Posted on April 28 in category News

Tags: RISC

Amazon may be using disk drives with hot-swappable components

The content below is taken from the original (Amazon may be using disk drives with hot-swappable components), to continue reading please visit the site. Remember to respect the Author & Copyright.

Amazon may be using disk drives with hot-swappable components

Patent calls for drives in which mechanical bits and electronics aren’t bound together

A figure from Amazon's patent for de-composed disks

Amazon’s illustration of how de-coupled disks might work

Amazon’s won a patent for â€œHard disk drive assembly with field-separable mechanical module and drive controlâ€.

In Amazon’s world disk drives have two distinct systems. There’s a â€œdrive mechanical moduleâ€ comprising a drive’s arms, heads, spindle, motor and platters. And there’s a â€œcontrol moduleâ€, basically the drive’s motherboard.

But as the patent notes, when disk drives fail â€œMany hard disk drives failures may only involve electrical components (such as a semiconductor chip failure) or only mechanical components (such as an actuator failure). Nevertheless, repairing the data storage system may require removing and replacing both the mechanical components and the electrical components of the hard disk drive.â€

Amazon would rather replace one or the other, rather than a whole disk. Hence the patent application’s proposal for disks that the mechanical module or the control module be replaceable. And replaceable in situ without having to remove a disk from a rack.

The application also proposes a rack-mounted system in which control modules and mechanical modules could be discrete. It’s even suggested control modules could serve more than one mechanical module. Building a whole-of-rack system around this idea is said to facilitate easier non-disruptive replacement of either and also offers some cooling advantages.

Amazon filed this patent in 2012 and it appears to have been granted earlier this year and to have bubbled into public view in recent days.

There’s no indication the company has adopted this technology, but it would not surprise if it has done so given the scale at which it operates and the advantages this approach to disk design confers. It’s also likely a cost saver as parts could be cheaper than whole new disks. Being able to replace a disk drive’s motherboard could mean data could be retained with a slight dip in resiliency while a new board is pressed into service.

Amazon’s not alone in wanting exotic disks: Google last year called for disk-makers to build taller drives that fit more platters. Apple’s also added extra pins to drives for the iMac, which irked users as it meant off-the-shelf kit would not work in their computers and Cupertino’s replacements sold well above market prices.

Disk-makers didn’t rush to help Google â€“ in public at least â€“ but Apple had no trouble getting what it wanted, suggesting that if Amazon has, or does, seek its de-composable drives it won’t have much trouble finding someone to build them. Â®

Posted on April 28 in category News

Tags: Technology

Best Practices for Deploying StorSimple Virtual Arrays

The content below is taken from the original (Best Practices for Deploying StorSimple Virtual Arrays), to continue reading please visit the site. Remember to respect the Author & Copyright.

Microsoft's VMworld 2013 custard truck/Hyper-V guerrilla marketing vehicle

Letâ€™s look at some of the best practices for using the StorSimple 1200 virtual appliance. It was recently made available by Microsoft to small and medium enterprises (SMEs), as well as small and medium businesses (SMBs).

The Virtual Machine

The virtual appliance can be deployed on-premises as a virtual machine on one of three virtualization platforms:

Windows Server 2012 or later Hyper-V
VMware ESXi 5.5 or later
Windows Server 2008 R2 SP1 Hyper-V

On Hyper-V hosts:

Use Generation 2 virtual machines on Windows Server 2012 or later Hyper-V.
Do not use Dynamic Memory.
Use dynamic disks.
Do not use the differencing disks option for the data disk.
Resizing the disks is not allowed and will lead to data corruption.

On ESXi hosts:

Use virtual machine versions 8 through 11.
Thin provisioning should be used for the data disk.
Resizing the disks is not allowed and will lead to data corruption.

Note that time synchronization for the virtual machine via the VMware Tools or Hyper-V integration services should be enabled.

Sizing the Data Disk

The virtual appliance data disk is where all hot data is stored. This disk must be sized appropriately between 500GiB and 8TiB. This is x1024 instead of 1000. The size of the data disk will directly control how much local plus cloud or total storage can be provisioned in the appliance. Local storage is used as follows:

Approximately 12 percent of the local disk is reserved for each volume (iSCSI) or share (file server).
Roughly 10 percent is also reserved for locally pinned volumes.
Around 15 percent of the local disk is reserved for snapshots.
If you are going to restore from a cloud snapshot, then there should be free space on the local disk. It needs to be at least the size of the local tier of the largest volume. See the first bullet point for more information.
You should try to leave some free space for unexpected growth.

The screenshot below is from Excel. I have calculated the local disk requirements. I used the above requirements for a virtual device hosting 3 shares of 5TiB, 5TiB, and 10TiB.

Calculating the Local Data Disk Requirements of a StorSimple Virtual Appliance [Image Credit: Aidan Finn]

Group Policy

Your virtual appliance can join an Active Directory domain, which is useful for permissible shares. However, it is recommended that the virtual appliance is isolated from group policy. Your policies may have a harmful effect on the function and performance of the storage system. Microsoft recommends:

Place the virtual appliance into its own organizational unit (OU).
Block inheritance on the OU to prevent GPOs from being accidentally applied.

Anti-Virus

When is the last time that you installed anti-virus on your SAN controller? Microsoft also states that anti-virus can adversely affect the operation of the virtual appliance. For example, a scheduled scan of data in the cold tier will be extremely slow. It also might incur unexpected access costs when using blob storage accounts.

This is one of those blanket statements from so-called security experts. They will say, â€œAll Windows machines must have anti-virus and must scan everything.â€ This can lead to people being fired.

Sponsored

Networking

StorSimple is a cloud-connected solution. This means that Internet bandwidth is going to be important. The nature of your data and access is what determines your true bandwidth requirements. We are told that we should have 5Mbps or more of dedicated, reliable, and persistent bandwidth per appliance.

The amount available impacts how quickly Azure can backup your StorSimple volumes or shares. If you have 18GB of data change in a day, 5Mbps of bandwidth allows a backup to complete in 8 hours.

Any appliance configured as an iSCSI device should have:

A static IP address configuration â€” not DHCP
A primary and secondary DNS server for local name resolution

If you require multiple NICs for dedicated iSCSI networking, then note that only the first interface, called Ethernet, can reach the cloud. Other NICs should be bound to other networks. This is the same as VLANs or virtual networks.

Do not throttle bandwidth on the hypervisor because this throttles LAN and Internet access. This would be bad for hot data access. Instead, implement traffic shaping for the appliance on the physical network, which includes switches, firewalls, routers, etc. This will help to control bandwidth usage to the cloud for cold data.

Storage Accounts

You can use an automatically created storage account with a virtual appliance. You could also use a manually created one in either the same subscription or another subscription.

A virtual appliance can connect to one storage account but many virtual appliances can connect to a single storage account. When doing the latter, understand that:

The maximum capacity of a virtual appliance is 64TB.
The maximum size of a storage account is 500TB.

That means you can get 7x the fully assigned virtual appliances per storage account.

Regarding the storage account creation:

Place the storage account in the region with the lowest latency to the virtual appliance. Try using the customer site.
You cannot move a storage account between regions.
LRS, GRS, and ZRS are all supported forms of resiliency for StorSimple.
You can choose blob storage accounts, which supports hot or cool blobs. You can also choose general storage account, which supports ZRS.

Volumes and Shares

When planning iSCSI volumes or file server/NAS shares, Microsoft offers a number of best practices:

You can have a maximum of 16 volumes/shares per array. Remember that a share/volume can have permissible subfolders. You can still scale out beyond this apparent limit.
A volume cannot be expanded to size for future growth and the volume cannot be shrunk, either.
The file size is relative to the share size. It can impact the performance of tiering to the cloud. Relatively large files, compared to the share size, tier out more slowly. Microsoft recommends that the largest file is no more than 3 percent the size of the share size.
Volumes that will contain large files of archive data should have the Less Frequently Used Archive Data option enabled. Deduplication is done at 512KB, which is a larger block size than normal. This will speed up the transfer of data to the cloud.
You can perform quick formats.
You can format the volume with an allocation unit size of 64KB.
Do not enable Data Deduplication on any servers connecting to the StorSimple virtual appliance. The appliance will handle data compression and deduplication.

When using StorSimple for iSCSI:

Do not scan volumes or dynamic disks because this is not supported by StorSimple.
Always create at least 1 access control record (ACR) per volume.
Only add multiple ACRS for nodes in a cluster that will share a volume.

When deploying shares in StorSimple:

Configure the default share administrator as a user group instead of a user account.
Use normal Windows share administration tools from your PC to manage the share/permissions after it is created.

Sponsored

Data Security and Encryption

When you enable security features to protect the data on your StorSimple, you should follow the below guidance:

Create an AES-256 cloud-storage encryption key before sending data to the cloud.
Keep a copy of the cloud-storage encryption key somewhere safe, such as Azure Key Vault.
Enable SSL mode when adding storage account credentials to the storage account. This will ensure secure data transfer between the appliance and the cloud.
Whenever administrators change, you should regenerate the storage account keys.

The post Best Practices for Deploying StorSimple Virtual Arrays appeared first on Petri.

Posted on April 28 in category News

Tags: Technology

Scaleway thinks the future of cloud hosting is ARM-based servers

The content below is taken from the original (Scaleway thinks the future of cloud hosting is ARM-based servers), to continue reading please visit the site. Remember to respect the Author & Copyright.

Iliadâ€™s cloud hosting division Scaleway is launching a new type of server today. In just a minute, you can launch your server with its own dedicated ARMv8 processor, 2GB of RAM, 50GB of SSD storage and unlimited bandwidth. And it only costs around $3.25 per month (â‚¬2.99).

If youâ€™re not familiar with processor atchitecture, your computer and your smartphone use two different chipsets. Your laptop uses an x86 CPU manufactured by Intel or AMD, while your smartphone uses an ARM-based system-on-a-chip.

ARM-based devices donâ€™t need a lot of cooling and are quite efficient when it comes to power usage. And they are also becoming increasingly powerful. Thatâ€™s why itâ€™s a smart bet to use those chips for servers.

In many ways, using Scaleway as your cloud hosting provider feels like using DigitalOcean, Linode or any typical VPS provider. But thereâ€™s a big difference as Scaleway provides BareMetal servers (and a few virtual server options as well).

For the past few years, the main trend in cloud computing is that you donâ€™t rent actual physical servers if you donâ€™t have insane needs. Cloud hosting companies run multiple virtual servers on the same physical server, and you can rent those virtual servers.

By splitting up servers into tiny chunks and pooling resources, it has become much more flexible for developers. For instance, you can create a virtual server, install a VPN on it while you travel to China and destroy your server a few days later. Youâ€™ll only get billed for the hours of usage, making it much more flexible than signing up for servers with a 30-day commitment.

Similarly, if you face big spikes of new users and traffic, youâ€™ll be able to adjust your server infrastructure in no time. Iâ€™ve been using Scaleway for my weekend projects and it works well.

Scaleway wants the best of both worlds â€” the reliability of physical servers with the flexibility of virtual private servers. So it means that you can create a server in just a few seconds, assign an IP address, load up an image and attach SSD storage to it.

But youâ€™re also the only one using your ARMv8 cores. You wonâ€™t get any performance surprise as you donâ€™t share your CPU raw power with your server neighbor â€” you donâ€™t have a neighbor.

Scalewayâ€™s systems-on-a-chip are provided by Cavium ThunderX. For â‚¬2.99 per month, you get 2 ARMv8 cores and 2GB of RAM. You can also choose 4 cores with 4GB of RAM or 8 cores with 8GB of RAM for â‚¬5.99 and â‚¬11.99 respectively. Scaleway already had ARMv7 servers, so this is a major update of these options.

Scaleway is launching its new ARM-based servers in its French data center first with Amsterdam following course in a few days. I hope the company is also planning to launch new data centers in the U.S. and Asia to make it more compelling for users outside of Europe.

Posted on April 28 in category News

Tags: Technology

advanced-renamer (3.77)

The content below is taken from the original (advanced-renamer (3.77)), to continue reading please visit the site. Remember to respect the Author & Copyright.

Advanced Renamer is a free program for renaming multiple files and folders at once. By configuring renaming methods the names can be manipulated in various ways.

Posted on April 28 in category News

Tags: Technology

pibakery (0.3.4)

The content below is taken from the original (pibakery (0.3.4)), to continue reading please visit the site. Remember to respect the Author & Copyright.

The easiest way to setup a Raspberry Pi

Posted on April 28 in category News

Tags: Technology

File Interface to AWS Storage Gateway

The content below is taken from the original (File Interface to AWS Storage Gateway), to continue reading please visit the site. Remember to respect the Author & Copyright.

I should probably have a blog category for â€œcatching up from AWS re:Invent!â€ Last November we made a really important addition to the AWS Storage Gateway that I was too busy to research and write about at the time.

As a reminder, the Storage Gateway is a multi-protocol storage appliance that fits in between your existing applications and the AWS Cloud. Your applications and your client operating systems see the gateway as (depending on the configuration), a file server, a local disk volume, or a virtual tape library (VTL). Behind the scenes, the gateway uses Amazon Simple Storage Service (S3) for cost-effective, durable, and secure storage. Storage Gateway caches data locally and uses bandwidth management to optimize data transfers.

Storage Gateway is delivered as a self-contained virtual appliance that is easy to install, configure, and run (read the Storage Gateway User Guide to learn more). It allows you to take advantage of the scale, durability, and cost benefits of cloud storage from your existing environment. It reduces the process of moving existing files and directories into S3 to a simple drag and drop (or a CLI-based copy).

As is the case with many AWS services, the Storage Gateway has gained many features since we first launched it in 2012 (The AWS Storage Gateway â€“ Integrate Your Existing On-Premises Applications with AWS Cloud Storage). At launch, the Storage Gateway allowed you to create storage volumes and to attach them as iSCSI devices, with options to store either the entire volume or a cache of the most frequently accessed data in the gateway, all backed by S3. Later, we added support for Virtual Tape Libraries (Create a Virtual Tape Library Using the AWS Storage Gateway). Earlier this year we added read-only file shares, user permission squashing, and scanning for added and removed objects.

New File Interface
At AWS re:Invent we launched a third option, and thatâ€™s what Iâ€™d like to tell you about today. You can now use the Storage Gateway as a virtual file server that you can mount on your on-premises servers and desktops. After you set it up in your data center or in the cloud, your configured buckets will be available as NFS mount points. Your application simply reads and writes files and directories over NFS; behind the scenes, the gateway turns these operations into object-level requests on your S3 buckets, where they are accessible natively (one S3 object per file). To create a file gateway, you simply visit the Storage Gateway Console, click on Get started, and choose File gateway:

Then choose your host platform: VMware ESXi or Amazon EC2:

I expect many of our customers to host the Storage Gateway on premises and to use it as a permanent or temporary bridge to the cloud. Use cases for this option include simplified backups, migration, archiving, analytics, storage tiering, and compute-intensive cloud-based processing. Once the data is in the cloud, you can take advantage of many features of S3 including multiple storage tiers (Infrequent Access and Glacier are great for archiving), storage analytics, tagging, and the like.

I donâ€™t have much data on-premises so Iâ€™m going to run the Storage Gateway on an EC2 instance for this post. I launched the instance and set it up per the instructions on the screen, taking care to create the proper inbound security group rules (port 80 for HTTP access and port 2049 for NFS). I added 150 GiB of General Purpose SSD storage to be used as a cache:

After the instance launched I captured its public IP address and used it to connect to my newly launched gateway:

I set the time zone and assigned a name to my gateway and clicked on Activate gateway:

Then I configured the local storage as a cache, and clicked on Save and continue:

My gateway was up and running, and I could see it in the console:

Next, I clicked on Create file share to create an NFS share and associate it with an S3 bucket:

As you can see, I had the opportunity to choose my storage class (Standard or Standard â€“ Infrequent Access in accord with my needs and my use case). The gateway needs to be able to upload files into my bucket; clicking on Create a new IAM role will create a role and a policy (read Granting Access to an Amazon S3 Destination to learn more).

I review my settings and click on Create file share:

By the way, Root squash is a feature of the AWS Storage Gateway, not a vegetable. When enabled (as it is by default) files that arrive as owned by root (user id 0) are mapped to user id 65534 (traditionally known as nobody). I can also set up default permissions for new files and new directories.

My new share is visible in the console, and available for use within seconds:

The console displays the appropriate mount commands for Linux, Microsoft Windows, and macOS. Those commands use the private IP address of the instance; in many cases you will want to use the public address instead (needless to say, you should exercise extreme care when you create a public NFS share, and maintain close control over the IP addresses that are allowed to connect).

I flipped over to the S3 console and inspected the bucket (jbarr-gw-1), finding it empty, as expected:

Then I turned to my EC2 instance, mounted the share, and copied some files to it:

I returned to the console and found a new folder (jeff_code) in my bucket, as expected. I ventured inside and found the files that I had copied to the share:

As you can see, my files are copied directly into S3 and are simply regular S3 objects. This means that I can use my existing S3 tools, code, and analytics to process them. For example:

Analytics â€“ The new S3 metrics and analytics can be used to analyze the entire bucket or any directory tree within it:
Code â€“ AWS Lambda and Amazon Rekognition can be used to process uploaded images; see Serverless Photo Recognition for some ideas and some code. I could also use Amazon Elasticsearch Service to index some or all of the files or Amazon EMR to process massive amounts of data.
Tools â€“ I can process the existing objects in the bucket and I can also create new ones using the the S3 APIs. Any code or script that creates or removes should call the RefreshCache function to synchronize the contents of any gateways attached to the bucket (I can create a multi-site data distribution workflow by pointing multiple read-only gateways at the same bucket). I can also make use of existing, file-centric backup tools by using the share as the destination for my backups.

The gateway stores all of the file metadata (owner, group, permissions, and so forth) as S3 metadata:

Storage Gateway Resources
Here are some resources that will help you to learn more about the Storage Gateway:

Presentation â€“ Deep Dive on the AWS Storage Gateway:

White Paper â€“ File Gateway for Hybrid Architectures â€“ Overview and Best Practices:

Recent Videos:

Available Now
This cool AWS feature has been available since last November!

â€” Jeff;

Posted on April 28 in category News

Tags: Technology

Super-secure Pi-stuffed nomx email server box given a good probing

The content below is taken from the original (Super-secure Pi-stuffed nomx email server box given a good probing), to continue reading please visit the site. Remember to respect the Author & Copyright.

Super-secure Pi-stuffed nomx email server box given a good probing â€¢ The Register

Security researchers claim to have uncovered a variety of serious security holes in a heavily touted secure email server technology. Nomx, the firm behind the device, strongly disputes the claims and has challenged researchers to a hacking challenge, involving the creation of an email account on a designated remotely hosted nomx device.

Nomx launched its email server hardware at the CES trade show in Las Vegas back in January. Its marketing trumpets that “nomx ensures absolute privacy for personal and commercial email and messaging” adding, “Everything else is insecure”.

After an inspection of the hardware, researcher Scott Helme claimed he had quickly uncovered all sorts of shortcomings.

The device is running standard mail server software on a Raspberry Pi, most of which is outdated, claimed Helme. Worse yet, nomx’s web interface presents a serious CSRF (Cross-Site Request Forgery) vulnerability, he alleged. In addition, the device can’t receive updates, a basic security requirement, he said. These and other flaws are detailed in a long blog post (complete with screenshots and other details) here.

“They make some very bold claims but the device is awful,” Helme told El Reg. “I have a full remote compromise.

“There are three different ways to exploit the CSRF, all of which they claim to have patched but [they] haven’t made a patch available to me.”

The range of potential exploits on the device is extensive, according to Helme.

“I can read your emails, delete your emails, send emails, [or] create my own email address on your device to log in and use,” he said.

Will Donaldson of nomx strongly disputed all of this, claiming that Helme is trying to discredit nomx â€“ which Helme denies. Donaldson said that nomx had addressed the CSRF issue highlighted by Helme, the impact of which he also disputed.

“The CSRF vulnerability he disclosed, if present on any nomx device, could potentially have allowed access if the users were on the management page of the nomx device and visited a hacked page or malware site,” Donaldson told El Reg in a lengthy email. “With routine email use, it did not have any relevance and could not occur unless the management page was accessed while simultaneously going to a third party website.”

He added: “We’ve resolved that issue with any of our users who could have been affected and no longer provide that version of nomx.”

Helme responded: “They claim to have resolved the CSRF issue but haven’t provided me with the update or details on how they did it. I can’t see any update mechanism or feature on the device.”

Professor Alan Woodward, who worked with Helme in analysing the device as part of an investigation initialised by BBC consumer tech branch Click, told El Reg: “The only part that could be considered ‘different’ to normal email servers is the box-to-box communication. However, as far as I can tell this uses a standard part of Postfix: transport tables.

“I had assumed initially that there was going to be some new protocol with out-of-band comms for key exchange or similar. But it’s just an email server using TLS with locally held IP addresses for where to send specify email traffic,” he claimed.

What’s in a name?

The name nomx (no mail exchange) was chosen for the kit because it is designed to skip vulnerable third-party mail exchange servers.

Donaldson offered a description of nomx’s design aims. “Our primary goal is keeping messages off vulnerable third-party servers. We do that by forcing emails to go through certain routes on the internet instead of using traditional email relays that copy these messages and are vulnerable to a host of issues.

“Scott [Helme] has attempted to discredit nomx by stating that is simply ‘Postfix on a Pi’. That doesn’t actually represent nomx â€“ which provides a series of services and protocols that when used together resolve the vulnerabilities of the third party servers.”

The number of nomx accounts that have been compromised since inception is nil, according to Donaldson.

Professor Woodward said the security questions around nomx raise a wider point about whether potential buyers can trust promises made by security vendors in general.

“My concern is that users may take much of what is claimed at face value â€“ it is a classic example of how ‘security’ is unregulated and that the main group holding vendors to account are ethical hackers,” he said. Â®

Posted on April 28 in category News

Tags: Technology

A Quick Way to Tell If That Thing on Your To-Do List Is Actually Important

The content below is taken from the original (A Quick Way to Tell If That Thing on Your To-Do List Is Actually Important), to continue reading please visit the site. Remember to respect the Author & Copyright.

With unlimited access to productivity doodads, apps, and planners, knowing our priorities is supposed to be effortless. But what if everything you need to do that dayâ€”finish an article, work on that presentation outline, work out, and so onâ€”all feel like a priority?

I once heard on the Tim Ferriss podcast that, when it comes to each item on his to-do list, Ferriss asks himself: â€œIf this were the only thing I accomplished today, would I be satisfied with my day?â€ If he answers yes, then thatâ€™s what he prioritizes.

In our day to day, it can be hard to focus on the truly important things when everything seemsâ€¦Read more Read more

At the time, I didnâ€™t think much of it. While drowning in a sea of urgent and important tasksâ€”which I often conflatedâ€”I was reintroduced to this idea by my highly productive and accomplished friend, who told me about a planner from Intelligent Change (who are also behind the Five-Minute Journal that I use and love).

Well, I bought this planner, and itâ€™s since helped me take much better control of my to-do list. Itâ€™s not because I have a nicely organized to-do list, but itâ€™s because the planner has forced me to take a â€œless is moreâ€ approach. I have enough room to write down only five things I need to do that day and only one can be the Most Important Task of the Day, which is guided by the prompt:

If this was the only thing you did today youâ€™d be satisfied.

This has challenged me to ponder whether the thing I thought was super important really was that important; or whether it was merely a distraction from the actual thing that I should be working on. As Intelligent Change points out in their notebook, important work is often the stuff that you tend to procrastinate and makes you feel uncomfortable doing.

You donâ€™t have to go out and buy a planner specifically for this purpose, but to help identify important work you should ask yourself, as Ferriss does, if that one item will make you satisfied with your day:

Will moving this forward make all the other to-doâ€™s unimportant or easier to knock off later?

Since approaching my important tasks this way, I feel a lot less anxiety around all the work I feel like I have to get to and can shove away the clutter to focus on the truly important things that move the needle for me.

Posted on April 28 in category News

Tags: Geeky

Tetris is a Perfect Video Game

The content below is taken from the original (Tetris is a Perfect Video Game), to continue reading please visit the site. Remember to respect the Author & Copyright.

Originally released in Japan like three years ago, the falling block/blob puzzle mash-up Puyo Puyo Tetris finally arrives on Nintendo Switch and PlayStation 4 this week in English. Iâ€™ve been playing the Switch version (itâ€™s not Zelda) and having a great time. But while the appeal for most is seeing how well these two classic puzzle formulas go together, to me itâ€™s just a reminder that Alexey Pajitnovâ€™s Tetris may be the only perfect video game.

Tetris isnâ€™t my favorite video game by any means. Itâ€™s not the Citizen Kane of video games exploding the mediumâ€™s potential wide open like Super Mario Bros.Â And itâ€™s not the intellectual equal of chess like StarCraft. However, it is perfect. It effortlessly draws the player into a zen state of pure play where they stop thinking consciously about the falling blocks and just start matching them through sheer instinct and reaction. Itâ€™s beautiful. Just watch pro players in action as they match without even seeing the blocks.

Itâ€™s simple, but itâ€™s also anything but. The variety of tetrominoes, derived from all possible ways to arrange four blocks in two dimensions, means players must constantly and quickly evaluate the strength and weakness of each block in each position before making a move. Thereâ€™s a reason why the long piece might be the biggest hero in gaming. Since 1984 weâ€™ve proven with science that while it is theoretically possible to play Tetris forever, it would take very specific conditions and a tremendous amount of skill.

Tetris ultimate

By being more complex, other games open themselves up to unforeseen flaws that mar their perfection. You canâ€™t make a game as big and bustling as Grand Theft Auto V without some open-world jank. However, by that definition, most puzzle games should be this excellent. And yet, in my opinion, decades later still none of have dethroned Tetris. They add intriguing new features like RPG elements or in-app purchases or whole other puzzle formulas, but that just makes them different, not better. Even Pajitnovâ€™s later games like Hexic and Tetrisphere donâ€™t compare. Tetris remains a flawless diamond of a video game with the only close runners-up being Bejeweled and more recently Threes (screw 2048).

Even the multiplayer is brilliant. Itâ€™s one thing to try and survive against faster-falling pieces but having to form as many Tetris chains as possible to attack your opponent adds a new, incredible layer of strategy and tension. And while getting hit with garbage blocks threatens your run, they also provide their own opportunities for chains and turning the tables on your foe. Itâ€™s great!

Tetris is proof of the purity of form and mechanics that can make a game excellent with no story whatsoever. However, itâ€™s also important to mention the history and metanarrative behind the game since no art is without politics. I find Tetris so fascinating as a piece of Russian entertainment that blew up right around the time of the Soviet Unionâ€™s collapse and became a hugely successful worldwide product.

But even as Western capitalist pigs enjoyed the game on the go thanks to their fancy new Game Boys from the 1980s Japanese economic menace the game never hid its Russian roots. From its classic theme to its box quote of â€œFrom Russia With Fun!â€ to its Kremlin-like background buildings, Tetris is so Russian itâ€™s controlling the current U.S. government.

And beyond aesthetics, the idea of matching differently shaped blocks to create solid wholes and win is the kind of casual, elegant, metaphorical endorsement for communism that defines the best Russian Constructivist art of the 1910s. Itâ€™s like Vladimir Tatlin made a video game. Is Tetrisâ€™ perfection obvious now?

Suffice it to say, most of my time playing Puyo Puyo Tetris has been spent in regular-ass Tetris mode. But the game does have other modes worth exploring. Puyo Puyo, for those that donâ€™t know the beloved Japanese series, is a match-4 puzzle game about combining colorful blobs that fall apart and stick back together. The goal is the clear them while also setting off stylish chains. In America, the formula was re-purposed in games like Dr. Robotnikâ€™s Mean Bean Machine and Kirbyâ€™s Avalanche. Itâ€™s neat, even if it took me playing some in-game lessons to stop being trash, but itâ€™s no Tetris.

If you want to get really fancy, though, you can play the various weird Tetris/Puyo Puyo combinations. One has you playing Tetris for a few seconds and then switching to Puyo Puyo before switching back to Tetris. It splits your brain in an enjoyably stressful way. Even crazier is the mode where Tetris blocks and Puyo Puyo blobs both fall down on the same board keeping their unique attributes. For example, tetrominoes crush Puyos but Puyos fall through crevices tetrominoes leave behind. Players explore the possibilities of this fusion across a surprising amount of varied single- and multi-player modes.

The insane, voice-acted story mode gets most of its mileage from this crazy anime crossover nonsense. Merging worlds. Anthropomorphized blocks. Itâ€™s like Street Fighter x Tekken but a puzzle game, and much like Super Bomberman R, who knew Puyo Puyo and/or Tetris had this much lore?

For American Puyo Puyo fans, Puyo Puyo Tetris is a clean and cool glass of water in a desert. Tetris fans arenâ€™t quite as thirsty, but in a world where Ubisoft is making new versions of Tetris with bad framerates some how, this is still an excellent option. Itâ€™s not like you can go buy Tetris DS anymore. But no matter how much you dress it up or down, nothing will change the fact that Tetris and Tetris alone is truly a perfect video game. I sure hope that movie works out.

Want to learn more? Hereâ€™s everything you need to know about the Nintendo Switch.

Buy it now!

The Legend of Zelda: Breath of the W ind
Nintendo Switch
Essential Nintendo Switch Accessories

Posted on April 28 in category News

Tags: Geeky

Cloudflare’s incredible solution for IoT security: Use our services

The content below is taken from the original (Cloudflare’s incredible solution for IoT security: Use our services), to continue reading please visit the site. Remember to respect the Author & Copyright.

Cloudflare's incredible solution for IoT security: Use our services â€¢ The Register

Traffic bouncer Cloudflare has outlined what it claims is the solution to the perennial internet-of-things security problem: pay it.

The company points out what most security experts have been saying for some time: IoT devices are a security disaster, they are going to grow exponentially, and when people can’t even be relied on to update their browsers, having billions of unpatched internet-connected devices is a disaster waiting to happen.

And so Cloudflare has come up with its solution: route everything through us.

This does not come as a huge surprise. The company does tend to offer the same solution to every online problem: Distributed denial of service (DDoS) attack? Route your traffic through us. Man-in-the-middle attack? Pay us to deal with your data. Too many spam comments? We have a paid service for that. Need encryption? Guess what?

But that doesn’t mean that the company’s new Orbit service is a bad idea. In fact, it may very well be a good or even great idea given the state of the current system for securing online devices.

The basic idea is quite simple: in the same way website owners pay Cloudflare to sit in between them and their visitors, IoT manufacturers will pay for the Orbit service to sit between their devices and the public internet.

The manufacturers will configure their devices to only go through Orbit, which gives them (or, most accurately, Cloudflare) the ability to not only shield tech-ignorant consumers from hacking efforts, but also apply virtual security patches across all of its devices at once.

Open-ish

Although this is far from ideal since it introduces a proprietary layer to the open internet, the reality is that it could be a lifesaver for IoT companies, which have persistently shown themselves incapable of carrying out decent security audits on their products and continue to make basic errors, like hard-coding passwords.

And, to be fair to Cloudflare, the company has shown itself to be very capable of handling huge amounts of traffic without lag or collapse.

The million-dollar-question of course is: how much does it cost? Cloudflare told us that the fee was based on the number of devices and the bandwidth required but wouldn’t provide an exact figure.

If the cost is $10 a year per device and an IoT company can offer the extra security as part of a premium package â€“ alongside cloud recording or similar â€“ then it is probably a great deal.

But if the idea is that it will be supplied for free to customers who buy the product and don’t sign up to an ongoing service fee, then the price is going to have to be much, much lower for there to be any kind of significant take-up.

Of course, the biggest security risk comes from companies offering low-price IoT items that don’t require ongoing fees. So while Cloudflare’s new service may help improve mid- to high-end IoT products’ security, the huge risks from the low-end are unlikely go away. So expect plenty more DDoS attacks from zombie webcams.

And then there is the fact that if lots of IoT manufacturers chose to use this service, it would make Cloudflare a single point-of-failure and hence a huge target for hackers. And Cloudflare, like any company using software, is not immune to bugs. Bugs that can provide an enormous wealth of information.

Oh please god no, not another one

One thing we do have to pick on Cloudflare for, however: in the official notice of the new service, the company notes that it is “introducing the industry’s first IoT alliance â€“ made up of a group of IoT companies and experts in the field â€“ that will be committed to forming best practices and standards for protecting connected devices and ensuring the resilience of the Internet of Things.”

Far from this being the “industry’s first IoT alliance,” this effort will only add yet more overhead and confusion to a massively overpopulated world of internet-of-things alliances, consortiums, organizations, groups, working groups, feuding government departments, security experts pushing for laws, legislators and consumer agencies pretending not to hear, and god knows what else.

Below is a partial list of the people working on IoT security and best practices. We wonder why on earth Cloudflare thinks it’s a good idea to add yet another one to the list. Â®

That barren landscape of Internet of Things standards bodies

Posted on April 28 in category News

Tags: Technology

OpenSSL.Light (1.1.0.40000000)

The content below is taken from the original (OpenSSL.Light (1.1.0.40000000)), to continue reading please visit the site. Remember to respect the Author & Copyright.

Open Source SSL v2/v3 and TLS v1 toolkit

Posted on April 28 in category News

Tags: Technology

To Deal with Plastic Trash, All You Need is Bugs

The content below is taken from the original (To Deal with Plastic Trash, All You Need is Bugs), to continue reading please visit the site. Remember to respect the Author & Copyright.

Outlawed now in some places, or only available to tote your purchases at a ridiculous premium, the billions of â€œT-shirtâ€ bags used every year present a seriousÂ waste management problem. Whether blowing across the landscape like syntheticÂ tumbleweeds, floating in the ocean as ersatz jellyfish, or clogging up municipal waste streams, finding a way to deal with them could really make a difference. And finding a bug that eats polyethylene and poops antifreeze might be a great first step in bioremediating the mess.

As with many scientific discoveries, learning about the useful and unexpected eating habits of the larval stage of the Greater Wax Moth Galleria mellonellaÂ can be chalked up to serendipity. It began when biochemist [Federica Bertocchini] cleaned a wax moth infestation from her beehive.Â She put the beeswax-loving pests in a plastic bag, later finding theyÂ had chewed their way out. Intrigued, she andÂ [Paolo Bombelli] ran some experiments using the bugs. They showed the mechanism wasnâ€™t just mechanical and that the worms were digesting the polyethylene, to the tune of 92 mg consumed for 100 worms in 12 hours. Thatâ€™s about 1,000 times faster than bioremediation with bacteria.

Furthermore, the bugs excrete ethylene glycol, a useful industrial chemical, in the process. Finally, to see if theÂ process can scale, the researchers showed that a homogenate of wax moth larvae could digest PE sheets. This could lead to an industrial process if the enzymes involved can be isolated and engineered. The letter describing the process is a fascinating read.

While this one may not a classically hackish way to deal with plastic recycling, the potential for this method is huge. We look forward to seeing where this goes.

[Images:Â CÃ©sar HernÃ¡ndez/CSIC]

Filed under: chemistry hacks, green hacks

Posted on April 28 in category News

Tags: RISC

IGEL Adds Support for Industry-Leading VDI Protocols to IGEL IZ Series Zero Clients

The content below is taken from the original (IGEL Adds Support for Industry-Leading VDI Protocols to IGEL IZ Series Zero Clients), to continue reading please visit the site. Remember to respect the Author & Copyright.

IGEL, a world leader in endpoint management software for the secure enterprise, today announced that it has enhanced the IGEL OS, adding support for the VMware Horizon 4.4 client to its IGEL Zero client IZ2 and IZ3 series hardware. With this announcement, IGEL becomes the industry’s only vendor to integrate the VMware Blast Extreme Protocol on zero client hardware.

“IGEL is committed to helping our channel partners and their customers improve the efficiency and agility of their modern end-user computing environments,”Â saidÂ Simon Clephan,Â Vice President of Business Development and Strategic Alliances,Â IGEL. “By adding support for the VMware Horizon 4.4 client and integrating the VMware Blast Extreme Protocol into our zero client hardware, we are able to support an exceptional user experience, while at the same time providing IT organizations with industry-leading manageability and flexibility through the delivery of a true zero client.”

“Zero Touch” Deployment and VDI Optimization Means Zero Compromise

With IGEL’s IZ Series zero clients, IT organizations benefit from “zero touch” deployment due to rule-based configuration during the roll-out phase of the zero client solutions. IGEL’s ability to support profile-based, automated management of zero client settings once deployed also eliminates the need for local management of the zero clients at remote offices and branch locations.

Furthermore, IT organizations no longer have to compromise between functionality and service. Each IGEL IZ Series zero client can be optimized and configured for the organization’s preferred virtualization protocol, whether it is Citrix HDX, Microsoft RDP/Remote FX or VMware Horizon. Using appliance mode, the IGEL IZ Series boots quickly and directly to their virtual session without intervention from IT.Â

IGEL-IZ2-ZeroClient Â

Industry-Standard Approach Results in Multimedia-Rich User Experience

The integration of the VMware Blast Extreme Protocol,Â VMware’s next-generation display protocol that leverages industry-standard H.264 video compression, also means that mobile and remote workers gain uncompromised access to their centrally hosted desktops and multimedia-rich applications via their IGEL OS-powered endpoints. Â

Key capabilities available through IGEL’s VMware Certified IZ Series endpoints include:

Endpoint hardware-based acceleration for H.264 capable devices
Lossless CODECs that enable images to be compressed/decompressed without a loss in quality
Support for virtual channels

Upgradeable and Future-Proof to Preserve Hardware Investment

IGEL IZ Series zero clients are a cost-effective endpoint solution for organizations of all sizes and require only a one-time, non-recurring hardware investment. Each IGEL IZ Series zero client comes with a license that includes regular and frequent firmware updates to enable IT organizations to preserve their hardware investment while taking advantage of new features and functionality that become available.Â

The IGEL IZ Series zero clients also come pre-configured to support one industry-standard virtualization protocol per device. Customers can choose from Citrix HDX, Microsoft RDP/Remote FX or VMware Horizon and benefit from the IGEL OS 10’s rich feature set. Through licensing upgrades, organizations can add or re-configure supported virtualization protocols, leveraging the IGEL Universal Management Suite (UMS) to quickly transition between protocols, and make changes for their entire network of zero clients, a group of thin clients, or a specific endpoint. The UMS also enables IT organizations to add and remove endpoint devices, and perform software upgrades as needed or required, to provide the latest available protocol features.

Availability and Support

The IGEL IZ Series zero clients are available in North America through IGEL’s network of IGEL Platinum partners, Authorized IGEL Partners (AIPs) and resellers. Each IGEL IZ Series zero client comes standard with a free three-year hardware warranty.Â

To experience the capabilities of IGEL OS 10,Â downloadÂ the IGEL Universal Desktop Converter (UDC) and IGEL UMS, request a 12-minuteÂ demonstrationÂ of the IGEL OS or request evaluation hardware visitÂ http://bit.ly/2oPbdVb.

Posted on April 27 in category News

Tags: VMware

CompSci boffins find Reddit is ideal source for sarcasm database

The content below is taken from the original (CompSci boffins find Reddit is ideal source for sarcasm database), to continue reading please visit the site. Remember to respect the Author & Copyright.

Over here at El Reg, we think that chatbots are, like, the best thing ever.

Not.

But would they be any better if they could detect sarcasm and retaliate with their own snide remarks?

A group of computer scientists from Princeton University, USA, certainly think so. Mikhail Khodak, Nikunj Saunshi and Kiran Vodrahalli, all graduate students, have pooled together â€œa large self-annotated corpus for sarcasmâ€ by trawling through Reddit.

â€œSince sarcasm often involves humans stating something opposed to their beliefs or wants, it is important for chatbots and intelligent assistants to be able to understand when a person is being sarcastic,â€ Khodak told The Register.

A paper released on arXiv shows the trio arenâ€™t the first group to collect a bit of internet sass. Other researchers have done it with Twitter. Indeed, IBM last week proclaimed a breakthrough of sorts with a new service that can detect when Twitter users are “frustrated, sad, satisfied, excited, polite, impolite and sympathetic.”

The authors of this paper decided to turn to Reddit, the self-described â€œfront page of the internetâ€ because posts are written more clearly and arenâ€™t restricted by the 140 character limit on Twitter.

Reddit is essentially an online forum that is split into “subreddits” for different topics or themes. Users follow interesting subreddits, and can rate and comment on posts.

Its structure makes it the perfect place to hunt for a bit of sark. Instead of relying on humans to label individual comments as sarcastic or not, geeky users frequently add â€˜/sâ€™ to their posts to denote sarcasm (the markup is a nod to a theoretical â€˜<sarcasm>…</sarcasm>â€™ HTML tag. The subreddit feature also allows researchers to sort their data by subject.

Example sarcastic comment in the politics subreddit, marked with ‘/s’.

That markup’s gold for researchers because it means they’ve been able to create a data set of 1.3 million self-described pieces of sarcasm among 500-600 million comments made on Reddit from 2009-2016. Controversial and less moderated subreddits like politics or menâ€™s rights, a thread â€œfor those who wish to discuss menâ€™s rights and the ways said rights are infringedâ€, contain more sneering statements than games or science.

The goal is to construct a dataset sophisticated enough to follow online conversations and understand the context behind the sarky comments in order to test natural language processing algorithms.

â€œIt is quite difficult for both machines and humans to distinguish sarcasm without context. One of the advantages of our corpus is that we provide the text preceding each statement as well as the author of the statement, so algorithms can see whether it is sarcastic in the context of the conversation or in the context of the authorâ€™s past statements,â€ Khodak explained.

But although context is given, trying to make machines understand it is tricky. â€œWe didn’t provide context to the machine learning algorithms because there is no standard accepted way of doing this,â€ Khodak added.

So instead, the researchers focused on training some of the simplest existing algorithms to detect sarcasm on single sentences only. In natural language processing, words are often represented as feature vectors in space, using a â€œsupport vector machineâ€, a classifier that sorts labelled data into two different categories – in this case â€˜sarcasticâ€™ and â€˜not sarcasticâ€™ – by drawing a divide in the space.

Three different word-embedding algorithms were pitted against humans to judge if a remark was acerbic. Some of the models performed better without added context than humans did to the researchers surprise.

But a closer look shows the results are to be taken with a pinch of salt. Humans are obviously better at understanding sarcasm, no machine is complex enough to really understand text and canâ€™t handle the subtleties of satire.

Instead, the algorithms learned by finding patterns between words that were more closely associated with sarcasm such as â€œclearlyâ€ or â€œtotallyâ€. â€œCommon words do seem to provide a strong indication of sarcastic intent,â€ Khodak admitted.

Oscar Wilde famously said: â€œSarcasm is the lowest form of witâ€. Although the database might give researchers a better chance at cracking sarcasm, itâ€™ll be a long, long time before machines are smart enough to understand us. Â®

Posted on April 24 in category News

Tags: Technology

Flux, a fintech startup founded by ex-Revolut employees, wants to make paper receipts obsolete

The content below is taken from the original (Flux, a fintech startup founded by ex-Revolut employees, wants to make paper receipts obsolete), to continue reading please visit the site. Remember to respect the Author & Copyright.

Flux, a London-based fintech startup founded by three early employees of foreign exchange and banking app Revolut, is on a mission to make store receipts truly digital.

The company, which is de-cloaking this week with a pilot in East London, has built a software platform that bridges the gap between the itemised receipt data captured by a merchantâ€™s point-of-sake (POS) system and what little information typically shows up on your bank statement or mobile banking app.

â€œPaper receipts are a pain, they are easy to lose, a hassle to keep hold of and a waste of resources. We think itâ€™s insane that today we can go from using 21st Century technology of contactless payments to 100BC tech of paper receipts,â€ explains co-founder and CEO Matty Cusden-Ross, who was previously Revolut employee number two and the companyâ€™s CMO.

â€œFor consumers this [is] about getting rid of paper clutter. That means making receipts easy to find, organised and saving you time across the board which delivers convenience and control. So Flux is on a mission to digitise and organise the worldâ€™s receiptsâ€.

Flux is founded by three ex-Revolut employees

To be clear, this isnâ€™t digitising paper receipts with OCR, but â€” by partnering with merchants, their payment processor/POS systems, and banks â€” making item level receipts digital in the first place. Fluxâ€™s first live integration is with EAT and Bel-Air on the merchant side, and digital-only bank Monzo. But, says the company, even though this is a very tentative first step, the opportunity is huge. Thatâ€™s because there is a lot of valuable data locked up in receipts that can help merchants better understand who their customers are.

â€œWe areâ€¦ building a software layer that is agnostic to the financial institution or retailer that it plugs into,â€ Cusden-Ross says. â€œWe connect retailers via a software plug-in to their point of sale and to the consumer via an integration to their mobile banking app. Flux automagically links receipts to your bank card as you pay. Receipts are stored in the same place your transactions live today, your bank statement. Just open up your bank app and youâ€™ll find all the receipts as well as any loyalty right there, itâ€™s seamless and intuitiveâ€.

The mention of loyalty scheme integration is key to whatâ€™s in it for both merchants and consumers. Doing away with stamps and paper coupons saves time for staff who have to process those schemes, whilst putting a merchantâ€™s loyalty scheme at the heart of your existing banking app may well be a much more efficient way of reaching you. Likewise, making it more convenient for you to take part in a loyalty scheme means that you are more likely to remain a loyal customer. This is all enabled by being able to access item-level receipt data linked to your bank card. Just bought your tenth coffee? A push notification will tell you the next one is on the house.

For banks, not only does Flux help to provide new functionality that could be particularly useful for business users who need to file expenses, there is also the potential to significantly reduce chargeback disputes.

Adds Cusden-Ross: â€œWe are getting to the consumer via banks who, particularly in the Open Banking landscape, are looking for ways to increase customer engagement and reduce operational costs. Flux can help on those two things by creating personalised experiences in app and reducing costs of things like low value, high volume chargeback disputes. Those disputes are frequently caused by customers who donâ€™t recognise a transaction in their statement and complain to their bankâ€.

Meanwhile, Flux isnâ€™t the only fintech going after the item level digital receipt space. Another player is Yocuda, whilst Iâ€™m hearing that all-your-cards-in-one app Curve is also eyeing up item level receipts. Undoubtedly, there will be others, thanks in part to recent EU legislation regarding a consumerâ€™s right to access and make portable their personal data.

Posted on April 24 in category News

Tags: Technology

Announcing new Azure Services in the UK

The content below is taken from the original (Announcing new Azure Services in the UK), to continue reading please visit the site. Remember to respect the Author & Copyright.

Weâ€™re pleased to announce the following services which are now available in the UK!

HDInsight â€“Â HDInsight is a 100% compatible Hadoop service that allows you to easily provision and manage Hadoop clusters for big data processing in Azure.

HDInsight is the only fully-managed cloud Hadoop offering that provides optimized open source analytic clusters for Spark, Hive, MapReduce, HBase, Storm, Kafka, and R Server backed by a 99.9% SLA.Â Each of these big data technologies and ISV applications are easily deployable as managed clusters with enterprise-level security and monitoring.Â Learn more about HDInsight.

Azure Import/Export service now also available in UK is the perfect companion service to use with HDInsight â€“ the combination allows you to easily ingest, process and optionally export a limitless amount of data.

Azure Import/Export –Â Â Import/Export Service is now live in UK South! The Azure Import/Export Service enables you to move large amounts of on-premises data into and out of your Azure Storage accounts. It does this by enabling you to securely ship hard disk drives directly to our Azure data centers. Once we receive the drives weâ€™ll automatically transfer the data to or from your Azure Storage account.Â This enables you to import or export massive amounts of data more quickly and cost effectively (and not be constrained by available network bandwidth).

Customers can now use Azure Import/Export Service to copy data to and from Azure Storage by shipping hard disk drives to Azure UK South data center.

For more information about creating import/export jobs see, Use the Microsoft Azure Import/Export Service to transfer data to Blob Storage.

Azure Container Registry –Â Azure Container Registry is a private registry for hosting container images. Using the Azure Container Registry, customers can store Docker-formatted images for all types of container deployments. Azure Container Registry integrates well with orchestrators hosted in Azure Container Service, including Docker Swarm, DC/OS and Kubernetes. Users can benefit from using familiar tooling capable of working with the open source Docker Registry v2.

Customers can now create one or more container registries in their Azure subscription. Each registry is backed by a standard Azure storage account in the same location. Take advantage of local, network-close storage of your container images by creating a registry in the same Azure location as your deployments. Learn more about Azure Container Registry.

We are excited about these additions, and invite customers using the UK Azure region to try them today!

Posted on April 24 in category News

Tags: Technology

How Azure Security Center detects a Bitcoin mining attack

The content below is taken from the original (How Azure Security Center detects a Bitcoin mining attack), to continue reading please visit the site. Remember to respect the Author & Copyright.

Azure Security Center helps customers deal with myriads of threats using advanced analytics backed by global threat intelligence. In addition, a team of security researchers often work directly with customers to gain insight into security incidents affecting Microsoft Azure customers, with the goal of constantly improving Security Center detection and alerting capabilities.

In the previous blog postÂ "How Azure Security Center helps reveal a Cyberattack", security researchers detailed the stages of one real-world attack campaign that began with a brute force attack detected by Security Center and the steps taken to investigate and remediate the attack. In this post, weâ€™ll focus on an Azure Security Center detection that led researchers to discover a ring of mining activity, which made use of a well-known bitcoin mining algorithm named Cryptonight.

Before we get into the details, letâ€™s quickly explain some terms that youâ€™ll see throughout this blog. â€œBitcoin Minersâ€ are a special class of software that use mining algorithms to generate or â€œmineâ€ bitcoins, which are a form of digital currency. Mining software is often flagged as malicious because it hijacks system hardware resources like the Central Processing Unit (CPU) or Graphics Processing Unit (GPU) as well as network bandwidth of an affected host. Cryptonight is one such mining algorithm which relies specifically on the hostâ€™s CPU. In our investigations, weâ€™ve seen bitcoin miners installed through a variety of techniques including malicious downloads, emails with malicious links, attachments downloaded by already-installed malware, peer to peer file sharing networks, and through cracked installers/bundlers.

Initial Azure Security Center alert details

Our initial investigation started when Azure Security Center detected suspicious process execution and created an alert like the one below. The alert provided details such as date and time of the detected activity, affected resources, subscription information, and included a link to a detailed report about hacker tools like the one detected in this case.

We began a deeper investigation, which revealed the initial compromise was through a suspicious download that got detected as â€œHackTool: Win32/Keygen".Â We suspect one of the administrators on the box was trying to download tools that are usually used to patch or "crack" some software keys. Malware is frequently installed along with these tools allowing attackers a backdoor and access to the box.

Based on our log analysis, the attack began with the creation of a user account named â€œ*server$â€.
The â€œ*server$â€ account then created a scheduled task called "ngmâ€. This task launched a batch script named "kit.batâ€ located in the "C:\Windows\Temp\ngmtx" folder.
We then observed process named "servies.exeâ€œÂ being launched with cryptonight related parameters.
Note: The â€˜bond007.01â€™ represents the bitcoin userâ€™s account behind this activity and â€˜xâ€™ represents the password.

Two days later we observed the same activity with different file names. In the screenshot below, sst.bat has now replaced kit.bat and mstdc.exe has replaced servies.exe . This same cycle of batch file and process execution was observed periodically.

These .bat scripts appear to be used for making connections to the crypto net pool (XCN or Shark coin) and launched by a scheduled task that restarts these connections approximately every hour.

Additional Observation: The downloaded executables used for connecting to the bitcoin service and generating the bitcoins are renamed from the original, 32.exe or 64.exe, to â€œmstdc.exeâ€ and â€œservies.exeâ€ respectively. These executableâ€™s naming schemes are based on an old technique used by attackers trying to hide malicious binaries in plain sight. The technique attempts to make files look like legitimate benign-sounding Windows filenames.

Mstdc.exe: â€œmstdc.exeâ€ looks like â€œmsdtc.exeâ€ which is a legitimate executable on Windows systems, namely Microsoft Distributed Transaction Coordinator required by various applications such as Microsoft Exchange or SQL Server installed in clusters.
Servies.exe: Similarly, â€œservices.exeâ€ is a legitimate Service Control Manager (SCM) is a special system process under the Windows NT family of operating systems, which starts, stops and interacts with Windows service processes. Here again attackers are trying to hide by using similar looking binaries. â€œServies.exeâ€ and â€œservices.exeâ€, they look very similar, donâ€™t they? Great tactic used by attackers.

As we did our timeline log analysis, we noted other activity including wscript.exe using the â€œVBScript.Encodeâ€ to execute â€˜test.zipâ€™.

On extraction, it revealed â€˜iissstt.datâ€™ file that was communicating with an IP address in Korea. The â€˜mofcomp.exeâ€™ command appears to be registering the file iisstt.dat with WMI. The mofcomp.exe compiler parses a file containing MOF statements and adds the classes and class instances defined in the file to the WMI repository.

Recommended remediation and mitigation steps

The initial compromise was the result of malware installation through cracked installers/bundlers which resulted in complete compromise of the machine. With that, our recommendation was first to rebuild the machine if possible. However, with the understanding that this sometimes cannot be done immediately, we recommend implementing the following remediation steps:

1. Password Policies: Reset passwords for all users of the affected host and ensure password policies meet best practices.

2. Defender Scan: Run a full antimalware scan using Microsoft Antimalware or another solution, which can flag potential malware.

3. Software Update Consideration: Ensure the OS and applications are being kept up to date. Azure Security Center can help you identify virtual machines that are missing critical and security OS updates.

4. OS Vulnerabilities & Version: Align your OS configurations with the recommended rules for the most hardened version of the OS. For example, do not allow passwords to be saved. Update the operating system (OS) version for your Cloud Service to the most recent version available for your OS family. Azure Security Center can help you identify OS configurations that do not align with these recommendations as well as Cloud Services running outdates OS version.

5. Backup: Regular backups are important not only for the software update management platform itself, but also for the servers that will be updated. To ensure that you have a rollback configuration in place in case an update fails, make sure to back up the system regularly.

6. Avoid Usage of Cracked Software: Using cracked software introduces unwanted risk into your home or business by way of malware and other threats that are associated with pirated software. Microsoft highly recommends evading usage of cracked software and following legal software policy as recommended by their respective organization.

More information can be found at:

Educate yourself on software piracy risk.
Learn more by reading â€œSIRv13: Be careful where you go looking for software and media filesâ€.Â

7. Email Notification: Finally, configure Azure Security Center to send email notifications when threats like these are detected.

Click on Policy tile in Prevention Section.
On the Security Policy blade, you pick which Subscription you want to configure Email Alerts for.
This brings us to the Security Policy blade. Click on the Email Notifications option to configure email alerting.

An email alert from Azure Security Center will look like the one below.

To learn more about Azure Security Center, see the following:

Azure Security Center detection capabilities â€” Learn about Azure Security Centerâ€™s advanced detection capabilities.
Managing and responding to security alerts in Azure Security Center â€” Learn how to manage and respond to security alerts.
Managing security recommendations in Azure Security Center â€” Learn how recommendations help you protect your Azure resources.
Security health monitoring in Azure Security Center â€” Learn how to monitor the health of your Azure resources.
Monitoring partner solutions with Azure Security Center â€” Learn how to monitor the health status of your partner solutions.
Azure Security Center FAQ â€” Find frequently asked questions about using the service.
Azure Security blog â€” Get the latest Azure security news and information.

Posted on April 24 in category News

Tags: Technology

Deploying a StorSimple Virtual Appliance

The content below is taken from the original (Deploying a StorSimple Virtual Appliance), to continue reading please visit the site. Remember to respect the Author & Copyright.

In this post, I will show you how to deploy a new StorSimple 1200 virtual appliance on Hyper-V. Please note that VMware is quite similar to this. It also includes the StorSimple device manager in the Azure Portal.

StorSimple Device Manager

StorSimple appliances are deployed on-premises but they are managed from the cloud. Some Azure channels, also called Microsoft offers, such as EA or Open will offer management from the Legacy Management Portal. Moving forward, we should use the newer experience in the Azure Portal. I am documenting the latter.

In the Azure Portal, we can manage many StorSimple appliances using the StoreSimple Device Managers. This is really an experience with a grammatically incorrect name that will probably be changed in the ever-fluid Azure Portal. Browse over to More Services and search for StorSimple. Select StorSimple Device Managers and click + Add to create a new resource.

Give the new device manager a name and select/create a resource group to place it in. You can optionally create a new storage account. This storage account will be used in the cloud tier for your on-premises StorSimple appliances. Choosing this option does limit your flexibility. You can create a storage account yourself. This will give you what you want rather than taking the default. Here are the details:

General storage account
GRS
Same resource group as the device manager

You might opt to create a blob storage account for the hot or the cool tier. Afterward, you can add other storage accounts and modify resiliency.

Create a New StorSimple Device Manager [Image Credit: Aidan Finn]

Downloading the StorSimple Virtual Disk

Open the new device manager. Click Virtual Array. The blade that opens will provide links to download Hyper-V and/or VMware images for an on-premises StorSimple 1200 virtual appliance.

Sponsored

The minimum spec for sizing the virtual applianceâ€™s machine is documented and a link to a deployment guide is provided. A service registration key for your associating appliances with this device manager is also provided. Copy this key now. You can always come back to this blade later to copy the key because it does not change.

Download the StorSimple 1200 Virtual Disk Image [Image Credit: Aidan Finn]

Click the download link to the appropriate disk image for your on-premises hypervisor. It is contained in a zip file that is just over 2GB in size. Download the disk to where you will create the virtual machine. If I am going to have a StorSimple appliance called StoreSimple1 stored in E:\Virtual Machines\StorSimple1\, then I will download and extract the disk to a folder called E:\Virtual Machines\StorSimple1\Virtual Hard Disks\.

The Downloaded StorSimple OS Disk [Image Credit: Aidan Finn]

Create an On-Premises Virtual Machine

You will need to create a virtual machine to run as your on-premises StorSimple virtual appliance. Â If you are working with Hyper-V from Windows Server 2012 or later hosts, then the virtual machine should be Generation 2. In the case of VMware hosts, use version 8â€“11.

This virtual machine should have 4 virtual CPUs and 8GB of static RAM. Dynamic memory is not supported for this virtual machine. Do not create an OS disk. Use the disk that you downloaded and extracted. In my case, I will connect the machine to the virtual hard disk that I downloaded and extracted to E:\Virtual Machines\StorSimple1\Virtual Hard Disks\.

Using the Downloaded StorSimple OS Disk as the VM OS Disk [Image Credit: Aidan Finn]

There are two variables when you are configuring this virtual machine:

NICs: How many virtual NICs will this machine have? What VLANs or virtual networks will they be connected to? This is more of an issue for iSCSI deployments, where iSCSI traffic is normally isolated.
Data Disk Size: The size of the data disk impacts the total amount of tiered storage that your StorSimple solution will be able to offer to the on-premises network.

Calculating the size of the data disk of the virtual machine is complicated. I will cover it in another post. For now, know that it must be at least 500GB and can be as big as 8TB. In the case of Hyper-V, use dynamic disks and thin provisioned for VMware. Note that resizing the data disk is not supported and will lead to data loss.

Settings of a StorSimple VM on Windows Server 2016 Hyper-V [Image Credit: Aidan Finn]

Configuring Virtual Appliance â€” Console

Connect to the Hyper-V virtual machine console and boot it up. Wait for the OS to boot. This will not take long. Log into the virtual machine with the default password of Password1. You must change the password at this time. Set it to something secure.

You are logged into a PowerShell prompt. StorSimple appears to be a customized and smaller version of a Windows Server core installation. It has a very small PowerShell module. You can run Get-Command to see the available set of cmdlets and functions.

The most important of these cmdlets is Set-HcsIpAddress. We will use this to configure an IP address, subnet mask, and default gateway for the first management NIC in the virtual machine. DNS settings will be done later in the web console:

Set-HcsIpAddress -Name Ethernet -IpAddress 192.168.0.31 -Netmask 255.255.255.0 -Gateway 192.168.0.1

Now we have the virtual appliance running with enough of a configuration to start managing it remotely. You can press CTRL + ALT + DEL to log out of the StorSimple virtual appliance.

Configuring Virtual Appliance â€” Browser Interface

We will complete the configuration of the virtual appliance using the browser interface that it hosts. Open up a browser and navigate to https://<IPaddress of the virtual appliance>. You will get a certificate warning, which you can ignore.

Sign in as the default user, which is StorSimpleAdmin. Use the password that you previously configured. You are greeted by a Getting Started page, which will walk you through completing the local configuration of the virtual appliance.

Getting Started In the StorSimple Browser Interface [Image Credit: Microsoft]

The Network Interface page allows you to re-configure the IP configuration (static/DHCP) and now you can customize the DNS server settings.

Network Settings for the StorSimple Appliance [Image Credit: Aidan Finn]

I have found in my testing that if you inherited DNS settings from DHCP, then you cannot rely on them. I have had to do the following:

Temporarily switch the DNS servers to something else such as OpenDNS or Google.
Apply the changes.
Change the DNS settings to my local DNS servers again.
Apply the changes.
A restart might be necessary if there were failed DNS lookups. This will purge the local DNS cache. You can find the restart under Power Settings in the browser interface.

Device Settings is an important page to do the following:

Configure the machine either as a file server (default) or as an iSCSI storage appliance.
Set the computer name.
Join an Active Directory domain. See the above DNS tip if your domain cannot be found.

Configure StorSimple device settings & domain join [Image Credit: Aidan Finn]

Configuring StorSimple Device Settings and Domain Join [Image Credit: Aidan Finn]

Web Proxy Settings will allow the StorSimple appliance to communicate with Azure via a local proxy server. Time Settings will configure the time zone. It also configures a primaryÂ and secondary time server. It is set to time.windows.com by default.

Cloud settings is where you will associate this virtual appliance with the StorSimple device manager that was previously created. We need to paste the service registration key from the Add Virtual Array blade here and click Register.

Register the StorSimple Virtual Appliance with Azure [Image Credit: Aidan Finn]

The second field is a Service Data Encryption Key. This is used when we want to associate additional StorSimple appliances with the same StorSimple device manager in Azure. The key is presented to you when you register your first appliance. You can retrieve it later from the Cloud Settings page.

When you are associating additional StorSimple appliances, you need to enter both the Service Registration Key from the Azure Portal and the Service Data Encryption Key from previously registered StorSimple appliances.

It is a good idea to run Diagnostic Tests under Troubleshooting in the browser interface. Unnecessary tests are not run by this tool. If the test passes, you can move on to the final phase of deploying the appliance.

Configuring Virtual Appliance â€” Azure Portal

Return to the StorSimple Device Manager blade in the Azure Portal and open Devices. Your new virtual appliance should appear with a status of Ready To Set Up. Open the device and click Configure.

By default, StorSimple wants to encrypt the cold data that is kept in an Azure storage account. This requires a 32-character encryption key that you must generate and keep safe. You can optionally disable storage account encryption.

You must associate a storage account with the virtual appliance under Storage Account Credential. We created a storage account earlier so we can complete the wizard to associate the storage account. If you did not create a storage account, open the Azure Portal in another browser tab. Create one there.

Select the storage account and click Add. This will add the credentials of the storage account to the StorSimple virtual appliance.

Configuring a StorSimple Appliance In the Azure Portal [Image Credit: Aidan Finn]

Wait for the storage account credentials job to complete. You can click Configure to finish setting up the virtual appliance. Once that job is complete, your StorSimple virtual appliance is ready to be used.

A Ready StorSimple Virtual Appliance [Image Credit: Aidan Finn]

Sponsored

Next, you will need to configure your iSCSI volumes or your file server shares. We will cover these steps in future posts.

The post Deploying a StorSimple Virtual Appliance appeared first on Petri.

Posted on April 24 in category News

Tags: Technology

Building Your Disaster Recovery Plan

The content below is taken from the original (Building Your Disaster Recovery Plan), to continue reading please visit the site. Remember to respect the Author & Copyright.

Letâ€™s face it, building and testing Disaster Recovery (DR) plans isnâ€™t anyoneâ€™s favorite activity. However, itâ€™s like a life boat on a cruise ship â€” you hope you never need it but if anything happens it can be a lifesaver. Although your DR plan doesnâ€™t help you much in day-to-day operations, the lack of one can be disastrous. This is especially true for small and medium-sized businesses that typically have fewer resources and are often tapped out just covering their daily operations. However, these are the businesses who probably need a DR plan the most because a prolonged failure in their IT infrastructure has the potential to put them out of business permanently. A solid DR plan is essential to businesses of all sizes, as it makes your company more resilient to serious IT outages and enables you to restore your critical services with as little impact on business operations as possible.

DR isnâ€™t without its challenges. Business processes are complex and protecting them is equally complex. Just as important, DR can be expensive. For instance, if your DR plan requires a physical hot site, then you need to buy the computing, networking, storage, and software required to support your mission critical workloads. These types of costs have driven many businesses to look to the cloud to replace the need for a DR hot site.

So how do you go about building a DR plan? Itâ€™s not just making regular backups. Although there isnâ€™t room to cover all the aspects of a DR plan in this post, letâ€™s look at the high points that can help you get started building a new DR plan or revamping an existing one.

Identify Your Critical Processes and Their Dependencies

The first step to building an effective DR plan is to identify your organizationâ€™s needs as well as your critical IT components and their dependencies. What these are depends entirely on the type of business. For instance, an online retailer such as Amazon needs to make sure the web frontend and backend services that provide their online presence are all protected. The needs of a small manufacturing firm are quite different. There itâ€™s typically more important to keep the local ERP system online. During this identification phase, itâ€™s important to work with management to recognize the most serious vulnerabilities in the data center, as well as reviewing past outages and identifying their causes and resolutions.

Select the Appropriate Technologies Based on Your RTOs and RPOs

The next step is to determine your Recovery Time Objectives (RTOs) and your Recovery Point Objectives (RPOs). Your RTOS and RPOs are the primary drivers for the DR technologies that you choose to implement. To understand your RTOs, you need to ask how long can you go without this service?Â To understand your RPOs, you need to ask how much data can you stand to lose? While different businesses have different requirements, if your organization requires very short recovery times, then you could consider implementing a replication-based DR strategy where data from your primary site is replicated to the cloud or to another DR site. The data in the DR site is then as current as your replication interval.

Set Up DR Operational Procedures and Document Them

After determining your DR requirements, you need to create operational procedures designed to respond to your critical business outage. You need to identify your emergency response teams and assign them their DR contingency tasks as well as understanding your vendorâ€™s emergency response requirements and capabilities. In addition, you need to document your DR procedures so that all personnel have a clear understanding of their roles and responsibilities.

Sponsored

Testing Your DR Plan

Finally, DR canâ€™t be viewed as a set-it-and-forget-it activity. No DR plan is complete without regular testing. If you donâ€™t test your DR plan, you donâ€™t have a real DR plan. The last place you want to find out your DR plan has a problem is in the middle of a critical recovery. Operational procedures and requirements are in continual flux and regular periodic testing of your DR plan is a necessity if you want that plan to work when you need it to.

The post Building Your Disaster Recovery Plan appeared first on Petri.

Posted on April 21 in category News

Tags: Technology

Turning Office 365 Off at the Weekend

The content below is taken from the original (Turning Office 365 Off at the Weekend), to continue reading please visit the site. Remember to respect the Author & Copyright.

France Weekend

France Says No to Weekend Working

The French El Khomri law that allows â€œthe full exercise by the employee of his right to disconnect and implementation by the company of devices to regulate the use of digital toolsâ€ came into effect on January 1, 2017. The law gives employees the right to avoid the use of IT systems, including Office 365, at weekend and holiday periods. The exact details of how employees can disconnect are subject to discussions within individual companies and agreement between management and bodies such as workersâ€™ councils.

The logic behind the new law is that everyone deserves the right not to be disturbed by work interruptions when they are at home or on vacation and should be spending time with their families. It is hard to argue against the intent of the law. It seems like everyone is interrupt-driven today and our lives are governed by the squeaks, beeps, and other noises emitted by PCs and other devices. Tools like MyAnalytics allow people to measure how much time they spend on activities outside normal working hours, but it is unclear how effective this data is in persuading corporate employees to ease back.

Hence the new requirement on companies operating in France to come to some arrangement to protect employees against overwork caused by â€œdigital toolsâ€. It is easy to imagine how to cut off IT for on-premises servers. After all, the easiest thing in the world is to power down all systems over the weekend and during public holidays. Or simply disconnect the external network.

But Office 365 isnâ€™t Designed for France

Things are more complex with Office 365. First, Office 365 is a massive multi-tenant environment where work from different tenants is intermingled on servers. For instance, mailboxes from one tenant can exist in the same database as those from other tenants. Second, although Office 365 operates in different datacenter regions, most of those regions span multiple countries and therefore multiple legislative environments.

Last, it is up to individual companies to discuss and determine arrangements with their staff Every company is different. Some will only have French employees, others will operate inside and outside France. Some will operate on a classic 9-to-5 basis, others must maintain business operations on a 24Ã—7 basis. Some employees will need access at the weekend because of their jobs while others will cheerfully never want to see an IT system on a weekend. And anyway, the lines of what a weekend is have blurred as different cultures combine in heterogeneous societies. All of this proves that it would be terrifically difficult for Office 365 to provide a single out-of-the-box answer for French companies.

PowerShell to the Rescue

Which leaves us with PowerShell. Again!

Conceptually, it is easy to list the steps necessary to block user access for specific periods.

Identify the users to block.
Identify the times for a block to be active.
Block the usersâ€™ credentials during the designated periods.

Setting a flag can identify the users to block. For instance, if you use Exchange Online, you could use one of the custom attributes. In this example, we populate the CustomAttribute12 property for a mailbox with â€œWeekendâ€.

[PS] C:\> Set-Mailbox -Identity TRedmond -CustomAttribute12 "Weekend"

If you do not use Exchange Online, you must pick an attribute that exists for the userâ€™s Azure Active Directory account and use that. However, most of those attributes are used to hold information like the userâ€™s address and phone numbers that are visible to users, so there is no obvious good answer. In either case, once you have marked the users to block, you then need to have some method to prevent access to Office 365, Fortunately, this is easily done by blocking user credentials. Two steps are required. First, we assemble the set of mailboxes to process. We then block their account credentials. Here is some simple code that does the job.

[PS] C:\> $Mbx = Get-Mailbox -RecipientTypeDetails "UserMailbox" -Filter {CustomAttribute12 -eq "Weekend"}

ForEach ($M in $Mbx)Â  {

     Write-Host â€œBlocking access forâ€œ $M.DisplayName

     Set-MsolUser -UserPrincipalName $M.WindowsEmailAddress -BlockCredential $True }

This code relies on the value of the WindowsEmailAddress property for the mailbox being the same as the User Principal Name for the account. This is the desired state, but the two values might not match.

Assuming everything works, Office 365 blocks the userâ€™s credentials. Any attempt to connect results in an â€œaccount lockedâ€ error (Figure 1).

Figure 1: Office 365 blocks a user account (image credit: Tony Redmond)

To unlock the account, we reverse the process and run the Set-MsolUser cmdlet to set the BlockCredential switch for each account to False. For example:

[PS] C:\> Set-MsolUser -UserPrincipalName Nancy.Anderson@Office365ExchangeBook.com -BlockCredential $False

More Work to Do

Of course, this is only an outline of the work thatâ€™s needed to block users. Youâ€™d also have to set the dates to block and schedule scripts to block access. For instance, you might disable access at 6PM on Friday and allow access again at 8AM on Monday. Some error handling and logging would be nice and youâ€™d have to accommodate exceptions and so on. In other words, a few lines of PowerShell are not a complete solution.

Sponsored

Other solutions are suggested elsewhere (hereâ€™s one example), some of which are pretty inventive. If youâ€™re in the position where management asks you to implement a block, it is worthwhile checking out what others have done or investigated before making up your mind. Bear in mind that Office 365 now covers a host of different applications and clients, so your solution needs to be workload-independent. Thatâ€™s why blocking credentials is such a good approach.

One thingâ€™s for sure. Donâ€™t expect Microsoft to offer a solution. They want you to use Office 365 all the time. Even at weekends.

Follow Tony onÂ Twitter @12Knocksinna.

Want to know more about how to manage Office 365? Find what you need to know in â€œOffice 365 for IT Prosâ€, the most comprehensive eBook covering all aspects of Office 365. AvailableÂ in PDF and EPUB formatsÂ (suitable for iBooks) or forÂ Amazon Kindle.

The post Turning Office 365 Off at the Weekend appeared first on Petri.

Posted on April 20 in category News

Tags: Technology

Automate the Freight: Drones Across the Sea

The content below is taken from the original (Automate the Freight: Drones Across the Sea), to continue reading please visit the site. Remember to respect the Author & Copyright.

When you think about which of the many technological advances of the 20th century had the most impact on the global economy, which one would you rank as the most important? Would it be the space program, which gave rise to advances in everything from communications satellites to advanced composite materials? Or would it be the related aerospace industry, which stitched the world together so tightly that you can be almost anywhere on the planet within 24 hours? Or perhaps itâ€™s the Internet, the global platform for buying almost anything from almost anyone.

Those are all important, but for the most economically impactful technology of the 20th century, Iâ€™d posit that the lowly shipping container and the containerized cargo industry that grew around it win, hands down.

How could an almost technology-free steel box compete with the bells and whistles of spacecraft, jet airliners, and a global network of computers? When you think about it, moving goods from point A to point B is one of the key tasks in a global economy. And when your globeâ€™s surface is 70% water, moving goods by ship is something that you need to be really good at. Until the mid-1950s, almost every ship was loaded by hand, with boxes and crates winched from dockside up into holds, where it was arranged by stevedores who as often as not helped themselves to whatever they wanted. Ships took weeks to load, cargoes were relatively small, and shipping was expensive.

By Photocapy (Flickr) [CC BY-SA 2.0], via Wikimedia Commons

The standardized intermodal shipping container changed all that â€” cargo was now fairly secure and handled in bulk by cranes. ShipsÂ could be loaded and unloaded quickly, turning weeks dockside to hours. Ships have become enormous as a result, and the reason you can order a widget on Ali Express orÂ eBay and have it show up pretty quickly is because it got crammed into a container in China and crossed an ocean along with thousands of other of these lowly steel boxes, each full of something someone is convinced they want.

Land, Air, and Sea

In my earlier article about automating freight, I focused mainly on land-based, long-haul freight shipped by driverless trucks. But I also touched on automating the ships that ply our oceans. Most container ships these days have barely a dozen crewmembers aboard. Technology hasÂ automated awayÂ most of the jobs on a ship, and little stands in the way of complete automation.

I have little doubt that day will come, but thereâ€™sÂ a problem with this mode of freight: ships are slow. The modern container fleet averages about 15 knots, meaning that a crossing of the Pacific can take something like three weeks. Thatâ€™s an amazingly short trip compared to the middle of the last century,Â but it might be too long for some kinds of shipments â€” produce, for instance. Yes, you can ship across the ocean by standard air freight, but at a high premium compared to surface shipping.

Could there be another way? San Jose, CA-based startup Natilus thinks so, and theyâ€™re working on autonomous freight aircraft to ply the same routes that container ships currently dominate. They have ambitious plans: 200-foot long UAVs that will tote 100 tons of freight across the Pacific in 30 hours or less. The company and the concept appear to be in their infancies now, but they plan a test of a 30-foot scale model of their freighter this summer in San Francisco.

But in this day and age of self-crashing cars and fears of drone shootdowns, what makes Natilus think theyâ€™ll be allowed to fly a drone the size of a Boeing 777 above population centers? Hereâ€™s the clever bit: they wonâ€™t. Natilus intends to fly their drones completely over the ocean. Whatâ€™s more, the drones wonâ€™t even use airports; theyâ€™ll be seaplanes, and will land, unload, load, and take off at or near seaports. Thereâ€™s obviously going to be an efficiency hit compared to container ships, since cargo will need to be handled more than once. But if Natilus figures out how to leverage the venerable 20-foot shipping container format, my guess is the loss of efficiency will be more than covered by a 2000% faster transit time.

Obviously, Natilus and its eventual competitors have a huge number of problems to solve. Surprisingly, IÂ think the drone part of the equation isnâ€™t one of them â€” weâ€™ve already got a pretty good idea how to make big UAVsÂ and fly them safely over land. I think the problems lie more with the infrastructure thatâ€™ll need to be in place on both ends of the journey. Seaplane landings are no trivial matter, and even without passengers to fill up the â€œFor Discomfortâ€ bags on a rough landing, the cargo and the plane itself will still require some pretty smooth water to use as a runway. There will also need to be automated barges to ferry cargo to and from the docks, facilities both at sea and on land to build, and a thousand regulatory minefields to cross.

As the saying goes, whatever the laws of physics donâ€™t specifically prohibit is just an engineering problem, and in this case, Iâ€™ll bet that economic forces will overcome the technical issues and provide us with much more affordable overnight overseas deliveries. And if it happens, itâ€™ll be due to innovative thinking and automating away the problems.

Posted on April 20 in category News

Tags: RISC

Azure IoT Suite connected factory now available

The content below is taken from the original (Azure IoT Suite connected factory now available), to continue reading please visit the site. Remember to respect the Author & Copyright.

Getting Started with Industrie 4.0

Many customers tell us that they want to start with the digital transformation of their assets, for example production lines, as well as their business processes. However, many times they just donâ€™t know where to start or what exactly Industrie 4.0 is all about. At Microsoft, we are committed to enabling businesses of all sizes to realize their full potential and today we are proud to announce our connected factory preconfigured solution and six-step framework to quickly enable you to get started on your Industrie 4.0 journey.

Azure IoT Suite preconfigured solutions are engineered to help businesses get started quickly and move from proof-of-concept to broader deployment. The connected factory preconfigured solution leverages Azure services including Azure IoT Hub and the new Azure Time Series Insights. Furthermore, it leverages the OPC Foundationâ€™s cross-platform OPC UA Net Standard Library reference stack for OPC UA connectivity as well as OPC DA and other OPC Classic protocols via the use of the included wrapper, as well as a rich web portal with OPC UA server management capabilities, alarms processing and telemetry visualizations. The web portal and the Azure Time-Series Insights can be used to quickly see trends in OPC UA telemetry data and see Overall Equipment Effectiveness (OEE) and several key performance indicators (KPIs) like number of units produced and energy consumption.

This solution builds on the industry-leading cloud connectivity for OPC UA that we have first announced at Hannover Messe a year ago. Since then, all components of this connectivity have been released cross-platform and open-source on GitHub in collaboration with the OPC Foundation making Microsoft the largest open-source contributor to the OPC Foundation. Furthermore, the entire connected factory preconfigured solution is also published open-source on GitHub.

Azure IoT Suite is the best solution for Industrie 4.0

As we demonstrated at Hannover Messe 2016, we believe that the Azure IoT Suite is the best choice for businesses to cloud-enable industrial equipment â€” including already deployed machines, without disrupting their operation â€” to allow for data and device management, insights, machine learning capabilities and even the ability to manage equipment remotely.

To demonstrate this functionality, we have gone to great lengths to build real OPC UA servers into the solution, grouped into assembly lines where each OPC UA server is responsible for a â€œstationâ€ within the assembly line. Each assembly line is producing simulated products. We even built a simple Manufacturing Execution System (MES) with an OPC UA interface, which controls each assembly line. The connected factory preconfigured solution includes 8 such assembly lines and they are running in a Linux Virtual Machine on Azure. Our Azure IoT Gateway SDK is also used in each simulated factory location.

Secure by design, secure by default

As verified by the BSI Study, OPC UA is secure by default. Microsoft is going one step further and is making sure that the OPC UA components used in the connected factory solution are secure by default, to give you a secure base to build your own solution on top. Secure by default means that all security features are turned on and already configured. This means that you donâ€™t need to do this step manually and sees how an end-to-end solution can be secured.

Easy to extend with real factories

We have made it as simple as possible to extend the connected factory preconfigured solution with real factories. For this, we have partnered with several industry leaders in the OPC UA ecosystem who have built turnkey gateway solutions that have the Azure connectivity used by this solution already built in and are close to zero-config. These partners include Softing, Unified Automation, and Hewlett Packard Enterprise. Please visit our device catalog for a complete list of gateways compatible with this solution. With these gateways, you can easily connect your on-premises industrial assets to this solution.

However, we have gone even further and additionally provided open-source Docker containers as well as pre-built Docker container images available on Docker Hub for the Azure connectivity components (OPC Proxy and OPC Publisher), both integrated in the Azure IoT Gateway SDK and available on GitHub to make a PoC with real equipment achievable in hours, enabling you to quickly draw insights from your equipment and to plan commercialization steps based on these PoCs.

The future is now

Get started on the journey to cloud-enable industrial equipment with Azure IoT Suite connected factory preconfigured solution and see the solution in action at Hannover Messe 2017. To learn more about how IoT can help transform your business, visit http://bit.ly/2oUPiNi.

Learn more about Microsoft IoT

Microsoft is simplifying IoT so every business can digitally transform through IoT solutions that are more accessible and easier to implement. Microsoft has the most comprehensive IoT portfolio with a wide range of IoT offerings to meet organizations where they are on their IoT journey, including everything businesses need to get started â€” ranging from operating systems for their devices, cloud services to control them, advanced analytics to gain insights, and business applications to enable intelligent action.Â To see how Microsoft IoT can transform your business, visit http://bit.ly/2oUPiNi.â€‹

Posted on April 20 in category News

Tags: Technology

A Call for IoT Standards

The content below is taken from the original (A Call for IoT Standards), to continue reading please visit the site. Remember to respect the Author & Copyright.

Joonho Park

The Open Connectivity Foundation

Joonho Park is Executive Director of The Open Connectivity Foundation.

As anticipation for the Internet of Things has blossomed, so have misgivings and fears about its security vulnerabilities. Several high profile incidents, particularly the Mirai episode, have raised questions about the security risks posed by proliferating devices connected to the Internet. As companies and consumers continue their march into the brave new world of IoT, addressing these concerns will be essential.

Industry-wide standards and certifications are a solution with many obvious benefits; vendors and IoT experts can craft them with an eye for security and allaying customer concerns. These conclusions are backed by a survey conducted by the Open Connectivity Foundation (OCF), which shows both widespread concerns over IoT security and clear support for an industry standardization approach. Indeed, respondents viewed standards implementation and vendor cooperation as an effective way to address ease of use, interoperability and security concerns. Sixty percent of respondents indicated that they were more likely to purchase a connected device with some form of a security certification, a clear sign that standards and certifications would effectively improve customer faith in IoT security.

IoT security dramatically strode into the national spotlight last September with the arrival of Mirai. The now notorious malware finds and infects various IoT devices, assembles them into a centrally controlled botnet, and launches their traffic at targeted websites in massive DDoS attacks. Miraiâ€™s inaugural assault was aimed at Dyn, a DNS service provider essential to the running of a multitude of different websites. The resulting downages were so widespread that a common refrain heard in news coverage was that Mirai had â€œbroke the internetâ€, heralding an â€œIoT-pocalypseâ€. Subsequent reporting and analysis has continued to highlight the security vulnerabilities of IoT.

Trouble on the Horizon?

These anxieties are mainstreaming. Security concerns are considered the second highest barrier to IoT adoption, and improvements to device security the second most desired product change from IoT vendors. As connected device usage becomes universal and high profile security breaches continue to receive national coverage, these concerns could form the bedrock of a crisis in consumer confidence that would blowback on different vendors and the industry as a whole.

The development of industry standards and certifications is the most effective and relatively straightforward response to IoT security concerns. By cooperating together, vendors can establish benchmarks for connected devices; these would cover everything from infrastructure to data protocols to security features. Such standardization would ensure that connected devices would have baseline security protocols in place. Product certifications or security ratings would be the next step. Vendors could signal to customers that the devices they purchase are up to agreed upon industry standards. Adopting these initiatives would be a simple yet effective method to both tackle security shortfalls and allay consumer concerns raised by those shortfalls.

Fortunately for IoT vendors, the new is not all negative. There is a widespread desire for connected devices; some 80 percent of respondents from the OCF study said that they planned to buy a connected device within six months.Â Less than (8 percent) said that they currently had no connected devices. These responses are a clear sign of how pervasive IoT technology already is and how the market is set to continue its growth. However, an increase in the number of connected devices will exacerbate security problems if industry standards are not in place.

The distinct characteristics of connected devices, especially infrequent interactions from users, make them uniquely vulnerable to infection and manipulation by malicious actors. Traditional targets, such as personal PCs, are commonly interfaced with, and performance issues can tip off users that there is something wrong.Â In contrast, many connected devices, such as routers, sensors and cameras, are designed to operate without regular check-ins. Once attacked, they may not show any noticeable signs of infection, and will sit unrepaired or replaced. Baseline security standards are clearly a necessary measure, as vendors canâ€™t count on user intervention to identify potential problems. Â Taken in conjunction with the obvious support, these technical considerations provide a compelling case for introduction of common industry standards and associate certification programs. This is one of the more effective mechanisms available to address the security vulnerabilities of our IoT future and restore confidence in the industry.

The development of IoT standards and certifications is not only desirable from a security standpoint. The most commonly cited barrier to IoT adoption is interoperability; common industry standards would make the goals of device compatibility much more realistic. As such, standards would not only be a reactive response to security worries, but a springboard to developing features that customers want. However, vendors should consider security standards and certifications to be an immediate priority necessary to plugging security holes and buttressing consumer confidence.

Opinions expressed in the article above do not necessarily reflect the opinions of Data Center Knowledge and Penton.

Industry Perspectives is a content channel at Data Center Knowledge highlighting thought leadership in the data center arena. See our guidelines and submission process for information on participating. View previously published Industry Perspectives in our Knowledge Library.

Posted on April 20 in category News

Tags: Datacenter

Brad Dickinson | Kelloggâ€™s creates a new fund, 1894, to back food and related startups

Kelloggâ€™s creates a new fund, 1894, to back food and related startups

The content below is taken from the original (Kelloggâ€™s creates a new fund, 1894, to back food and related startups), to continue reading please visit the site. Remember to respect the Author & Copyright.

Instead of two scoops, hereâ€™s one big oneâ€“ the Kellogg Company is launching a corporate venture arm called Eighteen94 Capital (1894) to invest in food and food-related tech startups.

The name is a nod to the year that Dr. John Harvey Kellogg and his brother W.K. Kellogg, the companyâ€™s founder, created their first decidedly low-tech cereal.

Venture investors historically ignored consumer packaged goods, but technologies from social media to molecular sensors have begun to figure more heavily in the development, manufacturing, marketing and sales of food products.

Kelloggâ€™s effort is just the latest in a string of funds created to grab stakes in hot startups in the massive global market for food.

According to data from the U.S. Department of Agriculture, global food retail sales reach about $4 trillion annually. And packaged foods alone should generate revenue of $3.03 trillion annually by 2020, according to forecasts from Allied Market Research.

Newer venture funds specializing in food-related deals include Accel Foods, CAVU Ventures, S2G Ventures and CircleUp.

And consumer packaged goods giants who already invest in venture deals regularly include General Mills via its 301 INC fund, and the Campbell Soup Co., the sole limited partner in Acre Venture Partners.

Established tech firms are also signing deals with food and beverage makers with the likes of Canaan Partners, Andreessen Horowitz and Khosla Ventures investing in, respectively, NatureBox, Soylent and Hampton Creek Foods.

Kelloggâ€™s worked with Touchdown Ventures in San Francisco to set up its new fund, according to 1894 Managing Director Simon Burton and Kellogg Company Vice Chairman Gary Pilnick.

Ultimately, Kelloggâ€™s wanted to start a VC arm because, Burton said, â€œThe rate of innovation across our industry has picked up dramatically, things are changing quickly, and investing is a great way to get a sense of whatâ€™s going to be important in the future.â€

Initially, Burton said 1894 will invest in North American companies that have revenue in the $5 million to $10 million range, making everything from natural and organic foods or beverages, to new packaging materials, ingredients, or sales and marketing technologies.

In a typical deal, 1894 expects to invest $1 million to $3 million in Series A and Series B stage startups. The fund is prepared to invest up to $100 million in startups over the next four years.

Eighteen94 Capital is the venture arm of the Kellogg Co.

Eighteen94 Capital is the venture investing arm of the Kellogg Co. in Battle Creek, Mich.

â€œWeâ€™ll have a big focus on food without a doubt,â€ said Pilnick, â€œbut we remain open to technology that helps us reach the consumer or retail partners. We want to win where the shopper shops, which sounds like an obvious thing, but there are a lot of ways to achieve that.â€

The money for 1894â€™s deals will come from Kelloggâ€™s corporate balance sheet.

Touchdown VCâ€™s Managing Director Rich Grant and President Scott Lenet will continue to work with 1894 and Kelloggâ€™s to connect the Battle Creek, Michigan company with the broader VC community and relevant food-focused acclerators. Besides linking Kelloggâ€™s with co-investors, they said, they will also help 1894 bring in and evaluate deals, and manage due diligence reviews of startups.

Ultimately, Kelloggâ€™s will make its own investment decisions about who they back and how much they invest, Grant emphasized.

While Kelloggâ€™s is known as a cereal manufacturer, they also own vegetarian brands MorningStar and Gardenburger, salty snacks brands including Pringles and Austin, and myriad others.

Burton said he expects Kelloggâ€™s depth and breadth of in-house expertise, especially relationships with and knowledge of food retailers, will draw food entrepreneurs to the new fund.

Pilnick added, â€œWe have that Midwestern mindset of working together and partnering to get things done.â€

The fund has not yet announced any deals.

Featured Image: Kellogg Co. Press Office (IMAGE HAS BEEN MODIFIED)

Posted on June 21 in category News

Tags: Technology

Amazon may be using disk drives with hot-swappable components

Patent calls for drives in which mechanical bits and electronics aren’t bound together

The Virtual Machine

Sizing the Data Disk

Group Policy

Anti-Virus

Networking

Storage Accounts

Volumes and Shares

Data Security and Encryption

What’s in a name?

Buy it now!

Open-ish

Oh please god no, not another one

That barren landscape of Internet of Things standards bodies

Initial Azure Security Center alert details

Recommended remediation and mitigation steps

StorSimple Device Manager

Downloading the StorSimple Virtual Disk

Create an On-Premises Virtual Machine

Configuring Virtual Appliance â€” Console

Configuring Virtual Appliance â€” Browser Interface

Configuring Virtual Appliance â€” Azure Portal

Identify Your Critical Processes and Their Dependencies

Select the Appropriate Technologies Based on Your RTOs and RPOs

Set Up DR Operational Procedures and Document Them

Testing Your DR Plan

France Says No to Weekend Working

But Office 365 isnâ€™t Designed for France

PowerShell to the Rescue

More Work to Do

Land, Air, and Sea

Getting Started with Industrie 4.0

Azure IoT Suite is the best solution for Industrie 4.0

Secure by design, secure by default

Easy to extend with real factories

The future is now

Learn more about Microsoft IoT

Trouble on the Horizon?

Recent Posts

Search this site

Recent Posts

Search this site