Why Appsec Vulnerabilities Are Dismissed as ‘Theoretical’ or ‘False’ By @CodeCurmudgeon | @CloudExpo #Cloud

In a previous post on theoretical Appsec vulnerabilities, I covered how «it’s theoretical» is misused by those who are trying to avoid fixing a security vulnerability or taking responsibility for it-for example, the Lenovo Superfish breach, Heartbleed, and airline wifi attacks.

The idea that a vulnerability is merely theoretical is not only ignorant but dangerous. Software exploits occur because bad actors operate by finding unexpected loopholes in a software system. Think of it this way – if you left your door unlocked is it a security issue? Or perhaps «If an unlocked door is never entered, is it really unlocked» if you’re a philosopher. One could contend that the risk is theoretical, but most of us would say that such a statement is ridiculous. (Props to those who live in an area where door security isn’t required.)

read more

Pulsant launches cloud comparison service

cloud question markUK based data centre and hosting company Pulsant claims it has created a system to help cloud buyers make fewer bad choices over online computing services.

The system aims to cut the confusion for C-level executives who currently struggle to make sense of the array of options, services and misleadingly named products. By automating the process of evaluation, the new Cloud Intelligence decision engine will take the end user closer to the conditions of ‘perfect information’ needed before the full benefits of the market are possible, it claims.

Cloud Intelligence is an interactive tool designed to concentrate the buyer’s mind when comparing different options. One of the user problems it aims to address is matching the offering to the needs of the buyer. In a relatively new market like cloud computing, companies ideally don’t want to trust their research to a conversation with a software salesman, according to Pulsant, which claims due diligence over cloud service choices has become a ‘definite challenge’.

The configuration aims to guide the decision makers by identifying their starting point. It separates technically savvy buyers, who may be familiar with the cloud landscape, from the non-technical procurement personnel who are increasingly embarking on research. The system aims to guide each type down customised paths in order to meet their needs. Non-technical users will interact with the decision engine in layman’s terms that concentrate on the benefits of the services on offer, while technical decision makers will be given more detailed information about configurations and platforms.

Pulsant said it aims to achieve for the B2B market what comparison sites achieve in B2C markets. The new service is necessary because cloud computing is changing software buying behaviours in the corporate world, according to Adam Eaton, sales director at Pulsant.

“Customers are doing a great deal of research before making IT decisions but there’s a lot of clutter to get through. We want to give people the information they’re looking for on the solutions and services they’re interested in, while still interactively engaging with them,” said Eaton.

According to Pulsant, 80% of visitors who start on their decision making journey with them will pursue it to the end.

Tune into the Cloud: The Circle By @GregorPetri | @CloudExpo #Cloud

Time for a blog about personal privacy, before we all have forgotten about the concept. The Circle is both the title of an 2009 album by Bon Jovi as a 2013 novel by Dave Eggers. A novel relevant for a cloud blog because it describes a future in which one company (the Circle) largely controls the nexus of information, social, mobile and cloud.

The use of a novel as medium for the communication of ideas regarding business or politics is not new. Think of examples as “The Goal” (about manufacturing management), “The Phoenix Project” (about IT Management), “Animal Farm” (about politics) and of course “1984” (about society). The Circle remind us of 1984, although in The Circle citizens opt-in voluntarily to life under an all seeing and omnipresent authority. An authority which, incidentally, is not a government, but a commercial social media and cloud services outfit.

read more

Catchpoint @DevOpsSummit «Silver Sponsor» | @Catchpoint #APM #DevOps #Microservices

SYS-CON Events announced today that Catchpoint Systems, Inc., a provider of innovative web and infrastructure monitoring solutions, has been named “Silver Sponsor” of SYS-CON’s DevOps Summit at 18th Cloud Expo New York, which will take place June 7-9, 2016, at the Javits Center in New York City, NY.
Catchpoint is a leading Digital Performance Analytics company that provides unparalleled insight into customer-critical services to help consistently deliver an amazing customer experience. Designed for digital business, Catchpoint is the only end-user experience monitoring (EUM) platform that can simultaneously capture, index and analyze object level performance data inline across the most extensive monitor types and node coverage, enabling a smarter, faster way to preempt issues and optimize service delivery. More than 350 customers in over 30 countries trust Catchpoint to strengthen their brands and grow their businesses. Founded in September 2008 by former DoubleClick/Google veterans and backed by Battery Ventures, Catchpoint Systems is headquartered in New York City.

read more

Citrix Summit 2016 Pt 3: HDX RealTime Optimization Pack 2.0

The final part of my series on the Citrix 2016 Partner Summit summarizes the notes Citrix provided around HDX RealTime Optimization Pack 2.0. Part 1 recapped news around XenApp and XenDesktop and part 2 covered XenMobile and PVS 7.7. As always, please reach out if you’re looking for any more information.

 

HDX RealTime Optimization Pack 2.0

  • Native Skype for Business 2015 UI – Provides the full Skype for Business UI experience and eliminates the limitations of a hybrid UI. Examples of features that were not supported in HDX
  • RealTime Optimization Pack 1.8 but are now available through the native Skype for Business UI include:
  • Call Delegation – Enables setting up a Skype for Business meeting on behalf of someone else. For example, an administrative assistant setting up meetings for a manager.
  • Voicemail access, playback, and delete – Ability to access your voicemail, play it, and delete from Skype for Business.
  • Response groups – Enables the response group feature, which routes incoming calls to groups of people called response group agents.
  • Team call groups – Set up a team of people who can answer your calls. You add and remove members and specify when they can answer calls for you. Members phones ring and once someone answers the call, the other phones stop ringing.
  • Authentication and SIP signaling  handled exclusively by the Skype for Business client – This release introduces architectural simplifications that improve robustness and user experience (for example, initialization time).

Fallback mode controlled by the following registry setting:

  • Warning: Editing the registry incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. Be sure to back up the registry before you edit it.
  • Key: HKLMSoftwareCitrixHDXRTConnector or HKCUSoftwareCitrixHDXRTConnector
  • Value: DWORD DisableFallback
  • If the value is present and has a nonzero value under either registgry key, disable fallback mode; otherwise, enable fallback mode.
  • Web proxy support – Enables external access using a web proxy with limitations. For more information, see Limitations in 2.0.
  • Click-to-Run – Devices where Microsoft Office applications have been installed using Click-to-Run support HDX RealTime Optimization Pack.
  • Pairing Status Indicator – Icon that displays these status states:
    • Connecting – MediaEngine.Net is trying to establish a RealTime Connector connection.
    • Connected – There is a RealTime Connector connection over a virtual channel and the version of remote RealTime Media Engine matches the version of mediaEngine.Net exactly.
    • Fallback – There is a RealTime Connector connection to a local RealTime Media Engine process.
    • Disconnected – A registry setting (policy) prevented MediaEngine.Net from running RealTime Media Engine locally.
    • Version mismatch – Same as Connected but the version match is not exact (different patch or build numbers)
  • Improved audio-video quality – Improvements to the RealTime Media Engine:
    • Improved resilience to packet loss
    • Improved echo cancelation
  • Skype server settings – HDX RealTime Optimization Pack obeys the Skype for Business Server settings that control whether or not the endpoint can do audio and/or video calling.
  • Active speaker identification – Displays a photo of the current speaker.
  • Call and video call buttons added to the contact card – Enables calls and video calls to be started with a click of a button in the contact card.
  • Automatically join meeting audio controls – You can use Settings to specify how you want to join a meeting:
    • Use Skype for Business (full audio and video experience)
    • Use a phone number
    • Don’t join audio

If you have any questions, don’t hesitate to reach out.

 

By Peter Crepeau, Solutions Architect

The unexpected rise of the managed data centre

(c)iStock.com/4x-image

For the last five years, industry analysts have predicted that cloud will kill the data centre. So why are colocation revenues continuing to climb at about 10% a year? Why did Equinix, the largest data centre provider in the world, see revenues go up 13% year on year in the fourth quarter of 2015?

The answer is that as enterprises begin to move “easy” workloads to AWS, they want to move not-ready workloads to a managed environment outside their internal data centres. Somewhat paradoxically, colocation is rising in popularity precisely because enterprises want cloud; it fits well into a hybrid cloud plan, helps enterprises consolidate data centres, and helps transition people and processes to a shared responsibility model.

The decline of the corporate data centre

Enterprises want out of the data centre business – eventually. Just 25% of enterprises in North America will build a new data centre when they run out of space in existing properties, according to a report by 451 Research. A whopping 76% will choose colocation or cloud, followed by 62% who will consolidate existing data centres. By 2018, 50% of all server racks in North America will be located at cloud and colocation data centres, up from 40% today. They will continue to invest in improving existing data centres, but seem unwilling to guesstimate their computing needs twenty years into the future or spend hundreds of millions of dollars on non-differentiating technology.

At a high level, enterprises undergoing digital transformation (92% of enterprises in North America) are looking to eliminate institutionalised friction — processes and transactions that rely on sequential processes and “functional fiefdoms”.

When you run a data centre, it is hard to escape the hard facts of provisioning speed (slow), absolute control (technicians in the building) and sequential processes (hardware install is more or less sequential by nature). Colocation may improve power efficiency and reduce bandwidth costs, but in the end, the colocation versus in-house data centre conversation is not a technology decision — it is a people and process decision. Data centres are simply inconvenient and inefficient people and process centres.

Colocation takes one step towards frictionless IT by removing the slowdowns associated with provisioning services like AC, security, etc. But they still need their own staff to replace cores, add new hardware, and coordinate with line of business teams. What enterprises really want is a cloud responsibility model in the data centre: the ability to provision new compute resources abstractly, with minimal process or delay. They actually want managed colocation so that someone with better processes and scale can do that work faster, invisibly.  

Connecting colocation and AWS

Although colocation is normally a people and process decision, there is an important technology benefit of colocation: super-fast private connections to the public cloud.

It is no accident that Equinix’s fastest growing revenue segment is private connections to AWS. Enterprises also want low-latency connections to the public cloud for a number of reasons. First and most urgently, they want to build hybrid environments where data is transmitted quickly and cheaply between dedicated hardware and the cloud. AWS Direct Connect can cut data transfer fees by two to ten times and result in more reliable connections than other forms of connection between a data centre and AWS. It is also more secure than connecting to AWS over the internet.

But again, the hardest part of transitioning to the cloud is not refactoring applications or preparing data pipelines, but preparing new service definitions and security / compliance models. Managed colocation encourages CSOs and security teams to figure out a shared security, compliance, and management model now, where services are divided between a 3rd party platform (the colocation provider), a managed service provider, and internal teams. This model is similar in most ways to a cloud security model, so when these workloads are transferred to the cloud in the future, transferring service definitions will be relatively simple.

The virtues of managed colocation + managed AWS

The value of managed colocation is magnified even further when an enterprise uses the same managed service team for colocation and cloud.

First, the enterprise gets a single contract, a single set of SLAs, and a single set of security and compliance models. Documentation, auditing, tracking, and ticketing can occur in a single interface or can be divided among lines of business with shared resources.

Enterprises can also use a single service provider for hybrid applications; the team that reboots your Oracle RAC database communicates directly with the team that must monitor your AWS account for unexpected ramifications of the reboot. Service levels are application-centric and team-centric, not infrastructure-centric. In the entire field of ISVs, consultants, and system integrators that enterprises could choose from, MSPs are uniquely positioned to remove some of the complexity of a cloud process migration.

Lastly, a managed service provider that have a long history of “traditional” system management plus AWS expertise is quite simply a great tool to have in your backpocket. They can be consulted when migrations get tough, as they understand the nitty-gritty of traditional systems, the cloud, and how traditional applications behave on the cloud.

The reasons enterprises are migrating to the cloud are well-understood. But we are witnessing an unexpected but logical corollary: the rise of the abstract management layer, and hence managed colocation. If cloud is the future, managed colocation is the transitional architecture that will help enterprises reach these long-term cloud goals.

The post The Unexpected Rise of the (Managed) Datacenter appeared first on Gathering Clouds.

Rising Specter of Shadow IT | @CloudExpo #Cloud #ML #BigData #IoT

As organizations try to increase their velocity and agility, there’s a widening gap between the IT department and the provisioning of new services. This can lead to serious security risks and operational inefficiency. But if we really want to tackle shadow IT, we have to get to the root of the problem. Why are people bypassing the IT department or failing to ask management for permission? What can we do about it?

read more

2016 the Year of Granularity | @CloudExpo #Cloud #IoT #ML #BigData

A recent business conversation led to the establishment of the fact that the datacenter business is becoming much more cutthroat than ever. Price wars, advanced offerings, upsells and what not are the usual tactics that have been used, but now competing forces are pressuring data center providers to go beyond the usual and utilize something new. Data center businesses are now relying more and more on leveraging strategic footprints, global presence and larger capabilities to educate and work with customers at a local level. In the United States alone, there are an estimated 3 million data centers. With data center services more abundant than grocery stores, how will the model sustain itself and what will determine the winners from the losers? My answer to that news is granularity.

read more

Do You Work Remotely? Save Battery Power with Parallels Desktop

If you work remotely, there’s no shortage of tools you might need to get the job done—whether you’re working from your couch or the coffee shop on the corner. In fact, I’m sure you’ve read lists upon lists of the best tools for remote workers across the web. (Guilty as charged—we even wrote a post […]

The post Do You Work Remotely? Save Battery Power with Parallels Desktop appeared first on Parallels Blog.

Get All the Features of Every XenApp Edition with Parallels Remote Application Server

Citrix provides a range of products, including virtualization technology, and the company has been in the virtualization market for two decades. XenApp is Citrix’s flagship application delivery product with a large user base of over 100 million. XenApp allows businesses to install applications on central servers and securely publish applications and desktops to clients running […]

The post Get All the Features of Every XenApp Edition with Parallels Remote Application Server appeared first on Parallels Blog.

The cloud news categorized.