POPULARITY
Get your FREE Cybersecurity Salary Guide: https://www.infosecinstitute.com/form/cybersecurity-salary-guide-podcast/?utm_source=youtube&utm_medium=podcast&utm_campaign=podcastInfosec Boot Camp Instructor Tommy Gober joins Cyber Work Hacks to discuss the mechanics of the CompTIA Network+ exam. This episode features an overview of different question types, including multiple-choice, multiple-answer and performance-based questions. Tommy guides you through sample exam questions, providing insights into CIDR notation, subnetting and troubleshooting IP addresses. Additionally, learn about the benefits of practice exams and receive essential tips for exam day success. This episode is perfect for anyone preparing for the Network+ certification or looking to strengthen their networking knowledge.0:00 Introduction 0:38 Cybersecurity salary guide2:37 Understanding Network+ exam question types6:07 Practice question: CIDR notation 9:10 Practice question: IP addresses11:15 Practice questions: Troubleshooting & IP addresses15:18 Practice exam and preparation tips17:33 Final advice19:20 Conclusion– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcast/?utm_source=youtube&utm_medium=podcast&utm_campaign=podcastAbout InfosecInfosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.
This show has been flagged as Clean by the host. Two things I learned recently: You can't use the first and the last IP address in a /24 block. When you start a podman container, it adds a source IP address to you Trusted zone in firewalld. If you restart firewalld, your podman container becomes inaccessible. HPR show about CIDR notation: https://hackerpublicradio.org/eps/hpr4041/index.html Provide feedback on this episode.
Send us a textUnlock the secrets to mastering core networking concepts crucial for your CISSP exam and cybersecurity career with Sean Gerber on the CISSP Cyber Training Podcast. Ever wondered how the intricate dance between IPv4 and IPv6 affects your daily online interactions? Get ready to explore these foundational Internet protocols, their histories, and the innovative transition mechanisms bridging them. We kick off with a discussion on the eye-opening Mega Breach Database, spotlighting the staggering exposure of around 26 billion records. This breach serves as a cautionary tale of our digital age, underscoring the necessity for robust password management and multi-factor authentication.Journey through the complex landscape of IP addressing as we untangle the web of IPv4 and IPv6 structures. We'll break down IPv4's network and host partitions, the role of TCP and UDP protocols, and the creative, albeit temporary, fix provided by NAT routing. With a shift towards IPv6, discover the implications of its advanced hexadecimal notation and the flexibility offered by CIDR in IP address allocation. If you're grappling with the divide between the old and new, Sean shares insights on key transition strategies, ensuring you comfortably adapt to the evolving technological environment.Lastly, we tackle essential networking protocols like ICMP, IGMP, and ARP, which are indispensable for anyone eyeing the CISSP certification. Learn how to apply these concepts to real-world scenarios, such as identifying potential man-in-the-middle attacks. Whether you're a cybersecurity novice or a seasoned expert, our discussion will equip you with comprehensive knowledge and sharpen your skills, helping you excel in the CISSP exam and beyond. Join us for this enlightening episode, and walk away with the confidence to navigate the complex world of networking.Gain access to 60 FREE CISSP Practice Questions each and every month for the next 6 months by going to FreeCISSPQuestions.com and sign-up to join the team for Free. That is 360 FREE questions to help you study and pass the CISSP Certification. Join Today!
One of the things that frankly drives me crazy about how people think about continuous improvement is a focus on cost savings rather than increasing productivity and engagement< so I was excited to chat with Jonathan Vehar and Cathi Brese Doebler about a brilliant method to increase productivity, drive engagement and save money. They joined me to talk about their new book. “How to Make Meetings Not Suck” Listen in and consider how their approach might enhance every meeting, from your daily morning huddle to those three-day leadership retreats. Jonathan Vehar Jonathan Vehar is on a mission to make meetings better. With years of experience as a leader, executive, and facilitator, he knows what works and what does not. Known as an "innovation thought leader" by Fast Company, Jonathan takes a fresh but productive approach to improving "how teams collaborate". He has worked with top companies like Disney, Intel, NASA, and Pfizer, and his insights have been featured in Forbes, the Wall Street Journal, and Fast Company. Jonathan is also the co-author of six books on leadership, and his latest book, How to Make Meetings Not Suck, comes out in August 2024. Cathi Brese Doebler Cathi Brese Doebler brings over 25 years of experience in meeting facilitation, training, and leadership development. Cathi is passionate about helping others learn and grow. Cathi has been a Senior Consultant and Leadership Solutions Facilitator at the Center for Creative Leadership since 2013 and has worked with organizations like Fiserv and McBride & Lucius. She has also collaborated with several colleges, including the University of Buffalo and Erie Community College, blending her expertise in leadership with education. . KEY TOPICS IN THIS PODCAST: 00:02:43 The importance of having fun at work 00:10:55 The purpose of having agendas for meetings 00:15:29 The cost of unproductive meetings 00:19:50 Calculating the financial cost of meetings 00:22:28 Suggestions for running effective meetings 00:25:14 The CIDR framework for meeting purposes 00:27:14 Differences between in-person and virtual meetings 00:32:19 Managing hybrid meetings effectively 00:33:14 How to connect with Jonathan and Kathy 00:34:02 Advice for young professionals starting their careers KEY TAKEAWAYS: Thoughtful planning and structure are essential for effective meetings, requiring a clear purpose and well-organized processes. Ineffective meetings are costly, with an average financial impact of $336,000 in one year. Virtual, in-person, and hybrid meetings present unique challenges, but we can manage them effectively with the right tools and techniques. The elements for successful meetings include a Power Agenda, defined roles, clear purpose (using the CIDR framework), and strong follow-through. The "Power Agenda" focuses on unique components like meeting duration, role assignments (e.g., scribe), processes, and desired outcomes to make meetings more efficient. The 3 Ps (Purpose, Process, Product) framework helps guide meetings to stay on track, ensuring clarity and respect for the time. Respecting time by preparing agendas in advance and assigning clear roles is a simple way to improve meeting effectiveness, countering the excuse of not having time for preparation. The CIDR framework (clear purpose, intentional design, defined roles, and respectful interaction) is crucial for making meetings productive and meaningful. Memorable Quotes: “Effective meetings don't just happen — they require thoughtful planning, clear purpose, and respect for everyone's time.” CONNECT WITH Jonathan Vehar: Linkedin: https://www.linkedin.com/in/jonathan-vehar/ Website: https://vehar.com/ CONNECT WITH Cathi Brese Doebler: Linkedin: https://www.linkedin.com/in/cathi-brese-doebler-91884910/ Website: https://ditchthe.com/about/ Twitter: https://x.com/CathiDoebler
AWS Morning Brief for the week of Monday, August 19th with Mike Julian. Links:How AWS powered Prime Day 2024 for record-breaking salesNew capabilities for Amazon EC2 On-Demand Capacity Reservations: Split, Move, and Modify additional attributesAmazon QuickSight now includes nested filtersAnnouncing Amazon S3 Express One Zone storage class support on Amazon EMRAmazon Verified Permissions improves support for OIDC identity providersAWS announces support for Cost Allocation Tags on AWS Transit GatewayAnnouncing Karpenter 1.0Visualize enterprise IP address management and planning with CIDR map
We hear about 2 products that many have heard of and are using, MultiMin and Lactipro from Axiota. Plus we have market information, cattle for sale and lots more all wrapped into this all new episode of the Ranch It Up Radio Show. Be sure to subscribe on your favorite podcasting app or on the Ranch It Up Radio Show YouTube Channel. EPISODE 191 DETAILS HOW TO USE MULTIMIN & LACTIPRO. Your Best Shot at Strategic Trace Mineral Supplementation for Cattle Supports Cattle Health and Reproduction Multimin® 90 is a unique injectable solution containing zinc, copper, manganese, and selenium, proven to support cattle health and reproduction. Research shows that strategic trace mineral supplementation enhances breeding success, healthy calving, and improved immunity. Successful Breeding Using Multimin 90 improves trace mineral status in breeding stock, leading to more calves in fewer days. Healthy Calving Third-trimester injections improve cow-to-calf trace mineral transfer and colostrum quality, especially when used with a scours vaccine. Enhanced Immunity Multimin 90 boosts vaccine protection and strengthens the immune response when integrated into a vaccination protocol. Why Is Trace Mineral Supplementation Necessary? Inadequate trace mineral status in cattle can lead to suppressed immune function, lower fertility, and decreased growth. Oral nutrition programs face challenges such as: Antagonists in water/feed binding minerals in the rumen, limiting absorption Variation in intake among cattle Increased mineral demand during stressful events, which oral minerals cannot quickly meet How Does Multimin 90 Work? Multimin 90 complements an oral nutrition program by rapidly increasing zinc, copper, manganese, and selenium levels in cattle during high-demand periods. Administered via subcutaneous injection, it reaches peak levels in the blood within 8-10 hours and is stored in the liver for later use. Benefits of Strategic Supplementation with Multimin 90 Rapid peak plasma levels within 8-10 hours Bypasses rumen antagonists Ensures consistent supplementation for every animal injected Can be used during high-demand periods like calving, breeding, vaccination, and transportation When to Use Multimin 90 Cows and Heifers Last trimester of pregnancy 30 days pre-breeding or at CIDR insertion (11 days before AI) Bulls Weaning 90 days post-weaning 45-60 days prior to breeding season Calves Branding/first vaccination Weaning/preconditioning Stockers At processing How to Use Multimin 90 Consult your veterinarian and follow label directions. Multimin 90 has a 14-day pre-slaughter withdrawal and 0-day milk withdrawal. Calculate the correct dosage based on the animal's weight. Maximum volume per injection site is 7 mL. Follow Beef Quality Assurance guidelines for proper subcutaneous injections. By strategically using Multimin 90, cattle producers can enhance herd health, reproduction, and immunity, leading to better productivity and success. IMPORTANT SAFETY INFORMATION FOR MULTIMIN® 90: Not for use in humans, keep out of reach of children. Multimin 90 has a pre-slaughter withdrawal time of 14 days after injection. Do not use it during the first trimester of pregnancy or in pre-ruminant calves as safety has not been established. Selenium and copper are toxic if administered in excess and may lead to sudden death, depression, weakness, ataxia, salivation, and drooling. Do not use concurrently with other selenium or copper injections or boluses. Maximum volume per injection site is 7 mL. Allow a minimum of 30 days before considering repeat dosing. See prescribing information. Introduction to Lactipro® Lactipro® is a rumen-native probiotic containing a live, stable strain of Megasphaera elsdenii (Mega e®), an effective lactic acid utilizer. It helps cattle producers maintain healthy rumen pH and improve profitability by accelerating finishing diets and reducing post-terminal processing mortality. Key Benefits of Lactipro® Shortens step-up period by 50% or more Reduces post-terminal processing performance losses Supports rumen health in hospital cattle Lactipro® promotes rumen health during transitions to higher-grain diets, grazing crop residue, and as bulls move to higher energy diets during development. How Does Lactipro® Work? Naturally occurring Mega e takes weeks to handle grain-based diets effectively. Fast-growing bacteria produce excessive lactic acid, lowering rumen pH and causing health issues like acidosis. Lactipro® introduces Mega e directly into the rumen, consuming lactic acid and producing butyric acid, which promotes cell growth and better VFA absorption. The Importance of Mega e Strain MS Biotec's patented Mega e strain is selected for its: Rapid growth and resilience Production of butyric acid Compatibility with feed additives Enhanced rumen fermentation with other microbials Two Formulations of Lactipro® LactiproNXT® An easy-to-use drench available in 200 mL and 1,000 mL pouches, ideal for processing multiple cattle. LactiproFLX® A small capsule in a 25-capsule resealable pouch, perfect for individual animals or small groups. Administration Both formulations provide equal bacterial counts and are effective, with an extended shelf life requiring refrigeration. LactiproFLX comes in three types: Dairy – for beef cows Feedlot – for feedlot cattle and developing bulls Calf – for young calves Use Cases Accelerated Step-Up Shortens step-up period by 50% or more for a faster diet transition. Terminal Processing Reduces post-terminal processing performance losses. Other Use Cases Supports rumen health during diet transitions, grazing, and bull development phases. Integrating Lactipro® ensures a healthier rumen, leading to better overall cattle health and profitability. UPCOMING SALES & EVENTS ISA Beefmasters: October 5, 2024, San Angelo, Texas BULL SALE REPORT & RESULTS Churchill Cattle Company Van Newkirk Herefords Gardiner Angus Ranch Cow Camp Ranch Jungels Shorthorn Farms Ellingson Angus Edgar Brothers Angus Schaff Angus Valley Prairie Hills Gelbvieh Clear Springs Cattle Company CK Cattle Mrnak Hereford Ranch Frey Angus Ranch Hoffmann Angus Farms Topp Herefords River Creek Farms Upstream Ranch Gustin's Diamond D Gelbvieh Schiefelbein Farms Wasem Red Angus Raven Angus Krebs Ranch Yon Family Farms Chestnut Angus Eichacker Simmentals & JK Angus Windy Creek Cattle Company Pedersen Broken Heart Ranch Mar Mac Farms Warner Beef Genetics Arda Farms & Freeway Angus Leland Red Angus & Koester Red Angus Fast - Dohrmann - Strommen RBM Livestock Weber Land & Cattle Sundsbak Farms Hidden Angus Wheatland Cattle Company Miller Angus Farms L 83 Ranch U2 Ranch Vollmer Angus Ranch A & B Cattle Carter Angus Farms Roller Ranch Montgomery Ranch Jorgensen Farms DLCC Ranch Four Hill Farm North Country Angus Alliance Spruce Hill Ranch Wilson Angus FEATURING Tina Greiman Axiota https://axiota.com/ Merck Animal Health @MultiMinUSA Mark VanZee Livestock Market, Equine Market, Auction Time https://www.auctiontime.com/ https://www.livestockmarket.com/ https://www.equinemarket.com/ @LivestockMkt @EquineMkt @AuctionTime Kirk Donsbach: Stone X Financial https://www.stonex.com/ @StoneXGroupInc Shaye Koester Casual Cattle Conversation https://www.casualcattleconversations.com/ @cattleconvos Questions & Concerns From The Field? Call or Text your questions, or comments to 707-RANCH20 or 707-726-2420 Or email RanchItUpShow@gmail.com FOLLOW Facebook/Instagram: @RanchItUpShow SUBSCRIBE to the Ranch It Up YouTube Channel: @ranchitup Website: RanchItUpShow.com https://ranchitupshow.com/ The Ranch It Up Podcast available on ALL podcasting apps. Rural America is center-stage on this outfit. AND how is that? Tigger & BEC Live This Western American Lifestyle. Tigger & BEC represent the Working Ranch world and cattle industry by providing the cowboys, cowgirls, beef cattle producers & successful farmers the knowledge and education needed to bring high-quality beef & meat to your table for dinner. Learn more about Jeff 'Tigger' Erhardt & Rebecca Wanner aka BEC here: TiggerandBEC.com https://tiggerandbec.com/ #RanchItUp #StayRanchy #TiggerApproved #tiggerandbec #rodeo #ranching #farming References https://www.stonex.com/ https://www.livestockmarket.com/ https://www.equinemarket.com/ https://www.auctiontime.com/ https://gelbvieh.org/ https://www.imogeneingredients.com/ https://alliedgeneticresources.com/ https://westwayfeed.com/ https://medoraboot.com/ http://www.gostockmens.com/ https://www.imiglobal.com/beef https://www.tsln.com/ https://transova.com/ https://axiota.com/ https://axiota.com/multimin-90-product-label/
In his regular monthly spot on PING, APNIC's Chief Scientist Geoff Huston discusses the question of subnet structure, looking into the APNIC Labs measurement data which collects around 8 million discrete IPv6 addresses per day, worldwide. Subnets are a concept which "came along for the ride" in the birth of Internet Protocol, and were baked into the address distribution model as the class-A, class-B and class-C subnet models (there are also class-D and class-E addresses we don't talk about much). The idea of a sub-net is distinct from a routing network, many pre-Internet models of networking had some kind of public-local split, but the idea of more than one level of structure in what is "local" had to emerge when more complex network designs and protocols came into being. Subnets are the idea of structure inside the addressing plan, and imply logical and often physical separation of hosts, and structural dependency on routing. There can be subnets inside subnets, its "turtles all the way down" in networks. IP had an ability out-of-the-box to permit subnets to be defined, and when we moved beyond the classful model into classless inter-domain routing or CIDR, the idea of prefix/length models of networks came to life. But IPv6 is different, and the assumption we are heading to a net-subnet-host model of networks may not be applicable in IPv6, or in the modern world of high speed complex silicon for routing and switching. Geoff discusses an approach to modelling how network assignments are being used in deployment, which was raised by Nathan Ward in a recent NZNOG meeting. Geoff has been able to look into his huge collection of IPv6 addresses and see what's really going on.
Episode Notes Our guest is Prof. Viktor Leis, a Full Professor in the Computer Science Department at the Technical University of Munich. His research revolves around designing high-performance data management systems and includes core database systems topics such as query processing, query optimization, transaction processing, index structures, and storage. [0] In this episode we discussed a paper that Viktor recently co-authored with Thomas Neumann, titled "A Critique of Modern SQL And A Proposal Towards A Simple and Expressive Query Language", for CIDR 2024. [2] Beyond the specifics of SQL, many other topics are touched on also including: machine learning in the database, a critique of PostgreSQL, and the potential for massive performance gains in the world of practical database systems. Notes: [0] https://www.cs.cit.tum.de/dis/team/prof-dr-viktor-leis/ [1] https://www.cidrdb.org/cidr2024/papers/p48-neumann.pdf [2] https://github.com/neumannt/saneql/ [3] https://www.cs.cit.tum.de/dis/research/leanstore/ [4] https://www.dbos.dev/blog/announcing-dbos
DSD 5.3 | Slight modifications of CIDR Sync - help or hinder? In this time of heifer inventory shortage – getting heifers pregnant (in a timely fashion) is even more important than ever. Contract heifer growers in California sought the help of Dr. Fabio Lima and his team at UC Davis to best understand the use of a 6-day CIDR sync with variable rates of GnRH could increase pregnancies when bred to sexed semen. The findings we discuss are published in the recently released Journal of Dairy Science article titled: Effect of 200 μg of gonadorelin hydrochloride at the first GnRH of a CIDR Synch program on ovulation rate and pregnancies per AI in Holstein heifers. Listen in to hear the results and nuanced details of controlling reproductive structures using timed AI protocols. Topics of discussion 1:03 Production costs of heifer rearing - survey results 2:09 Introduction of Dr. Fabio Lima 3:46 Description of the project 4:20 TAI protocol description 5:31 Varying GnRH dose 6:34 What is the function of GnRH in the heifer? 7:51 Hallmark of a successful synchronization 8:24 Results of ultrasound (ovulation) and P4 blood sample analysis 10:04 Did increased ovulation translate into improved pregnancy outcome? 10:44 Pregnancy at d47, 100% sex semen discussion 13:41 Relationship of Luteinizing hormone and progesterone 15:16 What causes elevated circulating progesterone 16:30 How did we land on 2cc of GnRH to begin with? 18:34 Does increased GnRH cause increased twinning? 21:02 What do you want boots on the ground dairymen to know 23:01 What if you cherry picked? 23:32 Sometimes the plan doesn't work – but that's why we do research! Featured article: Effect of 200 μg of gonadorelin hydrochloride at the first GnRH of a CIDR Synch program on ovulation rate and pregnancies per AI in Holstein heifers Articles also discussed in the podcast: Heifer study using 100 and 200 ug in 5-d CIDR Synch protocol. https://doi.org/10.1016/j.theriogenology.2023.04.026 Studies showing the implication of progesterone for double ovulation (a proxy for twining) and progesterone. https://doi.org/10.3168/jds.2018-14410 #2xAg2030; #journalofdairyscience; #openaccess; #MODAIRY; #gnrh; #CIDRsync; #twinning; #pregnancy; #heiferdevelopment; #TAI; #lutenizing; #dairysciencedigest; #ReaganBluel;
Santiago de Compostela, a capital galega, é unha cidade que rezuma historia por todas as esquinas. Unha das últimas peculiaridades da cidade foi estudada pola historiadora Aldara Cidrás: os rótulos dos locais son únicos. De que nos pode falar? Que di de nós? Dálle ao gústame e comparte se queres que este podcast se siga realizando, depende de ti!
Get ready to fortify your cyber defenses and unwrap the complexities of internet protocols with me, Sean Gerber, in a week charged with cybersecurity insights. We're dissecting the digital fabric of IPv4 and IPv6, from the nuances of subnetting to the stealthy signals of ICMP, ensuring you walk away with a fortified understanding of the cyber terrain. Don't miss the pivotal segment where I unravel the CIDR notation—a cornerstone concept for network professionals—and how recognizing a Class C address, such as 192.168.1.1, can be the key to differentiating your network strategy.As the shadow of ransomware looms over our critical infrastructure, I delve into the harrowing onslaught of attacks plaguing wastewater treatment facilities, bringing to light the urgent call for cyber vigilance. Discover the significance of link-local addresses and the potential pitfalls of rogue IPv6 devices in your network. The world of cybersecurity is a battleground, and this episode is your armory—equip yourself with the knowledge to lead the charge against the digital threats of today and tomorrow.Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.
grepcidr is usually available from your distribution's default repositories, so on Debian based systems you could install it with: sudo apt install grepcidr Example of grepcidr use: grepcidr 40.10.32.0/22 /var/log/syslog You can read more about CIDR notation on the Wikipedia page for CIDR
The Canadian Radio Awards are here! In this special bonus episode, we go over the results one-by-one and give you our thoughts on the lineup this year, as well as speaking to some of the winners about their year in radio.The categories and their winners are as follows:Station of the Year - presented by NLogicMajor - 94.5 Virgin Radio (CFBT-FM), Bell Media, VancouverMedium - Energy 106 (CHWE-FM), Evanov Communications. WinnipegSmall - 103.5 Capital FM (CKGC-FM), Northern Lights Entertainment, IqaluitProgram Director of the Year - presented by David KayeMajor - Christian Hall, SONiC (CKKS-FM)/JACK FM (CJAX-FM), Roger Sports & Media, VancouverMedium - Jacquie Beckett, K-Rock (CIKR-FM)/Country 93.5 (CKXC-FM), Rogers Sports & Media, KingstonSmall - Chris Walker, Moose FM (CKFU-FM), Fort St. JohnMusic Director of the Year - presented by MusicMasterMajor - Katie Stanners, KiSS 91.7 (CHBN-FM), Rogers Sports & Media, EdmontonMedium - Wendy Boomer, National Music Director, Country Network, Rogers Sports & Media Small - Danny Ismond, GX94 (CJGX-AM), Harvard Media, YorktonBest On-Air Solo Host (Music)Major - Lauren “Hunter” Daugherty, SONiC 102.9 (CHDI-FM), Rogers Sports & Media, EdmontonMedium - Adele Newton, CHYM 96.7, Rogers Sports & Media, KitchenerSmall - Vanessa Murphy, Bounce 91.9 (CKLY-FM), Bell Media, Lindsay/Kawartha LakesBest On-Air Team or Host (Music)Major - Ryder and Lisa, play107 (CKPW-FM), Harvard Media, EdmontonMedium - The Biggs & Barr Show, 106.1 CHEZ, Rogers Sports & Media, OttawaSmall - Mornings with Crash & Sarah Betts, MOVE 106.9 (CIBX-FM), Bell Media,FrederictonBest On-Air Team or Host (News/Talk/Sports) - presented by HD RadioMajor - Mornings with Simi, 980 CKNW, Corus Radio, VancouverMedium - The Start, 680 CJOB, Corus Radio, WinnipegSmall - Arnie Jackson, JSA Sports Network, Real Country 910 (CKDQ-AM),Stingray DrumhellerBest Canadian Multi-Market Network Program - presented by Momentum Media NetworksMajor - The Roz and Mocha Show, KiSS Radio Network, Rogers Sports & MediaMedium - The Brock and Dalby Show, Rogers Sports & Media Small - At The Crossroads, ATC Blues Radio Best Anchor or ReporterMajor - Richard Southern, CityNews 680, Rogers Sports & Media, TorontoSmall - Tara Clow, 91.9 CKNI, Acadia Broadcasting Corporation, MonctonBest Podcast - presented by HippynetMajor - The Jann Arden Podcast, Orbyt Media Medium - The Hot Tub Podcast, Stingray Small - River Reads, Smithers Community Radio Society Best On-Air Promotion - presented by vcreativeMajor - ZCARES Food Drive, Z103.5 (CIDC-FM), Evanov Communications, OrangevilleMedium - Robin & PJ's Singles Night, Country 106.7 (CIKZ-FM), Rogers Sports & Media, KitchenerSmall - Junior Announcer Contest, 92.1 ROCK (CJQQ-FM)/KiSS 105.3 (CKGB-FM), Rogers Sports & Media, TimminsBest CommercialMajor - Canadian Food Bank PSAs, The Pro Bono Group, NationalMedium - The Sodfather, 94.3 NOW!radio (CHNW-FM), Pattison Media, WinnipegSmall - Chillys Heating & Cooling, CJGX, Harvard Media, YorktonBest Performance in a CommercialMajor - Ron James, Canadian Red Cross Maritimes Relief, The Pro Bono Group Medium - Jim Van Dusen, Heebie Jeebies, QX104 (CFQX-FM), Pattison Media, WinnipegSmall - Scott Armstrong, Michelle Somerville, The Hungry Wolf, True North FM(CJCD-FM), Vista Radio, YellowknifeBest Imaging VoiceMajor - Sammi Morelli, [CKFM, CIBK, CFMG, CJCH, CHSU, CFCA, CIQM, CJFM, CFBT, CHBE, CIDR, CKMM], VancouverMedium - David Kaye, 104.9 The Wolf (CFWF-FM), Harvard Media, ReginaSmall - Rosemary Trace, At The Crossroads, ATC Blues Radio, NationalBest Imaging Production - presented by BenztownMajor - Celebrating 50 Years of Hip Hop, VIBE 105 (CHRY-FM), TorontoMedium - Dylan vs The World, The Zone @ 91-3 (CJZN-FM), Pattison Media, VictoriaSmall - 89.7 Sun FM (CJSU-FM), Vista Radio, DuncanBest Community Service InitiativeMajor - Canadian Food Banks, The Pro Bono Group, NationalMedium - The Okanagan Comes Together, New Country 100.7 (CIGV-FM)/K96.3(CKKO-FM), Stingray, KelownaSmall - Recover Together/True North FM NWT Wildfire Relief Fund, 100.1 True North FM (CJCD-FM), Vista Radio, YellowknifeBest Community or Campus Station - presented by the Community Radio Fund of CanadaMajor- VIBE 105 (CHRY-FM), TorontoSmall - BayFM 100.1 (CKVB-FM), Corner Brook, NLBest Achievement in Engineering - presented by Momentum Media MarketingMajor - Corus Radio Vancouver, CKNW, CFMI, CFOX, CKGO Medium - Corus Radio London, CFPL, CFHK, CKDK, Engineering Team of Steve Sproule and David Bachner Small - Cat Country 98 (CIAT-FM), Assiniboia, SK, Huber Radio Sound of Success Award - presented by ValidateMajor - The Pro Bono Group, Canadian Food Bank PSAsSmall - Pattison Media Prince George, CKKN, CKDV, CKPG-TV, Trench Brewing & DistilleryThanks to the following organizations for supporting the show:Mary Anne Ivison at Ivison Voice. - Make her the voice of your radio station.Megatrax - Licensed Music for your radio station or podcast production company.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
The Canadian Radio Awards are here! In this special bonus episode, we go over the results one-by-one and give you our thoughts on the lineup this year, as well as speaking to some of the winners about their year in radio.The categories and their winners are as follows:Station of the Year - presented by NLogicMajor - 94.5 Virgin Radio (CFBT-FM), Bell Media, VancouverMedium - Energy 106 (CHWE-FM), Evanov Communications. WinnipegSmall - 103.5 Capital FM (CKGC-FM), Northern Lights Entertainment, IqaluitProgram Director of the Year - presented by David KayeMajor - Christian Hall, SONiC (CKKS-FM)/JACK FM (CJAX-FM), Roger Sports & Media, VancouverMedium - Jacquie Beckett, K-Rock (CIKR-FM)/Country 93.5 (CKXC-FM), Rogers Sports & Media, KingstonSmall - Chris Walker, Moose FM (CKFU-FM), Fort St. JohnMusic Director of the Year - presented by MusicMasterMajor - Katie Stanners, KiSS 91.7 (CHBN-FM), Rogers Sports & Media, EdmontonMedium - Wendy Boomer, National Music Director, Country Network, Rogers Sports & Media Small - Danny Ismond, GX94 (CJGX-AM), Harvard Media, YorktonBest On-Air Solo Host (Music)Major - Lauren “Hunter” Daugherty, SONiC 102.9 (CHDI-FM), Rogers Sports & Media, EdmontonMedium - Adele Newton, CHYM 96.7, Rogers Sports & Media, KitchenerSmall - Vanessa Murphy, Bounce 91.9 (CKLY-FM), Bell Media, Lindsay/Kawartha LakesBest On-Air Team or Host (Music)Major - Ryder and Lisa, play107 (CKPW-FM), Harvard Media, EdmontonMedium - The Biggs & Barr Show, 106.1 CHEZ, Rogers Sports & Media, OttawaSmall - Mornings with Crash & Sarah Betts, MOVE 106.9 (CIBX-FM), Bell Media,FrederictonBest On-Air Team or Host (News/Talk/Sports) - presented by HD RadioMajor - Mornings with Simi, 980 CKNW, Corus Radio, VancouverMedium - The Start, 680 CJOB, Corus Radio, WinnipegSmall - Arnie Jackson, JSA Sports Network, Real Country 910 (CKDQ-AM),Stingray DrumhellerBest Canadian Multi-Market Network Program - presented by Momentum Media NetworksMajor - The Roz and Mocha Show, KiSS Radio Network, Rogers Sports & MediaMedium - The Brock and Dalby Show, Rogers Sports & Media Small - At The Crossroads, ATC Blues Radio Best Anchor or ReporterMajor - Richard Southern, CityNews 680, Rogers Sports & Media, TorontoSmall - Tara Clow, 91.9 CKNI, Acadia Broadcasting Corporation, MonctonBest Podcast - presented by HippynetMajor - The Jann Arden Podcast, Orbyt Media Medium - The Hot Tub Podcast, Stingray Small - River Reads, Smithers Community Radio Society Best On-Air Promotion - presented by vcreativeMajor - ZCARES Food Drive, Z103.5 (CIDC-FM), Evanov Communications, OrangevilleMedium - Robin & PJ's Singles Night, Country 106.7 (CIKZ-FM), Rogers Sports & Media, KitchenerSmall - Junior Announcer Contest, 92.1 ROCK (CJQQ-FM)/KiSS 105.3 (CKGB-FM), Rogers Sports & Media, TimminsBest CommercialMajor - Canadian Food Bank PSAs, The Pro Bono Group, NationalMedium - The Sodfather, 94.3 NOW!radio (CHNW-FM), Pattison Media, WinnipegSmall - Chillys Heating & Cooling, CJGX, Harvard Media, YorktonBest Performance in a CommercialMajor - Ron James, Canadian Red Cross Maritimes Relief, The Pro Bono Group Medium - Jim Van Dusen, Heebie Jeebies, QX104 (CFQX-FM), Pattison Media, WinnipegSmall - Scott Armstrong, Michelle Somerville, The Hungry Wolf, True North FM(CJCD-FM), Vista Radio, YellowknifeBest Imaging VoiceMajor - Sammi Morelli, [CKFM, CIBK, CFMG, CJCH, CHSU, CFCA, CIQM, CJFM, CFBT, CHBE, CIDR, CKMM], VancouverMedium - David Kaye, 104.9 The Wolf (CFWF-FM), Harvard Media, ReginaSmall - Rosemary Trace, At The Crossroads, ATC Blues Radio, NationalBest Imaging Production - presented by BenztownMajor - Celebrating 50 Years of Hip Hop, VIBE 105 (CHRY-FM), TorontoMedium - Dylan vs The World, The Zone @ 91-3 (CJZN-FM), Pattison Media, VictoriaSmall - 89.7 Sun FM (CJSU-FM), Vista Radio, DuncanBest Community Service InitiativeMajor - Canadian Food Banks, The Pro Bono Group, NationalMedium - The Okanagan Comes Together, New Country 100.7 (CIGV-FM)/K96.3(CKKO-FM), Stingray, KelownaSmall - Recover Together/True North FM NWT Wildfire Relief Fund, 100.1 True North FM (CJCD-FM), Vista Radio, YellowknifeBest Community or Campus Station - presented by the Community Radio Fund of CanadaMajor- VIBE 105 (CHRY-FM), TorontoSmall - BayFM 100.1 (CKVB-FM), Corner Brook, NLBest Achievement in Engineering - presented by Momentum Media MarketingMajor - Corus Radio Vancouver, CKNW, CFMI, CFOX, CKGO Medium - Corus Radio London, CFPL, CFHK, CKDK, Engineering Team of Steve Sproule and David Bachner Small - Cat Country 98 (CIAT-FM), Assiniboia, SK, Huber Radio Sound of Success Award - presented by ValidateMajor - The Pro Bono Group, Canadian Food Bank PSAsSmall - Pattison Media Prince George, CKKN, CKDV, CKPG-TV, Trench Brewing & DistillerySee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources. In this episode, Lois Houston and Nikita Abraham, along with Rohit Rahi, discuss Oracle's Virtual Cloud Network, VCN routing, and security. Oracle MyLearn: https://mylearn.oracle.com/ Oracle University Learning Community: https://education.oracle.com/ou-community X (formerly Twitter): https://twitter.com/Oracle_Edu LinkedIn: https://www.linkedin.com/showcase/oracle-university/ Special thanks to Arijit Ghosh, Kiran BR, Rashmi Panda, David Wright, the OU Podcast Team, and the OU Studio Team for helping us create this episode. --------------------------------------------------------- Episode Transcript: 00:00 Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started. 00:26 Lois: Hello and welcome to the Oracle University Podcast. I'm Lois Houston, Director of Innovation Programs with Oracle University, and with me is Nikita Abraham, Principal Technical Editor. Nikita: Hi everyone. We hope you've been enjoying these last few weeks as we've been revisiting our most popular episodes of the year. 00:47 Lois: Today's episode is the fourth of six we'll have in this series and it's a throwback to a conversation with Rohit Rahi, our Vice President of CSS OU Cloud Delivery, talking about Networking in OCI. We began by asking Rohit to explain what a Virtual Cloud Network is. Let's listen in. 01:06 Rohit: At its core, it's a private software defined network you create in Oracle Cloud. It's used for secure communication. Whether instances talking to each other, instances talking to on-premises environments, or instances talking to other instances in different regions, you would use Virtual Cloud Network. It lives in an OCI region. Like we said, it's a regional service. It's highly available, massively scalable, and secure. And we take care of these things for you. So before we dive deep into the VCN and all the characteristics and all the features it has, let's look at some of the basic stuff. 01:44 Rohit: So the first thing is VCN has an address space. In this case, you see this address space is denoted in a CIDR notation. CIDR stands for classless interdomain routing. The VCN has an IP addressing range. And what that means is you have an address range. You take that range. And you can break it down into smaller networks which are called subnetworks. And these subnetworks are where you would instantiate your compute instances. 02:16 Nikita: And what can you tell us about the different mechanisms that exist inside a VCN? Rohit: So first, there is a notion of internet gateway. This is a gateway which is massively scalable, highly available, and is used for communication to anything on the internet. So if you have a web server which wants to talk to other websites on the web being able to be accessed publicly, you would use an internet gateway. So going to the internet and coming back from the internet. You also have this highly available, massively scalable router called NAT gateway. And it is used for providing NAT as a service. 02:53 Rohit: So what this means is the traffic is unidirectional. It can go from your private subnets to the internet. But users from the internet cannot use the NAT gateway to reach your instances running in a private subnet. So the idea with the NAT gateway is to enable outbound communication to the internet, but block inbound communications or connections initiated from the internet. Then we have another router which is called Service Gateway. And the idea is it lets resources in VCN access public OCI services such as object storage, but without using an internet or NAT gateway. So these are the three scenarios-- Internet gateway for internet, NAT gateway also for internet but unidirectional, and Service gateway for accessing OCI public services, which are available on the internet but accessing them in a secure manner. And then the other construct is called Dynamic Routing Gateway. This is a virtual router that provides a path for private traffic between your VCN and destinations other than the internet. 04:00 Lois: So what can these destinations be? Rohit: Well, this can be your on-premises environment. VCN uses route tables to send traffic out of the VCN to the internet, to on-premises networks, or to peered VCN, and we look at each of these scenarios. Route tables consist of a set of route rules. Each rule specifies a destination CIDR block and a route target. Think about route target as the next hop for the traffic that matches that destination CIDR block. Now, one thing to keep in mind is traffic within the VCN subnet is automatically handled by the VCN local routing. 04:44 Lois: Want to get the inside scoop on Oracle University? Head on over to the all-new Oracle University Learning Community. Attend exclusive events. Read up on the latest news. Get first-hand access to new products and stay up-to-date with upcoming certification opportunities. If you are already an Oracle MyLearn user, go to MyLearn to join the Community. You will need to log in first. If you have not yet accessed Oracle MyLearn, visit mylearn.oracle.com and create an account to get started. Join the Community today! 05:20 Nikita: Getting back to our discussion… if you have multiple networks, how do they talk to each other? Rohit: So there are two scenarios which are possible here. If the networks are within the same OCI region, they can talk to each other through a mechanism called local peering. If the two networks are in two different OCI data center regions, then you have the same concept, a similar concept, but it's a remote peering now. And instead of using local peering, now you're using the Dynamic Routing Gateways. Remember we talked about Dynamic Routing Gateways used for on-premises communication, anything which is not for internet. So this is also a use case for Dynamic Routing Gateway enabling communication between networks in different regions. 06:05 Rohit: So within VCN, you have this concept of security list. Think about security list as firewall rules associated with a subnet and applied to all instances inside the subnet. So what does it look like? The security list consists of rules that specify the type of traffic allowed in or out of the subnet. This applies to a given instance, whether it is talking with another instance in the VCN or a host outside the VCN. There's also another concept, which is called network security groups, or NSG. These are very similar construct as security list, but the key difference is these apply only to a set of virtual network interface cards in a single VCN. And another big difference here is NSGs can be the source or destination in the rules. Contrast this with the security list rules where you specify a CIDR, only a CIDR, as the source or destination. 07:06 Lois: Thanks for that, Rohit. To learn more about OCI, please visit mylearn.oracle.com, create a profile if you don't already have one, and get started learning on our free OCI Foundations training. Nikita: You can also practice what you learn in a safe environment with our hands-on labs, without the anxiety of working in a live environment. 07:27 Nikita: We hope you enjoyed that conversation. Join us next week for another throwback episode. Until then, this is Nikita Abraham... Lois: And Lois Houston, signing off! 07:37 That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
Software Engineering Radio - The Podcast for Professional Software Developers
Nikhil Shetty, an expert in networking and distributed systems, speaks with SE radio's Kanchan Shringi about virtual private cloud (VPC) and related technologies. They explore how VPC relates to public cloud, private cloud, and virtual private networks (VPNs). The discussion delves into why VPC is fundamental to building on the cloud, as well as configuring a VPC, subnets, and the address space that can be assigned to the VPC. During this episode they look into route tables, network address translation, as well as security groups, network access control lists, and DNS. Finally, Nikhil helps compare VPC offerings from Amazon Web Services (AWS) and Oracle Cloud Infrastructure (OCI).
Blog: https://medium.com/asecuritysite-when-bob-met-alice/one-of-the-greatest-protocols-and-one-of-the-greatest-weaknesses-of-the-internet-meet-the-d8201a1e6e80 So the Internet isn't the large-scale distributed network that DARPA tried to create, and which could withstand a nuclear strike on any part of it. At its core is a centralised infrastructure of routing devices and of centralised Internet services. The protocols its uses are basically just the ones that were drafted when we connected to mainframe computers from dumb terminals. Overall, though, a single glitch in its core infrastructure can bring the whole thing crashing to the floor. And then if you can't get connected to the network, you often will struggle to fix it. A bit like trying to fix your car, when you have locked yourself out, and don't have the key to get in. As BGP still provides a good part of the core of the Internet, any problems with it can cause large scale outages. Recently Facebook took themselves off the Internet due to a BGP configuration errors, and there have been multiple times when Internet traffic has been “tricked” to take routes through countries which do not have a good track record for privacy. BGP does the core of routing on the Internet, works by defining autonomous systems (AS). The ASs are identified with an ASN (Autonomous System Number) and keep routing tables which allows the ASs to pass data packets between themselves, and thus route between them. Thus the Facebook AS can advertise to other AS's that it exists and that packets can be routed to them. When the Facebook outage happened, the Facebook AS failed to advertise its presence. Each AS then defines the network ranges that they can reach. Facebook's ASN is AS32935 and covers around 270,000 IP address ranges [here]. What is BGP? The two main interdomain routing protocols in recent history are EGP (Exterior Gateway Protocol) and BGP (Border Gateway Protocol). EGP suffers from several limitations, and its principal one is that it treats the Internet as a tree-like structure, as illustrated in Figure 1. This assumes that the structure of the Internet is made up of parents and children, with a single backbone. A more typical topology for the Internet is illustrated in Figure 2. BGP is now one of the most widely accepted exterior routing protocol, and has largely replaced EGP. Figure 1: Single backbone — Tree-like topology Figure 2: Multiple backbones BGP is an improvement on EGP (the fourth version of BGP is known as BGP-4), and is defined in RFC1772. Unfortunately it is more complex than EGP, but not as complex as OSPF. BGP assumes that the Internet is made up of an arbitrarily interconnected set of nodes. It then assumes the Internet connects to a number of AANs (autonomously attached networks), as illustrated in Figure 3, which create boundaries around organizations, Internet service providers, and so on. It then assumes that, once they are in the AAN, the packets will be properly routed. Figure 3: Autonomously attached networks Most routing algorithms try to find the quickest way through the network, whereas BGP tries to find any path through the network. Thus, the main goal is reachability instead of the number of hops to the destination. So finding a path which is nearly optimal is a good achievement. The AAN administrator selects at least one node to be a BGP speaker and also one or more border gateways. These gateways simply route the packet into and out of the AAN. The border gateways are the routers through which packets reach the AAN. The speaker on the AAN broadcasts its reachability information to all the networks within its AAN. This information states only whether a destination AAN can be reached; it does not describe any other metrics. An important point is that BGP is not a distance-vector or link state protocol because it transmits complete routing information instead of partial information. The BGP update packet also contains information on routes which cannot be reached (withdrawn routes), and the content of the BGP-4 update packet is: Unfeasible routes length (2 bytes). Withdrawn routes (variable length). Total path attribute length (2 bytes). Path attributes (variable length). Network layer reachability information (variable length). This can contain extra information, such as ‘use AAN 1 in preference to AAN 2'. Routers within AS's share similar routing policies, and thus operate as a single administrative unit. All the routers outside the AS treat the AS as a single unit. The AS identification number is assigned by the Internet Assigned Numbers Authority (IANA) in the range of 1 to 65,535, where 64,512 to 65,535 are reserved for private use. The private numbers are only used within private domain, and must be translated to registered numbers when leaving the domain. BGP and routing loops BGP uses TCP segments on port 179 to send routing information (whereas RIP uses port 520). BGP overcomes routing loops by constructing a graph of autonomous systems, based on the information provided by exchanging information between neighbors. It can thus build up a wider picture of the entire interconnected ASs. A keep-alive message is send between neighbours, which allows the graph to be kept up-to-date. Single-homed systems ASs which have only one exit point are defined as single-homed systems, and are often referred to as stub networks. These stubs can use a default route to handle all the network traffic destined for non-local networks. There are three methods that an AS can use so that the outside world can learn the addresses within the AS: Static configuration. For this, an Internet access provider could list the customer's networks as static entries within its own router. These would then be advertised to other routers connected to its Internet core. This approach could also be used with a CIDR approach which aggregates the routes. Use an Interior Gateway Protocol (IGP) on the link. For this, an Internet access provider could run a IGP on the single connection, this can then be used to advertise the connected networks. This method allows for a more dynamic approach, than static configuration. A typical IGP is OSPF. Use an Exterior Gateway Protocol (EGP) on the link. An EGP can be used to advertise the networks. If the connected AS does not have a registered AS, the Internet access provider can assign it from a private pool of AS numbers (64,512 to 65,535), and then strip off the numbers when advertising the AS to the core of the Internet. Multihomed system A multi-homed system has more than one exit point from the AS. As it has more than one exit point, it could support the routing of data across the exit points. A system which does not support the routing of traffic through the AS is named a non-transit AS. Non-transit ASs thus will only advertise its own routes to the Internet access providers, as it does not want any routing through it. One Internet provider could force traffic through the AS if it knows that routing through the AS is possible. To overcome this, the AS would setup filtering to stop any of this routed traffic. Multi-homed transit systems have more than one connection to an Internet access provider, and also allow traffic to be routed through it. It will route this traffic by running BGP internally so that multiple border routers in the same AS can share BGP information. Along with this, routers can forward BGP information from one border router to another. BGP running inside the AS is named Internet BGP (IBGP), while it is known as External BGP (EBGP) if it is running outside AS's. The routers which define the boundary between the AS and the Internet access provider is known as border routers, while routers running internal BGP are known as transit routers. BGP specification Border Gateway Protocol (BGP) is an inter-Autonomous System routing protocol (exterior routing protocol), which builds on EGP. The main function of a BGP-based system is to communicate network reachability information with other BGP systems. Initially two systems exchange messages to open and confirm the connection parameters, and then transmit the entire BGP routing table. After this, incremental updates are sent as the routing tables change. Each message has a fixed-size header and may or may not be followed a data portion. The fields are: Marker. Contains a value that the receiver of the message can predict. It can be used to detect a loss of synchronization between a pair of BGP peers, and to authenticate incoming BGP messages. 16 bytes. Length. Indicates the total length, in bytes, of the message, including the header. It must always be greater than 18 and no greater than 4096. 2 bytes. Type. Indicates the type of message, such as 1 — OPEN, 2 — UPDATE, 3 — NOTIFICATION and 4 — KEEPALIVE. OPEN message The OPEN message is the first message sent after a connection has been made. A KEEPALIVE message is sent back confirming the OPEN message. After this the UPDATE, KEEPALIVE, and NOTIFICATION messages can be exchanged. Figure 4 shows the extra information added to the fixed-size BGP header. It has the following fields: Version. Indicates the protocol version number of the message. Typical values are 2, 3 or 4. 1 byte. My Autonomous System. Identifies the sender's Autonomous System number. 2 bytes. Hold Time. Indicates the maximum number of seconds that can elapse between the receipt of successive KEEPALIVE and/or UPDATE and/or NOTIFICATION messages. 2 bytes. Authentication Code. Indicates the authentication mechanism being used. This should define the form and meaning of the Authentication Data and the algorithm for computing values of Marker fields. Authentication Data. The form and meaning of this field is a variable-length field which depends on the Authentication Code. Figure 4: BGP message header and BGP OPEN message data BGP configuration BGP configuration commands are similar to those used for RIP (Routing Internet Protocol). To configure the router to support BGP the following commands is used: RouterA # config tRouterA(config)# router bgp AS-number With IGP's, such as RIP, the network command defined the networks on which routing table update are sent. For BGP a different approach is used to define the relationship between networks. This is [here]: RouterA # config tRouterA(config) # router bgp AS-numberRouter(config-router)# network network-number [mask network-mask] where the network command defines where to advertise the locally learnt networks. These networks could have been learnt from other protocols, such as RIP. An optional mask can be used with the network command to specify individual subnets. With the BGP protocol neiphbors must establish a relationship, for this the following is used: RouterA # config tRouterA(config) #router bgp AS-numberRouter(config-router)#network network-number [mask network-mask]Router(config-router)# neighbor ip-address remote-as AS-number which defines the IP address of a connected BGP-based router, along with its AS number. Conclusions At its core, the Internet is not a decentralised infrastructure. It is fragile and open to human error and adversarial attacks. Too much of our time is spent on making our services work and very little on making them robust. We need to spend more time looking at scenarios and how to mitigate them. Previously it was Facebook taking themselves offline, the next time it could be a nation-state bring down a whole country … and that it is likely to have a devastating effect. Now … I have setup more Cisco challenges for BGP for you, so go and learn more about BGP configuration here: https://asecuritysite.com/cisco/bgp
When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources. In this episode, Lois Houston and Nikita Abraham, along with special guest Rohit Rahi, discuss Oracle's Virtual Cloud Network, VCN routing, and security. Oracle MyLearn: https://mylearn.oracle.com/ Oracle University Learning Community: https://education.oracle.com/ou-community Twitter: https://twitter.com/Oracle_Edu LinkedIn: https://www.linkedin.com/showcase/oracle-university/ Special thanks to Arijit Ghosh, Kiran BR, Rashmi Panda, David Wright, the OU Podcast Team, and the OU Studio Team for helping us create this episode.
2022-12-20 Weekly News - Episode 176Watch the video version on YouTube at https://youtu.be/Ez5BTHOjv84 Hosts: Gavin Pickin - Senior Developer at Ortus Solutions Brad Wood - Senior Developer at Ortus Solutions Thanks to our Sponsor - Ortus SolutionsThe makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. A few ways to say thanks back to Ortus Solutions: Like and subscribe to our videos on YouTube. Help ORTUS reach for the Stars - Star and Fork our ReposStar all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github Subscribe to our Podcast on your Podcast Apps and leave us a review Sign up for a free or paid account on CFCasts, which is releasing new content every week BOXLife store: https://www.ortussolutions.com/about-us/shop Buy Ortus's Books 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips) Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes Patreon Support ( substantial )Goal 1 - We have 43 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.Goal 2 - We are 39% of the way to fully fund the hosting of ForgeBox.io Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Current Roles - More in the job section Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k - https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/ News and AnnouncementsReal ColdFusion is in the NewsThe U.S. Department of Energy said Sunday it would announce a "major scientific breakthrough" this week, after media reported a federal laboratory had recently achieved a major milestone in nuclear fusion research. The Financial Times reported Sunday that scientists in the California-based Lawrence Livermore National Laboratory (LLNL) had achieved a "net energy gain" from an experimental fusion reactor.https://www.cbsnews.com/news/nuclear-fusion-energy-breakthrough-us-expected-announcement-zero-carbon-power/ Meet ColdFusion on Amazon Web ServicesBuild high-performing, enterprise-ready applications that scale dynamically to meet your business needs. Easily create interactive web applications by leveraging unique built-in HTML5 support. Make your websites more secure with formidable security standards. https://www.adobe.com/products/coldfusion-amazon-web-services.html 12 Days of Xmas - ITB 2022 Video Releases are in ProgressIt's that time of year again. Trees are lit, presents are being wrapped, and relatives are coming to visit. That's right, it's time again for the 12 days of Christmas-- 2022 ITB Video Release Edition! https://www.ortussolutions.com/blog/category/12-days-of-christmas-itb-2022-video-releasehttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-2-new-moduleshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-3-moduleshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-4-coldbox-modules-featureshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-5-commandboxhttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-6-contentboxhttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-7-reactive-uis-cbwire-vuejs-and-alpinejshttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-8-modern-cfmlhttps://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-9-debugging-cfml-applications Adobe ColdFusion Fortuna AlphaSignup for the pre-releasehttps://www.adobeprerelease.com/beta/C0A219A0-A127-417A-D0D3-A7B5B3C5A0AE/participate/C3B4F4DC-8662-4610-D2B1-EE8FAD396648 Advent of Codehttps://adventofcode.com/CFML Slack Leaderboard: `1574707-be30db8f`Box Team Leaderboard: `26416-a4842ce2`ICYMI - CFML Blog Aggregator - CFBlogs.org 2.0 ReleasedThe new version of CFBlogs ColdFusion Blog Aggregator has been released.This version displays all of the blog posts in an attractive three-column card layout and displays the open graph image or a site image at the top of the post. The card images should allow the user to quickly convey the author of the post. Users can sort the grids by author by clicking on the card image.https://www.gregoryalexander.com/blog/2022/12/5/CFBlogsorg-20-Released ICYMI - ColdBox Master Class - Completely Free until the end of the Year!Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year! A gift to the community, so we can all build amazing apps together! Watch all the videos! Binge Coding Anyone? Enjoy!https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST New Releases and UpdatesICYMI - MasaCMS Security Vulnerability FixIf you're on Masa CMS 7.3, you should update to version 7.3.10 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.https://github.com/MasaCMS/MasaCMS/discussions/143 https://github.com/MasaCMS/MasaCMS/releases/tag/7.3.10 ICYMI - CommandBox 5.7.0 Released!We are pleased to announce the release of CommandBox 5.7.0, which comes with a handful of new features and some important library updates.https://www.ortussolutions.com/blog/commandbox-570-released ICYMI - CommandBox Docker v3.6.3 Images ReleasedToday we are pleased to announce the release of version 3.6.3 of our CommandBox Docker images.This release upgrades the CommandBox binary to 5.7.0. Read the Release Notes for this version here. Also added in this version, are new distro builds for the RHEL Universal Base Image. These images may be utilized by using the ubi9 in the image tag in the same way the alpine base images currently do. https://www.ortussolutions.com/blog/commandbox-docker-v363-images-released Webinar / Meetups and WorkshopsOrtus Event Calendar for Googlehttps://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20 Ortus Fridays are back in Full Effect in 2023 Ortus Office Hours - Jan 6th, 2023 Software Craftsmanship Book Club - Jan 13th, 2023 Ortus Webinar - Jan 20th 2023 Koding with the Kiwi - Jan 27th, 2023 ICYMI - Docker - Community All-Hands 7 - Winter editionJoin the 7th the Community All-Hands, a quarterly online event that brings the Docker community together!This global meetup features community news, company and product updates, demos, and language-specific sessions.Thursday, December the 15th, 8:00 AM Pacific Time. A more interactive first day, featuring talks of exciting trends like WASM and Docker Extensions, interviews and the traditional Docker updates and Community Awards!Friday, December the 16th, 8:00 AM Pacific Time. Workshops day! Learn how to use Docker with your favorite programming language.https://docker.github.io/community-all-hands/ CFCasts Content Updateshttps://www.cfcasts.comRecent Releases ITB - 12 Days of Xmas - ITB 2022 - 9 days + counting Software Craftsmanship Book Club - Clean Code - Chapter 2 https://cfcasts.com/series/ortus-software-craftsmanship-book-club---clean-code/videos/ortus-software-craftsmanship-book-club-clean-code-2 ColdBox Master Class - Now FREE 2022 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2022-forgebox-modules-of-the-week 2022 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2022-vs-code-hint-tip-and-trick-of-the-week Coming Soon More ForgeBox and VS Code Podcast snippet videos Box-ifying a 3rd Party Library from Gavin ColdBox Elixir from Eric Getting Started with ContentBox from Daniel Brad with more CommandBox Videos Conferences and TrainingCF Summit Online All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more! NATIVE MOBILE APPS WITH MONACA.IO & ADOBE COLDFUSION 2021Mark TakataDecember 22, 2022 | 12:00 - 13:00 EST (1 hour)Have you always wanted to build native mobile apps, but didn't want to learn Swift or ObjectiveC? Monaca.io uses the power of Apache Cordova and a richly featured online cloud IDE to help you build out native applications quickly and easily, with just basic JavaScript knowledge. In this talk Mark will build an Adobe ColdFusion 2021 powered back end using mySQL, exposed as an API, which will be consumed by a native mobile app written and built inside of the Monaca.io ecosystem.And many more in Dec and Jan… Website for CF Summit Onlinehttps://cfsummit-online.meetus.adobeevents.com/ VUE.JS NATION CONFERENCEJanuary 25th & 26th 2023https://vuejsnation.com/VUEJS AMSTERDAM 20239-10 February 2023, Theater AmsterdamWorld's Most Special and Largest Vue ConferenceCALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57Blind Tickets: https://eventix.shop/abzrx3b5 https://vuejs.amsterdam/ Dev NexusApril 4-6th in AtlantaGeorgia World Congress Center285 Andrew Young International Blvd NWAtlanta, GA 30313USAApril 4th – 6th, 2023https://devnexus.com/ VueJS Live MAY 12 & 15, 2023ONLINE + LONDON, UKCODE / CREATE / COMMUNICATE35 SPEAKERS, 10 WORKSHOPS10000+ JOINING ONLINE GLOBALLY300 LUCKIES MEETING IN LONDONGet Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022 Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021https://vuejslive.com/ Into the Box 2023 - 10th EditionMay 17-19, 2023 The conference will be held in The Woodlands (Houston), TexasThis year we will continue the tradition of training and offering a pre-conference hands-on training day on May 17th and our live Mariachi Band Party! However, we are back to our Spring schedule and beautiful weather in The Woodlands! Also, this 2023 will mark our 10 year anniversary. So we might have two live bands and much more!!!We are pleased to announce the call for speakers for the Into The Box Conference for 2023 is now officially open. https://www.intothebox.org/blog/into-the-box-2023-call-for-speakers https://itb2023.eventbrite.com/CFCamp is backJune, 22-23rd 2023Marriott Hotel Munich Airport, FreisingCall for Speakers coming in the New yearhttps://www.cfcamp.org/ More conferencesNeed more conferences, this site has a huge list of conferences for almost any language/community.https://confs.tech/https://github.com/scraly/developers-conferences-agenda Blogs, Tweets, and Videos of the Week 12/20/22 - Blog - Ben Nadel - Paging Through Data Using LIMIT And OFFSET In MySQL And ColdFusionWhen I render a data-grid for a user, I usually use pagination to allow the user to iterate through some relatively finite amount of records. The other day, however, I had to build an administrative UI (user interface) that surfaced a tremendous amount of data - possibly hundreds-of-thousands of records. With so much data, standard pagination didn't seem like a meaningful solution. Instead, I switched over to using LIMIT and OFFSET in my MySQL, which allows the admin to page through the data one slice at a time. I don't use this technique that often, so I thought a ColdFusion demo would be fun.https://www.bennadel.com/blog/4371-paging-through-data-using-limit-and-offset-in-mysql-and-coldfusion.htm 12/19/22 - Blog - Jim Preist - TheCrumb - Counting Lines of Code with clocSooner or later your project manager will approach you mumbling something about metrics, lines of code and accountability.Much like tabs vs spaces there are people who are both for and against using lines of code as some sort of measurement. I won't get into that argument but I will show you a fantastic tool to make this easy: cloccloc counts blank lines, comment lines, and physical lines of source code in many programming languages.It's available for Windows, Mac and Linux.https://www.thecrumb.com/posts/2022-12-19-counting-lines-of-code/ 12/19/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 8 - Modern CFMLToday, Day 8's Videos from Into the Box 2022 Conference, 5 sessions on modern CFML concepts, including using Java with your CFML Apps, Aspect Oriented Programming, Web Components, Feature Flags and using Queues in CFML with Rabbit MQ.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-8-modern-cfml 12/19/22 - Blog - Ortus Solutions - Form Validation with CBWIREForm validation is something we as developers have to deal with all the time, and there are plenty of ways to go about it, some elegant and others not so much. ColdBox has a validation module called cbValidation for powerful form validation. We have this available to us in CBWIRE as well, which allows us to build forms with instant validation and messaging for the user without any page refreshing.https://www.ortussolutions.com/blog/form-validation-with-cbwire 12/18/22 - Blog - Ben Nadel - Using INSERT INTO SELECT To Duplicate Rows In MySQL And Lucee CFMLLast week, as part of a duplication workflow, I had to duplicate a bunch of rows in one table while changing one of the column values (think, the conceptual "foreign key" column). To do this, I used MySQL's INSERT INTO SELECT syntax which provides a bulk INSERT API that is powered by a SELECT statement. I'd never actually done this in a production application before; so, I thought it might be worth a quick MySQL and ColdFusion demo.https://www.bennadel.com/blog/4370-using-insert-into-select-to-duplicate-rows-in-mysql-and-lucee-cfml.htm 12/16/22 - Blog - Ben Nadel - Breaking An IPv4 Address Range Up Into CIDR Ranges In Lucee CFML 5.3.9.141The other day, this blog was being attacked by a malicious actor in Australia. I identified 38 unique IP addresses that were all poking and prodding the application, looking for weaknesses. Thankfully, this caused zero issues for the site itself or its visitors. However, in the heat of the moment, as I was adding these IPs to Cloudflare's Web Application Firewall (WAF) rules, I realized that my understanding of how IP addresses work was quite lacking. I needed to create CIDR ranges for the WAF; but, wasn't sure how to do that. As such, I wanted to take a moment and play around with IP addresses, taking a given range and breaking it up into the tightest possible CIDR ranges in Lucee CFML.https://www.bennadel.com/blog/4369-breaking-an-ipv4-address-range-up-into-cidr-ranges-in-lucee-cfml-5-3-9-141.htm 12/16/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 7 - Reactive UIs - CBWire, VueJS and AlpineJSToday, Day 7's Videos from Into the Box 2022 Conference, 4 sessions related to reactive UIs, which are reacted with CBWire, VueJS and AlpineJS.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-7-reactive-uis-cbwire-vuejs-and-alpinejs 12/15/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 6 - ContentBox Today, Day 6's Videos from Into the Box 2022 Conference, 3 sessions related to ContentBox. Getting started with ContentBox 101, Headless CMS and then deploying to the cloud.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-6-contentbox 12/14/22 - Podcast - Working Code Podcast - Episode 105: No Effort DecemberWelcome to the start of No Effort December! As Adam explained to me, that's the time of the year in which we gather 'round the mics and talk about whatever the heck comes to mind. We just passed two years on the Working Code podcast - woot woot!, it's the holidays, and we've been peopling super hard with our families — we all need a little jolly, no-effort relaxation. On today's show, Carol wonders if she can use Hackathons as a means to "improve community outreach" - one of her team's new OKR (Objectives and Key Results). And, I discuss the difference between deploying on Friday vs. deploying during the holiday (and why these are not the same thing and why you shouldn't be a jerk-face to your co-workers).https://www.bennadel.com/blog/4368-working-code-podcast-episode-105-no-effort-december.htm 12/14/22 - Blog - Ortus Solutions - The 12 Days of Christmas - ITB 2022 Video Release— Day 5 - CommandBoxToday, Day 5's Videos from Into the Box 2022 Conference, 3 sessions related to CommandBox, hidden gems, building modules for CommandBox and Securing CommandBox servers for Production.https://www.ortussolutions.com/blog/the-12-days-of-christmas-itb-2022-video-release-day-5-commandbox CFML JobsSeveral positions available on https://www.getcfmljobs.com/Listing over 37 ColdFusion positions from 25 companies across 22 locations in 5 Countries.2 new jobs listed this weekFull-Time - ColdFusion Developer at Remote - United KingdomDec 16https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/ColdFusion-Developer-at-Remote/11541 Full-Time - ColdFusion Developer at Remote - United KingdomDec 14https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/ColdFusion-Developer-at-Remote/11540 Patreon Sponsored Job Announcement - Tomorrows GuidesTomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector. Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well. We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution. Current Roles in detail All roles: https://www.tomorrows.co.uk/jobs.cfm Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k - https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/ - Minimum three years' experience with ColdFusion- Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019- Familiarity with Git- Flexible skillset covering a wide range of development Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/- Minimum three years experience with automated testing- Experience with automated testing tools such as selenium- Experience with API test tools such as Postman/Fiddler etc Benefits of both roles:- £4,000 per annum discretionary company bonus scheme- 25 days annual leave + bank holidays- 6% employer pension contribution- Access to free perks and discounts through Perkbox- Long Service Awards- Cycle to Work Scheme- Company and Team nights outOther Job Links Ortus Solutions https://www.ortussolutions.com/about-us/careers There is a jobs channel in the CFML slack team, and in the box team slack now too ForgeBox Module of the WeekIPIFY API ModuleThis module allows you to tap into the ipify API: https://www.ipify.org/ : A Simple Public IP Address API, to get the IP address of where you made the call from; your public IP Address.https://www.forgebox.io/view/ipify VS Code Hint Tips and Tricks of the WeekLucee DebugBy David Rogers luceedebug is a step debugger for Lucee.There are two components:A Java agentA VS Code extensionThe java agent needs a particular invocation and needs to be run as part of JVM/CF server startup.The VS Code client extension is available as luceedebug when searching in the VS Code extensions panehttps://github.com/softwareCobbler/luceedebug https://marketplace.visualstudio.com/items?itemName=DavidRogers.luceedebug Thank you to all of our Patreon SupportersThese individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox, ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox. You can support us on Patreon here https://www.patreon.com/ortussolutionsDon't forget, we have Annual Memberships, pay for the year and save 10% - great for businesses. Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription. All Patreon supporters have a Profile badge on the Community Website All Patreon supporters have their own Private Forum access on the Community Website All Patreon supporters have their own Private Channel access BoxTeam Slack Live Stream Access to streams like “Koding with the Kiwi + Friends” and Ortus Software Craftsmanship Book Club https://community.ortussolutions.com/ Patreons John Wilson - Synaptrix Tomorrows Guides Jordan Clark Gary Knight Mario Rodrigues Giancarlo Gomez David Belanger Dan Card Jeffry McGee - Sunstar Media Dean Maunder Nolan Erck Wil De Bruin Abdul Raheen Don Bellamy Joseph Lamoree Jonathan Perret Jan Jannek Laksma Tirtohadi Brian Ghidinelli - Hagerty MotorsportReg Carl Von Stetten Jeremy Adams Didier Lesnicki Matthew Clemente Scott Steinbeck - Agri Tracking Systems Daniel Garcia Ben Nadel Richard Herbet Brett DeLine Kai Koenig Charlie Arehart Jason Daiger Shawn Oden Ross Phillips Matthew Darby Edgardo Cabezas Patrick Flynn Stephany Monge Kevin Wright John Whish Peter Amiri Cavan Vannice John Nessim Tia You can see an up to date list of all sponsors on Ortus Solutions' Websitehttps://ortussolutions.com/about-us/sponsors Thanks everyone!!! ★ Support this podcast on Patreon ★
Créée à Lorient Cidréa est une cave en ligne destinée à mettre en valeur les produits du terroir cidricole français. Devenu IN et ce grâce à quelques cidriers passionnés, qui ont fait de cette boisson paysanne, unincontournable de la table - de l'entrée au dessert. Cidrea, propose une sélection de plus de 100 références, des cidres de Bretagne mais pas que ! Pour donner toutes les lettres de noblesse aux cidres qui s'invite sur les tables françaises et internationales.https://cidrea.fr/ L'abus d'alcool est dangereux pour la santé, à consommer avec modération.
Este 48 programa e 15 de setembro iniciamos unha nova andaína e experiencia no mundo do debate e facémolo con Aldara Cidrás de Histagra e Miguel García-Fdez do IEGPS. Abordamos temas como o "victimismo" dos historiadores e historiadoras, a perspectiva de xénero na historiografía galega e o futuro interese das novas xeracións pola nosa historia. Escoitar e disfrutar!
Show Synopsis: In Season 04 Episode 04 , we discuss Ginger and CIDR, Plexamp, modded iPods, and KZST headphones. Working from home. What we are drinking: Soulless Ginger Beer and CIDR Apple Cider Plexamp and Modded iPod mini a year later KZST in ear monitors - fully modular IEMs KZ ZST Pro Dynamic Hybrid Dual Driver in-Ear Headphones (Black Without Mic) KZ EDX Earphones 1 Dynamic HIFI Bass Earbuds In Ear Noise Cancelling Headset https://www.ebay.com/itm/263514797536?var=562544349260EP500 Memory foam replacement earphone tips KZ replacement ear tips KZ earphones Our Patreon Beer and Broadband We have a twitter @BeerandBroad Get 25 dollars in credit at Ting. This Episode of Beer and Broadband is licensed under the Creative Commons Attribution License Creative Commons License
Bustin’ concrete, CIDR notation, Rat Magic, unlimited (almost) photo storage, more mouse eviction tactics, and the best site maintenance practices. Whew! It’s all covered and uncovered on this TWiRT episode with the beloved John Bisset, author of “Workbench”.
Bustin’ concrete, CIDR notation, Rat Magic, unlimited (almost) photo storage, more mouse eviction tactics, and the best site maintenance practices. Whew! It’s all covered and uncovered on this TWiRT episode with the beloved John Bisset, author of “Workbench”.
Bustin’ concrete, CIDR notation, Rat Magic, unlimited (almost) photo storage, more mouse eviction tactics, and the best site maintenance practices. Whew! It’s all covered and uncovered on this TWiRT episode with the beloved John Bisset, author of “Workbench”. Show Notes:Dexpan Non-Explosive Demolition Agent for Concrete RemovalConcrete Bustin’ Demo VideoAha! “CIDR” stands for Classless Inter Domain Routing. Here’s a CIDR calculatorJohn talked about Middle Atlantic Rack Shelves as a possible substitute for Server Rack RailsJohn likes ½” galvanized steel “hardware cloth” to protect larger openings from critters Guest:John Bisset - Director, Western US Sales at Telos Alliance and Author of the “Workbench” column in Radio World magazine. Host:Kirk Harnack, The Telos Alliance, Delta Radio, Star94.3, & South Seas BroadcastingFollow TWiRT on Twitter and on FacebookTWiRT is brought to you by:Broadcasters General Store, with outstanding service, saving, and support. Online at BGS.cc. Broadcast Bionics - making radio smarter with Bionic Studio, visual radio, and social media tools at Bionic.radio.Angry Audio - with StudioHub cables and adapters. Audio problems disappear when you get Angry at AngryAudio.com. And MaxxKonnectWireless - Prioritized High Speed Internet Service designed for Transmitter Sites and Remote Broadcasts. Look for in-depth radio engineering articles in Radio-Guide magazine.Subscribe to Audio:iTunesRSSStitcherTuneInSubscribe to Video:iTunesRSSYouTube
Sinkronisasi estrus atau penyerentakan birahi merupakan suatu usaha untuk menimbulkan birahi pada sekelompok ternak secara bersamaan sehingga diperoleh peningkatan angka kebuntingan. Sinkronisasi estrus adalah hak plerogatif dokter hewan yang betul betul paham dengan reproduksi, karena membutuhkan skill untuk inseminasi buatan, therapi intra uterine, pregnancy test 50 hari usia kebuntingan, dan sterility control untuk mengetahui detail saluran dan organ reproduksi. Sinkronisasi estrus dilakukan dengan 2 prinsip pelaksanaan yaitu meniru kerja progesterone ( memperpanjang waktu kerja Corpus luteum ) dengan hormone progesterone ( CIDR, PRID ), dan memperpendek kerja progesterone ( melisiskan Corpus luteum ) dengan hormone Prostaglandin ( PGF2α ). Nah Colenak kali ini akan berceloteh ttg Singkronisasi Birahi pada Sapi, tidak detail tetapi cukup untuk membuka pengetahuan peternak dan masyarakat peternakan. Yukk kita simak celotehannya.... --- Support this podcast: https://anchor.fm/dani-medionovianto/support
Salve clubistas de todo o Brasil! Neste episódio de estreia apresentamos a nossa nova série chamada Os Bastidores. Nessa série você irá ficar por dentro dos bastidores do futebol, contado por pessoas que vivenciam e respiram esse esporte. Nosso objetivo nessa série é sair da mesmice e ouvir história das mais variadas profissões que estão envolvidas no futebol, não ficar apenas na normalidade que são os jogadores e técnicos. Já neste primeiro episódio, tivemos a honra de conversar com o Patrick Cidrão, preparador físico do sub 15/16 do Ceará. Ele nos contou como foi sua jornada dentro da profissão, até chegar em um clube grande do Nordeste, além de contar as particularidades que é ser um preparador físico no ramo futebolístico, e também contou qual foi a sua inspiração que o levou a escolher essa profissão. Tudo isso e muito mais no nosso primeiro episódio da nossa nova série!
durée : 00:02:26 - Le web Normand France Bleu Normandie (Rouen)
Tous les samedis et dimanches, Vanessa Zhâ et Marion Sauveur nous font découvrir quelques pépites du patrimoine français. Après le succès de la série "Lupin", direction aujourd'hui le département de la Seine-Maritime pour marcher dans les traces du gentleman cambrioleur.
Встречаем продолжение нашумевшего выпуска про фаерволы №94. Вместе с нашими гостями разбираемся в NAT, HA и вариантах scale. Спойлер...И так как нас обвинили в том, что тема сисек, NAT не раскрыта, выйдет третья часть, которая уж точно расставит всё по местам. Кто: Борис Лыточкин — он же Злой NOC. Сетевой прораб Яндекса с 12-летним стажем, обладатель ачивки «сломал Яндекс». Отвечает за сеть в офисах компании и служебные сети дата-центров.Илья Сомов. Сетевой прораб и разнорабочий с 8-летним стажем, любитель нестандартных технологий и решений. Отвечает за транспортную сеть компании и служебные сети дата-центров. Слайды к выпуску тут Про что: Режим работы фаервола — stateless vs stateful: что хранится в state, как используетсяNATStateless NAT (CIDR -> CIDR, table -> table)Stateless NAPT (Transport CIDR (CIDR+port range) -> ...) — MAP-EStateful NAPT: stateful firewall + source IP+port manipulationHAactive/standbyactive/activeHA scaleTEBGP community bandwidth (draft)BGP conditional advertisement and RPEEM/on box scriptsscale-upscale-outMC-LAG + L2 MC-LAG + L3ECMPПлюсы и минусы каждого из подходовКанал в телеграме: t.me/linkmeup_podcast Канал на youtube: youtube.com/c/linkmeup-podcast Подкаст доступен в iTunes, Google Подкастах, Яндекс Музыке, Castbox Сообщество в вк: vk.com/linkmeup Группа в фб: www.facebook.com/linkmeup.sdsm Группа в linkedin Скачать все выпуски подкаста вы можете с яндекс-диска. Добавить RSS в подкаст-плеер. Пообщаться в общих чатах в тг: t.me/linkmeup_chat t.me/linkmeup_sysadm_chat Поддержите нас: Url podcast:https://dts.podtrac.com/redirect.mp3/https://fs.linkmeup.ru/podcasts/telecom/linkmeup-V095(2021-01).mp3
Встречаем продолжение нашумевшего выпуска про фаерволы №94. Вместе с нашими гостями разбираемся в NAT, HA и вариантах scale. Спойлер...И так как нас обвинили в том, что тема сисек, NAT не раскрыта, выйдет третья часть, которая уж точно расставит всё по местам. Кто: Борис Лыточкин — он же Злой NOC. Сетевой прораб Яндекса с 12-летним стажем, обладатель ачивки «сломал Яндекс». Отвечает за сеть в офисах компании и служебные сети дата-центров.Илья Сомов. Сетевой прораб и разнорабочий с 8-летним стажем, любитель нестандартных технологий и решений. Отвечает за транспортную сеть компании и служебные сети дата-центров. Слайды к выпуску тут Про что: Режим работы фаервола — stateless vs stateful: что хранится в state, как используетсяNATStateless NAT (CIDR -> CIDR, table -> table)Stateless NAPT (Transport CIDR (CIDR+port range) -> ...) — MAP-EStateful NAPT: stateful firewall + source IP+port manipulationHAactive/standbyactive/activeHA scaleTEBGP community bandwidth (draft)BGP conditional advertisement and RPEEM/on box scriptsscale-upscale-outMC-LAG + L2 MC-LAG + L3ECMPПлюсы и минусы каждого из подходовКанал в телеграме: t.me/linkmeup_podcast Канал на youtube: youtube.com/c/linkmeup-podcast Подкаст доступен в iTunes, Google Подкастах, Яндекс Музыке, Castbox Сообщество в вк: vk.com/linkmeup Группа в фб: www.facebook.com/linkmeup.sdsm Группа в linkedin Скачать все выпуски подкаста вы можете с яндекс-диска. Добавить RSS в подкаст-плеер. Пообщаться в общих чатах в тг: t.me/linkmeup_chat t.me/linkmeup_sysadm_chat Поддержите нас:
Встречаем продолжение нашумевшего выпуска про фаерволы №94. Вместе с нашими гостями разбираемся в NAT, HA и вариантах scale. Спойлер...И так как нас обвинили в том, что тема сисек, NAT не раскрыта, выйдет третья часть, которая уж точно расставит всё по местам. Кто: Борис Лыточкин — он же Злой NOC. Сетевой прораб Яндекса с 12-летним стажем, обладатель ачивки «сломал Яндекс». Отвечает за сеть в офисах компании и служебные сети дата-центров.Илья Сомов. Сетевой прораб и разнорабочий с 8-летним стажем, любитель нестандартных технологий и решений. Отвечает за транспортную сеть компании и служебные сети дата-центров. Слайды к выпуску тут Про что: Режим работы фаервола — stateless vs stateful: что хранится в state, как используетсяNATStateless NAT (CIDR -> CIDR, table -> table)Stateless NAPT (Transport CIDR (CIDR+port range) -> ...) — MAP-EStateful NAPT: stateful firewall + source IP+port manipulationHAactive/standbyactive/activeHA scaleTEBGP community bandwidth (draft)BGP conditional advertisement and RPEEM/on box scriptsscale-upscale-outMC-LAG + L2 MC-LAG + L3ECMPПлюсы и минусы каждого из подходовКанал в телеграме: t.me/linkmeup_podcast Канал на youtube: youtube.com/c/linkmeup-podcast Подкаст доступен в iTunes, Google Подкастах, Яндекс Музыке, Castbox Сообщество в вк: vk.com/linkmeup Группа в фб: www.facebook.com/linkmeup.sdsm Группа в linkedin Скачать все выпуски подкаста вы можете с яндекс-диска. Добавить RSS в подкаст-плеер. Пообщаться в общих чатах в тг: t.me/linkmeup_chat t.me/linkmeup_sysadm_chat Поддержите нас: Url podcast:https://dts.podtrac.com/redirect.mp3/https://fs.linkmeup.ru/podcasts/telecom/linkmeup-V095(2021-01).mp3
Interview with the Senior Threat Intelligence Analyst from Insikt Group, Recorded Future into the RedDelta Report, an analysis of how the Vatican and the Catholic Diocese of Hong Kong were among several Catholic Church-related organizations targeted by RedDelta, a Chinese-state sponsored threat activity group tracked by Insikt Group. From early May 2020, this series of suspected network intrusions also targeted the Hong Kong Study Mission to China and the Pontifical Institute for Foreign Missions (PIME), Italy. These organizations have not been publicly reported as targets of Chinese threat activity groups prior to this campaign. These network intrusions occurred ahead of the anticipated September 2020 renewal of the landmark 2018 China-Vatican provisional agreement, a deal which reportedly resulted in the Chinese Communist Party (CCP) gaining more control and oversight over the country’s historically persecuted “underground” Catholic community. In addition to the Holy See itself, another likely target of the campaign includes the current head of the Hong Kong Study Mission to China, whose predecessor was considered to have played a vital role in the 2018 agreement. The suspected intrusion into the Vatican would offer RedDelta insight into the negotiating position of the Holy See ahead of the deal’s September 2020 renewal. The identified RedDelta intrusions feature infrastructure, tooling, and victimology overlap with the threat activity group publicly reported as Mustang Panda (also known as BRONZE PRESIDENT and HoneyMyte). This includes the use of overlapping network infrastructure and similar victimology previously attributed to this group in public reporting, as well as using malware typically used by Mustang Panda, such as PlugX, Poison Ivy, and Cobalt Strike. This podcast is a report walk through with the lead analyst and covers the background, overview of Catholic Church intrusions, other targeted organizations and the infrastructure analysis. In this campaign, RedDelta favored three primary IP hosting providers, and used multiple C2 servers within the same /24 CIDR ranges across intrusions. Importantly, we also cover the key network defense recommendations corporations should be applying to deter and prevent such attacks. Recorded 27 August between Sydney and London in recognition of Recorded Future being Platinum supporter of the Cyber Risk Meetups for 2020 - 2021
The conversation covers: An overview of Ravi's role as an evangelist — an often misunderstood, but important technology enabler. Balancing organizational versus individual needs when making decisions. Some of the core motivations that are driving cloud native migrations today. Why Ravi believes it in empowering engineers to make business decisions. Some of the top misconceptions about cloud native. Ravi also provides his own definition of cloud native. How cloud native architectures are forcing developers to “shift left.” Links https://harness.io/ Twitter: https://twitter.com/ravilach Harness community: https://community.harness.io/ Harness Slack: https://harnesscommunity.slack.com/ TranscriptEmily: Hi everyone. I'm Emily Omier, your host, and my day job is helping companies position themselves in the cloud-native ecosystem so that their product's value is obvious to end-users. I started this podcast because organizations embark on the cloud naive journey for business reasons, but in general, the industry doesn't talk about them. Instead, we talk a lot about technical reasons. I'm hoping that with this podcast, we focus more on the business goals and business motivations that lead organizations to adopt cloud-native and Kubernetes. I hope you'll join me.Welcome to The Business of Cloud Native, I am your host Emily Omier. And today I'm chatting with Ravi Lachhman. Ravi, I want to always start out with, first of all, saying thank you—Ravi: Sure, excited to be here.Emily: —and second of all, I like to have you introduce yourself, in your own words. What do you do? Where do you work?Ravi: Yes, sure. I'm an evangelist for Harness. So, what an evangelist does, I focus on the ecosystem, and I always like the joke, I marry people with software because when people think of evangelists, they think of a televangelist. Or at least that's what I told my mother and she believes me still. I focus on the ecosystem Harness plays in. And so, Harness is a continuous delivery as a service company. So, what that means, all of the confidence-building steps that you need to get software into production, such as approvals, test orchestration, Harness, how to do that with lots of convention, and as a service.Emily: So, when you start your day, walk me through what you're actually doing on a typical day?Ravi: a typical day—dude, I wish there was a typical day because we wear so many hats as a start-up here, but kind of a typical day for me and a typical day for my team, I ended up reading a lot. I probably read about two hours a day, at least during the business day. Now, for some people that might not be a lot, but for me, that's a lot. So, I'll usually catch up with a lot of technology news and news in general. They kind of see how certain things are playing out. So, a big fan of The New Stack big fan of InfoQ. I also like reading Hacker News for more emotional reading. The big orange angry site, I call Hacker News. And then really just interacting with the community and teams at large. So, I'm the person I used to make fun of, you know, quote-unquote, “thought leader.” I used to not understand what they do, then I became one that was like, “Oh, boy.” [laughs]. And so just providing guidance for some of our field teams, some of the marketing teams around the cloud-native ecosystem, what I'm seeing, what I'm hearing, my opinion on it. And that's pretty much it. And I get to do fun stuff like this, talking on podcasts, always excited to talk to folks and talk to the public. And then kind of just a mix of, say, making some sort of demos, or writing scaffolding code, just exploring new technologies. I'm pretty fortunate in my day to day activities.Emily: And tell me a little bit more about marrying people with software. Are you the matchmaker? Are you the priest, what role?Ravi: I can play all parts of the marrying lifecycle. Sometimes I'm the groom, sometimes I'm the priest. But I'm really helping folks make technical decisions. So, it's go a joke because I get the opportunity to take a look at a wide swath of technology. And so just helping folks make technical decisions. Oh, is this new technology hot? Does this technology make sense? Does this project fatality? What do you think? I just play, kind of, masters of ceremony on folks who are making technology decisions.Emily: What are some common decisions that you help people with, and common questions that they have?Ravi: Lot of times it comes around common questions about technology. It's always finding rationale. Why are you leveraging a certain piece of technology? The ‘why' question is always important. Let's say that you're a forward-thinking engineer or a forward-thinking technology leader. They also read a lot, and so if they come across, let's say a new hot technology, or if they're on Twitter, seeing, yeah, this particular project's getting a lot of retweets, or they go in GitHub and see oh, this project has little stars, or forks. What does that mean? So, part of my role when talking to people is actually to kind of help slow that roll down, saying, “Hey, what's the business rationale behind you making a change? Why do you actually want to go about leveraging a certain, let's say, technology?” I'm just taking more of a generic approach, saying, “Hey, what's the shiny penny today might not be the shiny penny tomorrow.” And also just providing some sort of guidance like, “Hey, let's take a look at project vitality. Let's take a look at some other metrics that projects have, like defect close ratio—you know, how often it's updates happening, what's your security posture?” And so just walking through a more, I would say the non-fun tasks or non-functional tasks, and also looking about how to operationalize something like, “Hey, given you want to make sure you're maintaining innovation, and making sure that you're maintaining business controls, what are some best operational practices?” You know, want to go for gold, or don't boil the ocean, it's helping people make decisive decisions.Emily: What do you see as sort of the common threads that connect to the conversations that you have?Ravi: Yeah, so I think a lot of the common threads are usually like people say, “Oh, we have to have it. We're going to fall behind if you don't use XYZ technology.” And when you really start getting to talking to them, it's like, let's try to line up some sort of technical debt or business problem that you have, and how about are you going to solve these particular technical challenges? It's something that, of the space I play into, which is ironic, it's the double-edged sword, I call it ‘chasing conference tech.' So, sometimes people see a really hot project, if my team implements this, I can go speak at a conference about a certain piece of technology. And it's like, eh, is that a really rational reason? Maybe. It kind of goes into taking the conversation slightly somewhere else. One of the biggest challenges I think, let's say if you're kind of climbing the engineering ranks—and this is something that I had to do as I went from a junior to a staff to a principal engineer in my roles—with that it's always having some sort of portfolio. So, if you speak at a conference, you have a portfolio, people can Google your name, funny pictures of you are not the only things that come up, but some sort of technical knowledge, and sometimes that's what people are chasing. So, it's really trying to have to balance that emotional decision with what's best for the firm, what's best for you, and just what's best for the team.Emily: That's actually a really interesting question is sometimes what's best for the individual engineer is not what's best for the organization. And when I say individual engineer, maybe it's not one individual, but five, or the team. How do you sort of help piece together and help people understand here's the business reason, that's organization-wide, but here's my personal motivation, and how do I reconcile these, and is there a way even to get both?Ravi: There actually is a way to get both. I call it the 75/25 percent rule. And let's take all the experience away from the engineers, to start with a blank slate. It has to do with the organization. An organization needs to set up engineers to be successful in being innovative. And so if we take the timeline or the scale all the way back to hiring, so when I like to hire folks, I always like to look at—my ratio is a little bit different than 75/25. I'm more of a 50/50. You bring 50 percent of the skills, and you'll learn 50 percent of the skills, versus more conservative organizations would say, “You know what? You have 75 percent of the skills, if you can learn 25 percent of the skills, this job would be interesting to you.” Versus if you have to learn 80 percent, it's going to be frustrating for the individual. And so having that kind of leeway to make decisions, and also knowing that technical change can take a lot of time, I think, as an engineer, as an engineer—as talking software engineering professions as a whole, how do you build your value? So, your value is usually calculated in two parts. It's calculated in your business domain experience and your technical skills. And so when you go project to project—and this is what might be more of, hey, if you're facing too big of a climb, you'll usually change roles. Nobody is in their position for a decade. Gone are the days that you're a lifetime engineer on one project or one product. It's kind of a given that you'll change around that because you're building your repertoire in two places: you're building domain experience, and you're building technical experience. And so knowing when to pick your battles, as cliche as that sounds, oh, you know what, this particular technology, this shiny penny came out. I seen a lot of it when Kubernetes came out, like, “Oh, we have to have it.” But—or even a lot of the cloud-native and container-based and all the ‘et cetera accessories' as I call it, as those projects get steam surrounding it. It's, “We have to have it.” It's like, eh. It's good for resume building, but there's your things to do on your own also to learn it. I think we live in a day of open source. And so as an engineer, if I want to learn a new skill, I don't necessarily have to wait for my organization to implement it. I could go and play, something like Katacoda, I can go do things on my own, I can learn and then say, “You know what, this is a good fit. I can make a bigger play to help implement it in the organization than just me wanting to learn it.” Because a lot of the learning is free these days, which I think it's amazing. I know that was a long-winded answer. But I think you can kind of quench the thirst of knowledge with playing it on your own, and that if it makes sense, you can make a much better case to the business or to technology leadership to make change.Emily: And what do you think the core business motivations are for most of the organizations that you end up talking to?Ravi: Yeah, [unintelligible] core motivation to leveraging cloud-native technology, it really depends on organization to organization. I'm pretty fortunate that I get to span, I think, a wide swath of organization—so from startups to pretty established enterprises—I kind of talk about the pretty established enterprises. A lot of the business justification, it might not be a technical justification, but there's a pseudo technical business reason, a lot of times, though, I when I talk to folks, they're big concern is portability. And so, like, hey, if you take a look at the dollar and cents rationale behind certain things, the big play there is portability. So, if you're leveraging—we can get into the definition of what cloud-native resources are, but a big draw to that is being portable—and so, hopefully, you're not tied down to a single provider, or single purveyor, and you have the ability to move. Now, that also ties into agility. Supposedly, if you're able to use ubiquitous hardware or semi-ubiquitous software, you were able to move a little bit faster. But again, what I usually see is folk's main concern is portability. And then also with that is [unintelligible] up against scale. And so as—looking at ways of reducing resources, if you could use generics, you're able to shop around a little bit better, either internally or externally, and help provide scale for a softer or lesser cost.Emily: And how frequently do you think the engineers that you talked to are aware of those core business motivations?Ravi: Hmm, it really depends on—I'm always giving you the ‘depends' answer because talking to a wide swath of folks—where I see there's more emotion involved in a good way if there's closer alignment to the business—which is something hard to do. I think it is slowly eroding and chipping away. I've definitely seen this during my career. It's the old stodgy business first technology argument, right. Like, modern teams, they're very well [unintelligible] together. So, it's not a us versus them or cat versus dog argument, “Oh, why do these engineers want to take their sweet time?” versus, “Why does the business want us to act so fast?” So, having the engineers empowered to make decisions, and have them looked at instead of being a cost center, as the center of innovation is fairly key. And so having that type of rationale, like, hey, allowing the engineers to give input into feature development, even requirement development is something I've seen changed throughout my career. It used to be a very special thing to do requirements building, versus most of the projects that I've worked on now—as an engineer, we're very, very well attuned to the requirements with the business.Emily: Do you think there's anything that gets lost in translation?Ravi: Oh, absolutely. As people, we're emotional. And so if we're all sum total of our experiences—so let's say if someone asked, Emily, you and I a question, we would probably have four different answers for that person, just because maybe we have differences in opinions, differences of sum totals of experience. And I might say, “Hey, try this or this,” and then you might say, “Try that or that.” So, it really depends. Being lost in translation is always—it's been a fundamental problem in requirements gathering and it's continued to be a fundamental problem. I think just taking that question a step further, is how you go about combating that? I think having very shortened feedback cycles are very important. So, if you have to make any sort of adjustments, gone are the days I think when I started my career, waterfall was becoming unpopular, but the first project or two I was on was very waterfall-ish just because of the size of the project we worked on, we had to agree on lots of things; we were building something for six months. Versus, if you look at today, modern development methodologies like Agile, or Scaled Agile, a lot of the feedback happens pretty regularly, which can be exhausting, but decisions are made all the time.Emily: Do you think in addition to mistranslations, do you think there are any misconceptions? And I'm talking about sort of on both sides of this equation, you know, business leaders or business motivations, and then also technologists, and let's refocus back to talk about cloud-native in particular. What sort of misconceptions do you think are sort of floating out there about cloud-native and what it means?Ravi: Yeah, so what cloud-native means—it means something different to everybody. So, you listen to your podcasts for a couple episodes, if you asked any one of the guests the question, we all would give you a different answer. So, in my definition of cloud-native—and then I'll get back to what some of the misconceptions are—I have a very basic definition: cloud-native means two pillars. It means your architecture, or your platform needs to be ephemeral, and it needs to be [indibited]. So, it needs to be able to be short-lived, and be consistent, which are two things that are at odds with each other. But if you kind of talk to folks that, hey, they might be a little more slighted towards the business, they have this idea that cloud-native will solve all your problems. So, it reminds me a lot of big data back in the day. “Oh, if you have a Hadoop cluster, it will solve all of our logistics and shipping problems.” No. That's the technology. If you have Kubernetes, it will solve all of our problems. No. That's the technology. It's just a conduit of helping you make changes. And so just making sure that understand that hey, cloud-native doesn't mean that you get the checkmark that, “Oh, you know what? We're stable. We're robust. We can scale by using all cloud-native technologies,” because cloud-native technologies are actually quite complicated. If you're introducing a lot of complexity to your architecture, does it make sense? Does that make sense? Does it give you the value you're looking for? Because at the end of the day, and this is kind of something, the older I get, the more I believe it, is that your customers don't care how you did something; they care what the result is. So, if your web application's up, they don't care if you're running a simple LAMP stack, they just care that the application is up, versus using the latest Kubernetes stack, but using some sort of cloud-native NoSQL database, and we're using [Istio], and we're using, pick your flavor du jour of cloud-native technology, your end customer actually doesn't care how you did it. They care what happened.Emily: We can talk about misconceptions that other people have, but is there anything that continues to surprise you?Ravi: Yeah, I think the biggest misconception is that there's very limited choice. And so I'll play devil's advocate, I think the CNCF, the Cloud Native Computing Foundation, there's lots of projects, I've seen the CNCF, they have something called the CNCF Landscape, and I seen it grow from 200 cards, it was 1200 cards at KubeCon, I guess, end of last year in San Diego, and it's hovering around 1500 cards. So, these cards means there's projects or vendors that play in this space. Having that much choice—this is usually surprising to people because they—if you're thinking of cloud-native, it's like saying Kleenex today, and you think of Kubernetes or other auxiliary product or project that surrounds that. And a lot of misconception would be it's helping solve for complexity. It's the quintessential computer science argument. All you do in computer science is move complexity around like an abacus. We move it left to right. We're just shifting it around, and so by leveraging certain technologies there's a lot of complication, a lot of burden that's brought in. For example, if you want to leverage, let's say, a service Istio, Istio will not solve all your networking problems. In fact, it's going to introduce a whole set of problems. And I could talk about my biggest outage, and one of the things I see with cloud-native is a lot of skills are getting shifted left because you're codifying areas that were not codified before. But that's something I would love to talk about.Emily: Tell me about your biggest outage that sounds interesting.Ravi: Yeah, I didn't know how it would manifest itself. It's ways, I think, until, like, years later that I didn't have the aha moment. I used to think it was me, it probably still is me, but—so the year was 2013, and I was working for a client, and we were—it's actually a large news site—and so we were in the midst of modernizing their application, or their streaming application. And so I was one of the first applications to actually go to AWS. And so my background is in Java, so I have a Java software engineer or J2ED or JEE engineer, and having to start working more in infrastructure was kind of a new thing, so I was very fortunate up until 2013-ish up until this point that I didn't really touch the infrastructure. I was immune to that. And now being more, kind of becoming a more senior engineer was in charge of the infrastructure for the application—which is kind of odd—but what ended up happening that—this is going to be kind of funny—since I was one of the first teams to go to AWS, the networking team wouldn't touch the configurations. So, when we were testing things, and [unintelligible] environments, we had our VPC CIDR rules—so the traffic rules—wide open. And then as we were going into production, there were rules that we had to limit traffic due to a CIDR so up until 2013, I thought a C-I-D-R like a CIDR was something you drink. I was like, “What? Like apple cider?” So, this shows you how much I know. So, basically, I had to configure the VPC or Virtual Private Cloud networking rules. Finally, when we deployed the application, unknowing to myself, CIDR calculation is a significant digit calculation. So, the larger the number you divide by, the more IPs you let in. And so instead of dividing by 16, I divided by 8. I was like, “Oh, you'll have a bigger number if you divide by a smaller number.” I end up cutting off half the traffic of the internet when we deployed to production. So, that was a very not smooth way of doing something. But how did this manifest itself? So, the experts, who would have been the networking team, refused to look at my configuration because it was a public cloud. “Nope, you don't have a slot in our data center, we look at it.” And poor me, as a JEE or J2EE engineer, I had very little experience networking. Now, if you fast forward to what this means today, a lot of the cloud-native stack, are again, slicing and dicing these CNCF cards, a lot of this, you're exposing different, let's say verticals or dimensions to engineers that they haven't really seen before. A lot of its networking related a lot of it can be storage related. And so, as a software engineer, these are verticals that I'd never had to deal with before. Now, it's kind of ironic that in 2020, hey, yes, you will be dealing with certain configurations because, hey, it's code. So, it's shifting the burden left towards the developer that, “Oh, you know what, you know networking—” or, “You do need to know your app, so here's some Istio rules that you need to include in your packaging of your application.” Which folks might scratch your head. So, yeah, again, it's like shifting complexity away from folks that have traditional expertise towards the developer. Now, times are changing. I seen a lot of this in years gone by, “Oh, no. These are pieces of code. We don't want to touch it.” Being more traditional or legacy operations team, versus today, everybody—it's kind of the merging of the two worlds. The going joke is all developers are becoming infrastructure engineers, and infrastructure engineers are becoming software engineers. So, it's the perfect blend of two worlds coming together.Emily: That's interesting. And I now think I understand what you mean by skills shifting left. Developers have to know more, and more, and more. But I'm also curious, there's also people who talk about how Kubernetes, one of its failures is that it forces this shift left of skills and that the ideal world is that developers don't need to interact with it at all. That's just a platform team. What do you think about that?Ravi: These are awesome questions. These are things I'm very passionate about. I definitely seen the evolution. So, I've been pretty fortunate that I was jumping on the application infrastructure shift around 2014, 2015, so right when Kubernetes was coming of age. So, most of my background was in distributed systems. So, I'm making very large distributed Java applications. And so when Kubernetes came out, the teams that I worked on, the applications that were deployed to Kubernetes were actually owned by the app dev team. The infrastructure team wouldn't even touch the Kubernetes cluster. It was like, “Oh, this is a development tool. This is not a platform tool.” The platform teams that I were interacting with 2015, 2016, as Kubernetes became more popular than ever, they were the legacy—well, hate to say legacy because it's kind of my background too—they were the remaining middleware engineers. We maintained a web server cluster, we maintained the message broker cluster, we maintained XYZ distributed Java infrastructure cluster. And so when looking at a tool like Kubernetes, or even there were different platforming services, so the paths I've leveraged early, or mid-2010s was Red Hat OpenShift, before and after the Kubernetes migration inside of OpenShift. And so looking at a different—how teams are set up, it used to be, “Oh, this is an app dev item. This is what houses your application.” Versus today, because the workloads are so critical that are going on to say platforms such as Kubernetes, it was that you really need that system engineering bubble of expertise. You really need those platform engineers to understand how to best scale, how to best purvey, and maintain a platform like Kubernetes. Also, one of the odd things are—going back to your point, Emily, like, hey, why things were tossed over either to the development team or going back to a developing software engineer myself, do we care what the end system is?So, it used to be, I'll talk about Java-land here for a minute, give you kind of long-winded answer of back in Java land, we really used to care about the target system, not necessarily for an application that have one node, but if we had to develop a clustered application. So, we have more than one node talking to each other, or a stateful application, we really had start developing to a specific target system. Okay, I know how JBoss WildFly clusters or I know how IBM WebSphere or WebLogic clusters. And so when we're designing our applications, we had to make sure that we play well into those clustering mechanisms. With Kubernetes, since it's generic, you don't necessarily have to play into those clustering mechanisms because there's a basic understanding. But that's been the biggest Achilles heel in Kubernetes. It wasn't designed for those type of workloads, stateful workloads that don't like dying very often. That's kind of been the push or pull. It's just a tool, there's a lot of generic, so you can assume that the target platform will handle a certain way. And you're slowly start backing off the case that you're building to a specific target platform. But as Kubernetes has evolved, especially with the operator framework, you actually are starting to build to Kubernetes in 2018, 2019, 2020.Emily: It actually brought up a question for me that, at risk of sounding naive myself, I feel like I never meet anybody who introduces themselves as a platform engineer. I meet all these developers, everyone's a developer evangelist, for example, or their background is as a developer, I feel like maybe once or twice, someone has introduced themselves as, “I'm a platform engineer,” or, “I'm an operations specialist.” I mean, is that just me? Is that a real thing?Ravi: They're very real jobs. I think… it's like saying DevOps engineer, it means something else to who you talk to you. So, I'll harp on, like ‘platform engineer.' so kind of like, the evolution of the platform engineer, if you would have talked to me in 2013, 2014, “Hey, I'm a platform engineer,” I would think that you're a software engineer focused on platform tools. Like, “Hey, I focus on authentication, authorization.” You're building—let's say we had a dozen people on this call and we're working for Acme Incorporated, there's modules that transcend every one of our teams. Let's say logging, or let's say login, or let's say, some sort of look and feel. So, the platform engineer or the platform engineering development focused platform engineering team would make common reusable modules throughout. Now, with the great rise of platforms as a service, like PCF, and OpenShift, and DCOS, they became kind of like a shift. The middleware engineers that were maintaining the message broker clusters, maintaining your web application server clusters, they're kind of shifting towards one of those platforms. Even today, Kubernetes, pick your provider du jour of Kubernetes. And so those are where the platform engineers are today. “Hey, I'm a platform engineer. I focus on OpenShift and Kubernetes.” Usually, they're very vertically focused on one or more specific platforms. And operations folks can ride very big gamut. Usually, if you put, “operations” in quotes, usually they're systems or infrastructure engineers that are very focused on the infrastructure where the platform's run.Emily: I'm obviously a words person, and it just seems like there's this vocabulary issue where everybody knows what a developer is, and so it's easy to say, “Oh, I'm a developer.” But then everything else that's related to engineering, there's not quite as much specificity, precisely because you said everybody has a slightly different understanding. It's kind of interesting.Ravi: Yeah, it's like, I think as a engineer, we're not one for titles. So, I think a engineer is a engineer. I think if you asked most engineers, it's like, “Yeah, I'm a engineer.” It's so funny, a good example of that is Tim Berners-Lee, the person who created WWW, the World Wide Web. If you looked at his LinkedIn, he just says he's a web developer. And he invented WWW. So, usually engineering-level folks, you're not—at least for myself—is not one for title.Emily: The example that you gave regarding the biggest outage of your career was basically a skills problem. Do you think that there's still a skills or knowledge issue in the cloud-native world?Ravi: Oh, absolutely. We work for incentivization. You know, my mortgage is with PNC, and they require a payment every month, unfortunately. So, I do work for an employer. Incentivization is key. So, kind of resume chasing, conference chasing there's been some of that in the cloud-native world, but what ends up happening more often than not is that we're continuously shifting left. A talk I like to give is called, “The Engineering Burden is on the Rise.” And taking a look at what, let's say, a software engineer was required to do in 2010 versus what a software engineer is required to do today in 2020. And there's a lot more burden in infrastructure that, as a software engineer you didn't have to deal with. Now, this has to do with two things, or actually one particular movement. There's a movie company, or a video company in Los Gatos, California, and there's a book company in South Lake Union in Seattle. And so these two particular companies given the rise of what's called a full lifecycle developer. Basically, if you run it, or if you operate—you operate what you run, or if you write it, you run it. So, that means that if you write a piece of code, you're in charge of the operations. You have support, you're in charge of the SLAs, SLOs, SLIs. You're ultimately responsible if a customer has a problem. And can you imagine the number of people, the amount of skill set that requires? There's this concept of a T-shaped skill that you have to have experience in so many different platforms, that it becomes a very big burden. As an engineer, I don't envy anybody entering a team that's leveraging a lot of cloud-native technology because most likely a lot of that onus will fall on the software engineer to create the deployable, to create how you build it, to fly [unintelligible] in your CI stack, write the configuration that builds it, write the configuration deploys it, write the networking rules, write how you test it, write the login interceptors. So, there's a lot going on.Emily: Is there anything else that you want to add about your experience with cloud-native that I haven't really thought to ask, yet?Ravi: It's not all doom and gloom. I'm very positive on cloud-native technologies. I think it's a great equalizer. You're kind of going back—this might be a more intrinsic, like a 30-second answer here. If you taking back that I wanted to learn certain skills in 2010, I basically had to be working for a firm. So, 2010, I was working for IBM. So, there's certain distributed Java problems I wanted to solve. I basically had to be working for a firm because the software licensing costs were so expensive, and that technology wasn't very democratized. Looking at cloud-native technology today, there's a big, big push for open source, which open source is R&D methodology. That's what open source is, it helps alleviate some sort of acquisition—but not necessarily adoption—problems. And you can learn a lot. Hey, you could pick up any project and just try to learn, try to run it. Pick up these particular distributed system skills that were very guarded, I would say, a decade ago, it's being opened up to the masses. And so there's a lot to drink from, but you can drink as much as you want from the CNCF or the cloud-native garden hose.Emily: Do you have a software engineering tool that you cannot live without?Ravi: Recently, because I deal in a lot of YAML, I need a YAML linter. So, YAML is a space-separated language. As a human, I can't tell you what spaces are. Like, you know, if you have three spaces, and the next line you have four spaces. So, I use a YAML linter. It puts periods for me, so I can count them because it's been multiple times that my demo is not syntactically correct because I missed a space and I can't see it on my screen.Emily: And how can listeners connect with you?Ravi: Oh, yeah. You can hit me up on Twitter @ravilach, R-A-V-I-L-A-C-H. Or come visit us at Harness at www.harness.io. I run the Harness community, so community.harness.io. We have a Slack channel and a Discourse, and always excited to interact with people.Emily: Thanks for listening. I hope you've learned just a little bit more about the business of cloud-native. If you'd like to connect with me or learn more about my positioning services, look me up on LinkedIn: I'm Emily Omier, that's O-M-I-E-R, or visit my website which is emilyomier.com. Thank you, and until next time.Announcer: This has been a HumblePod production. Stay humble.
This is definitely not the episode promised to you this week, BUT that episode is coming soon, and it will be T O A S T Y (☉。☉)! This week, the guys bring out their inner Gen Z and present several app ideas in a king-of-the-hill style free-for-all. Today's INGENUOUS, FUTURE-SHAPING MOBILE APPLICATIONS: Reliable Steering Wheel Shopping, SIDR™, Emergency Hotline Recorder, CIDR™, Streamlined Streaming, Side Her™, Cyder™, and a VR Social Platform. (ALL APPS LISTED ABOVE ARE PROPERTY OF TANGENT INC. AND WE WILL LITIGATE) The Podcast Recommends: L.A. Story Evil Dead 2 Stuart Ritchie, Science Fictions Get in touch at thetangentcast@gmail.com or (479)339-9041.
Link to bioRxiv paper: http://biorxiv.org/cgi/content/short/2020.07.02.184796v1?rss=1 Authors: Singh, A., Hulsmeier, J., Kandi, A. R., Pothapragada, S. S., Hillebrand, J., Petrauskas, A., Agrawal, K., RT, K., Thiagarajan, D., Vijayraghavan, K., Ramaswami, M., Bakthavachalu, B. Abstract: Ataxin-2 is a conserved translational control protein associated with spinocerebellar ataxia type II (SCA2) and amyotrophic lateral sclerosis (ALS) as well as an important target for ALS therapeutics under development. Despite its clinical and biological significance, Ataxin-2's activities, mechanisms and functions are not well understood. While Drosophila Ataxin-2 (Atx2) mediates mRNP condensation via a C-terminal intrinsically disordered domain (cIDR), how Ataxin-2 IDRs work with structured (Lsm, Lsm-AD, and PAM2) domains to enable positive and negative regulation of target mRNAs remains unclear. Using TRIBE (Targets of RNA-Binding Proteins Identified by Editing) technology, we identified and analysed Atx-2 target mRNAs in the Drosophila brain. We show that Atx2 preferentially interacts with AU-rich elements (AREs) in 3'UTRs and plays a broad role in stabilization of identified target mRNAs. Strikingly, Atx2 interaction with its targets is dependent on the cIDR domain required for neuronal-granule formation. In contrast, Atx2 lacking its Lsm domain not only interacts more efficiently with the target mRNA identified, but also forms larger RNP granules. Providing an extensive dataset of Atx2-interacting brain mRNAs, our results demonstrate that Atx2: (a) interacts with target mRNAs within RNP granules; (b) modulates the turnover of these target mRNAs; (c) has an additional essential role outside of mRNP granules; and (d) contains distinct protein domains that drive or oppose RNP-granule assembly. These findings increase understanding of neuronal translational control mechanisms and inform Ataxin-2-based interventions in development for SCA2 and ALS. Copy rights belong to original authors. Visit the link for more info
In this episode, William Freelove and Travis Lazar take to the mics to discuss the importance of DevOps in a small company, the prevalent use of open source tools in our workflow, and how Ampere is efficiently validating hardware and software. Travis also coins a new term (CIDR) and explains how continuous* methodologies improve software quality.
This article can be reviewed for FREE on reseachgate.net at https://tinyurl.com/trzw6rj. Check out my typed summary of this episode at otovets.com/cuttingedge. This summary is best viewed in a browser but is mobile friendly as well. Efficacy of repeatedly used CIDR device in cattle reproduction: a metaanalysis review of progesterone concentration and conception rate Published by Muhammad Furqan Asghar CHACHER, Armağan ÇOLAK, Armağan HAYIRLI Hypothesis: Considerable residual P4 concentration exists in used CIDR (U-CIDR) devices and the achieved blood P4 concentration on days 14–15 after insertion suggests that CIDR devices can be reused upon disinfection in order to minimize the cost of using such a device. Objective: To withdraw conclusions from the available literature regarding P4 concentrations in devices and animals as well as conception rate (CR) responses in cases of multiple U-CIDR devices subjected to various disinfection methods in cattle. Location: Department of Obstetrics and Gynecology and Department of Animal Nutrition and Nutritional Disorders at Ataturk University Turkey. Methods: Two datasets were compiled from 8 and 7 research articles involving 3434 (2653 heifers + 771 lactating cows + 10 ovariectomized cows) and 7301 cattle (3879 heifers + 3422 lactating cows) to evaluate blood P4 concentration and conception rate, respectively, in response to repeatedly used CIDR devices after sanitization via autoclaving and disinfection. Outcomes: As the number of CIDR usages increased, blood P4 concentration decreased linearly (y = –0.484X + 3.135, R2 = 0.99, P < 0.001). Blood P4 concentration (1.52 vs. 2.20 ng/mL; P < 0.002) and conception rate (40.76 vs. 32.96%, P < 0.05) for lactating cows were lower than those for heifers. The sanitization method did not affect blood P4 concentration, but reused CIDR device subjected to disinfection was associated with reduced conception rate. In summary, depending upon the initial P4 load (1.38–1.90 g), the CIDR device could be used twice in lactating cows and four times in heifers after autoclaving to achieve target blood P4 concentrations.
Everything is moving to the cloud, which makes it increasingly important to secure your cloud infrastructure and minimize the threat of potential attackers. With a virtual private cloud (VPC)—your own private network in the cloud that you can launch your own instances into—this can be done with VPC Peering, connecting VPCs together to create a path between them to keep your data safe and accessible to you alone. Although typically performed in a single cloud provider, it is possible to do in more than one—think of it as your cloud routerDaniel LaMotte (Site Reliability Engineer, Confluent) walks through the details of cloud networking and VPC peering: what it is, what it does, and how to launch a VPC in the cloud, plus the difference between AWS PrivateLink and AWS Transit Gateway, CIDR, and its accessibility across cloud providers. EPISODE LINKSVPC Peering in Confluent CloudJoin the Confluent Community SlackFully managed Apache Kafka as a service! Try free.
stdout.fm 34번째 로그에서는 WWDC 2019에 참여하고 오신 김정(@godrm) 님을 모시고 애플의 새로운 소식들에 대해서 이야기를 나눴습니다. 게스트: @godrm 참가자: @seapy, @nacyo_t, @raccoonyy 김정 (Kim Jung) (@godrm) | Twitter 코드스쿼드 | 소프트웨어 개발 교육 및 기술 컨설팅 | CODESQUAD 코드스쿼드: 네이버 지도 미림타워: 네이버 지도 stdout_033.log: Matz 블로그 부활, 기술서전, 구글 클라우드 장애, WWDC 2019 | 개발자 팟캐스트 stdout.fm stderr_014.log: 마법 같이 이해되는 마법사의 CIDR 해설 | 개발자 팟캐스트 stdout.fm Apple WWDC 2011: Steve Jobs’ last keynote - YouTube Apple to host annual Worldwide Developers Conference June 3-7 in San Jose - Apple PyCon Korea - 게시물 iOS apps will run on macOS with Project Catalyst | TechCrunch Xcode - SwiftUI - Apple Developer Flux | Application Architecture for Building User Interfaces iOS 13 Preview - Apple iPadOS Preview - Apple Responsive web design - Wikipedia AppleScript - Wikipedia Apple Arcade - Apple Sal Soghoian - Wikipedia The Twitter app is officially returning to the Mac later this year What’s New in Alfred 4 Alfred on the Mac App Store Slack on the App Store Notion - Notes, Tasks, Wikis on the App Store Sign In with Apple - Apple Developer Facebook F8 Keynote: Messenger Announced With End-to-End Encryption Mozilla Firefox Updates to the App Store Review Guidelines - News - Apple Developer EUGDPR – Information Portal macOS Catalina 10.15 Beta Release Notes | Apple Developer Documentation Apple replaces bash with zsh as the default shell in macOS Catalina - The Verge 필립 W. 실러 - 위키백과, 우리 모두의 백과사전 Pro Display XDR - Apple NewerTech NuMount VESA Adapter for Apple iMac Buy VESA Mount Adapter Kit for iMac Pro - Apple Mac Pro - Apple Weezer performs at Apple’s WWDC 2019 Bash - 9to5Mac Fall Out Boy Stage Set for Lady Gaga Performance at Apple Park - YouTube Custom AWS Lambda Runtimes - AWS Lambda Apple’s new Find My app will find your devices even if they’re offline - The Verge 가전주부 GJJB - YouTube Special: Objective-C Endgame (스페셜 게스트: 김정 님) — Kudo Networks
14번째 에피소드의 번외편입니다. @asbubam 님이 CIDR을 쉽게 설명 해주셨습니다.
14번째 에피소드의 번외편입니다. @asbubam 님이 CIDR을 쉽게 설명 해주셨습니다. 참가자: @asbubam, @seapy, @raccoonyy, @nacyo_t
stdout.fm 12번째 로그에서는 Seocho.rb, GitHub 새로운 가격 정책, AWS Fargate 가격 인하, AWS VPC 등에 대해서 이야기를 나눴습니다. 참가자: @seapy, @raccoonyy, @nacyo_t, (@ecleya) Seocho.rb 첫 번째 모임: 서버리스 루비 | Festa! 네이버 지도 - 서초구 Amazon.com: AVerMedia Live Gamer Ultra (GC553) HDCP: High-bandwidth Digital Content Protection - Wikipedia Enable HDCP | PlayStation®4 User’s Guide Confreaks TV RORLab KR - YouTube Mac용 QuickTime Player에서 화면 기록하기 - Apple 지원 대도서관, 유튜브 떠난다…트위치에 새둥지 - 게임톡 Festa! 이벤트를 만나는 가장 쉬운 방법 하시코프 한국 사용자모임의 두 번째 서울 밋업 | Festa! 스타트업 ‘온오프믹스’ 대표·부대표, 강간·추행 혐의 피소 FEConf 2018 | Festa! Meetgo :: 오프라인 모임 플랫폼 밋고 함께의 가치 | Meetup TECH PLAY[テックプレイ] - IT勉強会・セミナーなどのイベント情報検索サービス 사이를 잇는 Goree - Planet Hackathon 2018 by GDG x 9XD New year, new GitHub: Announcing unlimited free private repos and unified Enterprise offering | The GitHub Blog 깃헙(GitHub) 새로운 가격 정책 및 엔터프라이즈 플랜 발표 - 무료 플랜도 비공개 저장소를 무제한 사용 가능 | 44bits.io GitLab Continuous Integration & Delivery | GitLab GitLab Joins Unicorn Club With $100m Raise - DevOps.com Pricing | Bitbucket All Remote | GitLab site / master / issues / #4307 - Feature Request: Contributor Statistics (BB-4787) — Bitbucket Import your project from GitHub to GitLab | GitLab github/VisualStudio: GitHub Extension for Visual Studio Announcing AWS Fargate Price Reduction by Up To 50% AWS 파게이트(Fargate) 가격 30%-50% 인하 발표 | 44bits.io Installing and Configuring SSM Agent - AWS Systems Manager AWS Systems Manager Parameter Store - AWS Systems Manager AWS Launches Secrets Support for Amazon Elastic Container Service AWS Fargate 플랫폼 버전 1.3, 보안 지원 추가 Key Management Service – Amazon Web Services(AWS) segmentio/chamber: CLI for managing secrets Vault by HashiCorp AWS NAT Gateway에서 NAT instance로 전환하기 – asbubam’s blog NAT Gateways - Amazon Virtual Private Cloud AWS 신규 NAT 게이트웨이 서비스 출시! | Amazon Web Services 한국 블로그 DigitalOcean - Cloud Computing, Simplicity at Scale Amazon Lightsail VPC Cloud VPS호스팅 | 가상 호스팅 | Amazon Web Services Introduction to IP addresses, subnet masks, and CIDR notation | JoeQuery
Insight into TrueOS and Trident, stop evildoers with pf-badhost, Flashback to FreeBSDcon ‘99, OpenBSD’s measures against TLBleed, play Morrowind on OpenBSD in 5 steps, DragonflyBSD developers shocked at Threadripper performance, and more. ##Headlines An Insight into the Future of TrueOS BSD and Project Trident Last month, TrueOS announced that they would be spinning off their desktop offering. The team behind the new project, named Project Trident, have been working furiously towards their first release. They did take a few minutes to answer some of our question about Project Trident and TrueOS. I would like to thank JT and Ken for taking the time to compile these answers. It’s FOSS: What is Project Trident? Project Trident: Project Trident is the continuation of the TrueOS Desktop. Essentially, it is the continuation of the primary “TrueOS software” that people have been using for the past 2 years. The continuing evolution of the entire TrueOS project has reached a stage where it became necessary to reorganize the project. To understand this change, it is important to know the history of the TrueOS project. Originally, Kris Moore created PC-BSD. This was a Desktop release of FreeBSD focused on providing a simple and user-friendly graphical experience for FreeBSD. PC-BSD grew and matured over many years. During the evolution of PC-BSD, many users began asking for a server focused version of the software. Kris agreed, and TrueOS was born as a scaled down server version of PC-BSD. In late 2016, more contributors and growth resulted in significant changes to the PC-BSD codebase. Because the new development was so markedly different from the original PC-BSD design, it was decided to rebrand the project. TrueOS was chosen as the name for this new direction for PC-BSD as the project had grown beyond providing only a graphical front to FreeBSD and was beginning to make fundamental changes to the FreeBSD operating system. One of these changes was moving PC-BSD from being based on each FreeBSD Release to TrueOS being based on the active and less outdated FreeBSD Current. Other major changes are using OpenRC for service management and being more aggressive about addressing long-standing issues with the FreeBSD release process. TrueOS moved toward a rolling release cycle, twice a year, which tested and merged FreeBSD changes directly from the developer instead of waiting months or even years for the FreeBSD review process to finish. TrueOS also deprecated and removed obsolete technology much more regularly. As the TrueOS Project grew, the developers found these changes were needed by other FreeBSD-based projects. These projects began expressing interest in using TrueOS rather than FreeBSD as the base for their project. This demonstrated that TrueOS needed to again evolve into a distribution framework for any BSD project to use. This allows port maintainers and source developers from any BSD project to pool their resources and use the same source repositories while allowing every distribution to still customize, build, and release their own self-contained project. The result is a natural split of the traditional TrueOS team. There were now naturally two teams in the TrueOS project: those working on the build infrastructure and FreeBSD enhancements – the “core” part of the project, and those working on end-user experience and utility – the “desktop” part of the project. When the decision was made to formally split the projects, the obvious question that arose was what to call the “Desktop” project. As TrueOS was already positioned to be a BSD distribution platform, the developers agreed the desktop side should pick a new name. There were other considerations too, one notable being that we were concerned that if we continued to call the desktop project “TrueOS Desktop”, it would prevent people from considering TrueOS as the basis for their distribution because of misconceptions that TrueOS was a desktop-focused OS. It also helps to “level the playing field” for other desktop distributions like GhostBSD so that TrueOS is not viewed as having a single “blessed” desktop version. It’s FOSS: What features will TrueOS add to the FreeBSD base? Project Trident: TrueOS has already added a number of features to FreeBSD: OpenRC replaces rc.d for service management LibreSSL in base Root NSS certificates out-of-box Scriptable installations (pc-sysinstall) The full list of changes can be seen on the TrueOS repository (https://github.com/trueos/trueos/blob/trueos-master/README.md). This list does change quite regularly as FreeBSD development itself changes. It’s FOSS: I understand that TrueOS will have a new feature that will make creating a desktop spin of TrueOS very easy. Could you explain that new feature? Project Trident: Historically, one of the biggest hurdles for creating a desktop version of FreeBSD is that the build options for packages are tuned for servers rather than desktops. This means a desktop distribution cannot use the pre-built packages from FreeBSD and must build, use, and maintain a custom package repository. Maintaining a fork of the FreeBSD ports tree is no trivial task. TrueOS has created a full distribution framework so now all it takes to create a custom build of FreeBSD is a single JSON manifest file. There is now a single “source of truth” for the source and ports repositories that is maintained by the TrueOS team and regularly tagged with “stable” build markers. All projects can use this framework, which makes updates trivial. It’s FOSS: Do you think that the new focus of TrueOS will lead to the creation of more desktop-centered BSDs? Project Trident: That is the hope. Historically, creating a desktop-centered BSD has required a lot of specialized knowledge. Not only do most people not have this knowledge, but many do not even know what they need to learn until they start troubleshooting. TrueOS is trying to drastically simplify this process to enable the wider Open Source community to experiment, contribute, and enjoy BSD-based projects. It’s FOSS: What is going to happen to TrueOS Pico? Will Project Trident have ARM support? Project Trident: Project Trident will be dependent on TrueOS for ARM support. The developers have talked about the possibility of supporting ARM64 and RISC-V architectures, but it is not possible at the current time. If more Open Source contributors want to help develop ARM and RISC-V support, the TrueOS project is definitely willing to help test and integrate that code. It’s FOSS: What does this change (splitting Trus OS into Project Trident) mean for the Lumina desktop environment? Project Trident: Long-term, almost nothing. Lumina is still the desktop environment for Project Trident and will continue to be developed and enhanced alongside Project Trident just as it was for TrueOS. Short-term, we will be delaying the release of Lumina 2.0 and will release an updated version of the 1.x branch (1.5.0) instead. This is simply due to all the extra overhead to get Project Trident up and running. When things settle down into a rhythm, the development of Lumina will pick up once again. It’s FOSS: Are you planning on including any desktop environments besides Lumina? Project Trident: While Lumina is included by default, all of the other popular desktop environments will be available in the package repo exactly as they had been before. It’s FOSS: Any plans to include Steam to increase the userbase? Project Trident: Steam is still unavailable natively on FreeBSD, so we do not have any plans to ship it out of the box currently. In the meantime, we highly recommend installing the Windows version of Steam through the PlayOnBSD utility. It’s FOSS: What will happen to the AppCafe? Project Trident: The AppCafe is the name of the graphical interface for the “pkg” utility integrated into the SysAdm client created by TrueOS. This hasn’t changed. SysAdm, the graphical client, and by extension AppCafe are still available for all TrueOS-based distributions to use. It’s FOSS: Does Project Trident have any corporate sponsors lined up? If not, would you be open to it or would you prefer that it be community supported? Project Trident: iXsystems is the first corporate sponsor of Project Trident and we are always open to other sponsorships as well. We would prefer smaller individual contributions from the community, but we understand that larger project needs or special-purpose goals are much more difficult to achieve without allowing larger corporate sponsorships as well. In either case, Project Trident is always looking out for the best interests of the community and will not allow intrusive or harmful code to enter the project even if a company or individual tries to make that code part of a sponsorship deal. It’s FOSS: BSD always seems to be lagging in terms of support for newer devices. Will TrueOS be able to remedy that with a quicker release cycle? Project Trident: Yes! That was a primary reason for TrueOS to start tracking the CURRENT branch of FreeBSD in 2016. This allows for the changes that FreeBSD developers are making, including new hardware support, to be available much sooner than if we followed the FreeBSD release cycle. It’s FOSS: Do you have any idea when Project Trident will have its first release? Project Trident: Right now we are targeting a late August release date. This is because Project Trident is “kicking the wheels” on the new TrueOS distribution system. We want to ensure everything is working smoothly before we release. Going forward, we plan on having regular package updates every week or two for the end-user packages and a new release of Trident with an updated OS version every 6 months. This will follow the TrueOS release schedule with a small time offset. ###pf-badhost: Stop the evil doers in their tracks! pf-badhost is a simple, easy to use badhost blocker that uses the power of the pf firewall to block many of the internet’s biggest irritants. Annoyances such as ssh bruteforcers are largely eliminated. Shodan scans and bots looking for webservers to abuse are stopped dead in their tracks. When used to filter outbound traffic, pf-badhost blocks many seedy, spooky malware containing and/or compromised webhosts. Filtering performance is exceptional, as the badhost list is stored in a pf table. To quote the OpenBSD FAQ page regarding tables: “the lookup time on a table holding 50,000 addresses is only slightly more than for one holding 50 addresses.” pf-badhost is simple and powerful. The blocklists are pulled from quality, trusted sources. The ‘Firehol’, ‘Emerging Threats’ and ‘Binary Defense’ block lists are used as they are popular, regularly updated lists of the internet’s most egregious offenders. The pf-badhost.sh script can easily be expanded to use additional or alternate blocklists. pf-badhost works best when used in conjunction with unbound-adblock for the ultimate badhost blocking. Notes: If you are trying to run pf-badhost on a LAN or are using NAT, you will want to add a rule to your pf.conf appearing BEFORE the pf-badhost rules allowing traffic to and from your local subnet so that you can still access your gateway and any DNS servers. Conversely, adding a line to pf-badhost.sh that removes your subnet range from the table should also work. Just make sure you choose a subnet range / CIDR block that is actually in the list. 192.168.0.0/16, 172.16.0.0/12 and 10.0.0.0/8 are the most common home/office subnet ranges. DigitalOcean https://do.co/bsdnow ###FLASHBACK: FreeBSDCon’99: Fans of Linux’s lesser-known sibling gather for the first time FreeBSD, a port of BSD Unix to Intel, has been around almost as long as Linux has – but without the media hype. Its developer and user community recently got a chance to get together for the first time, and they did it in the city where BSD – the Berkeley Software Distribution – was born some 25 years ago. October 17, 1999 marked a milestone in the history of FreeBSD – the first FreeBSD conference was held in the city where it all began, Berkeley, CA. Over 300 developers, users, and interested parties attended from around the globe. This was easily 50 percent more people than the conference organizers had expected. This first conference was meant to be a gathering mostly for developers and FreeBSD advocates. The turnout was surprisingly (and gratifyingly) large. In fact, attendance exceeded expectations so much that, for instance, Kirk McKusick had to add a second, identical tutorial on FreeBSD internals, because it was impossible for everyone to attend the first! But for a first-ever conference, I was impressed by how smoothly everything seemed to go. Sessions started on time, and the sessions I attended were well-run; nothing seemed to be too cold, dark, loud, late, or off-center. Of course, the best part about a conference such as this one is the opportunity to meet with other people who share similar interests. Lunches and breaks were a good time to meet people, as was the Tuesday night beer bash. The Wednesday night reception was of a type unusual for the technical conferences I usually attend – a three-hour Hornblower dinner cruise on San Francisco Bay. Not only did we all enjoy excellent food and company, but we all got to go up on deck and watch the lights of San Francisco and Berkeley as we drifted by. Although it’s nice when a conference attracts thousands of attendees, there are some things that can only be done with smaller groups of people; this was one of them. In short, this was a tiny conference, but a well-run one. Sessions Although it was a relatively small conference, the number and quality of the sessions belied the size. Each of the three days of the conference featured a different keynote speaker. In addition to Jordan Hubbard, Jeremy Allison spoke on “Samba Futures” on day two, and Brian Behlendorf gave a talk on “FreeBSD and Apache: A Perfect Combo” to start off the third day. The conference sessions themselves were divided into six tracks: advocacy, business, development, networking, security, and panels. The panels track featured three different panels, made up of three different slices of the community: the FreeBSD core team, a press panel, and a prominent user panel with representatives from such prominent commercial users as Yahoo! and USWest. I was especially interested in Apple Computer’s talk in the development track. Wilfredo Sanchez, technical lead for open source projects at Apple (no, that’s not an oxymoron!) spoke about Apple’s Darwin project, the company’s operating system road map, and the role of BSD (and, specifically, FreeBSD) in Apple’s plans. Apple and Unix have had a long and uneasy history, from the Lisa through the A/UX project to today. Personally, I’m very optimistic about the chances for the Darwin project to succeed. Apple’s core OS kernel team has chosen FreeBSD as its reference platform. I’m looking forward to what this partnership will bring to both sides. Other development track sessions included in-depth tutorials on writing device drivers, basics of the Vinum Volume Manager, Fibre Channel, development models (the open repository model), and the FreeBSD Documentation Project (FDP). If you’re interested in contributing to the FreeBSD project, the FDP is a good place to start. Advocacy sessions included “How One Person Can Make a Difference” (a timeless topic that would find a home at any technical conference!) and “Starting and Managing A User Group” (trials and tribulations as well as rewards). The business track featured speakers from three commercial users of FreeBSD: Cybernet, USWest, and Applix. Applix presented its port of Applixware Office for FreeBSD and explained how Applix has taken the core services of Applixware into open source. Commercial applications and open source were once a rare combination; we can only hope the trend away from that state of affairs will continue. Commercial use of FreeBSD The use of FreeBSD in embedded applications is increasing as well – and it is increasing at the same rate that hardware power is. These days, even inexpensive systems are able to run a BSD kernel. The BSD license and the solid TCP/IP stack prove significant enticements to this market as well. (Unlike the GNU Public License, the BSD license does not require that vendors make derivative works open source.) Companies such as USWest and Verio use FreeBSD for a wide variety of different Internet services. Yahoo! and Hotmail are examples of companies that use FreeBSD extensively for more specific purposes. Yahoo!, for example, has many hundreds of FreeBSD boxes, and Hotmail has almost 2000 FreeBSD machines at its data center in the San Francisco Bay area. Hotmail is owned by Microsoft, so the fact that it runs FreeBSD is a secret. Don’t tell anyone… When asked to comment on the increasing commercial interest in BSD, Hubbard said that FreeBSD is learning the Red Hat lesson. “Walnut Creek and others with business interests in FreeBSD have learned a few things from the Red Hat IPO,” he said, “and nobody is just sitting around now, content with business as usual. It’s clearly business as unusual in the open source world today.” Hubbard had also singled out some of BSD’s commercial partners, such as Whistle Communications, for praise in his opening day keynote. These partners play a key role in moving the project forward, he said, by contributing various enhancements and major new systems, such as Netgraph, as well as by contributing paid employee time spent on FreeBSD. Even short FreeBSD-related contacts can yield good results, Hubbard said. An example of this is the new jail() security code introduced in FreeBSD 3.x and 4.0, which was contributed by R & D Associates. A number of ISPs are also now donating the hardware and bandwidth that allows the project to provide more resource mirrors and experimental development sites. See you next year And speaking of corporate sponsors, thanks go to Walnut Creek for sponsoring the conference, and to Yahoo! for covering all the expenses involved in bringing the entire FreeBSD core team to Berkeley. As a fan of FreeBSD, I’m happy to see that the project has finally produced a conference. It was time: many of the 16 core team members had been working together on a regular basis for nearly seven years without actually meeting face to face. It’s been an interesting year for open source projects. I’m looking forward to the next year – and the next BSD conference – to be even better. ##News Roundup OpenBSD Recommends: Disable SMT/Hyperthreading in all Intel BIOSes Two recently disclosed hardware bugs affected Intel cpus: - TLBleed - T1TF (the name "Foreshadow" refers to 1 of 3 aspects of this bug, more aspects are surely on the way) Solving these bugs requires new cpu microcode, a coding workaround, *AND* the disabling of SMT / Hyperthreading. SMT is fundamentally broken because it shares resources between the two cpu instances and those shared resources lack security differentiators. Some of these side channel attacks aren't trivial, but we can expect most of them to eventually work and leak kernel or cross-VM memory in common usage circumstances, even such as javascript directly in a browser. There will be more hardware bugs and artifacts disclosed. Due to the way SMT interacts with speculative execution on Intel cpus, I expect SMT to exacerbate most of the future problems. A few months back, I urged people to disable hyperthreading on all Intel cpus. I need to repeat that: DISABLE HYPERTHREADING ON ALL YOUR INTEL MACHINES IN THE BIOS. Also, update your BIOS firmware, if you can. OpenBSD -current (and therefore 6.4) will not use hyperthreading if it is enabled, and will update the cpu microcode if possible. But what about 6.2 and 6.3? The situation is very complex, continually evolving, and is taking too much manpower away from other tasks. Furthermore, Intel isn't telling us what is coming next, and are doing a terrible job by not publically documenting what operating systems must do to resolve the problems. We are having to do research by reading other operating systems. There is no time left to backport the changes -- we will not be issuing a complete set of errata and syspatches against 6.2 and 6.3 because it is turning into a distraction. Rather than working on every required patch for 6.2/6.3, we will re-focus manpower and make sure 6.4 contains the best solutions possible. So please try take responsibility for your own machines: Disable SMT in the BIOS menu, and upgrade your BIOS if you can. I'm going to spend my money at a more trustworthy vendor in the future. ###Get Morrowind running on OpenBSD in 5 simple steps This article contains brief instructions on how to get one of the greatest Western RPGs of all time, The Elder Scrolls III: Morrowind, running on OpenBSD using the OpenMW open source engine recreation. These instructions were tested on a ThinkPad X1 Carbon Gen 3. The information was adapted from this OpenMW forum thread: https://forum.openmw.org/viewtopic.php?t=3510 Purchase and download the DRM-free version from GOG (also considered the best version due to the high quality PDF guide that it comes with): https://www.gog.com/game/theelderscrollsiiimorrowindgotyedition Install the required packages built from the ports tree as root. openmw is the recreated game engine, and innoextract is how we will get the game data files out of the win32 executable. pkgadd openmw innoextract Move the file from GOG setuptesmorrowindgoty2.0.0.7.exe into its own directory morrowind/ due to innoextract’s default behaviour of extracting into the current directory. Then type: innoextract setuptesmorrowindgoty2.0.0.7.exe Type openmw-wizard and follow the straightforward instructions. Note that you have a pre-existing installation, and select the morrowind/app/Data Files folder that innoextract extracted. Type in openmw-launcher, toggle the settings to your preferences, and then hit play! iXsystems https://twitter.com/allanjude/status/1034647571124367360 ###My First Clang Bug Part of the role of being a packager is compiling lots (and lots) of packages. That means compiling lots of code from interesting places and in a variety of styles. In my opinion, being a good packager also means providing feedback to upstream when things are bad. That means filing upstream bugs when possible, and upstreaming patches. One of the “exciting” moments in packaging is when tools change. So each and every major CMake update is an exercise in recompiling 2400 or more packages and adjusting bits and pieces. When a software project was last released in 2013, adjusting it to modern tools can become quite a chore (e.g. Squid Report Generator). CMake is excellent for maintaining backwards compatibility, generally accommodating old software with new policies. The most recent 3.12 release candidate had three issues filed from the FreeBSD side, all from fallout with older software. I consider the hours put into good bug reports, part of being a good citizen of the Free Software world. My most interesting bug this week, though, came from one line of code somewhere in Kleopatra: QUNUSED(gpgagentdata); That one line triggered a really peculiar link error in KDE’s FreeBSD CI system. Yup … telling the compiler something is unused made it fall over. Commenting out that line got rid of the link error, but introduced a warning about an unused function. Working with KDE-PIM’s Volker Krause, we whittled the problem down to a six-line example program — two lines if you don’t care much for coding style. I’m glad, at that point, that I could throw it over the hedge to the LLVM team with some explanatory text. Watching the process on their side reminds me ever-so-strongly of how things work in KDE (or FreeBSD for that matter): Bugzilla, Phabricator, and git combine to be an effective workflow for developers (perhaps less so for end-users). Today I got a note saying that the issue had been resolved. So brief a time for a bug. Live fast. Get squashed young. ###DragonFlyBSD Now Runs On The Threadripper 2990WX, Developer Shocked At Performance Last week I carried out some tests of BSD vs. Linux on the new 32-core / 64-thread Threadripper 2990WX. I tested FreeBSD 11, FreeBSD 12, and TrueOS – those benchmarks will be published in the next few days. I tried DragonFlyBSD, but at the time it wouldn’t boot with this AMD HEDT processor. But now the latest DragonFlyBSD development kernel can handle the 2990WX and the lead DragonFly developer calls this new processor “a real beast” and is stunned by its performance potential. When I tried last week, the DragonFlyBSD 5.2.2 stable release nor DragonFlyBSD 5.3 daily snapshot would boot on the 2990WX. But it turns out Matthew Dillon, the lead developer of DragonFlyBSD, picked up a rig and has it running now. So in time for the next 5.4 stable release or those using the daily snapshots can have this 32-core / 64-thread Zen+ CPU running on this operating system long ago forked from FreeBSD. In announcing his success in bringing up the 2990WX under DragonFlyBSD, which required a few minor changes, he shared his performance thoughts and hopes for the rig. “The cpu is a real beast, packing 32 cores and 64 threads. It blows away our dual-core Xeon to the tune of being +50% faster in concurrent compile tests, and it also blows away our older 4-socket Opteron (which we call ‘Monster’) by about the same margin. It’s an impressive CPU. For now the new beast is going to be used to help us improve I/O performance through the filesystem, further SMP work (but DFly scales pretty well to 64 threads already), and perhaps some driver to work to support the 10gbe on the mobo.” Dillon shared some results on the system as well. " The Threadripper 2990WX is a beast. It is at least 50% faster than both the quad socket opteron and the dual socket Xeon system I tested against. The primary limitation for the 2990WX is likely its 4 channels of DDR4 memory, and like all Zen and Zen+ CPUs, memory performance matters more than CPU frequency (and costs almost no power to pump up the performance). That said, it still blow away a dual-socket Xeon with 3x the number of memory channels. That is impressive!" The well known BSD developer also added, “This puts the 2990WX at par efficiency vs a dual-socket Xeon system, and better than the dual-socket Xeon with slower memory and a power cap. This is VERY impressive. I should note that the 2990WX is more specialized with its asymetric NUMA architecture and 32 cores. I think the sweet spot in terms of CPU pricing and efficiency is likely going to be with the 2950X (16-cores/32-threads). It is clear that the 2990WX (32-cores/64-threads) will max out 4-channel memory bandwidth for many workloads, making it a more specialized part. But still awesome…This thing is an incredible beast, I’m glad I got it.” While I have the FreeBSD vs. Linux benchmarks from a few days ago, it looks like now on my ever growing TODO list will be re-trying out the newest DragonFlyBSD daily snapshot for seeing how the performance compares in the mix. Stay tuned for the numbers that should be in the next day or two. ##Beastie Bits X11 on really small devices mandoc-1.14.4 released The pfSense Book is now available to everyone MWL: Burn it down! Burn it all down! Configuring OpenBSD: System and user config files for a more pleasant laptop FreeBSD Security Advisory: Resource exhaustion in TCP reassembly OpenBSD Foundation gets first 2018 Iridium donation New ZFS commit solves issue a few users reported in the feedback segment Project Trident should have a beta release by the end of next week Reminder about Stockholm BUG: September 5, 17:30-22:00 BSD-PL User Group: September 13, 18:30-21:00 Tarsnap ##Feedback/Questions Malcom - Having different routes per interface Bostjan - ZFS and integrity of data Michael - Suggestion for Monitoring Barry - Feedback Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
It's BSDCan time! Allan and I are both enjoying what is sure to be a super-busy week, but don't think we've forgotten about This episode was brought to you by Interview - Benno Rice - benno@freebsd.org (mailto:benno@freebsd.org) / @jeamland (https://twitter.com/jeamland) Manager, OS & Networking at EMC Isilon Emily Dunham: Community Automation (https://www.youtube.com/watch?v=dIageYT0Vgg) iXsystems 1U Rackmount Server - 4 Bay Hot-Swap SAS/SATA Drive Bays 400W Redundant Power Supply - Single Socket Embedded CPU (48 cores) - 8 DIMM Slots with 16GB DIMMs for a total of 128GB RAM – Dual Gigabit LAN, Dual 10GbE SFP+ and 1 x 40Gb QSFP+ port, (1) PCI-E Expansion Slots + IPMI Dedicated LAN - Cavium ThunderX ARM CN8890 48 Core ThunderX CPU - 2.5GHz per core System has 128GB RAM, 4 x 2TB SATA HDD, Additional Intel i350 (2 x 1GbE) Beastie Bits file considered harmful (http://www.tedunangst.com/flak/post/file-considered-harmful) An open source talk on ZFS. “Intro to ZFS” as a set of open source slides for the community to build on, and to reuse. Go give this talk at your local conference. (https://github.com/problame/talkintrozfs2016) ARMv7 now has a bootloader (http://undeadly.org/cgi?action=article&sid=20160529145411) SHA256/512 speed improvements in FreeBSD 11 (https://svnweb.freebsd.org/base?view=revision&revision=300966) pkgsrc 50th release interviews - Joerg Sonnenberg (http://blog.netbsd.org/tnf/entry/pkgsrc_50th_release_interview_with) DFly versus PC-BSD on a Laptop (http://lists.dragonflybsd.org/pipermail/users/2016-May/249636.html) FreeBSD ifconfig can print subnet masks in CIDR or dotted-quad, finally (https://svnweb.freebsd.org/base?view=revision&revision=301059) Feedback/Questions Eli - Getting rid of ports? (http://pastebin.com/4Y6VYSyN) Morgan - Best way to admin jails? (http://pastebin.com/w8hsMtbc) Simon - Use existing pkgs in poudriere (http://pastebin.com/mqSJk0pP) Pete - Lots of Q's (http://pastebin.com/1M7HLAXs) Van - Made the switch (http://pastebin.com/NTVBvtC5) ***
BeerCast #65 - MrB had his annual trip to France over the summer, and as ever returned with a carload of booze. Some of this was rare beer from local brasseries, so our 65th BeerCast finds us drinking four very different French beers. It also sees the return of our 'Can you Picon it?' feature. On the panel today - Richard, Grooben and MrB. Apologies for the levels on this one, it was recorded in MrB's kitchen... 1. Brasserie des Râteliers La Johannique Blanche (5.0%) 2. Cervoiserie Lancelot Bonnets Rouge (5.5%) 3. Le Moulin de Saint-Martin Ambrée (6.5%) 4. Mor Braz La Bière Cidrée (4.0%) www.thebeercast.com thebeercast@gmail.com @thebeercast The post BeerCast #65 – Bières en vacances! appeared first on The BeerCast.
Renee Chao-Beroff, Director, Microfinance Department, CIDR; General Manager, Pamiga gives an overview of the ways in which rural markets are segmented and how financial intermediaries can develop appropriate products and delivery mechanisms to navigate the risks of agricultural and rural lending.
Renee Chao-Beroff, Director, Microfinance Department, CIDR; General Manager, Pamiga explains how agricultural microfinance has developed despite the challenges that it faces. New actors, new opportunities and new behavious in the rural areas have a profound impact on poor people's access to finance.