg3ZRt0ynz26wKnwUqPeHtyoZHMQedtM1AxLM72BnSPHpxhDPKw/w640-h492/70CE8F5F-7AF3-493B-9B7F-2C2F7F58525E.jpg" width="640" /></a></div><p></p><p id="yui_3_17_2_1_1652639040872_682"><b id="yui_3_17_2_1_1652639040872_681"> </b></p><p id="yui_3_17_2_1_1652639040872_682"><b id="yui_3_17_2_1_1652639040872_681">SC Hot Buttered Rum Batter</b></p><p id="yui_3_17_2_1_1652639040872_665">1 teaspoon freshly ground cinnamon<br />1 teaspoon freshly ground nutmeg<br />1 teaspoon freshly ground black pepper<br />3/4 teaspoon ground cloves<br />1/2 teaspoon ground allspice<br />1/2 teaspoon ground anise seed<br />2 cups salted butter<br />4 cups packed golden brown sugar<br />2 tablespoons Brer Rabbit Mild Molasses<br />1 teaspoon vanilla extract<br /><br /><i>Combine
the spices in a small bowl and set aside. Melt the butter in a saucepan
over low heat, add sugar and stir constantly. Add molasses and vanilla
extract and stir. Finally, stir in the spice mixture. Continue to stir
on lowest possible heat until all items mix thoroughly and butter does
not create a separate layer, about 15 minutes. Let cool slightly and
while still soft, pour batter into storage containers. Seal airtight
after batter has cooled completely. It will keep until the expiration
date of the butter used.</i></p><p><b>Now </b>that you've done the hard work, make yourself a<i><b> </b></i>Smuggler's Cove<i> </i>Hot
Buttered Rum by combining 3 barspoons of the above batter and 1 1/2
ounces of blended aged rum in an Irish Coffee glass, top with 6 ounces
of hot water and stir. Serve with a cinnamon stick, but feel free to
garnish with whipped cream and some freshly grated nutmeg if you so
desire. I'm sure Martin, Rebecca, and the Trader wouldn't mind.</p><p><br /></p><p></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-53621888878273041702022-11-01T12:41:00.004-07:002024-08-01T16:05:12.066-07:00Home Made Butterbeer Recipe<p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY_pt8qrDpikjB9rNeiyom2OuWeHvMfBzB11nze9fouZnYEGJafG0RazKt7W9YOp77IOfoiN7a7Odi9eM68nHl40FmDrUbGYU5a-hugKTmDWEKWveR_ZUMM1CZtt2fl1pKpIeVIKjvUejQv4EhjnBw-oGlfHNOJ4K1TgfzA_LUEzNlMD8qAIim0egNPg/s1280/1280px-Wizarding_World_of_Harry_Potter_-_a_toast_to_the_giant_Butterbeer_cart_keg_(5014304402).jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="960" data-original-width="1280" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY_pt8qrDpikjB9rNeiyom2OuWeHvMfBzB11nze9fouZnYEGJafG0RazKt7W9YOp77IOfoiN7a7Odi9eM68nHl40FmDrUbGYU5a-hugKTmDWEKWveR_ZUMM1CZtt2fl1pKpIeVIKjvUejQv4EhjnBw-oGlfHNOJ4K1TgfzA_LUEzNlMD8qAIim0egNPg/w640-h480/1280px-Wizarding_World_of_Harry_Potter_-_a_toast_to_the_giant_Butterbeer_cart_keg_(5014304402).jpg" width="640" /></a></div><br /><br /><p></p><div class="wprm-recipe-ingredients-container">
<h3 class="wprm-recipe-header">Ingredients</h3>
<div class="wprm-recipe-ingredient-group">
<ul class="wprm-recipe-ingredients"><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">1</span>
<span class="wprm-recipe-ingredient-unit">cup</span>
<span class="wprm-recipe-ingredient-name">light or dark brown sugar</span>
</li><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">2</span>
<span class="wprm-recipe-ingredient-unit">tablespoons</span>
<span class="wprm-recipe-ingredient-name">water</span>
</li><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">6</span>
<span class="wprm-recipe-ingredient-unit">tablespoon</span>
<span class="wprm-recipe-ingredient-name">butter</span>
</li><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">1/2</span>
<span class="wprm-recipe-ingredient-unit">teaspoon </span>
<span class="wprm-recipe-ingredient-name">salt</span>
</li><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">1/2</span>
<span class="wprm-recipe-ingredient-unit">teaspoon</span>
<span class="wprm-recipe-ingredient-name">cider vinegar</span>
</li><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">3/4</span>
<span class="wprm-recipe-ingredient-unit">cup</span>
<span class="wprm-recipe-ingredient-name">heavy cream</span>
<span class="wprm-recipe-ingredient-notes">divided</span>
</li><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">1/2</span>
<span class="wprm-recipe-ingredient-unit">teaspoon</span>
<span class="wprm-recipe-ingredient-name">rum extract</span>
</li><li class="wprm-recipe-ingredient">
<span class="wprm-recipe-ingredient-amount">4</span>
<span class="wprm-recipe-ingredient-unit">bottles</span>
<span class="wprm-recipe-ingredient-name">(12 oz. bottles) cream soda</span>
</li></ul>
</div>
</div>
<div class="wprm-recipe-instructions-container">
<h3 class="wprm-recipe-header">Instructions</h3>
<div class="wprm-recipe-instruction-group">
<ol class="wprm-recipe-instructions"><li class="wprm-recipe-instruction">
<div class="wprm-recipe-instruction-text">In a small saucepan
over medium, combine the brown sugar and water. Bring to a gentle boil
and cook, stirring often, until the mixture reads 240 F on a candy
thermometer.</div>
</li><li class="wprm-recipe-instruction">
<div class="wprm-recipe-instruction-text">Stir in the butter, salt, vinegar and 1/4 heavy cream. Set aside to cool to room temperature.</div>
</li><li class="wprm-recipe-instruction">
<div class="wprm-recipe-instruction-text">Once the mixture has cooled, stir in the rum extract.</div>
</li><li class="wprm-recipe-instruction">
<div class="wprm-recipe-instruction-text">In a medium bowl,
combine 2 tablespoons of the brown sugar mixture and the remaining 1/2
cup of heavy cream. Use an electric mixer to beat until just thickened,
but not completely whipped, about 2 to 3 minutes.</div>
</li><li class="wprm-recipe-instruction">
<div class="wprm-recipe-instruction-text">To serve, divide the
brown sugar mixture between 4 tall glasses (about 1/4 cup for each
glass). Add 1/4 cup of cream soda to each glass, then stir to combine.
Fill each glass nearly to the top with additional cream soda, then spoon
the whipped topping over each.</div>
</li></ol>
</div>
</div><p> </p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-12942924626782529122022-11-01T12:40:00.003-07:002024-08-01T16:07:24.803-07:00Critical OpenSSL Vulnerability Announcement: What You Need to Know About Versions<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjveNnOPvF5Ndx4oNOLhw72_g3b8Qe-unNdg-2x85hbOx1oxZTRmSwPacUhbAaVenqrjY9zAAsiuKVnEGVOMvH1Yx88wpSJBxdUGNn5V0XT-ojN4nuOn5viwhmeQEqfRHAMlryPisPNHEzslo06eRIp7xUT8B1np1CN1hpZmC4i8ONzm1qAHgXv0XdsCg/s1024/Vulnerability-Just-Ahead-e1420788581126.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="522" data-original-width="1024" height="326" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjveNnOPvF5Ndx4oNOLhw72_g3b8Qe-unNdg-2x85hbOx1oxZTRmSwPacUhbAaVenqrjY9zAAsiuKVnEGVOMvH1Yx88wpSJBxdUGNn5V0XT-ojN4nuOn5viwhmeQEqfRHAMlryPisPNHEzslo06eRIp7xUT8B1np1CN1hpZmC4i8ONzm1qAHgXv0XdsCg/w640-h326/Vulnerability-Just-Ahead-e1420788581126.jpg" width="640" /></a></div><p></p><p>So Open SSL announced that they are going to release details of a Critical OpenSSL vulnerability that affects versions 3.0.0 to 3.0.6. There is rumbling that this vulnerability may be a major deal likened to the everyone's favorite CVE of 2014, heartbleed. </p><p> </p><p>Open SSL will be releasing their patch/update Tuesday 1st November 2022 between 1300-1700 UTC</p><p><br /></p><p>But unlike heartbleed this OpenSSL vulnerability might not have the same impact to security and network infrastructure that heartbleed had. So far most security and network infrastructure companies are looking ok. As you would expect many of these companies don't run the most bleeding edge versions of open source libraries for this very reason. Also many times stability and security take president over new features. </p><p> </p><p>What I wanted to do is put links to OSS (Open Source Software) lists that are used in different vendors platforms. I started out hopeful but for many of the companies it is very difficult to find. I will post hem as i run across them.</p><p> </p><p>Cisco - <a href="https://www.cisco.com/c/en/us/about/legal/open-source-documentation-responsive.html" target="_blank">https://www.cisco.com/c/en/us/about/legal/open-source-documentation-responsive.html</a><br /></p><p>Palo Alto Networks - <a href="https://docs.paloaltonetworks.com/oss-listings/pan-os-oss-listings" target="_blank">https://docs.paloaltonetworks.com/oss-listings/pan-os-oss-listings</a></p><p>Juniper - </p><p>Fortinet -</p><p>Aruba - </p><p>Arista - </p><p>Extreme Networks - <br /></p><p>Checkpoint - </p><p>F5 - </p><p>Citrix ADC - </p><p> <br /></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-52255513196220797672022-10-28T12:44:00.000-07:002024-08-01T16:08:55.195-07:00Why Apple Watch and Apple Pay Are Essential for Your London Trip<p> </p><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXhDEdC5aS47TnxAbf2uFooe6Peq4vKSJc2ZRcjTtqF6bPQPdpyjjT__x3slde_UodRnTUzxjwcp54R0CjWu8sz3otEl9wQKgyGDyj5I-Z-yOA_lHKWJQ-RLnhs03ItLd_n4siIIcDFFGNklkEHalJbfG9Li9LTNjPk_DMmcUfnyZZNaz3I9kztAVB_Q/s700/Apple-Pay-TfL-700x602-3767452664.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="602" data-original-width="700" height="550" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXhDEdC5aS47TnxAbf2uFooe6Peq4vKSJc2ZRcjTtqF6bPQPdpyjjT__x3slde_UodRnTUzxjwcp54R0CjWu8sz3otEl9wQKgyGDyj5I-Z-yOA_lHKWJQ-RLnhs03ItLd_n4siIIcDFFGNklkEHalJbfG9Li9LTNjPk_DMmcUfnyZZNaz3I9kztAVB_Q/w640-h550/Apple-Pay-TfL-700x602-3767452664.png" width="640" /></a>Are you planning a trip to London? If you're an apple user think about getting/bringing an apple watch before you go. We just got back from London and first off their public transit is bar non the best I have used. Between the underground and the buses in London, we were never more than a 5-minute walk to anything we wanted to see in London. <br /><br />In addition to public transit, tap-to-pay is everywhere in the UK, even the village pub we ate in had a tap-to-pay terminal. I only had to unsheathe a credit card once the entire trip and, to be honest, it was probably a user error. <br /><br />So back to setting up Apple Pay and the Watch....<br /><br />First setting up apple pay is pretty straightforward if you haven't done it. On your phone, if you open the wallet app you will see a little + sign in the upper right corner if you touch on the plus symbol it will walk you through adding your credit card to apple pay. For traveling overseas make sure you add a card with no foreign transaction fees. Once the card is added you should make this card your default card so it will come up automatically when you double-click to bring up tap-to-pay. <br /><br />Once your card is added you will want to go into your setting app under wallet and go to the express transit settings and select the credit card you just added. What this does is set up express transit to let you tap in and out of the UK underground with no need to download an app or buy an Oyster card. <br /> <br />For the apple watch, you will want to add the same card via the wallet app. Usually, the cards that have been configured on the phone will show up in the watch app, but you will need to verify the security code to authorize the watch to use those cards. Once the card is added you can go to the wallet settings in the watch app on your phone and configure a default card, you will also want to add the card you want to use for express transit. This will need to be configured on the watch through the watch application on your phone. <br /><br />Now that it is configured how do I use my phone or apple watch for London transit? <br /> <br />On the Tube/Underground when you tap your phone or watch on the turn stall sensor (the yellow plastic disk) the gates will open and it will register at what station you entered. Once you get to your destination you will need to tap the sensor at the exit gates using the same device you used to enter the underground, each device is unique and will even work if there is no cell service. The TFL will determine where you tapped in and where you tapped out and will bill the card you had configured for express transit directly. It's as simple as that.<br /> <br />If you are planning a trip to the UK I would recommend setting up Apple Pay and especially the express transit if you are going to London. It was a major convenience and took my major concern about using public transit and threw it out the window. <br /></div>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-10934200457069139972022-06-13T22:07:00.003-07:002024-08-01T16:11:04.250-07:00Top Cisco Live 2022 Talks: SD-WAN, Wi-Fi 6E, Cloud Services, and More<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAbBbR_Bc-Zh2_0NTYAkNK-mN_RvzAv3AL-ZOgro7fmxtp2qu3o5Kjq5PyIHcTaY_T_P2Bg21riE7JrZ2FmJ1AJlDVOUf_R6MbuslEAYSv8ZIV9xljYbxTZlio2MHp-DVqR4f3wYMeafqOu5hZhfiwEwZm1MgY_NflrYh_3kH4DYwRzR6IeEURL7T_lQ/s1200/cl22-opengraph-allin.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="600" data-original-width="1200" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAbBbR_Bc-Zh2_0NTYAkNK-mN_RvzAv3AL-ZOgro7fmxtp2qu3o5Kjq5PyIHcTaY_T_P2Bg21riE7JrZ2FmJ1AJlDVOUf_R6MbuslEAYSv8ZIV9xljYbxTZlio2MHp-DVqR4f3wYMeafqOu5hZhfiwEwZm1MgY_NflrYh_3kH4DYwRzR6IeEURL7T_lQ/w640-h320/cl22-opengraph-allin.png" width="640" /></a></div><p></p><p>Cisco Live 2022 is in full effect in Las Vegas, They say there are 16k attendees in person this year but inn the Mandalay Bay Conference center it seems pretty empty. Not that I am complaining... I wanted to post up some of the slide decks of talks that looked interesting. I assume you can register online and see the same decks but I wanted to post them here so I can go back and have a place to see them later.</p><p><b><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKENT-2108.pdf" target="_blank"><br />Cisco SD-WAN: Start Here - BRKENT-2108</a></b><br />Start your SD-WAN journey here, we will explain the platform architecture, the different components of the solution and how they interact with each other and secured the user to application traffic.</p><p> </p><p><span face="CiscoSans, sans-serif" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline; float: none; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span></p><p><b><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKEWN-2024.pdf" target="_blank">Architecting Next Generation Wireless Network with Catalyst Wi-Fi 6E Access Points - BRKEWN-2024</a></b><br />This session deep dives into the newly introduced Wi-Fi6E standard in 6GHz band. <span face="CiscoSans, sans-serif" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline; float: none; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span><span face="CiscoSans, sans-serif" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline; float: none; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"></span><br /><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKMPL-2102.pdf" target="_blank"><br /><b>Designing MPLS based IP VPNs - BRKMPL-2102</b></a><br /> This session describes the implementation of IP Virtual Private Networks (IP VPNs) using MPLS.</p><p><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKCOC-2032.pdf" target="_blank"><b><br /> Cisco IT's Journey to SASE for remote work - BRKCOC-2032</b></a><br /> This session will discuss how Cisco IT is using some of Cisco's latest cloud security solutions, alongside SDWAN as a Service from Cisco Plus, to supply high performance and reliable remote worker and branch connectivity.<br /><br /> <b><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKENT-2183.pdf" target="_blank">Cisco SD-WAN - The Usual Suspects - BRKENT-2183</a></b><br />In Cisco SD-WAN, establishing your WAN Edge routers as a part of the overlay is essential to building and operating a successful network.</p><p><b> </b></p><p><b><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKENS-1090.pdf" target="_blank">Enabling Cloud Services at the Edge with App Hosting on Catalyst 9000 - BRKENS-1090</a></b><br />Did you know that you can run applications natively on Catalyst 9000 series platforms to enable Cloud services?</p><p><b><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKARC-2021.pdf" target="_blank"><br />How to Securely Build a Product - BRKARC-2021</a></b><br />INTERACTIVE SESSION Security threats are very real today. Product security must be designed in from the start, not added as an afterthought.</p><p><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKDCN-2229.pdf" target="_blank"><br /><b>Simple Leaf/Spine with a touch of TOR - Network Designs for the Modern Data Center - BRKDCN-2229</b></a><br />There are times when your Leaf/Spine network runs out of ports (even as it never should). No worries, there are ways how to scale further and no, we don't talk about FEX :-) Let us guide you through a Leaf/Spine network and an additional TOR (Top of Rack) layer.<span face="CiscoSans, sans-serif" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline; float: none; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"><span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span></span></p><p><span face="CiscoSans, sans-serif" style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline; float: none; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"><span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span></span></p><p><b><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKEWN-1742.pdf" target="_blank">7 Ways to Fail - on Wi-Fi 6(E) - BRKEWN-1742</a></b><br /> It is all about how to do Wireless networks ‘wrong’ and if you understand why it’s wrong, it’s easier to do it right the next time.</p><p> </p><p><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKEWN-2087.pdf" target="_blank"><b>High Density Wi-Fi Design, Deployment, and Optimization - BRKEWN-2087</b></a><br />This session will cover an array of detailed tips, tricks, and tools for configuring and optimizing High Density WiFi networks in today's most challenging environments, including valuable real-world insights on how the latest Cisco Catalyst Access Points, antennas, and Catalyst wireless controllers can be leveraged to deliver an optimized and reliable user experience.<span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span></p><p><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKENT-2292.pdf" target="_blank"><br /><b>Hierarchical SD-WAN Overview and Principles - BRKENT-2292</b></a><br />Hierarchical SD-WAN is a new foundational capability that underpins the journey to multi-cloud and SDCI. This major evolution of Cisco SD-WAN introduces new capabilities to support a truly scalable 2-level customer overlay, improve Cloud OnRamp for MultiCloud and expand Managed Service Providers solutions. <span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"></span></p><p><b><a href="https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKTRS-3475.pdf" target="_blank"><br />Advanced Troubleshooting of cat8k,asr1k, ISR and SD-WAN Edge Made Easy - BRKTRS-3475</a></b><br />In this session, we will explain the architecture of the Catalyst 8000, ASR1000 / ISR / CSR / XE SD-WAN Edge series and demonstrate forensic techniques for control plane and data plane. We will also see how common but complex feature such as SD-WAN Edge, crypto (IPsec), Zone Based Firewall and NAT can be troubleshot easily in practice. <span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span></p><p><span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span></p><p><span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 20px; font-style: normal; font-variant-caps: normal; font-weight: 600; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"> </span><span style="-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: white; caret-color: rgb(68, 68, 68); color: #444444; display: inline !important; float: none; font-family: CiscoSans, sans-serif; font-size: 16px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"><span class="Apple-converted-space"></span></span></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-81241721958137140152022-05-10T16:03:00.007-07:002024-08-01T16:26:18.255-07:00TCP Middlebox Reflection Attacks: Mitigation Strategies for Palo Alto Firewalls and Other Network Devices<p> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY4yjFGFrDDAaRmT_G_hhrlNCx_k_gPoM0s1w1UVfiA74Oa6kaCAMZbmSrgQIxN0mOiNsCpsjt8tqjdZd4sIXVIQ6GG2niUIeJE5oK4jH3kWb5ZFw_WTma2dBzmkiH9aDkFyqSjK9K0Ucyj-Wv_2NCN_1Yk8wkqh7LzX4R-aQyxos-Xkqa3FS2yz0SBA/s1200/middleboxgif.gif" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="675" data-original-width="1200" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY4yjFGFrDDAaRmT_G_hhrlNCx_k_gPoM0s1w1UVfiA74Oa6kaCAMZbmSrgQIxN0mOiNsCpsjt8tqjdZd4sIXVIQ6GG2niUIeJE5oK4jH3kWb5ZFw_WTma2dBzmkiH9aDkFyqSjK9K0Ucyj-Wv_2NCN_1Yk8wkqh7LzX4R-aQyxos-Xkqa3FS2yz0SBA/w640-h360/middleboxgif.gif" width="640" /></a></p><br /><p></p><p>There is a new flavor of protocol reflection attacks on the streets! </p><p>The TCP Middlebox reflection attack is the first reflection attack to utilize the TCP protocol. Traditionally the TCP protocol was not susceptible to spoofed source packets because of its state based nature (three way handshake). Researchers at University of Maryland and the University of Colorado discovered that many network devices, such as load balancers, proxies, and firewalls, could be susceptible to specifically-crafted packets that could generate amplified traffic (up to 65x) at a victim. These devices could be inherently susceptible to the spoofing because many of these devices have to contend with Asynchronous network traffic and out of order packets.</p><p> </p><p>Akamai did a really great write up on what they saw and how they mitigated the attack. <a href="https://www.akamai.com/blog/security/tcp-middlebox-reflection" target="_blank">https://www.akamai.com/blog/security/tcp-middlebox-reflection</a></p><p> </p><p>Shadow Server also has a write up. <a href="https://www.shadowserver.org/news/over-18-8-million-ips-vulnerable-to-middlebox-tcp-reflection-ddos-attacks/ " target="_blank">https://www.shadowserver.org/news/over-18-8-million-ips-vulnerable-to-middlebox-tcp-reflection-ddos-attacks/ </a></p><p><br /></p><p>So on to your firewalls:</p><p>The out of the box Palo Alto Firewalls do not appear to have any mitigation configured by default to protect against this attack. But its not the end of the world. Palo Alto and many other security vendors have low level TCP protection that basically normalizes TCP traffic and cuts out the flood attacks, malformed protocol attacks, etc., before they are even processed by your firewall. This minimizes impact on the device resources like CPU and memory for these types of attacks.</p><p> </p><p>In the Palo Alto world this is called "Zone Protection Profiles". If you run BPA (Best Practice Assessment) - which you should - then the Zone Protection Profiles are often flagged if you don't have them configured. </p><p> </p><p>The zone protection profile is pretty strait-forward to set up but, before you start, you need to do a little research and investigation into your device</p><ol style="text-align: left;"><li>You need to determine the maximum CPS or connections per second your device can handle. This is a list of devices and their specs on the Palo Alto Networks site. <a href="https://www.paloaltonetworks.com/products/product-selection" target="_blank">https://www.paloaltonetworks.com/products/product-selection</a></li><li>Next you will want capture some metrics around how many CPS your devices are seeing. <a href="https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/take-baseline-cps-measurements-for-setting-flood-thresholds/how-to-measure-cps" target="_blank">https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/take-baseline-cps-measurements-for-setting-flood-thresholds/how-to-measure-cps</a></li><li>Next you will want to do a few calculations and configure your zone protection profile. <a href="https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/zone-protection-profiles" target="_blank">https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/zone-protection-profiles</a></li></ol><p> </p><p>Here is the "Cool SH*T Props" to Palo Alto Networks...when you create a zone protection profile, by default under the Packet Based Protection > and > 'TCP Drop the TCP SYN with Data' and 'TCP SYN ACK with Data' are already checked. This means when you apply your newly configured zone protection profile to your security zone it will protect you from current Middlebox vulnerability by dropping any of the cleverly crafted SYN packets because they would be larger then 0 bytes.</p><p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvXedLBldMHTvl_MG8oFq9_NqwzIH_j2ZG0iA0123jMeTRke0gzOCsPbCwTWmyjCe5zAOxtaCRRFLzoibUC-Y6Q9CpZbTluBXtrow2v5lPuuGPmFGrpX0zy0szzgABnklsb1uSwnkvBBRzV8_Snwism-DQhxNyiaMOWCkDtQV3H5PyXzfE-sxPTd0jKw/s1192/Screen%20Shot%202022-05-10%20at%204.01.35%20PM.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="612" data-original-width="1192" height="328" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvXedLBldMHTvl_MG8oFq9_NqwzIH_j2ZG0iA0123jMeTRke0gzOCsPbCwTWmyjCe5zAOxtaCRRFLzoibUC-Y6Q9CpZbTluBXtrow2v5lPuuGPmFGrpX0zy0szzgABnklsb1uSwnkvBBRzV8_Snwism-DQhxNyiaMOWCkDtQV3H5PyXzfE-sxPTd0jKw/w640-h328/Screen%20Shot%202022-05-10%20at%204.01.35%20PM.png" width="640" /></a></div><br /><p>Yeah!</p><p><br /></p><p>So I wanted to post a little bonus. Here is a quick and easy flood protection calculator I threw together in google sheets, just add your average CPS.<br /></p><p><br /></p><center><iframe frameborder="0" height="700" width="670" scrolling="no" seamless="" src="https://docs.google.com/spreadsheets/d/1pnOeWzwkH17RdKfJ3y6nAR-7rLmvVrIiiywLafoMsnU/edit?usp=sharing&widget=true"></iframe></center><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-11204595369676302962022-03-31T21:25:00.005-07:002024-08-01T16:27:46.846-07:00Formula 1 Announces Las Vegas Grand Prix: What to Expect from Sin City’s High-Speed Street Race<p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb--QuPw18SXzzqESuOGVKG9h2rqi6kRhpahSw1FFeExRhJmuk9GEpJ88zOFGaknQAvULM_a9_1GJzv8BredjhhySZ9S-yTlrI4MLjPwY3hDVrDYxf6Na5DZwj8zr_SM0Sd-KqnASeGkFEEuTuc5f8JoizkDEhJr6AVeqs5oOH9GY_IbayefKgHMoRtQ/s2048/las-vegas-etg-1.webp" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1365" data-original-width="2048" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb--QuPw18SXzzqESuOGVKG9h2rqi6kRhpahSw1FFeExRhJmuk9GEpJ88zOFGaknQAvULM_a9_1GJzv8BredjhhySZ9S-yTlrI4MLjPwY3hDVrDYxf6Na5DZwj8zr_SM0Sd-KqnASeGkFEEuTuc5f8JoizkDEhJr6AVeqs5oOH9GY_IbayefKgHMoRtQ/w640-h426/las-vegas-etg-1.webp" width="640" /></a></div><p></p><p> </p>It's official! Formula 1 has announced their newest US Grand Prix in Sin City. I admit, I watched some Formula 1 in the late 90s but kind of fell out of following it...but since becoming a Covid hermit, and stumbling across Netflix's Drive to Survive, I am back in. <p> </p><p>Thanks to Netflix's Drive to Survive and the dramatic conclusion to the 2021 season driver championship, Formula 1 has taken hold in the US and F1 is taking advantage of the increased popularity. Over the last few years there has been only 1 US GP at CODA in Austin, but the 2022 F1 calendar will be racing in Miami at the Miami International Autodrome for the first time. </p><p> </p><p>Lets get down to what we came for: the Las Vegas GP... </p><p> </p><p>The track is going to be a high-speed street course that races through the streets of Las Vegas and down the Strip. It will be 3.8 miles long and have an estimated top speed of 212 mph. With 14 corners, 3 straits, and 2 DRS zones the experts are predicting this is going to be low drag, high-speed course like Monza or Spa. </p><p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzwr6kDipREYwsA76rhJTweKKLxTsMPOhMBWZaxOtlFqIq7ZeSlC9F63PANAzBAMOu3s6rVVgBwD14VMRUWOgtGLBpIZbUlqZ9ggLvyNzJdHoMvyhVADx9lWEFiPTiYP17WHJjfV8pqopZWoxiy04F6a1_hSUmTnWU03_MpyVgPYn38qzX6ocSoq0ZNw/s1224/Screen%20Shot%202022-03-31%20at%203.08.05%20PM.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="820" data-original-width="1224" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzwr6kDipREYwsA76rhJTweKKLxTsMPOhMBWZaxOtlFqIq7ZeSlC9F63PANAzBAMOu3s6rVVgBwD14VMRUWOgtGLBpIZbUlqZ9ggLvyNzJdHoMvyhVADx9lWEFiPTiYP17WHJjfV8pqopZWoxiy04F6a1_hSUmTnWU03_MpyVgPYn38qzX6ocSoq0ZNw/w400-h268/Screen%20Shot%202022-03-31%20at%203.08.05%20PM.png" width="400" /></a></div><p></p><p style="text-align: center;">Race Circuit </p><p style="text-align: center;"><br /></p><p>The race dates have not officially been released, but the rumors are it will be the weekend after Thanksgiving. Also to take advantage of the venue, it will be a Saturday night race 10pm to midnight-ish... That time-frame makes sense because it would be early Sunday morning in Europe and afternoon in Asia and the Middle East. Also how spectacular will it look having those cars racing through all the sights and lights of Las Vegas at night?? Seriously this could be a spectacular race. </p><p> </p><p>Prior to the race they will resurface all the roads that will be raced on to ensure they are smooth and ready for racing, and I cant imagine the amount of lighting and infrastructure they will need to build to accommodate the race. That would be an interesting documentary, behind the scenes of what it takes to put on the Las Vegas GP... Just Saying! </p><p style="text-align: left;"> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://youtu.be/fHd79zyJfEs" style="margin-left: 1em; margin-right: 1em;" target="_blank"><img border="0" data-original-height="1072" data-original-width="1902" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh33y6zLCteJ9-bFp8oxAagyJrZNLkP1WvLk4wDn40keX-8L6OsGJHdUoEMvVIZ0JoCv_7mwXEyrFuQKtthXUa-9kyFhceETVqNqGrUGMeCV0R8Cq-M_hZBdDpJUsWI2RZ7YT-j4z5iifySFA-kJBBafaF1wDUNB8IyZqVWwOSS8F69Gfqd1FsuUNsPQ/w400-h225/Screen%20Shot%202022-03-31%20at%204.50.10%20PM.png" width="400" /></a></div><p></p><p style="text-align: center;">Formula 1 Live Las Vegas Announcement</p><p style="text-align: center;"><br /></p><p>There is not a lot of information about race specifics since we are still a ways out. I imagine people including myself might be booking rooms. But before you book - one word of warning - last time I looked hotels in Las Vegas do not allow the windows to be opened so if you were expecting to book a room over-looking the strip, it may not be what you where hoping for, but we will wait and see. </p><p> </p><p>One thing is for sure, those of us who have been to Las Vegas and been on the strip know how epic the occasional Lambo or Ferarri sounds when they blaze by. I cant wait to hear 20 F1 cars tearing down the same road - it will be epic.</p><p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://youtu.be/800YZlS27rg" style="margin-left: 1em; margin-right: 1em;" target="_blank"><img border="0" data-original-height="1076" data-original-width="1902" height="226" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjokm13ZA_iX-mWP6mVqz62ZzKQeT6fp7ZQN-20yT2nAHeslMTPucI3gt-JmS42yE7rX-ecJyLswNK7kjAC4yHC4ftlLoIwESF51Z1vht6Dhwh4viKnS9vNdcNOHLxpuR35E9x7NX_4jMPTnzkqpMln0DIa1sXZRaOM1h5Z4O7y7QK8bwIGMCrMbJVQ0Q/w400-h226/Screen%20Shot%202022-03-31%20at%204.49.21%20PM.png" width="400" /></a></div><p></p>
<center>Driver Reactions about Las Vegas Race</center><p></p><p> </p>
<center><iframe height="390" src="https://www.google.com/maps/d/u/0/embed?mid=1wZmS-vsYYWX5Xp_Vck5LF1JDEdhnb9nV&ehbc=2E312F" width="550"></iframe></center>
<p style="text-align: center;">Best guess course route<br /></p><p> </p><p>I wanted to provide some links to Las Vegas GP resources. Its pretty few and far between but I will add them as I come across them.</p><p> </p><p><a href="https://www.f1lasvegasgrandprix.com/p/7CDH-4R/home" target="_blank">https://www.f1lasvegasgrandprix.com</a></p><p> </p><p><a href="https://joesaward.wordpress.com/2022/03/31/las-vegas-and-formula-1/" target="_blank">https://joesaward.wordpress.com/2022/03/31/las-vegas-and-formula-1/</a> </p><p><br /></p><p><br /></p><p><br /></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-9926440628195622332022-01-29T21:31:00.001-08:002024-08-01T16:29:11.576-07:00Decadent Adult Hot Chocolate with Malibu Rum and Kahlua<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEiz5r6xMgi1t03fSUlUYgNJNAJau7R_B7hzXmDH2OfML3eN45_wMmF-TrdioeqQMdkKrBfnShEP4f8iO-eDsdjXViGOdGevyGxzm52Gpko_DXjPRKLPdE3EtiRDAcvLVD1YcKjYl7W02S8cUWQ1XRCqbR7MpeSG8G4CLZP5A2JzqQQugfnqSzUCsVNmJQ=s2000" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="2000" data-original-width="2000" height="320" src="https://blogger.googleusercontent.com/img/a/AVvXsEiz5r6xMgi1t03fSUlUYgNJNAJau7R_B7hzXmDH2OfML3eN45_wMmF-TrdioeqQMdkKrBfnShEP4f8iO-eDsdjXViGOdGevyGxzm52Gpko_DXjPRKLPdE3EtiRDAcvLVD1YcKjYl7W02S8cUWQ1XRCqbR7MpeSG8G4CLZP5A2JzqQQugfnqSzUCsVNmJQ=s320" width="320" /></a></div><br /><p></p><p><br />Ingredients:<br /></p><ul style="text-align: left;"><li>1 oz. Malibu rum</li><li>1/2 oz. Kahlua</li><li>1/2 oz. dark cocoa liquor</li><li>1 C hot chocolate</li><li>Whipped cream and chocolate shavings for topping if desired.</li></ul><p style="text-align: left;"></p><p> </p><p> Directions: </p><p>Prepare hot chocolate as per your recipe. Add rum and Kahlua. Top with whipped cream and shavings if used. <br /></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-10283320170317011632021-12-28T22:40:00.003-08:002024-08-01T16:30:26.040-07:00Essential Items for Navigating the Pandemic: Face Masks, Hand Sanitizers, and More<div class="separator" style="clear: both;"><a href="https://blogger.googleusercontent.com/img/a/AVvXsEiCKNRcDkZ4cuIdlWcbFEsJrHZpWIPyKPiFowIjQuFL40BeFuizewQY22n-xYj91l7K4SvHjN6B0-_1L2FQS47G7rhAbP4E7rL4v5ni4lhYiXIG_uwCiqSPDS6ukhnnF-IbVG17ACjuSWCAOiQ87cIskHsCDYdvirI9hMLDOm8ZLYVtFK6UbElLvzDQmQ=s700" style="display: block; padding: 1em 0px; text-align: center;"><img border="0" data-original-height="194" data-original-width="700" height="177" src="https://blogger.googleusercontent.com/img/a/AVvXsEiCKNRcDkZ4cuIdlWcbFEsJrHZpWIPyKPiFowIjQuFL40BeFuizewQY22n-xYj91l7K4SvHjN6B0-_1L2FQS47G7rhAbP4E7rL4v5ni4lhYiXIG_uwCiqSPDS6ukhnnF-IbVG17ACjuSWCAOiQ87cIskHsCDYdvirI9hMLDOm8ZLYVtFK6UbElLvzDQmQ=w640-h177" width="640" /></a>So we are going on year two of this Pandemic thing, and so far it looks like it might be here longer then we thought, That being said with the new normal it has changed what we carry with us when we have to leave the house. Below are a few of the items I have come across that have worked really well for me.</div><div class="separator" style="clear: both;"><br /></div><div class="separator" style="clear: both;">Face Masks: I have tried quite a few but a few masks and mask accessories have risen to the top.</div><div class="separator" style="clear: both;"><ul style="text-align: left;"><li>My Number One mask so far I just purchased and I have to say it is comfortable and provides really good protection. It is the U mask, <a href="https://www.u-mask.eu/" target="_blank">https://www.u-mask.eu</a> . I found this mask because quite a few of the Formula 1 teams actually use them. Here is a link to their protection information <a href="https://www.u-mask.eu/certifications" target="_blank">https://www.u-mask.eu/certifications</a><br /></li><li>My second favorite mask is a cloth mask that was a included with SF B-Sides conference. It has been my go to for almost the entire pandemic. With the addition of the next item on my list.</li><li>This has been a life saver for me and can turn a mediocre face mask into a great fitting comfortable face mask. Its the <a href="https://www.4ocean.com/products/4ocean-face-mask-support-frames?variant=37976782405825" target="_blank">4ocean face mask support frame</a>, this thing is awesome and your purchase goes to an awesome charity removing plastic from our oceans. </li><li>Last but not least the good old fashion disposable masks. These masks have proven to be affective and are really comfortable. I am not a fan of one use masks but in a pinch.</li><li><span style="color: red;">Updated addition: <span style="color: black;">I have been wearing a new mask from Cambridge Masks and I really like it. They are super comfortable and offer a lot of protection. check them out <a href="https://cambridgemask.com/" target="_blank">https://cambridgemask.com/</a> . Also here is a link to their protection information <a href="https://info.cambridgemask.com/hc/en-us/categories/360005482191-Certifications-" target="_blank">https://info.cambridgemask.com/hc/en-us/categories/360005482191-Certifications-</a></span></span><br /></li></ul><div><br /></div><div>Hand Sanitizer</div><div><ul style="text-align: left;"><li>I purchased a case of alcohol hand sanitizer at the initial onset of the pandemic from Raff Distillery in San Francisco and I am still using it. It doesn't look like they are producing it any more but here is a link to their web site. <a href="https://raffdistillerie.com/handsanitizer.html" target="_blank">https://raffdistillerie.com/handsanitizer.html</a></li><li>I also purchased reusable flat pocket sprayers that fit in your pocket and are discreet so you can carry them anywhere. I filled them with the alcohol based hand sanitizer above and a little Vitamin E and inessential oils for smell. </li><li>The travel size Purell hand sanitizers are the best if the spray just doesn't feel strong enough.</li><li>Lastly a small travel size Clorox wipes these are awesome to wipe down airline seats, hotel countertops, or pretty much any where sketchy.</li></ul><div><br /></div></div><div>I am become pretty comfortable with the new normal, in-fact I kind of like wearing face masks in public locations. It makes me feel covert.... In addition to the above I have a couple more things that I do that are probably not necessary but I do them anyway. </div><div><br /></div><div>The first is when I fly or I am stuck in a crowded indoor location I like to wear my glasses. I don't need to wear my glasses all the time, but I feel like it might add a small additional layer of protection, and does not look as paranoid as the entire face shield. </div><div><br /></div><div>Finally if I am traveling on the road or staying in a hotel or AirBNB I will bring a can of lysol to just spray and sanitize the general counter tops restrooms etc. I have a few friends that did this before there was such a thing as coronavirus but since the pandemic I have picked up the habit. </div><div><br /></div><div>Remember Get Vaccinated, Stay Safe and be Compassionate, the first two are obvious but Compassion for our fellow human beings is really what is going to get us through this Pandemic and the Stressful times many are experiencing.</div><div><br /></div><div>Thanks!</div><div><br /></div><div><br /></div></div>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-35266354109552348112021-11-10T13:27:00.002-08:002024-08-01T16:32:43.772-07:00Enhanced Data Visualization Dashboard for Splunk: Integrating Palo Alto Networks NGFW<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGX4MoUveyAgslvkuUiAlwwohtCc4Hj8BWrT1x6kUffLeX3ZDLG-ETvkdckNOsRz8Z5jqgVdETSXMpiqw5i3yaxvR7iJjeryF6y3HIxsRWLK7aPBejOyLpi__oxqFg0qLu7WAF-3p1Ifv9/s604/defcon-ctf-vis.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="361" data-original-width="604" height="383" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGX4MoUveyAgslvkuUiAlwwohtCc4Hj8BWrT1x6kUffLeX3ZDLG-ETvkdckNOsRz8Z5jqgVdETSXMpiqw5i3yaxvR7iJjeryF6y3HIxsRWLK7aPBejOyLpi__oxqFg0qLu7WAF-3p1Ifv9/w640-h383/defcon-ctf-vis.jpg" width="640" /></a></div><p></p><h3 style="text-align: center;"><span style="font-size: medium;"><b>Enhanced Data Visualization Dashboard using Splunk</b></span></h3><h3 style="text-align: center;"><span style="font-size: medium;"><b> </b></span></h3><div style="text-align: left;">I am a fan of Palo Alto Networks NGFW, especially the visibility it can give you in to your traffic. PAN does a pretty good job within their management tools of organizing and reporting on the data, but most of us also have large SIEMs or Logging solutions like Elastic's ELK stack. Splunk, exabeam, etc.</div><div style="text-align: left;"><br /></div><div style="text-align: left;">Splunk being one of the more popular SIEM and logging solutions, I created a PAN Threat Dashboard I wanted to share. If you have Splunk running in your environment and the Splunk Palo Alto Networks add-on installed all the pre-defined fields should work correctly. If not, you may need to tweak 1 or 2 fields in the dashboard to make it work. When you copy the code from my GitHub save it in a text editor and perform the following steps. It should be up and running in your environment in no time.</div><div style="text-align: left;"><br /></div><div style="text-align: left;">GitHub link: <a href="https://github.com/wirelessphreak/Palo-Alto-Networks-Threat-Dashboard-for-Splunk" target="_blank">https://github.com/wirelessphreak/Palo-Alto-Networks-Threat-Dashboard-for-Splunk</a><br /></div><div style="text-align: left;"> </div><div style="text-align: left;">You will need to identify your Palo Alto firewall host= fields (how Splunk identifies the device sending logs) to populate the field2 drop down menus.</div><div style="text-align: left;"> </div><div style="text-align: left;"><p dir="auto">Directions:</p>
<ol dir="auto"><li>Log into Splunk and go to Search</li><li>Click on Dashboards and Create a new Dashboard</li><li>Once you have created your new dashboard go to edit and select source tab on the top</li><li>Clear out the default text in the dashboard and copy and paste the dashboard from GitHub.</li><li>Before you save the dashboard you will need to identify your Palo
Alto firewall host= fields to populate the field2 drop down menus, I
have space holders firewall-1, firewall-2, etc. configured currently</li></ol>
<p dir="auto"> </p><p dir="auto">You should be good to go!</p> </div>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-22084554279838148772021-10-04T15:05:00.004-07:002024-08-01T16:33:56.111-07:00Speculation on the Facebook Outage: Was It a Major Security Incident or an Internal Error?<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_jRrFTjXHmc7pwJfH0G3SsNa8u1gLnqCXmKLENGS1PFQh27iTWv_QGIP-uKKHI4p1_YZVh_sQJbXtQA6ndT195k_hjkl6ErgM-LIaKEaJbAu5a7KzFDujxk6SWtuTXq6bnwtf4FEtpKEV/s400/615b2572eee47.image.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="231" data-original-width="400" height="370" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_jRrFTjXHmc7pwJfH0G3SsNa8u1gLnqCXmKLENGS1PFQh27iTWv_QGIP-uKKHI4p1_YZVh_sQJbXtQA6ndT195k_hjkl6ErgM-LIaKEaJbAu5a7KzFDujxk6SWtuTXq6bnwtf4FEtpKEV/w640-h370/615b2572eee47.image.jpg" width="640" /></a></div><br /><p></p><p>The following is complete speculation but wanted to at least start a discussion around what could have happened at Facebook today.</p><p> I don't think it was an honest mistake that caused the Facebook outage. With DNS reported down BGP routing issues and reports that even internal networks are affected, this looks bigger than a single mistake. Facebook most certainly has complicated network segmentation and redundancy in place for there internal and external networks. <br /><br />Also, the timing is very suspect since it is the day after the Facebook Whistleblower interview on 60 Minutes. <br /><br />If this isn't the work of a disgruntled employee, it is some sophisticated shit, and they have been living rent-free in the Facebook network for a long time. They got all the bytes they need and decided to blow that shit up after the interview.</p><p>I hope Facebook shares the details of the outage. If it was indeed an internal error that caused the outage it may be an eye opener for other large platforms to learn from the mistake. If it was nefarious activities that caused this, it could be an epic learning opportunity for the Cyber security world.</p><p>Either way please share the outcome Facebook....</p><p><br /></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-84403288904129786712021-09-27T19:56:00.001-07:002024-08-01T16:35:52.635-07:00Soft and Chewy Chocolate Chip Cookies Recipe | Perfect Half-Batch for Two<p></p><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHp-dElrXVFgqAad5DXQbAHTcCmbq2RmRBJ0r049yDLhlxeR3-QovCJjE1DSIb2fnREw8CCBm3_l66XfwST-6PrMPD5vcxCciOJrsIcO_pYFI_3uuD7rcfEtDqz_bU7JT7EdgZmbzxN9oW/s2048/Chocolate_Chip_Cookies_-_kimberlykv.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1360" data-original-width="2048" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHp-dElrXVFgqAad5DXQbAHTcCmbq2RmRBJ0r049yDLhlxeR3-QovCJjE1DSIb2fnREw8CCBm3_l66XfwST-6PrMPD5vcxCciOJrsIcO_pYFI_3uuD7rcfEtDqz_bU7JT7EdgZmbzxN9oW/w640-h426/Chocolate_Chip_Cookies_-_kimberlykv.jpg" width="640" /></a> </div><div class="separator" style="clear: both; text-align: left;">Soft and chewy chocolate chip cookies. I like all cookies but chewy warm chocolate chip cookies are my favorite. Since there is only two of us the recipe I posted is cut in half. Just double it if you want the full batch, the half batch will make about 1 1/2 dozen.</div><div class="separator" style="clear: both; text-align: left;"> </div><p></p><h4 style="text-align: left;">Ingredients<br /></h4><ul style="text-align: left;"><li>1 1/8 cup of all purpose flower</li><li>1/4 teaspoon of Baking Soda</li><li>1 stick of un-salted butter (room temperature)</li><li>1/4 cup of granulated sugar</li><li>1/2 cup of packed brown sugar</li><li>1/2 teaspoon of Kosher Salt</li><li>1 teaspoon of Vanilla Extract</li><li>1 large egg</li><li>1 cup of smi-sweet chocolate chips</li></ul><p> </p><h4 style="text-align: left;"> Directions</h4><ol style="text-align: left;"><li>Preheat oven to 350°F with racks in the upper and lower third positions. </li><li>In a small bowl, whisk together flour and baking soda; set aside.</li><li> In the bowl of a stand mixer fitted with the paddle attachment, beat
butter and both sugars on medium speed until light and fluffy, about 3
minutes.</li><li>Add salt, vanilla, and eggs; mix to combine.</li><li>Reduce speed to low and gradually add flour mixture, mixing until just combined. </li><li>Mix in chocolate chips.</li></ol><p> </p><h4 style="text-align: left;">Preparing to Bake</h4><ol style="text-align: left;"><li>Using a tablespoon measure, drop heaping portions of dough about 2 inches apart on baking sheets lined with parchment paper.</li></ol><p> </p><h4 style="text-align: left;"> Baking</h4><ol style="text-align: left;"><li>Bake until cookies are golden around the edges, but still soft in the center, 8 to 10 minutes. </li><li>Remove from oven, and let cool on baking sheet 1 to 2 minutes.</li><li>Transfer cookies to a wire rack and let cool completely. Store cookies
in an airtight container at room temperature up to 1 week. </li></ol><p> </p><p></p><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCG29NboMuhM8TruyWPfcPF6u3FrP7A7P54bD5fxKiQq0L0mT3WbTm3zVCSn3pKNGSbC5cx1oY6Z2ca1bfRhU0LZl7brQQlGyevgP07UDm2n7wsdVdH1HvFKURprhYlUkc0OgEwmernpeG/s700/5ognrz.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="493" data-original-width="700" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCG29NboMuhM8TruyWPfcPF6u3FrP7A7P54bD5fxKiQq0L0mT3WbTm3zVCSn3pKNGSbC5cx1oY6Z2ca1bfRhU0LZl7brQQlGyevgP07UDm2n7wsdVdH1HvFKURprhYlUkc0OgEwmernpeG/s320/5ognrz.jpg" width="320" /></a></div><br /> <p></p><p> </p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-56235305394749350652021-08-25T14:11:00.003-07:002024-08-01T16:37:00.266-07:00Changes in GlobalProtect Client Upgrade Behavior: Password Requirements and Recommendations<div><div><p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWsIdZtwrx6_AUtm9x6wggF3ci_3_EQZaQc2kGsbYXiXAVaSNxaRSo4eXq6pzSitdHwDyPS7KGQ_AihyphenhyphenxN8REORvosBPzobbjcF8gFSVjJXYcpohOQ8jnuptwNyAY2htZprT4ng8BNZ0aR/s600/depositphotos_88212408-stock-illustration-global-protection-icon.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="600" data-original-width="600" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWsIdZtwrx6_AUtm9x6wggF3ci_3_EQZaQc2kGsbYXiXAVaSNxaRSo4eXq6pzSitdHwDyPS7KGQ_AihyphenhyphenxN8REORvosBPzobbjcF8gFSVjJXYcpohOQ8jnuptwNyAY2htZprT4ng8BNZ0aR/w400-h400/depositphotos_88212408-stock-illustration-global-protection-icon.jpg" width="400" /></a></div>
<p></p><p>Recently there has been a change in the behavior when a user tries to upgrade the GP client, they are challenged with the uninstall password if configured with one. Working with Palo Alto networks TAC they identified that during the upgrade the GP client package will uninstall the old version first before it will begin to install the new package. In GP client 5.2.4 and older the upgrade would complete even if uninstall with a password or disallow was enabled. This was identified as a software issue so in clients 5.2.5 and newer the ability to upgrade the client with uninstall option set to password or disallow was disabled. <br /><br />In a nutshell with the new GP clients you will need to set the client setting to allow uninstall, if you want to utilize the Global Protect client upgrade process. </p><p><br /></p><p><b>Clients 5.2.4 or older, following is the behavior:</b></p><ul style="text-align: left;"><li> If you are using GP version older than 5.2.4, the transparent upgrade should work where the user will have no interaction and they can upgrade even if the allow uninstalled is disallowed.</li></ul><p> </p><p><b>Starting with 5.2.5 or above, following is the behavior:</b><br /></p><ul style="text-align: left;"><li> Allow User to Uninstall GlobalProtect App is set to Allow</li><li> Allow User to Upgrade GlobalProtect App as Allow with Prompt/Manually/Transparently. (In this case, the users will be able to upgrade transparently without any interaction and the passcode/password will not be allowed)</li></ul> <br /></div><ul><li>Allow User to Uninstall GlobalProtect App is set to Disallow</li><li> Allow User to Upgrade GlobalProtect App as Allow with Prompt/Manually/Transparently (This will be blocked)</li></ul> <br /></div><ul style="text-align: left;"><li>Allow User to Uninstall GlobalProtect App is set to "Allow with password"</li><li> Allow User to Upgrade GlobalProtect App as Allow with Prompt/Manually/Transparently. ( In this case, the users will need to enter the uninstall password to complete the upgrade) </li></ul><p><br /></p><p><b>To allow the users to upgrade without providing them a password, you would need to use following.</b><br /></p><ul style="text-align: left;"><li> Allow User to Uninstall GlobalProtect App is set to Allow</li><li> Allow User to Upgrade GlobalProtect App as Allow with Prompt/Manually/Transparently.”<br /></li></ul><p> </p><p>My personal recommendation is to allow the client uninstall so you can leverage the GP client upgrade process. I feel the ability to upgrade the clients to ensure functionality and security is more important than blocking them from uninstalling the client. In addition we have tested with clients that are not Admins on the local machine and they were unable to uninstall the client from the windows software manager. So that is a win...</p><p><br /></p><p>Perhaps the client upgrade functionality can also be managed with an mdm solution or with a software management tool like SCCM. But it will take some testing to find the best process that works for your environment.<span style="color: black; font-size: 9.0pt; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin; mso-fareast-font-family: "Times New Roman";"></span></p><p><span style="color: black; font-size: 9.0pt; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin; mso-fareast-font-family: "Times New Roman";"><br style="mso-special-character: line-break;" />
<span style="background: white;"></span></span>
</p><p><span style="color: black; font-size: 9.0pt; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin; mso-fareast-font-family: "Times New Roman";"><br style="mso-special-character: line-break;" />
<span style="background: white;"></span></span>
</p><p><span style="color: black; font-size: 9.0pt; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin; mso-fareast-font-family: "Times New Roman";"><br style="mso-special-character: line-break;" />
<span style="background: white;"></span></span>
</p><p><style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-charset:0;
mso-generic-font-family:roman;
mso-font-pitch:variable;
mso-font-signature:3 0 0 0 1 0;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;
mso-font-charset:0;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:-536859905 -1073732485 9 0 511 0;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0in;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}div.WordSection1
{page:WordSection1;}</style></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-86390360937712918132021-07-27T19:31:00.001-07:002024-08-01T16:38:12.868-07:00Explore Disneyland in Minecraft: A Complete Guide to ImagineFun.net<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhO8ngiE-dx3mirVRtCHwcHky2egmZSyhVejKQdBKtqq_pD-BdL0Ac1ZKUNL-ogy1m-Ou4Cg5lM2nyVdSSybrE7u6StFyX7TMkO9SpB6z-BYJmrxLkPWiD9xAaXslWvS_wa8YWuoNyQySsE/s1920/carsridegroup.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1280" data-original-width="1920" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhO8ngiE-dx3mirVRtCHwcHky2egmZSyhVejKQdBKtqq_pD-BdL0Ac1ZKUNL-ogy1m-Ou4Cg5lM2nyVdSSybrE7u6StFyX7TMkO9SpB6z-BYJmrxLkPWiD9xAaXslWvS_wa8YWuoNyQySsE/w640-h426/carsridegroup.png" width="640" /></a></div><p> </p><p>Experience the Magic is a tag line for the Imaginefun.net website and Minecraft server. To level set for all you folks out there like me that have heard of Minecraft but never played, Minecraft is often described as a ‘sandbox game’. This means that it’s a virtual land where users can create their worlds and experiences, using building blocks, resources discovered on the site, and their creativity, but that simple definition does not do justice for what the folks at ImagineFun have built. Masekegamer and SinxMC started the Minecraft Disneyland simulation in early 2018 and since then their team has grown to over 60 Imagineers, Developers, Builders, Managers, Park Coordinators, Cast Members, and even Tour Guides.</p><p><br /></p><p> My first time logging in I was super overwhelmed and amazed all at the same time. Some of the controls were not intuitive for a Minecraft noob like myself, but I will try to cover that later. The graphics and the scale are second to none. The detail of every part of the park is meticulous even down to how many times a ride cue wraps. Just walking around Disneyland was jaw-dropping, but finding out there are actual functioning rides, that was a game-changing moment. Enough talk let's discuss how to connect to the servers so you can check it out for yourself.</p><p><span data-preserver-spaces="true" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; color: #0e101a; margin-bottom: 0pt; margin-top: 0pt;"><br /></span></p><p><span style="font-family: inherit;"><span data-preserver-spaces="true" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; margin-bottom: 0pt; margin-top: 0pt;">So first off you want to check out the site </span><a class="editor-rtfLink" href="https://www.blogger.com/blog/post/edit/8731506939480895068/8639036093771291813#" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; margin-bottom: 0pt; margin-top: 0pt;" target="_blank"><span data-preserver-spaces="true" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; margin-bottom: 0pt; margin-top: 0pt;">https://imaginefun.net/</span></a><span data-preserver-spaces="true" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; margin-bottom: 0pt; margin-top: 0pt;">. Once on the site navigate to the connect link at the top of the page. They did an excellent job producing a how-to video on setting up and connecting to their Minecraft server </span><a class="editor-rtfLink" href="https://www.blogger.com/blog/post/edit/8731506939480895068/8639036093771291813#" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; margin-bottom: 0pt; margin-top: 0pt;" target="_blank"><span data-preserver-spaces="true" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; margin-bottom: 0pt; margin-top: 0pt;">https://imaginefun.net/connect</span></a><span data-preserver-spaces="true" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; margin-bottom: 0pt; margin-top: 0pt;">. It was straightforward even as a Minecraft noob, but once connected that is where it got a little dicey for me. I was using a mac, but for any PC or Mac using the java Minecraft client is pretty much the same. </span></span></p><p><span data-preserver-spaces="true" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; color: #0e101a; margin-bottom: 0pt; margin-top: 0pt;"><br /></span></p><p><b>Pro Tips:</b></p><ul style="text-align: left;"><li>Make sure from the Minecraft launcher you install Minecraft 12.2.2 this will give you the least buggy and smoothest experience. </li><li>Join their Discord server, ImagineFun is not just a game but has become a community. They have over 21,000 members on their Discord server. To be honest this is where I got most of my information about how to enjoy the game. The people are super nice and helpful. <a href="https://discord.gg/disneyland" target="_blank">https://discord.gg/disneyland</a></li><li>Once you start feeling comfortable in the game check out the Support section on the discord server and start playing around with the mods and shaders to make Disneyland look even more real. </li><li>You will want to sync the Monecraft account you play with to the discord account you are using. You can do this by typing <b>/syncdiscord </b>and following the direction on the screen. <br /></li><li>Different membership levels will allow you different perks. </li></ul><p><b><br /></b></p><p><b>Commands to Start Out:</b></p><ol style="text-align: left;"><li><b>/ </b>or backslash. This command will get you into chat from chat you can invoke other commands that you will need to know. </li><li><b>/rp</b> This downloads and enables the resource pack so you can see all the custom work the ImaginFun team has done to create the world.<br /></li><li><b>/audio</b> from within chat, you can type the word audio this will post a link in chat that you can click on. when you click on it a window will pop up in Minecraft to launch a browser or copy the link. Either one you choose will take you to a webpage that will serve park audio specific to your gameplay. It provides the audio on rides, and the ambient music for the different lands you walk through. The audio adds an immersive aspect to the Disneyland experience.</li><li><b>/warp</b> This command will allow you to jump to a different land, rides, and shops throughout the park. As an example, you can type /warp fantasyland.</li><li><b>/rides</b> Will present you a list of open rides you can warp to. Yes, the rides go down for maintenance just like the real Disneyland.</li><li><b>/shops</b> This will present a list of shops you can warp to.<br /></li><li><b>/server</b> This will list the active servers that are up and running. If you are trying to catch up with a friend or want to be on a less crowded server this is where you can choose what sever you want to play on. Just as an FYI when you go to a new server you will need to reconnect to a new audio session using the /audio command.</li><li><b>/msg [player]</b> or<b> /pm [player] </b>Allows you to send a message in-game to another player.</li><li><b>/tpa [player] </b>Allows you to teleport to another player on the same server.</li><li><b>/trade [player] </b>Allows you o trade items with another player.</li><li><b>/ignore </b>Ignore a player obviously.<br /><b></b></li><li><b>/vote </b>This allows you to vote on multiple Minecraft ranking severs and you get coins.</li><li><b>/cointrade </b>This command will allow you to convert your currency into different types.</li><li><b>/sb </b>This command was a godsend I hated the floating server status window on the right site. This command toggles that on and off. <br /></li></ol><p><b><br /></b></p><p><b>Play Mechanics:</b></p><p>So this was probably one of the simplest but most frustrating things to figure out, how to get on a dang ride. To get on a ride you will need to walk up to the loading platform. On most of the platforms, they will have a timer telling you how long it will take for the ride car to spawn/show up. Once the car shows up you walk up to where you want to sit and right-click the mouse. This will get you on the ride and start the ride audio. </p><p><br /></p><p>If you want to get off the ride you can select the left shift button that will drop you off the ride and allow you to warp somewhere else. </p><p><br /></p><p>There is so much more you can do on this server, I don't want to spoil all the fun. I suggest you join the Discord server to learn more about the ever-evolving game and community. Get your Disneyland fix, save a lot of cash, and tell Covid to kick rocks.</p><p><br /></p><p>Have fun on the Happiest Minecraft server on the Planet.</p><p><br /></p><center><iframe allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="315" src="https://www.youtube.com/embed/9mePEJH0Dn0" title="YouTube video player" width="560"></iframe></center>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-65521573856938047802021-05-04T22:36:00.002-07:002024-08-01T16:39:32.993-07:00Discover InfoCon.org: The Ultimate Archive of Hacking Convention Material<p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDR4SqrsISn5x0Dwex2TvsPGzkvJNLT9OkoGNMzYA3u4srK45Fvsry4nLzuzrUnFnR5i-AS90irEf2JOsERYuyy0KXmV3GPRMEfeGbtTQCHUvT8Ao2nnTCwwz8VYNQSPdmWN0xe8jxGScd/s1200/12486082_764932866985686_3312153812203681768_o.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="560" data-original-width="1200" height="298" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDR4SqrsISn5x0Dwex2TvsPGzkvJNLT9OkoGNMzYA3u4srK45Fvsry4nLzuzrUnFnR5i-AS90irEf2JOsERYuyy0KXmV3GPRMEfeGbtTQCHUvT8Ao2nnTCwwz8VYNQSPdmWN0xe8jxGScd/w640-h298/12486082_764932866985686_3312153812203681768_o.jpg" width="640" /></a></div> <p></p>InfoCon.org is a noncommercial community-supported website that hosts the largest archive of past hacking-related convention material on the planet. It amazing how extensive their collection of video, audio, hacker documentaries, wordlists, rainbow tables, podcasts, the content goes on and on.<br /> <br />You have to check it out for yourself, you can get lost hours, days even weeks there is so much content.<p><br /></p><p style="text-align: center;">Check them out and show them some love.</p><p style="text-align: center;"><a href="https://infocon.org/" target="_blank">https://infocon.org/</a></p><p style="text-align: center;"><br /></p><p style="text-align: center;"><br /></p><p style="text-align: center;"><br /></p>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-85567053331647021162021-04-18T23:31:00.002-07:002024-08-01T16:40:51.312-07:00Defcon 2021: Hybrid Model, Mask Requirements, and New Changes Revealed<p></p><div class="separator" style="clear: both; text-align: center;"><p><span style="font-family: arial;"><span style="font-size: small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFXg1EI1lKZqLdo7I1UW1XoWMCIchyphenhyphenn3y07JB7my_F1ryrJGkmu6ceeNfNFyPux0ejAI0A3jTVKVlbqA7cmYuGXneyH2Z0yWp59RMME9LafVno8nBOHDsM2lavUxxMqHXl_4YowqXVggGd/s600/image_2478.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="293" data-original-width="600" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFXg1EI1lKZqLdo7I1UW1XoWMCIchyphenhyphenn3y07JB7my_F1ryrJGkmu6ceeNfNFyPux0ejAI0A3jTVKVlbqA7cmYuGXneyH2Z0yWp59RMME9LafVno8nBOHDsM2lavUxxMqHXl_4YowqXVggGd/w640-h312/image_2478.png" width="640" /></a></span></span></p></div><p style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: arial;"><span style="font-size: small;"> </span></span></p><p style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: arial;"><span style="font-size: small;">**Update June 5th, 2021** There have been some questions about Defcon in person attendance and masks, especially as Las Vegas will have officially reopened completely. Dark tangent made it clear in a post on the Defcon Forums,</span></span> <span style="-webkit-text-size-adjust: auto; font-size: 18.55px;">“If a law forces us to allow people to not wear masks we would cancel the event” , if you want to read the entire conversation check it out here. </span><a href="https://forum.defcon.org/node/237012/page2#post237285">https://forum.defcon.org/node/237012/page2#post237285</a></p><p style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: arial;"><br /></span></p><p style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: arial;">Dark Tangent, the founder and organizer of Defcon, just posted in the Defcon forums that the conference going to go hybrid this year. Here is a link to his post: </span><a href="https://forum.defcon.org/node/236655" style="font-family: arial;">https://forum.defcon.org/node/236655</a><span style="font-family: arial;">. DT admittedly says things are still fluid but they wanted to put out the information to help people make the decision if they are going to go virtually or in person. Now that the Goons are going to be yelling "space it out" instead of "squeeze it in" It's going to feel like Defcon in a parallel universe.</span></p><p style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: arial;"><span style="font-size: small;"> </span></span></p><p style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: arial;"><span style="font-size: small;">There will also be some unprecedented changes this year that I wanted to outline below. Again things might change but these where the highlights from DT's post. I will add the preregistration link on this post when they release it later this month.<br /></span></span></p><ul style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: left; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><li><p><span style="font-family: arial;"><span style="font-size: small;">Defcon will be held both online and in person.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">To attend in person you are required to wear a mask and be vaccinated.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">Defcon will have socially distance seating and tables, and the convention properties will have increased air circulation and filtering.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">For the first time Defcon will have online pre-registration for the in-person conference. The registration platform has not been selected, but they are encouraging in person attendees to preregister by insuring they will get a physical conference badge. DT mentions that they need hard numbers of attendees to help them with planning the event.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">They are going to order extra badges for those who show up with cash on-site, but if they guess wrong on quantity you may getting a paper badge, and if they are at capacity you could be turned away. </span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">Defcon will be throwing only the Black and White ball, entertainment. and pool parties this year. They will not be planning or organizing smaller parties.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">Defcon has asked everyone, villages included, to pre-record all talks. Should they have to go full virtual, they won’t have a last-minute disaster of trying to capture the talks. This way DEF CON can release talks on Twitch like last year.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">Should you be in-person and want to give your talk live they can do that, or do Q&A, or remote Q&A. Pre-recording gives Defcon options and allows everyone to see the talks. Yes, DCTV will be happening so you can also watch in your hotel room.</span></span></p><p><span style="font-family: arial;"><span style="font-size: small;"> </span></span></p></li></ul><p style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><span style="font-family: arial;"><span style="font-size: small;">DT also listed some of the assumptions they have been working with while trying to organize Defcon this year.<span class="Apple-converted-space"> </span></span></span></p><ul style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><li><p><span style="font-family: arial;"><span style="font-size: small;">Almost no international attendees will attend in-person. The quarantine times and lower vaccination rates mean it is not very realistic, so we hope they will join us on-line instead.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">That everyone in our demographic who is capable and wants a vaccination will have gotten one by the end of June.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">Our in-person attendance will be ¼ to ½ normal, and people will be changing their minds on whether or not to attend right up to the last minute – and that includes people organizing contests, events, and villages.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">Not all Goons will be there in-person, and many will help out by Gooning virtually.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">While there will be fewer attendees there will also be fewer villages, contests, and events. It should all balance out so attendees don’t fee like there are a million things to do but not enough people to do them with.</span></span></p></li><li><p><span style="font-family: arial;"><span style="font-size: small;">There will be hybrid events, where you can participate in-person as well as virtually, but doing this for every event is unfortunately too demanding for many contest and village organizers.</span></span></p></li></ul><div style="-moz-text-size-adjust: auto; -webkit-text-stroke-width: 0px; caret-color: rgb(0, 0, 0); color: black; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-decoration: none; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><p><span style="font-family: arial;"><span style="font-size: small;"> </span></span></p><p><span style="font-family: arial;"><span style="font-size: small;">I am pretty excited that Defcon will have hybrid model this year. Defcon for me over the last almost 20 years of attendance is something I look forward to every year. Like most people your last day after the con - when your hung over, hot, and reek of cigarette smoke - you have those brief thoughts that “maybe I’ll take next year off”. That only lasts a short time before your booking your hotel for next year. </span></span></p><p><span style="font-family: arial;"><span style="font-size: small;"> </span></span></p><p><span style="font-family: arial;"><span style="font-size: small;">Welcome back Defcon!</span></span></p></div>Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-69206955461498706092020-12-30T22:20:00.002-08:002024-08-01T16:41:56.868-07:00Resolving VDI Horizon Connection Issues Over ATT Wireless: Understanding the Challenges and Proposed Solutions<div class="separator"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8XVMFEnxcwyjPpKlAp_kNs0xn5sLhgDQlHlSIAMhrPgZXRzlWtmUOPf8wxQ7hJ0Vzb5Xh74eroEUj9A-QJbItzWPptnjRYEAITAbUOX851gC7P0XDyOT8-TwsuoSYFBOFYilyelVW7mV3/s500/att-death-star.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="333" data-original-width="500" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8XVMFEnxcwyjPpKlAp_kNs0xn5sLhgDQlHlSIAMhrPgZXRzlWtmUOPf8wxQ7hJ0Vzb5Xh74eroEUj9A-QJbItzWPptnjRYEAITAbUOX851gC7P0XDyOT8-TwsuoSYFBOFYilyelVW7mV3/w640-h426/att-death-star.jpg" width="640" /></a></div><p></p> <p><b>Use Cases:</b></p><p>Since the COVID-19 pandemic, many companies have leveraged VDI Horizon infrastructure to accommodate their remote workers. Today remote users connect to VDI Horizon infrastructure over many different means home ISP connections, company-issued cellular devices/hotspots on multiple carriers, as well as personal devices. We have identified an issue with cellular devices traversing the ATT Wireless network connecting to VDI Horizon infrastructure.</p><p> </p><p><b>The Architecture:</b></p><p>I wanted to simplify the VDI Horizons infrastructure discussion to just the pieces that are crucial to the issue. The relevant parts that come into play for user access to the Horizons environment is the VMWare Horizon client, hardware load balancers, and the UAG or User Access Gateway servers. </p><p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihCJGxTUVIDRVzEuXlOgK0v0Cl26S4S1dI6uGPrcOXf2gD3TF8LP_PF67Z9Nv4-vNepV-4j8SlgqV2xrFY7ei5P6uOaA0zfwqGjc14QJ3aV8MZv1Wpi4SVEJHFmrth80nGtcOqMGsanzRv/s654/Picture1.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="318" data-original-width="654" height="314" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihCJGxTUVIDRVzEuXlOgK0v0Cl26S4S1dI6uGPrcOXf2gD3TF8LP_PF67Z9Nv4-vNepV-4j8SlgqV2xrFY7ei5P6uOaA0zfwqGjc14QJ3aV8MZv1Wpi4SVEJHFmrth80nGtcOqMGsanzRv/w645-h314/Picture1.png" width="645" /></a></div><p></p><p><br /></p><p><b>The Protocols:</b></p><p>VDI Horizons traffic is split between primary and secondary protocols. The primary protocol used for authentication is over HTTPS or port 443. Within the ATT wireless network, this traffic is sourced from the primary enterprise PAT address. After the VMware Horizon client has authenticated and established secure communication to one of the UAG appliances, one or more secondary connections are made from the Horizon client. These secondary connections can include:</p><p>•<span style="white-space: pre;"> </span>Blast Extreme display protocol (TCP 443 and UDP 8443). Note that UDP is optional with Blast.</p><p>•<span style="white-space: pre;"> </span>PCoIP display protocol (TCP 4172 and UDP 4172).</p><p>The secondary Horizon protocols must be routed to the same UAG appliance and from the same client IP address that the primary Horizon protocol was authenticated from. The UAG authorizes the secondary protocols based on the authenticated user session. The UAG will only forward traffic into the corporate data center on behalf of an authenticated user.</p><p><br /></p><p><b>The Symptoms:</b></p><p>On the ATT Wireless network when a user's Horizon client connects to a virtual IP address it is load balanced to a UAG server and the session is authenticated. The IP address of the traffic is sourced and authenticated using the device’s IP address, this is true for all networks. When the Horizon client attempts to connect to the secondary protocol the traffic destined to the secondary protocol port, UDP 8443, or TCP or UDP 4172, is routed through a proxy within the ATT network. When the traffic is routed through the ATT proxy the source IP address of that traffic is different than the original device IP that was used to authenticate the user session and the VMware UAG server rejects the traffic. In some situations, the load-balanced traffic may even be sent to a different UAG server. This seems to be true for all users on the ATT Wireless network.</p><p> </p><p><b>Moving toward a solution:</b></p><p>The first part of solving the problem is identifying the cause, and we believe that is done. Since the IP address of the primary and secondary protocols are different, the Horizons server rejects the traffic or perhaps never sees the traffic based on load balancing and persistence settings of the load balancer. ATT network engineers have been very helpful with troubleshooting and validating that our assumptions are accurate and are currently looking at solutions to solve the issue. </p><p>**Update** the ATT sales people that where interfacing with the ATT technical staff have informed us it is not possible to fix the issue. They are trying to sell us a cellular router that they say can be routed over an APN to solve the issue, instead of letting the technical folks fix the issue for us and potentially everyone else on the ATT wireless network.<br /></p><p><br /></p><p><b>What would we like to see:</b></p><p>We would like to see the secondary protocols included in the enterprise PAT and not routed through the proxy. If this was implemented, it could fix VDI Horizons across the entire ATT Wireless environment for everyone.</p><div><br /></div><p><br /></p><br />Unknownnoreply@blogger.comtag:blogger.com,1999:blog-8731506939480895068.post-44639697148175450932020-12-17T12:39:00.016-08:002024-08-01T16:43:18.334-07:00Comprehensive Guide to the SolarWinds SolarStorm Hack: Impact, Responses, and Resources<div><div><div><div><p><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh5IgWznbN4foKYELQgz95tvFHjVY904cnZiU37RJQWrSerk7yBMTOvzScakIstQ87p2qjXR8QOmRC5FccIplB_kW_dH3ZqdkYvC34KXdm2JuKENmE3ggRkbHl9k_Ya0uyYhs72kCSNHJA/s1920/external-content.duckduckgo.com.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1080" data-original-width="1920" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh5IgWznbN4foKYELQgz95tvFHjVY904cnZiU37RJQWrSerk7yBMTOvzScakIstQ87p2qjXR8QOmRC5FccIplB_kW_dH3ZqdkYvC34KXdm2JuKENmE3ggRkbHl9k_Ya0uyYhs72kCSNHJA/w640-h360/external-content.duckduckgo.com.jpg" width="640" /></a></p><p></p><p style="text-align: center;"><b>So SolarStorm the SolarWinds supply chain hack... Yeah.... You might have heard about it? </b></p><p style="text-align: center;"><b> </b></p><p>SolarWinds supply chain was compromised. What that means is a trojanized version of a SolarWinds package was uploaded and distributed to their clients . The infected package contained malware named SUNBURST, and when clients installed the infected package it also installed the malware. The malware creates a backdoor to allow the bad actors to control the server, move laterally, and exfiltrate data. Basically what ever they want....</p><p> </p><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKywer34E2EBIcX38Fd7PWh1NIdkzYSDBtxNkFAAWiF0clsBVgvpnKAcxHVZ-IYw-ZNttxsWm400bAOnuvwlQ83qqTMV2hn2JEEJJmqvesSRKkIm_Ftb8wlp3ySOiNJ4wCa5H19Ldh9PgE/s703/img_5fd9229eeab64.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="371" data-original-width="703" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKywer34E2EBIcX38Fd7PWh1NIdkzYSDBtxNkFAAWiF0clsBVgvpnKAcxHVZ-IYw-ZNttxsWm400bAOnuvwlQ83qqTMV2hn2JEEJJmqvesSRKkIm_Ftb8wlp3ySOiNJ4wCa5H19Ldh9PgE/w400-h211/img_5fd9229eeab64.jpg" width="400" /></a></div><p> </p><p> Updated Solarwinds Attack Lifecycle:</p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnKTdB8IW8Qqu6gO9bG3Ye_1ioaXnH2czVEddnkLVkFXv3gBVX2vtduakzjT4NItVLW3vCFVAntDSEMjr7BKwVNvR4x5AsU3EZh6hj_SBVh_K6dYCEToTZBHFHGc-tavC5fFTHQH0L9BTo/s2048/Screen+Shot+2020-12-18+at+2.30.16+PM.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1107" data-original-width="2048" height="346" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnKTdB8IW8Qqu6gO9bG3Ye_1ioaXnH2czVEddnkLVkFXv3gBVX2vtduakzjT4NItVLW3vCFVAntDSEMjr7BKwVNvR4x5AsU3EZh6hj_SBVh_K6dYCEToTZBHFHGc-tavC5fFTHQH0L9BTo/w640-h346/Screen+Shot+2020-12-18+at+2.30.16+PM.png" width="640" /></a></div></div><div></div><div></div><div></div><div><br /><p>What should you do now:</p><p></p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgslhbiRALAQrEMGwO8H5ZWm9iVqwszWLn9_rZbu6-AwF5fqeflob_PfHJ_bigcSF3KqkKLhXE_4hQZTCUfnnLCrHk8UUSLgcO72Ua-WlXzaP8ShFIlo153rNhcwWWUKVtKeeISaGZ2UAzH/s1372/Screen+Shot+2020-12-18+at+2.38.06+PM.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="729" data-original-width="1372" height="340" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgslhbiRALAQrEMGwO8H5ZWm9iVqwszWLn9_rZbu6-AwF5fqeflob_PfHJ_bigcSF3KqkKLhXE_4hQZTCUfnnLCrHk8UUSLgcO72Ua-WlXzaP8ShFIlo153rNhcwWWUKVtKeeISaGZ2UAzH/w640-h340/Screen+Shot+2020-12-18+at+2.38.06+PM.png" width="640" /></a></div> <br /><p></p><p>As information starts to come out and the initial freak out calms down we are learning more about the impact of these exploits, and they are pretty huge. I wanted to gather a collection of information and vendor responses in one place to try to help fellow nerds have a resource of reliable information. </p><p> </p><p>SolarWinds</p><ul style="text-align: left;"><li>Security Advisory <a href="https://www.solarwinds.com/securityadvisory" target="_blank">https://www.solarwinds.com/securityadvisory </a><br /></li></ul><p>Fireeye Links</p></div><ul style="text-align: left;"><li>Initial write up about the Sunburst <a href="https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html" target="_blank">https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html</a></li><li>Counter Measures <a href="https://github.com/fireeye/sunburst_countermeasures" target="_blank">https://github.com/fireeye/sunburst_countermeasures</a></li></ul>US Cybersecurity and Infrastructure Security Agency (CISA) </div><div><ul style="text-align: left;"><li>Emergency Directive <a href="https://cyber.dhs.gov/ed/21-01/" target="_blank">https://cyber.dhs.gov/ed/21-01/</a> <br /></li></ul></div><p>Palo Alto Networks Unit 42</p><ul style="text-align: left;"><li>Analysis of Sunburst <a href="https://unit42.paloaltonetworks.com/fireeye-solarstorm-sunburst/" target="_blank">https://unit42.paloaltonetworks.com/fireeye-solarstorm-sunburst/</a></li></ul>Check Point</div><div><ul style="text-align: left;"><li>Information <a href="https://blog.checkpoint.com/2020/12/16/solarwinds-sunburst-attack-what-do-you-need-to-know/" target="_blank">https://blog.checkpoint.com/2020/12/16/solarwinds-sunburst-attack-what-do-you-need-to-know/ </a><br /></li></ul><p>Cisco Networks <br /></p><ul style="text-align: left;"><li>Security Advisory <a href="https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-solarwinds-supply-chain-attack" target="_blank">https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-solarwinds-supply-chain-attack</a></li><li>Talos write up <a href="https://blog.talosintelligence.com/2020/12/solarwinds-supplychain-coverage.html" target="_blank">https://blog.talosintelligence.com/2020/12/solarwinds-supplychain-coverage.html</a></li></ul></div><p>Splunk</p><ul style="text-align: left;"><li>Response and Identification tool <a href="https://www.splunk.com/en_us/blog/security/sunburst-backdoor-detections-in-splunk.html" target="_blank">https://www.splunk.com/en_us/blog/security/sunburst-backdoor-detections-in-splunk.html</a></li></ul><p>Mcafee</p><ul style="text-align: left;"><li>Information <a href="https://www.mcafee.com/blogs/other-blogs/mcafee-labs/sunburst-malware-and-solarwinds-supply-chain-compromise/" target="_blank">https://www.mcafee.com/blogs/other-blogs/mcafee-labs/sunburst-malware-and-solarwinds-supply-chain-compromise/ </a></li></ul><p>Microsoft</p><ul style="text-align: left;"><li>Pretty tough to get through :( <a href="https://www.microsoft.com/security/blog/2020/12/15/ensuring-customers-are-protected-from-solorigate/" target="_blank">https://www.microsoft.com/security/blog/2020/12/15/ensuring-customers-are-protected-from-solorigate/ </a></li><li><b>**Customer Guidance: <a href="https://msrc-blog.microsoft.com/2020/12/13/customer-guidance-on-recent-nation-state-cyber-attacks/" target="_blank">https://msrc-blog.microsoft.com/2020/12/13/customer-guidance-on-recent-nation-state-cyber-attacks/</a></b></li></ul><p>Infoblox</p><ul style="text-align: left;"><li>Response <a href="https://blogs.infoblox.com/cyber-threat-intelligence/cyber-threat-advisory-solarwinds-supply-chain-attack/" target="_blank">https://blogs.infoblox.com/cyber-threat-intelligence/cyber-threat-advisory-solarwinds-supply-chain-attack/ </a></li></ul> Elasticsearch (Elastic Security)</div><div><ul style="text-align: left;"><li>Response and Identification tool <a href="https://www.elastic.co/blog/elastic-security-provides-free-and-open-protections-for-sunburst" target="_blank">https://www.elastic.co/blog/elastic-security-provides-free-and-open-protections-for-sunburst</a></li></ul>Fortinet</div><div><ul style="text-align: left;"><li><b>**Response <a href="https://www.fortinet.com/blog/threat-research/what-we-have-learned-so-far-about-the-sunburst-solarwinds-hack" target="_blank">https://www.fortinet.com/blog/threat-research/what-we-have-learned-so-far-about-the-sunburst-solarwinds-hack</a></b></li></ul></div><div>Link to Blog post about Reverse Engineering the encoded DGAs:</div><div><ul style="text-align: left;"><li><a href="https://blog.prevasio.com/2020/12/sunburst-backdoor-part-ii-dga-list-of.html" target="_blank">https://blog.prevasio.com/2020/12/sunburst-backdoor-part-ii-dga-list-of.html</a></li></ul></div><div>Cynet</div><div><ul style="text-align: left;"><li><b>** Response: <a href="https://www.cynet.com/blog/cynet-security-critical-update-solarwinds-supply-chain-attack/" target="_blank">https://www.cynet.com/blog/cynet-security-critical-update-solarwinds-supply-chain-attack/</a></b> <br /></li></ul></div><div>Symantec</div><div><ul style="text-align: left;"><li><span></span><b>** Analysis: <a href="https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/solarwinds-attacks-stealthy-attackers-attempted-evade-detection" target="_blank">https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/solarwinds-attacks-stealthy-attackers-attempted-evade-detection</a></b></li></ul><b></b></div><div>CrowdStrike</div><div><ul style="text-align: left;"><li><b>**Assessing the SolarWinds hack with their tool: <a href="https://www.crowdstrike.com/blog/tech-center/assess-solarwinds/" target="_blank">https://www.crowdstrike.com/blog/tech-center/assess-solarwinds/</a></b> </li></ul></div><div> <br /></div><div> <br /></div>** is a link that has been added. I will also highlight them in Bold font.<br />Unknownnoreply@blogger.com