#8021x — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #8021x, aggregated by home.social.
-
От защиты периметра к Zero Trust. Как NAC-системы обеспечивают защиту и контроль доступа в корпоративной сети
Коллеги, добрый день! Я Станислав Калабин, инженер-архитектор компании Axel PRO. Моя ежедневная задача – воплощать строгие требования информационной безопасности (ИБ) в работающую сетевую инфраструктуру наших заказчиков. Если раньше доверяли всему внутри периметра и защищали сеть с помощью мощного межсетевого экрана (Firewall) на границе, то сейчас эта модель устарела. Удаленная работа, облачные сервисы и распределенные офисы размывают границы сети. Современная атака начинается не со штурма МСЭ, а с фишингового письма сотруднику. Оказавшись внутри, злоумышленник пользуется абсолютным доверием. Ответом на эти угрозы стала архитектура Zero Trust – «никому ничего не доверяй». Её главные принципы – явная верификация каждого запроса, минимальные привилегии и готовность к инциденту. В этой статье я расскажу о самом принципе Zero Trust и как современные NAC-системы, на примере платформы AxelNAC, решают задачи ИБ, минимизируя нагрузку на сетевых инженеров при внедрении.
https://habr.com/ru/companies/axel_pro/articles/1064816/
#информационная_безопасность #иб #сетевая_безопасность #zero_trust #nac #импортозамещение #корпоративная_сеть #системное_администрирование #8021x #siem
-
📬 WLAN-Sicherheitslücke AirSnitch: Client-Isolation selbst in WPA3-Enterprise ausgehebelt
#ITSicherheit #8021X #AirSnitch #ClientIsolation #GTK #MACSpoofing #ManintheMiddle #Netzwerksicherheit #WLANSicherheitslücke #WPA3Enterprise #ZeroTrust https://sc.tarnkappe.info/7b6ffd -
📬 WLAN-Sicherheitslücke AirSnitch: Client-Isolation selbst in WPA3-Enterprise ausgehebelt
#ITSicherheit #8021X #AirSnitch #ClientIsolation #GTK #MACSpoofing #ManintheMiddle #Netzwerksicherheit #WLANSicherheitslücke #WPA3Enterprise #ZeroTrust https://sc.tarnkappe.info/7b6ffd -
[Перевод] Как взломать систему банка с помощью газового баллончика и выключенного принтера
802.1x и двери по картам — это должно быть надёжно. Пентестер зашёл в банк ночью, «обманул» ИК-датчик баллончиком, стал принтером в сети и нашёл заполненные чеки. Это не теория. Это отчёт по реальному тесту на проникновение.
https://habr.com/ru/companies/flant/articles/980224/
#редтиминг #взлом #проникновение #8021x #кодовый_замок #macадрес #доступ_к_данным #взломы #взлом_банка
-
Trying out IWD for the first time in a few years, seems much improved. Was dubious about claims it joined networks quicker, but there might be something to it. Roaming between access points might even be better. I wonder if they've fixed 802.1x - will have to give it a try on my work machine.
-
Trying out IWD for the first time in a few years, seems much improved. Was dubious about claims it joined networks quicker, but there might be something to it. Roaming between access points might even be better. I wonder if they've fixed 802.1x - will have to give it a try on my work machine.
-
🤓 Network engineers -- Do you know what 802.1X and/or AAA is?
👉 Help me settle a debate with this completely unscientific poll.
#networkengineering #networksecurity #wireless #wifi #wirelessecuity #ieee #8021x #eap #aaa #radius #portsecurity
-
🤓 Network engineers -- Do you know what 802.1X and/or AAA is?
👉 Help me settle a debate with this completely unscientific poll.
#networkengineering #networksecurity #wireless #wifi #wirelessecuity #ieee #8021x #eap #aaa #radius #portsecurity
-
Getting materials ready for an upcoming private class of the Secure Wi-Fi Architecture Masterclass 😎
#cybersecurity #networksecurity #wireless #zerotrust #wifi7 #wpa3 #8021x
-
Getting materials ready for an upcoming private class of the Secure Wi-Fi Architecture Masterclass 😎
#cybersecurity #networksecurity #wireless #zerotrust #wifi7 #wpa3 #8021x
-
802.1x on #Debian or #Ubuntu anybody? Manually running wpa_supplicant with password=hash:something and dhclient works for me, but it did not work adding this to /etc/network/interfaces. I always end up in default VLAN using this method.
Will one of the other methods (#systemd-networkd, #NetworkManager or #netplan support hashed passwords?)
I am just looking for a method that works.
#8021x -
Upcoming USENIX Security 2024:
✅Tldr:
802.1X - Radius based device authentication for LAN & 🛜via UDP [aka Radius NAC] is proven unfixable broken and finally dead.DO NOT USE!
✅Tech Details:
https://www.blastradius.fail/pdf/radius.pdf✅Executive Summary:
https://www.blastradius.fail -
PSA - Windows 11 issues connecting to secure Wi-Fi after update.
https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-23H2#3227msgdesc
Microsoft received reports about issues connecting to Wi-Fi networks - caused by KB5032288 and KB5033375, released in December 2023.
Resolved Dec 19th, see Rollback instructions to resolve.
-
PSA - Windows 11 issues connecting to secure Wi-Fi after update.
https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-23H2#3227msgdesc
Microsoft received reports about issues connecting to Wi-Fi networks - caused by KB5032288 and KB5033375, released in December 2023.
Resolved Dec 19th, see Rollback instructions to resolve.
-
"Great content, easy to read, easy to reference."
You can find "Wireless Security Architecture" in print and Kindle at Amazon and most e-reader subscription services.
https://www.amazon.com/Wireless-Security-Architecture-Maintaining-Enterprise/dp/1119883059/
#wifisecurity #wifi #wpa3 #8021x #radius #iotsecurity #wireless #cbrs #privatecellular #5glan
-
"Great content, easy to read, easy to reference."
You can find "Wireless Security Architecture" in print and Kindle at Amazon and most e-reader subscription services.
https://www.amazon.com/Wireless-Security-Architecture-Maintaining-Enterprise/dp/1119883059/
#wifisecurity #wifi #wpa3 #8021x #radius #iotsecurity #wireless #cbrs #privatecellular #5glan
-
Giving up for today trying to get #8021x (via ethernet, only using credentials, no certificates) working on #NixOS using #wpa_suplicant and #NetworkManager authing against a #UniFi infrastructure...
The debug output from both, NetworkManager, and (especially) wpa_supplicant is quite useless in this regard, as it focuses on technical mumble-jumble that might be useful to someone knees-deep into #RADIUS, but helps zero when it comes to a regular admin trying to get this working.
-
Giving up for today trying to get #8021x (via ethernet, only using credentials, no certificates) working on #NixOS using #wpa_suplicant and #NetworkManager authing against a #UniFi infrastructure...
The debug output from both, NetworkManager, and (especially) wpa_supplicant is quite useless in this regard, as it focuses on technical mumble-jumble that might be useful to someone knees-deep into #RADIUS, but helps zero when it comes to a regular admin trying to get this working.
-
bind a certificate to a specific IP address with 802.1x or any other "secure" protocol
https://security.stackexchange.com/questions/268956/bind-a-certificate-to-a-specific-ip-address-with-802-1x-or-any-other-secure-pr
#8021x #dhcp -
bind a certificate to a specific IP address with 802.1x or any other "secure" protocol
https://security.stackexchange.com/questions/268956/bind-a-certificate-to-a-specific-ip-address-with-802-1x-or-any-other-secure-pr
#8021x #dhcp -
"Can ChatGPT Teach Me Wireless Security?" > my first #askjjx with PacketPushers is out! 😅https://packetpushers.net/ask-jjx-can-chatgpt-teach-me-wireless-security/
#wifi #wifisecurity #wpa3 #infosec #chatgpt #8021X -
"Can ChatGPT Teach Me Wireless Security?" > my first #askjjx with PacketPushers is out! 😅https://packetpushers.net/ask-jjx-can-chatgpt-teach-me-wireless-security/
#wifi #wifisecurity #wpa3 #infosec #chatgpt #8021X