Moving Up the Stack — Security Take

Moving up the stack, our security posture changes. The concepts stay the same, but the posture changes. The concepts of least privilege, limited access, etc. all apply. How we implement those controls changes. In the past, we could rely on a firewall at the edge. Yet, as we move up the stack, the edge has …

Cry Me a River: Cloud-Native Security

WannaCry, SambaCry, and other attacks have pinpointed the need to not just protect from unwarranted access, but to define unwarranted better. It is not just about ports and firewalls, but also about applications, APIs, and processes. In other words, services. Many of these services need to communicate about the ports that need to be blocked …

Using MAC-Based Licensing with vSphere: A Necessary Evil

Should software licensing be completely based off of the hardware MAC address of the NIC and or UUID of the mother board? This process worked very well before the introduction of virtualization but now that virtualization has become more prevalent in most environments. I think software venders really need to reconsider how they are going to license their software although it seems that some companies have not bought on to the idea of virtualization and would prefer to continue to support their product type to a specific hardware platform that the vender put together and shipped out. Can software venders hope to survive and remain current without embracing virtualization? I think the answer to that question is going to be no in the long run.

VirtualBox OSE 3.0 – Still a viable Open Source option?

In trying to re-use some old server hardware I re-vsisted VirtualBox/Ubuntu, a viable and completely free Open Source option for non-virtualization-enabled hardware. It is a neat solution, simple and well-supported, but the open source version of VirtualBox is nobbled to make it extremely awkward to use, in a different way to VMware’s nobbling of the non-Open Source (but also free) ESXi.

Now is the time, for Oracle/Sun to put all the features of VirtualBox into the Open Source version, and let it live on, perhaps not for use on Linux servers, but as free virtualization platform for other operating systems on Windows. If Apple ever loosens up the licencing on MacOS, it could turn 15 million PCs into Macs – overnight.