The Iron Sysadmin

09

May

2017

Episode 14 - Sec in your devops!

Submitted by Gangrif

Welcome to Episode 14

Download Episode

• Read more about Episode 14 - Sec in your devops!

http://ironsysadmin.com/wp-content/uploads/2017/04/IronSysadmin-EP13.mp3

Welcome to Episode 13

News https://arstechnica.com/security/2017/04/chrome-firefox-and-opera-users-beware-this-isnt-the-apple-com-you-want/ this is horrifying. https://developers.slashdot.org/story/17/04/23/0339211/flawed-online-tutorials-led-to-vulnerabilities-in-software https://tech.slashdot.org/story/17/04/23/0027207/should-archiveorg-ignore-robotstxt-directives-and-cache-everything http://everythingsysadmin.com/2017/04/dnscontrol-blogpost.html Announcements Pareon donors are awesome! Chat Kubernetes, Amazon ECS.  Jeepin!

Main topic Incident Response https://en.wikipedia.org/wiki/Incident_management_(ITSM)

Intro and Outro music credit: Tri Tachyon, Digital MK 2 http://freemusicarchive.org/music/Tri-Tachyon/

25

Apr

2017

Episode 13 - Incident Response.

Submitted by Gangrif

Welcome to Episode 13

Download Episode

• Read more about Episode 13 - Incident Response.

http://ironsysadmin.com/wp-content/uploads/2017/04/IronSysadmin-EP12.mp3

Welcome to Episode 12!

News https://www.digitalocean.com/company/blog/update-on-the-april-5th-2017-outage/ https://www.theregister.co.uk/2017/04/06/microsoft_windows_10_creators_update/?mt=1491577380488 https://thehackernews.com/2017/03/samsung-galaxy-s8-facial-unlocking.html https://medium.com/@shadowbrokerss/dont-forget-your-base-867d304a94b1 https://arstechnica.com/security/2017/04/booby-trapped-word-documents-in-the-wild-exploit-critical-microsoft-0day/

Chat Kubernetes Jeeps! What’s this mastodon thing?

Main topic DR!

Intro and Outro music credit: Tri Tachyon, Digital MK 2 http://freemusicarchive.org/music/Tri-Tachyon/

 

Episode 12 - Disaster!

Welcome to Episode 12!

Gangrif

Mon, 04/10/2017 - 23:56

Download Episode

• Read more about Episode 12 - Disaster!

http://ironsysadmin.com/wp-content/uploads/2017/03/IronSysadmin-EP11.mp3

Welcome to Episode 11!

News https://www.undrground.org/node/178 https://www.cnet.com/news/samsung-galaxy-s8-launch-note-7-note-8-battery-blowup-what-change/ http://time.com/4709302/alcohol-heart-disease-risk/  BECAUSE BEER IS GOOD FOR YOU! https://arstechnica.com/tech-policy/2017/03/senate-votes-to-let-isps-sell-your-web-browsing-history-to-advertisers

Announcements Ep12, live stream and stuffs.

Chat openshift origin  http://www.openshift.org

Main topic Open all the stacks with @fultonj So what the heck is openstack? Why wouldn’t i just use Amazon EC2? What’s Trible-O? HyperConverge! Ceph

Intro and Outro music credit: Tri Tachyon, Digital MK 2 http://freemusicarchive.org/music/Tri-Tachyon/

 

Watch this episode on Youtube. https://youtu.be/V9kSZKp31Tc

Welcome to Episode 11! Download Episode

http://ironsysadmin.com/wp-content/uploads/2017/03/IronSysadmin-EP10.mp3

Welcome to Episode 10

News https://www.bloomberg.com/news/articles/2017-03-08/microsoft-pledges-to-use-arm-server-chips-threatening-intel-s-dominance

Firefox 52 will be the last version of Firefox for Windows XP and Vista

https://www.cnet.com/news/look-out-windows-android-is-catching-up/ https://www.wired.com/2017/03/atari-chip-set-off-bitter-war-among-neuroscientists/?mbid=nl_3817_p2&CNDID=21798766 http://www.nature.com/nature/journal/v543/n7644/full/nature21371.html NIST’s new password rules – what you need to know https://xkcd.com/936/

Announcements Feedback @Gangrif and @Xenophage make a great pair that will titillate ones’s ears! They cover things in the ops and infosec news categories and topics that are relatable or at least interesting to discuss. It’s not your typical format of a podcast, but that is what makes it refreshing.

Keep up the great content guys!

Patreon, you guys are awesome $10 tier. The face!

Youtube stream for this episode! https://youtu.be/EeD5y34oKNY

Chat

Main topic Trouble in the cloud, The 2/28/2017 US East 1 S3 outage https://aws.amazon.com/message/41926/ An Amazon employee was troubleshooting a problem with their S3 billing mechanisms. A mistake made in an established playbook, took down systems that were not intended to be taken down The downtime which was intended only for billing systems, took down systems essential in both reads and writes to he S3 API. This required that some systems be rebooted. Reboots on the Index and Placement subsystems (two of the systems mentioned as accidentally rebooted) had not been performed for years Due to the dependencies between these systems, the restarts took quite some time. The downtime caused some backlog of requests, and these needed to be processed when the systems were once again operational

Remediation The core issues here were the amount of systems un-intentionally taken offline, and the fact that systems that depended on eachother were taken down at the same time. Amazon has made changes to their tools to help pervent systems from dropping below service affecting thresholds. They are also working to remove some of the inter-dependencies.

On top of everything, the the S3 status page depended on the health of the S3 service in order to operate. This made it difficult for customers to view the status of S3.

Intro and Outro music credit: Tri Tachyon, Digital MK 2 http://freemusicarchive.org/music/Tri-Tachyon/

Welcome to Episode 10 Download Episode

http://ironsysadmin.com/wp-content/uploads/2017/02/IronSysadmin-EP9.mp3

Welcome Episode 9

News https://bugs.chromium.org/p/project-zero/issues/detail?id=1139 http://fortune.com/2017/02/21/google-site-search-discontinued/ (sorry for the obnoxious auto-play)

Cellebrite can now unlock iPhone 6 and 6+, also extract data from array of popular apps

https://www.bloomberg.com/news/articles/2017-02-23/social-media-is-driving-americans-insane

Announcements http://www.patreon.com/ironsysadmin Plans for ironsysadmin.com

LVHackers Round 2: Security Bugaloo

Wednesday, Mar 1, 2017, 6:00 PM

Two Rivers Brewing 542 Northampton St Easton, PA

17 Hackers Went

Holy crap, it’s less than a week away. Guess I should tell y’all why it’s going to be an amazing night.6-7pmDinner, Drinks, MARIO KART.7pmBen Heise – Domain Fronting: Redirect Like A Boss.https://twitter.com/benheiseFor more information on Domain Fronting:https://blog.cobaltstrike.com/2017/02/06/high-reputation-redirectors-and-domain-frontin…

Check out this Meetup →

Chat http://www.liverpoolecho.co.uk/news/liverpool-news/signs-your-child-computer-hacker-12626527 rpgKids

​ Main topic Basic Linux Security build environment updates local firewall disable root ssh logins Is sudo a blessing, a risk, or a curse? Totally a facebook post.

Intro and Outro music credit: Tri Tachyon, Digital MK 2 http://freemusicarchive.org/music/Tri-Tachyon/