Weekly Digest – Week 30, 2021

Articles and News

The Cost of Cloud, a Trillion Dollar Paradox

»You’re crazy if you don’t start in the cloud; you’re crazy if you stay on it.«

https://a16z.com/2021/05/27/cost-of-cloud-paradox-market-cap-cloud-lifecycle-scale-growth-repatriation-optimization/

#cloud #cloud-cost

Where Text Protocols Came From, and Why They’re Not Going Anywhere

In this post, the author shows that even if not always the most efficient solution, there still are use-cases where human-readable protocols still shine.

https://blog.apnic.net/2021/07/30/where-text-protocols-came-from-and-why-theyre-not-going-anywhere/

#protocol #uuencode

Mobile Device Best Practices

https://www.documentcloud.org/documents/21018353-nsa-mobile-device-best-practices

#nsa #mobile-device-security

From Stolen Laptop to Inside the Company Network

Even a laptop following security best practices does not keep attackers from exploiting it. In this case, a TPM secured, FDE SSD was targeted.

https://dolosgroup.io/blog/2021/7/9/from-stolen-laptop-to-inside-the-company-network

#hardware-security #tpm

Kernel Pwning with eBPF: A Love Story

This blog post provides the reader with an in-depth look at eBPF and its security implications in general and details of the specific bug CVE-2021-3490.

https://www.graplsecurity.com/post/kernel-pwning-with-ebpf-a-love-story

#ebpf #ebpf-security

Top Routinely Exploited Vulnerabilities

»Four of the most targeted vulnerabilities in 2020 affected remote work, VPNs, or cloud-based technologies.«

https://us-cert.cisa.gov/ncas/alerts/aa21-209a

Syslog-ng 3.33: The MQTT Destination

Syslog-ng is now able to send log messages to an MQTT broker.

https://www.syslog-ng.com/community/b/blog/posts/syslog-ng-3-33-the-mqtt-destination

#syslog-ng #mqtt

Netcat - All You Need to Know

https://blog.ikuamike.io/posts/2021/netcat/

#netcat

ENISA Telecom Security Incidents 2020 - Annual Report

Of the 170 registered incidents in 2020, 50 % were caused by system failures, 40 % by human errors, 7 % by natural phenomena, and 2 % by malicious actions.

https://www.enisa.europa.eu/publications/telecom-annual-incident-reporting-2020/at_download/fullReport

#enisa #telecom-security