Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Suchakra Sharma
Why Unsuspecting Data Leaks Are a Key to Rampant Blockchain Hacks
Why Unsuspecting Data Leaks Are a Key to Rampant Blockchain Hacks contributed, Data / Open Source / Security While Mnemonics are a user-friendly way to recover passwords, they can very easily become a stepping stone to mount attacks on crypto wallets. Last month, Solana blockchain faced yet another attack in a series of recent attacks targeting blockchains.
My Picks for Shifting Left: ‘21
Here at ShiftLeft, we are gearing up for Shifting Left: ’21, a one-day application security conference for developers and security practitioners on Jan 28, 2021. I’ve been a huge fan of security conferences ever since I attended my first security conference, NorthSec in Montreal. This time, I am excited to be on the organizer’s side and present this conference to you. Shifting Left: ‘21 is entirely online and free to register here.
Zero-Day Snafus — Hunting Memory Allocation Bugs - Security Boulevard
Zero-Day Snafus — Hunting Memory Allocation Bugs Preface Languages like C/C++ come with the whole “allocation party” of malloc, calloc, zalloc, realloc and their specialized versions kmalloc etc. For example, malloc has a signature void *malloc(size_t size) which means one can request an arbitrary number of bytes from the heap and the function returns a pointer to start working on. The memory should then later be freed with a free().
Security Boulevard
Behind the magically populating dashboards of ShiftLeft lies a complex web of services. We have the state-of the art code property graph generation and querying systems that run on each incoming code artifact, squeezes the security DNA from it and uses it at runtime for providing immediate value of identifying data leakage, exploits in progress etc. This is not a simple task — much of the work is pipelined in nature.
Gracefully Protecting Rapid Software Deployments - Security Boulevard
Software has changed. What used to be monolithic services on the backend are now the massive deployments of microservices that constantly are spawned up and torn down with shifting workload needs. They no longer run in controlled environments you provision, but in-turn run on VMs and containers on rent. Every sensitive information entered by a user on a web-form travels and transforms through layers of computing designed for ease of deployment and simplicity.
A Wild Week for Augment Reality's First Killer App, Pokemon Go
It’s rare that we get to witness a bonafide revolution, but Pokemon Go has all the makings of a “killer app,” a disruptive new phenomenon that seemingly came out of nowhere, yet somehow also experienced massive popularity from its very first day. It’s 10 days later, and there’s already enough weird stories to go around — about both the game and its players.
Build a Retro-game with the PICO-8: The Basics
The geeks among us have all, at least once, toyed with the idea of creating our own games. However, game development requires perseverance and dedication to sit for long hours polishing the fine details of the code and design. If you are of an impatient kind, want to learn a little bit of Lua programming language and the basics of pixel-art at the same time, PICO-8 console emulator is the tool of your choice.
How to Fish Value Out Of Your IoT Data Lake
Your next big product may be submerged within your data lake. According to market researcher Wikibon, data analytics remains one of the fastest growing IT segments. It predicts that the worldwide market for Big Data analytics hardware, software and services will reach $50 billion in 2017, up from $28.5 billion in 2014.
Securing the Internet of Vulnerable Things
There are the computers you could see and work with (desktop workstations) and the ones that are small, usually less powerful and embedded deep inside your day-to-day devices.
Off-The-Shelf Hacker: How Linux Could Power Your Wearable Projects
My aging Asus duo-core notebook, the Raspberry Pi, the Beaglebone Black, several TV set-top boxes and certain in-vehicle infotainment systems all have something in common: Linux. That’s right, Linux runs on a bunch of different hardware. That’s a huge advantage for Off-The-Shelf Hackers because regardless of your platform, the operating system is the same. Oh sure, you might have different flavors of desktops, applications and command line shells.
Terminal Essentials: Advanced Command Line Tools For Devs and Sysadmins
Previously, I had written about terminal tools potentially useful for all computer users who have discovered how handy the command line can be. For this article, I’ll dive into some advanced setups for developers and system administrators. This is not an exhaustive list of tools and tricks for the command line, and the selections may not be the ultimate ones, but they surely are a right balance of being cool as well as useful at the same time.
How Vagrant Eases Software Research and Testing
I was introduced to Vagrant, software offered by Hashicorp for setting up development environments, earlier this year by a labmate, who gave me some sane advice for generating reproducible experiments in our research.
CoreOS Introduces Container Scanning for Vulnerabilities
CoreOS has released as open source technology that can scan the contents of containers for security vulnerabilities. The company also added this functionality, which it developed in-house, to its Quay private container registry, as a beta feature. The software, called Clair, compares the contents of a container against a number of Linux distribution-specific CVE databases (currently those maintained by Red Hat, Ubuntu, and Debian).
Intel's Clear Containers Address Security Concerns
If you’re reading this site regularly, you’d probably agree how containers are starting to change the way we perceive the application stack. However, major questions still linger around container security. At least one company cognizant of this issue is Intel, which earlier this year launched Clear Containers, a technology designed to mix the security benefits of full virtual machines (VMs) with the deployment ease of containers.
Rackspace’s Carina offers Turnkey Container Management
What is currently driving the containerization movement with developers may be, at least in part, the sophisticated and efficient mechanisms for deploying and orchestrating workloads: Swarm, Kubernetes, Mesosphere, Tectonic, Tutum. But these dazzling symphonic displays of logistics have not done all that much to soften the barriers in many organizations to deploying containers outside of development and testing, and into production environments where the payoffs would be best appreciated.
Scientists Develop Light-Based Memory Chip That Can Store Data Permanently
Scientists have developed a chip that uses photons of light, rather than electrons, to carry and store data at lightning speeds. Will computing as we know it change forever? Experts are noting that modern computer architectures will soon be reaching design limits, whether it’s due to the restrictions of silicon-based semiconductors, or the relatively slow speeds and heat generated by colliding electrons as they carry data between a computer’s processor and its memory.
Retrocomputing in Modern Times: Rediscovering the Psion Series 5mx
Programming languages and old computers entice me. However, I must tell you, that the amount of time and money spent on these devices can get out of hand pretty fast. But the joy of restoring and rediscovering the masterpieces — the operating systems, the languages and the programming environments of these bygone era machines — is priceless. An accidental discovery of an old language can slowly turn into an obsession.
Linux Networking, Tracing and IO Visor, a New Systems Performance Tool for a Distributed World
There is more raw power in silicon per square millimeter than there has ever been. With the advent of distributed computing — and cloud and container technology running on specialized hardware — performance analysis tools are primarily facing two challenges: The main issue we discuss in this article is minimizing the overhead, or impact, on the system and giving the analysis tools as much flexibility as possible. We start with a small primer on tracing tools before moving on to IO Visor internals.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Suchakra
Contact Suchakra, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack