Archive for the ‘Information Technology’ Category

Now serving Los Angels and Orange County area

562Networks Computer, Network repair & installation serving Long Beach, Cerritos, San Pedro, Bellflower, Seal Beach, Sunset Beach, Newport Beach, Temecula, Huntington Beach, El Segundo, Santa Ana, Buena Park, Irvine, Lake forest, Laguna Beach, Dana Point, Torrance, Carson, Redondo Beach, Manhattan Beach, Orange, Mission Viejo, Laguna Hills, El Toro, Hawthorne, Lakewood, Signal hill, Los Alamitos, Seal Beach, Cypress, Paramount, Norwalk, Stanton, Anaheim, Westminister, Fountain Valley, Agoura Hills, Sherman Oaks, Studio City, San Fernando Valley, Los Angeles, Orange County, and Southern California surrounding areas.

Department of Defense to hire on 1000 new Cyber techs

Tags:

The Department of Homeland Security is looking to hire 1,000 cybersecurity professionals in the next three years according to the agency’s secretary Janet Napolitano.

The department now has the authority to recruit and hire cybersecurity professionals across DHS over the next three years in order to help fulfill the Department’s mission to protect the nation’s cyber infrastructure, systems and networks, she said.

Layer 8 Extra: 12 changes that would give US cybersecurity a much needed kick in the pants

“This new hiring authority will enable DHS to recruit the best cyber analysts, developers and engineers in the world to serve their country by leading the nation’s defenses against cyber threats,” Napolitano stated. DHS his the focal point for the security of cyberspace — including analysis, warning, information sharing, vulnerability reduction, mitigation, and recovery efforts for public and private critical infrastructure information systems.

The hiring authority, which results from a collaborative effort between DHS, the Office of Personnel Management and the Office of Management and Budget, lets DHS staff up to 1,000 positions over three years across all DHS agencies to fulfill critical cybersecurity roles-including cyber risk and strategic analysis; cyber incident response; vulnerability detection and assessment; intelligence and investigation; and network and systems engineering.

The need for DHS to bolster its security realm is a hot topic. A Government Accountability Office report this year said that while DHS established the National Cyber Security Division to be responsible for leading national day-today cybersecurity efforts that has not enabled DHS to become the national focal point for security as envisioned.

The GAO said the Defense Department and other organizations within the intelligence community that have significant resources and capabilities have come to dominate federal efforts. The group told the GAO there also needs to be an independent cybersecurity organization that leverages and integrates the capabilities of the private sector, civilian government, law enforcement, military, intelligence community, and the nation’s international allies to address incidents against the nation’s critical cyber systems and functions.

The cybersecurity jobs announcement comes on the same day that the FBI said fraudsters are targeting social networking sites with increased frequency and users need to take precautions, the FBI warned.

The FBI said fraudsters continue to hijack accounts on social networking sites and spread malicious software by using various techniques. One technique involves the use of spam to promote phishing sites, claiming there has been a violation of the terms of agreement or some other type of issue which needs to be resolved. Other spam entices users to download an application or view a video. Some spam appears to be sent from users’ “friends”, giving the perception of being legitimate. Once the user responds to the phishing site, downloads the application, or clicks on the video link, their computer, telephone or other digital device becomes infected, the FBI stated.

Meanwhile legislators are trying to encourage cooperation among universities and businesses to develop technology needed to carry out a strategic government effort to fight cyber attacks.

A US House subcommittee is recommending a bill that calls for a university-industry task force to coordinate joint cybersecurity research and development projects between business and academia. The Cybersecurity Research and Development Amendments Act of 2009 was approved recently by the House Committee on Science and Technology’s Research and Science Education Subcommittee.

The legislation would set up a scholarship program that pays college bills for students who study in fields related to cybersecurity. They would also get summer internships in the federal government. In return the students would agree to work as cybersecurity professionals within the federal government for a period equal to the number of years they received scholarships. If there aren’t any jobs there, they would work for state or local governments in the same capacity or teach cybersecurity courses

FBI warns of social networking fraud, malware escalation

Tags: ,

Fraudsters are targeting social networking sites with increased frequency and users need to take precautions, the FBI warned.

Just today Roger Thompson, chief of research at AVG Technologies, blogged about an automated rogue spyware attack using Facebook in which hackers create new Facebook pages. “We’re seeing rather a lot of these, all from different profiles, but with the same picture and link. Clearly, the Data Snatchers have found a way to automate the creation of Facebook accounts, which means they’ve found a way to bypass the Facebook Capcha (the image of letters which are required for a new account, which are supposed to ensure that a human is involved),” stated Thompson.

The FBI meanwhile states that fraudsters continue to hijack accounts on social networking sites and spread malicious software by using various techniques. One technique involves the use of spam to promote phishing sites, claiming there has been a violation of the terms of agreement or some other type of issue which needs to be resolved. Other spam entices users to download an application or view a video. Some spam appears to be sent from users’ “friends”, giving the perception of being legitimate. Once the user responds to the phishing site, downloads the application, or clicks on the video link, their computer, telephone or other digital device becomes infected, the FBI stated.

Another fraudster favorite involves applications advertised on social networking sites, which appear legitimate; however, some of these applications install malicious code or rogue anti-virus software, the FBI stated.

Other malicious software gives the fraudsters access to your profile and personal information. These programs will automatically send messages to your “friends” list, instructing them to download the new application too, the FBI stated.

Symantec’s Zulfikar Ramzan wrote in a recent CSO article that there’s no question that online social networking continues to rise in popularity due to the numerous conveniences and opportunities it provides. There’s also no question that social networking provides phishers with a lot more bait than they used to have. Threats can come from all sorts of avenues within a social networking site. Games, links and notifications are the low-hanging fruit for phishers to use as they lead people into dangerous territory. As society picks up one end of the social networking stick, it finds that it inevitably picks up the security problems on the other end, he stated.

The FBI recommended the following basic tips to help prevent most nefarious activities:

Adjust Web site privacy settings. Some networking sites have provided useful options to assist in adjusting these settings to help protect your identity.
Be selective of your friends. Once selected, your “friends” can access any information marked as “viewable by all friends.”
You can select those who have “limited” access to your profile. This is for those whom you do not wish to give full friend status to or with whom you feel uncomfortable sharing personal information.
Disable options and then open them one by one such as texting and photo sharing capabilities. Users should consider how they want to use the social networking site. If it is only to keep in touch with people then perhaps it would be better to turn off the extra options which will not be used.
Be careful what you click on. Just because someone posts a link or video to their “wall” does not mean it is safe.
If you want to report an incident, the FBI says to file a complaint at its Internet Crime Complaint Center (IC3).

The Web Bot project

Tags:

In June 2001 I began to correspond with a reader of my website who said he was willing to share access to a promising new web technology, on the condition that I protect his identity.  The person related that he had been a very senior programmer with a software company in the Pacific Northwest (you can guess which company, right?) and besides being a SQL ace, he was also heavily into linguistics and a language called Prolog, which is more like an artificial intelligence language than anything else.

 

I was skeptical, to be sure, but a few days after we began the email exchange of ideas, he sent me a program he had written that allows a computer to be turned into speed reading tool.  It was based on rapidly displaying individual words on a computer screen.  He said this was a technology that he had developed and sold for a while on the Internet.  He also explained how the development rights to the technology had been sold to a company ( www.ebrainspeed.com ).  In essence, after looking up the patent he held for the technology, I was convinced that this fellow was for real and might be on to something with the method of looking for linguistic shift on the Internet as a tool to forecast future events.

 

He described how technology worked.  A system of spiders, agents, and wanderers travel the Internet, much like a search engine robot, and  look for particular kinds of words.  It targets discussion groups, translation sites, and places were regular people post a lot of text. 

 

When a “target word” was found, or something that was lexically similar, the web bots take a small 2048 byte snip of surrounding text and send it to a central collection point.  The collected data at times approached 100 GB sample sizes and we could have used terabytes.  The collected data was then filtered, using at least 7-layers of linguistic processing in Prolog, which was then reduced to numbers and then a resultant series of scatter chart plots on multiple layers of Intellicad ( http://www.cadinfo.net/icad/icadhis.htm ).  Viewed over a period of time, the scatter chart points  tended  to coalesce into highly concentrated areas. Each dot on the scatter chart might represent one word or several hundred.

 

To define meanings, words or groups of words have to be reduced to their essence.  You know how lowest common denominators work in fractions, right?  Well the process is like looking for least common denominators among groups of words.

 

The core of the technology therefore is to look at how the scatter chart points cluster – condensing into high “dot density” areas which we call “entities” and then dissolving or diffusing over time as the entities change. Do a drill down into a dot and you get a series of phrases…

 

Our first published work in the area occurred in early July of 2001 and is available at http://www.urbansurvival.com/tip.htm.

 

What becomes obvious when reading about the technology is that it sometimes reads a bit like the I Ching (the Chinese Book of Changes) because the technology doesn’t come out and say “go look for a terrorist attack over there”  What it does is gives phrases that would be associated with how people talk about an event, or more accurately, how they change their speech to reflect their thought processes because of an event (after). 

 

The web bot technology apparently taps in to an area of preconscious awareness.  It’s here that you run into the ramifications of Dean Radin’s work at the Boundary Institute and the work of the Princeton Global Consciousness Project – both of which Art has talked about on his show.

 

The Global Consciousness Project registered what appears to have been a disturbance in “the force” or the regularly orderly operation of life associated with 9/11: http://www.boundaryinstitute.org/randomness.htm. Supposed “random” numbers generated all over the world appeared to become less random immediately prior to 9/11. 

 

The second point is contained in Dean Radin’s paper at http://www.boundaryinstitute.org/articles/timereversed.pdf (“Time-reversed human experience: Experimental evidence and implications”).  The mind-bending evidence in Radin’s work is that in a laboratory, people begin to react to an event as early as 6-seconds before it takes place.  In other words, if you are about to show someone a horribly grotesque picture of something, they will already be physically reacting to it before the picture actually becomes visible. Up to 6-seconds, or so, and in a lab!  In quantum terms, Radin’s work demonstrates that people are physically able to perceive 6-seconds into the future.

 

Now let’s flip back to September of 2001: So there I was, having just completed a sales & marketing job in San Francisco the previous week, wondering was the ABM Missile test the “world changing event” – or was there something else – and we all know that it was something else – the 9/11 terrorist attack.

 

The second web bot posting forecast an attack on house or assembly – but again, it was I Ching-like in wording.

 

Also in this timeframe, we responded to a Defense Department Broad Area Announcement – and tried to distill the concepts we’ve been discussing into a single PowerPoint slide.  The project didn’t receive funding, although we recently received a note from a venture capital group associated with government projects asking if our information could be kept on file.

 

Then we forecast an attack to occur the day of a commemorative event.  That was the crash of American 587, and although that may eventually be blamed on excessive movement of the aircraft’s vertical stabilizer, what people thought at the time was it was another terrorist attack. http://www.urbansurvival.com/webbot2.htm.,  There is a fair amount of noise in the outputs because we haven’t had the resource to build filtering systems.

 

We forecast many attributes of the  D.C. sniper case.  This was significant because not only did we get the Army connection right, but there was also discussion of familial dysfunction. This was at a time when it was thought there was only one person involved – and the web bots got right that there was more than one.  In fact, one reader sent in the right Army divisional insignia after reading the output. See http://www.urbansurvival.com/bot4.htm.

 

More recently, in January of 2003 the web bots were going on and on about a “maritime disaster” – which didn’t make any sense to us, until the Space Shuttle Columbia disaster hit.  Columbia wasn’t a gem of the ocean, it was a space ship.  We think of web bot outputs like holding up a sheet of paper with several hundred pinholes in it – and trying to guess what’s on the other side by looking through pinholes, but just for an instant. 

 

The most recent run we did was posted in July 2003, and was a mission-specific run designed to assess where the next terrorist attack on the U.S. might come from.  As you read the following, please appreciate that the words in black were published about 50 days before the northeast power outage and that when the outage occurred, again everyone thought it was a terrorist attack:  The blue text is the closeness of fit after the fact:

The [Wahabi] entity is seen as preparing an attack on a site with aspects of (South) [Niagara power flows where?] with specific references to a place where the (wood) in the (earth) {grows} {upward [perfect fit with the Falls] }. Near by will be an (energy) {plant} [bingo!] filled with {tremendous} (effort/work) [Yup!]. The target chosen for the entity has associations with a (vertical wall/ascent) [more Falls refs] near which is a (low land) or (low lying area) [ the water flows this way] from which there rises (power) [no doubt about it] and (influence/confluence) [like the confluence of the disparate pieces of the river at the Falls?] . This latter may suggest a site where a power plant sits at the base of a cliff or naturally occurring wall [ You're kidding, can we be any more precise than this?} that has the power lines rising to it. Further, there is a form of a (departure) {to the south} close by which suggests some form of transportation hub [the river was a transportation artery historically] with a main focus to the south which lies close to the chosen target [which we assume to be NYC] . Other details suggest that near to the chosen target, is a place where (heaps) of {small things} (rise upward) to some height.  The number of both aspects and attributes which related to wood, and woods, and copse, suggest that there is some form of natural woodland setting near to the target. [Yes, it's a generally woody area!] This woodland is near an area where (rivers) {congregate}[Direct hit!] and the (earth) {waters} (flow together) which suggests an estuarine environment [Clear enough?]. There are also references indicating a (waste) {flow} or disposal is nearby [Turbine waste gates?] . This (waste) aspect has the attributes of {dismal} and {abysmal} as well as attributes indicating a {great} (stink/smell) [At about 10PM EDT  CBC News reported cities were dumping untreated sewage into rivers in the affected area due to the power outage!].

On Saturday morning after the event, at the suggestion of several readers who had read the entire web bot work, here are some additional points of fit (again in blue) with the black text being the July early July output.

Further, there are references to (empty city) nearby the target. [One reader suggested that an electrical switchyard, with rows and rows of transformers, looks like an "empty city".]   Perhaps an area of industrial park which is expected to be deserted at the time of the attack, or could even reference abandoned buildings, though the attributes are not so clear as to be able to make a definitive interpretation. [Who would have interpreted a switch yard 2 months ago?] However, that said, there are a number of words referring to (brakes), and (brake noise) and (dead man switch) and (switches/changes) [Now we're back on track, except maybe we should have gotten "breaker" rather than "brakes" - still, close enough, don't you think?] which would indicate a near by train yard. [Oh yeah, they have cranes on tracks to move the heavy gear around generating stations.] As the aspects bring up noise of the (brakes) as being able to be heard from the site of the attack, this would suggest that a busy train yard is close enough to contribute to the majority of the on-site noise. [Or you can hear the falls as they "break" over the top...] There are also some small number of references which can be interpreted towards petroleum refineries.

 

In addition to the (empty city) we find a number of aspects relating to (royalty) such as (king) and (courtier) which have attributes which doubly modify both these aspects as well as a primary aspect of (Mount) as in mountain or large hill. [ No question here, Niagara is the "king of falls" and it's a named place with a named "hill". I need to also mention that King's Point Ontario is very nearby.]  Being linked to the aspects of (royalty) suggests that there is a named hill involved with the site which has a local connotation with (kings). There are also indicators that a (community) {project} is nearby which is associated with (social status). [This is really curious - as most people go to Niagara Falls to celebrate their honeymoons - a big change in "social status", right?] This (community) {project} has an association with (rhythmic motion) and a {centered} (wall). [Or, centered around the falls, as it turns out.] This latter could be referencing a tidal or sea wall, though this is merely a guess at this stage. [Amazing call, huh?] There are some references suggesting that the chosen target site is very noisy.  [Yeah I'd call the site noisy too...]

 

Further, the entity suggests that there are (steps) involved with the attack, though these are not steps as in stairs but rather are to be interpreted as a many small movements or actions which will be necessary for the attack to be successful. This further suggests that the [Wahabi] entity is planning a significant action which will involve some level of coordination with many parts. [Time will tell on this part.] The other references within this data set further amplify this idea in that the aspects return to the idea of (step by step), (small incremental movements) {bring success}. Oddly, a large component of these aspects include other aspects relating to (drunkenness) or (inebriated). These are modified and amplified by references to (not sober), (stay sober), and (advancing intoxication). This data set includes attributes indicating some need to avoid speed or haste in that the attributes include {step by step}, {steady progress}, (do not) {overleap}.

 

A series of  curious references to (blind) and (darkness) also are part of the attack plan as seen by the model. [Darkness?  Like the power going out???!!!] These references also include aspects of (blindly deluded), (tricked), (exhaustion),  (blind impulse), (fear of darkness),  (leap) {into the dark} and other aspects relating to lack of sight.  [Again, absolutely correct: on Thursday evening NYC was basically blinded, tricked and exhausted by the event!]

The sample size for this run was unusually small – and that may have helped get the fit so good.  It’s hard telling.

 

Where does the technology stand today?  Both Cliff and I are not able to pursue the project further because of personal and economic reasons.  The personal reason is that to sit down and work through even the distilled data is a terribly taxing process on Cliff. Picture working on word riddles for a week of 14-hour days… it’s very difficult to do.  Especially when there’s no “right answer”  therefore everything has to be checked and rechecked. 

 

Then there’s the cost.  Bot runs are one-off programming events.  So you can spend a month or so building the mission and deploying it. Once deployed you need serious bandwidth – T-1 or better to collect the data and then you need lots of server space to run the Prolog on.  This type of processing is not easily adaptable to shared computing like SETI – and developing that would take time anyway.

 

We also know that the Chinese have a similar project – because we have swept their source code during our runs.  The difference is they are doing larger data samples.

 

We apologize that our data is not as neat and as well preserved as one might hope.  Part of that is because I’ve been through two computers since we started this, and Cliff has been through a couple of ISP’s…some of the early files were lost, although most of the outputs were logged in to a dot mil computer so timestamps are available – and some of the information was sent upstream within the military, although we were probably looked at as a couple of software “wingnuts”.

 

Do we have a theory of how it works?  Sort of.  It’s like changes in language precede large emotional events. The larger the emotional impact of an event, the more advance notice the bots seem to give. 

 

If you picture some pin holes in a piece of paper – and you imagine being able to look through each pinhole for a fraction of a second – with the objective of seeing the future on the other side of the paper – that’s where the web bots are today.

 

Ever since Plato’s Allegory of the Cave, people have sensed that odd things go on at the archetype level of consciousness.  The web bots are an attempt to use the high data density of the internet to sample language and seek linguistic shifts that we believe may precede events.  The initial results suggest that language shifts on a macro level begin to occur 45 to 90 days before society-changing events.  We believe we’ve demonstrated, most recently with the Northeast Power Outage forecast, that changes in language do indeed precede events – on a far grander scale than Dean Radin’s work first suggested – and these language changes are available by sampling routine internet traffic.

 

—–

Our Company IT forum

Tags:

Well for awhile now we have been figuring we need a place to post our fixes and configurations for clients we have that is easy to access. For now we are using www.johnwmillerjr.com the company owners domain to create a IT forum. In time we are going to fill it up with Win 7, Server 2008, Sharepoint, linux, Cisco, etc related material. We just find it alot easier instead of having tons and tons of paperwork all cluttered with information to put it on our own site. Easy to access and find.

Web attacks are linked

Tags:

Three significant waves of SQL injection attacks appear to be under the control of the same source, according to one security researcher.

Roughly 80,000 Web sites in China, 67,000 in the U.S. and 40,000 in India remain compromised and under botnet control as a result of separate and ongoing SQL injection attacks. The highest infection point during the last three months reached into the millions at one point in China.

The SQL injection attacks have inserted malicious iFrames into legitimate Web sites in order to force visitors off them and onto dangerous malware-laden sites. Mary Landesman, senior security researcher at ScanSafe, says she believes these three waves of SQL injection attacks are likely the handiwork of the same attacker because of the similarity of the domain-name registration information and style of attack.

“It’s the thread of the domain names being used,” Landesman says. Seven of these “mal-domains” — a term coined by Landesman to describe domain names used solely to build Internet infrastructure to spread malware or otherwise cause harm — were registered under the same name and address (which are clearly bogus, being not more than gibberish).

These domain names are now apparently being farmed out across the world as part of the globally distinct attacks in China, U.S. and India.

In this case, the identified domain names were registered using bogus information provided to registrar Go Daddy, which Landesman says is “highly unusual,” since Go Daddy has a generally good reputation and attackers typically prefer “domain name providers that turn a blind eye.”

Ben Butler, director of network abuse at Go Daddy, acknowledges that totally gibberish domain-name registrations can be snuck into the system because it’s automated and not designed to prevent that. But Go Daddy maintains a round-the-clock security response to review information it receives about possible misuse of domain names (via e-mail, for instance, at abuse@godaddy.com). Butler agrees that criminal abuse of domain names is a serious problem and every effort should be made to counter it.

In the big picture, the problem isn’t specific to any one domain-name registrar, it’s the way the domain-name registration system has evolved that invites such rampant abuse, Landesman says. “We have a system that allows people to provide completely bogus details about who they are,” she says.

The openness of the domain-name registration system and lack of effective oversight has allowed criminals to exploit it to carry out Internet-based crime, she says. “It’s not intentionally designed for this kind of abuse, but it works in favor of the criminals.”

Japan has way to crack Wi-Fi WPA encryption

Tags: , , ,

Computer scientists in Japan say they’ve developed a way to break the WPA encryption system used in wireless routers in about one minute.

The attack gives hackers a way to read encrypted traffic sent between computers and certain types of routers that use the WPA (Wi-Fi Protected Access) encryption system. The attack was developed by Toshihiro Ohigashi of Hiroshima University and Masakatu Morii of Kobe University, who plan to discuss further details at a technical conference set for Sept. 25 in Hiroshima.

Last November, security researchers first showed how WPA could be broken, but the Japanese researchers have taken the attack to a new level, according to Dragos Ruiu, organizer of the PacSec security conference where the first WPA hack was demonstrated. “They took this stuff which was fairly theoretical and they’ve made it much more practical,” he said.

They Japanese researchers discuss their attack in a paper presented at the Joint Workshop on Information Security, held in Kaohsiung, Taiwan earlier this month.
The earlier attack, developed by researchers Martin Beck and Erik Tews, worked on a smaller range of WPA devices and took between 12 and 15 minutes to work. Both attacks work only on WPA systems that use the Temporal Key Integrity Protocol (TKIP) algorithm. They do not work on newer WPA 2 devices or on WPA systems that use the stronger Advanced Encryption Standard (AES) algorithm.

The encryption systems used by wireless routers have a long history of security problems. The Wired Equivalent Privacy (WEP) system, introduced in 1997, was cracked just a few years later and is now considered to be completely insecure by security experts.

WPA with TKIP “was developed as kind of an interim encryption method as Wi-Fi security was evolving several years ago,” said Kelly Davis-Felner, marketing director with the Wi-Fi Alliance, the industry group that certifies Wi-Fi devices. People should now use WPA 2, she said.

Wi-Fi-certified products have had to support WPA 2 since March 2006. “There’s certainly a decent amount of WPA with TKIP out in the installed base today, but a better alternative has been out for a long time,” Davis-Felner said.

Enterprise Wi-Fi networks typically include security software that would detect the type of man-in-the-middle attack described by the Japanese researchers, said Robert Graham, CEO of Errata Security. But the development of the first really practical attack against WPA should give people a reason to dump WPA with TKIP, he said. “It’s not as bad as WEP, but it’s also certainly bad.”
Users can change from TKIP to AES encryption using the administrative interface on many WPA routers.

Virtualization changes the network dramatically

Tags: ,

I’ve often postulated that virtualization would require the network to change, dramatically. There are two main vectors to this argument, one technical, one business. Given I haven’t done a decent Jimmy Ray Purser-esque technical deep-dive yet here to establish my ’street cred’ let me take a stab at the technical first, will hit the business side of this in a follow-on post someday soon.

The first issue is VM-Sprawl. Let’s face it, once server and virtualization teams start using virtual machines, they tend to like them. Once they like them they go through the data center like a missionary looking for workloads to migrate to the new virtualized environment. Couple this with the app developers who for the first time get something in minutes to hours instead of months and you have a hockey-stick effect in the number of devices/VMs under management.

Secondly, as my friend Dino is often a fan of stating, “any computer science problem can be solved with another level of indirection/abstraction.” The virtual machine, as an abstraction, enables the workloads to move. Once a VM can move two questions immediately jump to mind, a) how far can I move it? and b) what physical hosts can I move it too?

As most virtualization administrators find out there are a lot of network changes necessary to move VMs outside of the data center. In some network designs where the top-of-rack switch is the default gateway you can’t even move the VM out of the rack, much less out of the country. As for how many hosts you can potentially move the VM to, we are limited to a potential of up to 64 in the current vSphere version; however, there is nothing that dictates those sixty-four have to be in the same rack, chassis, system, or even data center.

Not surprisingly then, in order to accommodate larger domains of servers with mobile workloads the network administrators have been pushed to build larger and flatter switched Layer-2 networks that span an increased number of physical servers across differing set of critical infrastructure components (pods, zones, PDU’s, etc) so that the impact of the failure of a critical component is reduced.

Network teams have also been asked to look at stretching the reach of these Layer-2 networks across geographies. Now part of me is reminded of Vitalink bridged networks back in the late 1980’s and early 1990’s, because while we can use EoMPLS, VPLS, GRE, mGRE, L2TPv3, and other tunneling mechanisms to extend a Layer-2 network across a routed core to another part of the world people haven’t quite figured out how to solve the questions of ‘where is my default gateway?’ ‘how does my firewall know to move the policy too?’ and ‘what does my load balancer do when its real-IPs are now four time-zones away?’ These problems need to be resolved, preferably in scalable and easy-to-manage consistent ways.

Eventually we hit the third evolution of virtualization which we are seeing with the introduction of VMware Fault Tolerance and Dynamic Resource Scheduling – performance requirements increase. Most servers in the data center today are connected at Gigabit Ethernet (GbE); however once we start doing active-state synchronization, and dynamic workload movement to solve for CPU/Memory utilization efficiency the network performance requirement starts going up. That’s a lot of data to move! The higher performance the network infrastructure is the faster these dynamic reallocations and page-syncs are written to the receiving host, thus the more seamless the move is.

Performance matters in these environments, especially as new advanced virtualization capabilities come to the market.
Lossless transmission, Latency, and cable consolidation matter here as well, they make the infrastructure more deployable, and let workloads have better access to all available resources.
Ethernet and IETF standards will nee to evolve to enable a synchronization of these larger and flatter Layer-2 networks, especially when globally distributed.
Standards matter, but most companies I have worked with will go with the best solution that solves their business problems first, if the problems are pressing. Standards are important, but corporate and IT viability and resilience trump.
Every day now, VMs are rolling in, starting to move, and then moving more dynamically. Every day new companies are trying new software capabilities that used to take significant hardware and systems efforts to solve. Every day the legacy network designs we have all built, supported, and operated will be stressed in ways they were not designed for.
What’s on the horizon technically? I hope it is better integration between the network and the virtualization platforms with an eye towards ensuring the conjoined infrastructure can be really deployed, really managed, and take advantage of the full features and capabilities each discipline has

Nortel CEO steps down

Tags:

Nortel CEO Mike Zafirovski stepped down today, having failed to revitalize the bankrupt telecommunications giant after a mid-decade accounting scandal and the current economic downturn.

The rise and fall of Nortel
Zafirovski’s departure is effective today following a determination by Nortel’s board that the company has reached a “natural transition point.” Nortel is liquidating its assets, having already sold its wireless operations to Ericsson for $1.13 billion and inked an agreement to sell its enterprise business to Avaya for $475 million in a “stalking horse” arrangement

Nortel reached the decision to liquidate its assets in June, having failed to adequately restructure the company under Chapter 11 bankruptcy as a viable contender in enterprise and service provider telecommunications. Zafirovski launched the restructuring when he came aboard in 2005 following a 2004 accounting scandal by then-CEO Frank Dunn.

Dunn and other executive were fired by Nortel for cause, and Zafirovski successfully steered the company out of the accounting and financial restatement mess. But then the global economy soured, sales nose-dived, and Nortel filed for bankruptcy in January 2009.

Now, all company operations are on the block.

In a statement, Nortel Chairman Harry Pearce said: “Mike came to Nortel to transform the company. He made great progress on many fronts including addressing significant accounting and related legal issues; improving the quality of Nortel products and the company’s cost structure. His ambitious vision helped shift the economic center of the company from legacy to growth investments. It is unfortunate the transformation was derailed by the deteriorating economic climate and the company’s legacy cost structure. The operating improvements and strategic investments made during his tenure significantly contributed to the fact that Nortel’s businesses are so attractive to potential buyers today.”

In a statement, Zafirovski added: “Although solid progress was made in many areas, at the end, the capital structure and legacy costs coupled with the economic downturn proved too difficult to surmount.”

In addition to Zafirovski’s departure, Nortel reduced its board from nine to three members. Nortel has also restructured its businesses in an effort to continue to serve customers while also facilitating their sale.

The company’s business units — Wireless, Enterprise, Metro Ethernet, Carrier VoIP, Application Solutions and the Nortel-LG joint venture — will report to Chief Restructuring Officer Pavi Binning. The company’s mergers and acquisitions teams will continue to report to Chief Strategy Officer George Riedel

A Corporate Group has been formed to manage ongoing restructuring activities during the sales process as well as post business dispositions. This group is led by former Nortel Treasurer John Doolittle.

Nortel is also seeking Canadian court approval for Ernst & Young to oversee business, sales processes and other restructuring activities. The company is also in the process of identifying a principal officer for the Nortel companies in U.S. Chapter 11 proceedings who will work with U.S. creditors, ad hoc bondholders and Ernst & Young.

Nortel just reported second quarter results today. Revenue of $1.972 billion was down 25% from a year ago, but up 14% sequentially. The company posted a net loss of $274 million, more than twice the net loss of $113 million from a year ago.

Vmware and Springsource

Tags: ,

I found a great article link reagarding Vmware and there newly bought company Springsource. I really think vmware is helping the IT community by expanding all our resources to the max.

http://www.linuxworld.com/news/2009/081109-springsource-to-launch-vmware-into.html?fsrc=rss-linux-news&source=NWWNLE_nlt_linux_2009-08-12