cr

Snort Subscriber Rules Update 2024-10-22

Posted by Research via Snort-sigs on Oct 22

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the and server-webapp
rule sets to provide coverage for emerging threats from these
technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




cr

Snort Subscriber Rules Update 2024-10-24

Posted by Research via Snort-sigs on Oct 24

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the file-multimedia,
malware-cnc, protocol-snmp and server-webapp rule sets to provide
coverage for emerging threats from these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




cr

Snort Subscriber Rules Update 2024-10-29

Posted by Research via Snort-sigs on Oct 29

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the browser-firefox,
malware-cnc, malware-other, os-linux and server-webapp rule sets to
provide coverage for emerging threats from these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




cr

Snort Subscriber Rules Update 2024-10-31

Posted by Research via Snort-sigs on Oct 31

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the malware-cnc,
malware-other and server-other rule sets to provide coverage for
emerging threats from these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




cr

Snort Subscriber Rules Update 2024-11-04

Posted by Research via Snort-sigs on Nov 04

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the and server-webapp
rule sets to provide coverage for emerging threats from these
technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




cr

Snort Subscriber Rules Update 2024-11-07

Posted by Research via Snort-sigs on Nov 07

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the browser-plugins and
server-webapp rule sets to provide coverage for emerging threats from
these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




cr

Snort Subscriber Rules Update 2024-11-12

Posted by Research via Snort-sigs on Nov 12

Talos Snort Subscriber Rules Update

Synopsis:
Talos is aware of vulnerabilities affecting products from Microsoft
Corporation.

Details:
Microsoft Vulnerability CVE-2024-43451:
A coding deficiency exists in Microsoft Windows SmartScreen that may
lead to spoofing.

Rules to detect attacks targeting these vulnerabilities are included in
this release and are identified with:
Snort 2: GID 1, SIDs 62022 through 62023,
Snort 3: GID 1, SID 300612....




cr

For Grocers, Collaboration with HVACR Contractors is Key

Grocers are looking to their refrigeration contractor partners to be the experts and make suggestions about how they can transition smoothly to the new low-GWP refrigeration technologies.




cr

The Importance Of Female Leadership In The HVACR Industry

“It's simple. If you want to encourage women to prosper and develop, provide them with some prospering women to inspire them to develop.”




cr

Women in HVACR Shine Bright in the Lone Star State

The recent Women in HVACR conference offered sessions aimed at advancing attendees' knowledge on industry topics such as the refrigerant transition, as well as building their leadership skills.




cr

What Trump’s Election Means for HVAC Tax Credits and Incentives

With the election of Donald Trump to President of the United States, the HVAC industry is wondering how this will affect the Inflation Reduction Act incentives.




cr

Keys to Success in HVACR Automation

The market for automated systems in commercial buildings is growing rapidly, driven by increasing energy-efficiency goals, improving technology, and updated standards set by governments and professional associations.




cr

Zoning Adoption Steadily Increases in Residential Market

When it comes to comfort, not much beats zoning. In fact, many industry experts tout that once homeowners have experienced the comfort zoning has to offer, they will never own another house without it.




cr

Disruptive Trends Change Zoning’s Role in HVACR

Zoning technology has experienced success in both residential and commercial applications of hot water and hydronic systems.




cr

Homebuilder Partners with Device Makers to Create Connected Home Experience

Products are emerging that help simplify homeownership.




cr

Could Subscription-Based Heat Pumps Be the Future of Electrification?

Scandinavian green energy startup Aira plans to offer a 10-year service guarantee and a monthly fee that includes installation, maintenance.




cr

Cashing In on Heat Pumps: A Primer on Incentives, Rebates, and Tax Credits

With “heat pump” and “incentives” almost being synonymous at this point, contractors need to understand the basics to ensure customers are receiving the benefits.




cr

Mandating High-Efficiency Furnaces Will Limit Consumer Choice, Critics in HVAC Industry Say

Residential gas furnaces must all have a minimum AFUE of 95% beginning in five years. Some in the HVAC industry say the new Department of Energy rule will ultimately hurt homeowners.




cr

Ted Cruz Gives DOE Furnace Rule Pushback

U.S. Senator Ted Cruz is leading the charge to assist HVAC contractors in pushing back on the final rule on gas furnace efficiency standards from the U.S. Department of Energy (DOE).




cr

NSE scripts for SNMPv3?

Posted by Johan Kuuse on Oct 03

Hi, my first mail to this list,

I have used (and modified) quite a few NSE scripts for SNMP.
Anyhow, AFAIK, all SNMP scripts (except "snmp-info") are limited to SNMPv1
and SNMPv2c:

nmap --script-help=snmp* | grep -B3 -A1 -i v3
----------------------------------
snmp-info
Categories: default version safe
https://nmap.org/nsedoc/scripts/snmp-info.html
Extracts basic information from an SNMPv3 GET request. The same probe is
used
here...




cr

Regarding NMAP Retrigger for snmp-sysdescr

Posted by Ramu Burra via dev on Oct 31

Hi Daniel & NMAP team,

I hope this email finds you well.

I'm writing to inquire about the specific behaviour of Nmap's SNMP-SYSDescr query in situations where the target device
responds intermittently.

I'm particularly interested in knowing if there are any specific configuration options or techniques that can be
employed to increase the likelihood of successful SNMP-SYSDescr queries, especially when dealing with...




cr

Re: Regarding NMAP Retrigger for snmp-sysdescr

Posted by Daniel Miller on Oct 31

Ramu,

Nmap's snmp-sysdescr script currently uses a 5-second timeout and attempts
only once to send the SNMPv1 request. We agree that this could be improved
to provide better reliability. I will investigate further and respond again
with specific suggestions.

Dan




cr

crash

Posted by Tim Millard on Oct 31

Version: 7.94+SVN
TypeError: Couldn't find foreign struct converter for 'cairo.Context'

Ubuntu 24.04.01




cr

crash report

Posted by Dmitriy Solodunenko on Oct 31

Ubuntu 24.04
Version: 7.94+SVN
TypeError: Couldn't find foreign struct converter for 'cairo.Context'




cr

Episode 4: Scripting Languages

In this Episode, Alexander and Markus talk about scripting languages. Topics include the definition of what a scripting language is, typical usage scenarios, performance issues, programming styles and IDE support. In later Episodes we will talk about more specific topics, such as dynamic typing, reflection, functional programming as well as specific languages such as Ruby.




cr

Episode 60: Roman Pichler on Scrum

This episode features Scrum, a very popular Agile software development framework. We interview Roman Pichler, a Certified ScrumMaster Trainer and independent consultant. Roman explains the principles behind Scrum, its roles and its key practices. He also answers FAQs. This episode continues our track on software development processes discussing an additional Agile method. Roman is currently writing a book on Scrum in German that provides more in-depth information of the topics discussed in the podcast. The book will be available in autumn 2007 published by d.punkt (Heidelberg, Germany).




cr

Episode 123: Microsoft OSLO with Don Box and Doug Purdy

In this episode we discuss Microsoft's OSLO platform with Doug Purdy and Don Box. We briefly discuss what OSLO is in general and then look at the various components of OSLO. We also look at how OSLO fits in with the general Microsoft strategy and how it compares to other DSL/Model-driven approaches. We then look at language modularization and composition and discuss the similarities with XML and Smalltalk. Finally, we discuss possible integrations of OSLO with other MD* approaches and technologies.




cr

Episode 150: Software Craftsmanship with Bob Martin

This episode is a conversation with "Uncle Bob" Bob Martin about agile software development and software craftsmanship specifically. We talk about the history of the term, the reasons for coming up with it some of the practices and the relationship to other agile approaches. We conclude our discussion with an outlook on some of todays new and hyped programming languages.




cr

Episode 164: Agile Testing with Lisa Crispin

This episode covers the topic of agile testing. Michael interviews Lisa Crispin as an practionier and book author on agile testing. We cover several topics ranging from the role of the tester in agile teams, over test automation strategy and regression testing, to continuous integration.




cr

Episode 181: Distributed Scrum with Rini van Solingen

In this episode we talk with Rini van Solingen about scrum and agile software development in distributed settings.




cr

Episode 210: Stefan Tilkov on Architecture and Micro Services

Micro services is an emerging trend in software architecture that focuses on small, lightweight applications as a means to avoid large, unmaintainable, monolithic systems. This approach allows for individual technology stacks for each component and more resilient systems. Micro services uses well-known communication schemes such as REST but also require new technologies for the implementation. […]




cr

Episode 213: James Lewis on Microservices

Johannes Thönes talks to James Lewis, principal consultant at ThoughtWorks, about microservices. They discuss microservices’ recent popularity, architectural styles, deployment, size, technical decisions, and consumer-driven contracts. They also compare microservices to service-oriented architecture and wrap up the episode by talking about key figures in the microservice community and standing on the shoulders of giants. Recording […]




cr

Episode 216: Adrian Cockcroft on the Modern Cloud-based Platform

Adrian Cockcroft discusses the challenges in creating a dynamic, flexible, cloud-based platform with SE Radio host Stefan Tilkov. After briefly discussing the definition of “cloud computing,” Adrian explains the history behind Netflix’s move to the cloud (which he led). After highlighting some of the differences that have developers and architects must face, Adrian talks about […]




cr

SE-Radio Episode 248: Axel Rauschmayer on JavaScript and ECMAScript 6

Johannes Thönes talks to Axel Rauschmayer about JavaScript and ECMAScript 6. They talk about the origin and version history. Then they dive into key JavaScript concepts and explain the features coming into the language with ECMAScript 6.




cr

SE-Radio Episode 252: Christopher Meiklejohn on CRDTs

Robert Blumen talks to Christopher Meiklejohn about conflict-free replicated data types. The discussion covers consistency in distributed systems, CRDTs, and their use in NoSQL databases.




cr

SE-Radio Episode 258: Cody Voellinger on Recruiting Software Engineers

Robert Blumen talks with Cody Voellinger, the founder of a recruiting firm that specializes in filling software engineer roles for San Francisco-area startups, about how jobs are created and how companies and engineers get matched up. Their discussion covers the entire job search process, from job descriptions to salary negotiations. They look at the job market from both sides: how companies define what they want, find the right people, and evaluate candidates, and how job seekers can position themselves for the role they want. Other topics include culture fit versus skill and resumes in an age of social networking. They conclude with a look at the mistakes that job seekers, recruiters, and companies should avoid.




cr

SE-Radio Episode 311: Armon Dadgar on Secrets Management

Armon Dadgar speaks to Matthew Farwell about Secrets Management.




cr

SE-Radio Episode 321: Péter Budai on End to End Encryption

Péter Budai and Kim Carter discuss End to End Encryption (E2EE), backdoors, the scenarios where E2EE can be and should be used. IM, VoIP, Email scenarios, interservice communication scenarios such as securing data in use.




cr

SE-Radio Episode 340: Lara Hogan and Deepa Subramaniam on Revitalizing a Cross-Functional Product Organization

Travis Kimmel talks with Lara Hogan and Deepa Subramaniam about evidence-based tactics that product and engineering leaders can use to can use to diagnose problems that are holding back their teams, and build healthier, high-performing organizations.




cr

SE-Radio Episode 343: John Crain on Ethereum and Smart Contracts

Kishore Bhatia discussed Ethereum and Smart Contracts with John Crain. Topics include: understanding the motivations for a decentralized computing model, Application architecture on Ethereum, development frameworks and tools. John’s experience developing and launching his own product Pixura on Ethereum mainnet, approaches,




cr

Episode 351 - Bernd Rücker on Orchestrating Microservices with Workflow Management

Bernd Rücker, who has contributed to multiple open source workflow management projects, discusses orchestrating microservices with workflow management.  As distributed systems evolve into a family of microservices that must handle long-running stateful processes with time-dependent actions, events, multiple paths through the system, and complex rollbacks, the workflow management model provides a way to ensure clear modeling, correctness, and separation of concerns.   Rücker recommends a federated model in which each microservice is paired with its own workflow to handle retries and other policies and failure modes around that service.  Robert Blumen spoke with Rücker about microservice architecture, event-driven systems, long-running stateful processes versus synchronous request/response, event handling, time-outs, and handling exceptional conditions with compensating transactions. Rücker compares the choreography versus orchestration models for collaboration and discusses why orchestration provides a better separation of concerns.  The discussion delves into the implementation of workflow management systems including persistence, scaling, event handling, timers and scheduling, and similarities to CQRS.  The discussion wraps up with monitoring and visualization.




cr

Episode 370: Chris Richardson on Microservice Patterns

Chris Richardson of microservices.io and author of the book Microservice Patterns discuss microservice patterns which constitute a set of best practices and building-block solutions to problems inherent microservice architecture.




cr

Episode 384: Boris Cherny on TypeScript

Boris Cherny, author of Programming TypeScript, explains how TypeScript can scale JavaScript projects to larger teams, larger code bases, and across devices. Topics include: gradual typing, type refinement, structural typing, and interoperability...




cr

Episode 397: Pat Helland on Data Management with Microservices.mp3

Pat Helland talks to host Akshay Manchale about Data Management at scale in a Microservices world. Pat talks about trends in managaging data in a distributed microservices world, immutability, idempotence, inside and outside data, descriptive...




cr

Episode 402: Rich Harris on the Svelte JavaScript Framework

Rich Harris, author of the JavaScript module bundler Rollup, discusses his JavaScript framework Svelte as a high-performance alternative to mainstay frameworks like React, Angular, and Vue. We begin with a brief overview of the framework and how...




cr

Episode 420: Ryan Ripley on Making Scrum Work

Kanchan spoke with Ryan Ripley about the pre-requisites for an organization to adopt scrum, need for management buy-in, the importance of scrum values and the key responsibilities of the roles defined by scrum and the anti-patterns to watch out for...




cr

Episode 422: Michael Geers on Micro Frontends

Kanchan spoke with Michael Geers on the Micro Frontends. Micro Frontends is an architectural style that aims to extends the benefits of microservices to UI.




cr

Episode 425: Paul Smith on The Crystal Programming Language and the Lucky Web Framework

Paul Smith discusses the Crystal Programming Language and the Lucky web framework with Jeremy Jung.




cr

Episode 439: JP Aumasson on Cryptography

JP Aumasson, author of Serious Cryptography, discusses cryptography, specifically how encryption and hashing work and underpin many security functions.




cr

Episode 491: Chase Kocher on The Recruiting LifeCycle

Chase Kocher, the Founder and CEO of aim4hire, a technology recruitment agency, discusses the recruiting lifecycle from the candidate, the company and the recruiter’s point of view with host Kanchan Shringi.