Paul Pescitelli

Innovation at Scale: Google's Next Step in Data Security & Sustainability

Unknown — Sat, 01 Nov 2025 00:00:00 +0000

This transformation wouldn't have been possible without the dedication of hundreds of Googlers working together with unwavering focus. A huge thank you to everyone who helped make this happen! 🙌

The Future of Media Sanitization at Google</a>

PATENT: Secure Racks

Unknown — Wed, 01 Jan 2025 00:00:00 +0000

Innovate + Iteration + Iteration = Invention.

It was a pleasure to partner with Joso (Jose Tomas) Eterovic to conceive this idea, strong teams can accomplish amazing things. Thanks to everyone behind the scenes who contributed.

US12052291B1 - Secure Racks</a>

RS-232 and DIY Console Server

Unknown — Thu, 29 Aug 2024 00:00:00 +0000

RS-232 remains relevant</h1>
In the late 1990s, IT professionals faced a limited set of options when it came to configuring network devices. One of the primary methods for setting up routers and firewalls was through the trusty RS-232 interface. While this is quite dated it remains a reliable and relevant means of communication.
Fast forward to today's cloud-centric world, where sleek web interfaces dominate the landscape of network management. You might think that RS-232 has become obsolete, relegated to the annals of tech history. However, this couldn't be further from the truth. I recently dusted off an old Keyspan device and cable that was in my "techy GO-BAG" and used that as the foundation to construct a DIY RS-232 console server using a Raspberry Pi.

Why RS-232 Still Matters</h2>

Fundamental Knowledge: Understanding RS-232 helps grasp the basics of how devices communicate at a low level. Baud rates, stop bit, oh my!</li>
Failsafe Access: When network connectivity fails, a direct serial connection can be your lifeline to diagnose and fix issues.</li>
Security: Serial connections are inherently more secure as they require physical access to the device, reducing the attack surface.</li>
Learning CLI Syntax: Many modern network devices still support CLI (Command Line Interface) configuration. Using an RS-232 connection forces you to interact with these CLIs directly, enhancing your understanding of command syntax.</li> </ol>
Building Your Own RS-232 Console Server</h2>
Creating a DIY RS-232 console server with a Raspberry Pi is an excellent project that combines hardware tinkering with software configuration. Here's why it's worth your time:

Cost-Effective: Commercial console servers can be expensive. A Raspberry Pi-based solution is significantly more affordable, and many of you probably have an older RPi3 sitting on the shelf.</li>
Customizable: You can tailor the setup to your specific needs and preferences.</li>
Educational: The process teaches you about Linux, networking, and hardware interfacing.</li>
Practical: Once set up, you have a powerful tool for managing multiple network devices.</li> </ol> Getting Started</h2>
To build your RS-232 console server, you'll need:

A Raspberry Pi (any recent model will do) RPi4</a></li>
USB to RS-232 adapters (one for each device you want to manage) - I already had a few Keyspan adapters</a> handy and just needed to get the serial to RJ45 cable</a></li> </ul>


Ethernet cable for network connectivity</li>
Power supply for the Raspberry Pi</li>
MicroSD card for the Raspberry Pi's operating system</li> </ul>
There are thousands of tutorials on how to get the RPi setup, so I won't cover those steps here. There are several different methods to communicate with the serial port, here are a few options with my preferred method.

cu - This is a package that can be installed that originates from the name "Call Up" another system back when we used to use modems.</li>
minicom - another common package that supports some file transfer options like Kermit.</li>
[CURRENT FAVORITE] tio - You can find the source on github</a>, a beautifully simple and effective Terminal IO. Congrats to the author for fine work.</li> </ul>
If you don't want to build tio from source you can always install the package with
raspberrypi:~ $ sudo apt install tio </code></pre> Then it is as simple as this to start using tio $ tio /dev/ttyUSB0 </code></pre> Closing thought</h2> While modern network management tools have their place, there's still immense value in understanding and utilizing RS-232 connections. While it is a small project but building your own console server you have another tool at your disposal, and it may just save you when you misconfigure a router and lock yourself out. Dust off that old Raspberry Pi. The world of RS-232 is waiting to remind you why it's still relevant in today's networking landscape.

Security, Problem Solving and Scope Setting Unknown — Thu, 11 Apr 2024 10:00:00 +0000 Mornings with Paul</h1> As I sit here this morning watching the second round of the Masters Golf tournament when they should be starting the third round (weather delays) my mind wonders into problem solving. The conditions are changing frequently with winds and rain bringing a wide variety of challenges front and center, and these conditions change with each hole and at each hour. Zooming out, there are many parallels to identifying a path to excellent results, whether you are responding to the changing conditions at Augusta National or the evolving threat landscape for corporate security. Todays topic is about scoping problems which turn into programs or projects. The Importance of Scope</h2> A common challenge when implementing a program is understanding the scope of the project. Whether you are an engineering manager, security engineer or technical program manager The key is to set the scope accurately, that is, with a high degree of precision. One approach is to think about it as a puzzle, more specifically one that is a blank slate and don't have the visual cues available. Most people put a puzzle together by doing the outer edges, e.g. the framing. One the surface this seems appropriate because the straight edge makes identifying those pieces easier. For your program, what are those hard edges? These can be stated as outcomes desired Example: It will not be possible for an adversary to do X in Y months.</li> </ul> </li> Once the edges are identified, here is a piece that teams seem to skip. Stop! Take a break, let your mind and those of your colleagues absorb the frame. Go for a long walk or however you find your Zen and think about something else as this is where the real magic can happen. Hours or days later you may recognize that the framing is not precise enough. This is the time to iterate, not when you are in execution mode. </li> Now that you have more certainty that the frame is well formed, you must consider with more rigor what the pieces inside the frame. This can be a bit tricky, particularly as you fill in the puzzle, there will be items that look like they belong but probably don't. This is a trap that leads to scope creep, fight the urge to fix all the things. </li> Security professionals often strive for perfection, however, the business may not need that level of rigor. Now is it time to be thinking about how you and the team balance the needs of both. </li> Metrics, measures and instrumentation. How will you be able to demonstrate progress, perhaps in risk reduction, lessening toil, or elimination of technical debt. If you have not read or taken the Edward Tufte courses</a>, please consider them (I get no benefit from recommending them) as I find the approach on visual representation of data quite effective. TL/DR - Don't use pie charts :-) </li> </ul> Creating a Narrative</h2> Now that you have a well-defined scope, it's time to create a narrative around your program or project. This is the story you will tell to stakeholders, executives, partners and your team. Be clear and concise in your storytelling. Use data and metrics to help illustrate your points.</li> Outline the problem you are trying to solve or the outcome you are trying to achieve.</li> Add in details. What are the major milestones and how will you measure success?</li> Don't forget to address potential roadblocks, risks, or challenges. Providing solutions or contingency plans shows you have thought it through.</li> </ul> If done well, you will soon find others repeating your narrative, which is a good indicator of support and future adoption. With these steps in mind, you can successfully tackle any problem and achieve excellent results. Ciao! Misc System Administration ProTips Unknown — Thu, 11 Apr 2024 00:00:00 +0000 Just documenting a miscellaneous list of tips mostly do I don't forget where they are located, but also figured they could be useful for others. No particular rhyme or reason, just random notes. Pro Tips</h1> Mellanox CX3</h3> Test for detection lspci |grep -i mellanox</code> </li> Mellanox interface example naming </li> </ol> Enp102s0 - top port on the card</code> Enp102s0d1 - bottom port</code> Card ONLY supports 128 VLANs, if you are using a config (proxmox) that defaults to being a trunk with thousands of VLANs you will need to specify in your /etc/network/interfaces file which vlanIDs you want to be present on the card. </li> Detect speed for port ethtool <devicename> | grep -i speed</code> </li> </ol> Motherboard</h3> The enterprise class motherboards have a built in BMC (IPMI), post 2019 they changed the default login and password. The password is now individually coded to the Mobo and is located on a sticker on the motherboard. Write this down in your secure password vault BEFORE assembling the server.</li> </ol> The Powerful Chain of Connection Unknown — Tue, 19 Dec 2023 00:00:00 +0000 The Powerful Chain of Connection: How WHO and HOW Unlock Opportunities</h1> Earlier this year (2023), I was asked to present to entrepreneurs visiting under the Young African Leadership Initiative (YALI) program. This program introduces African civic, business, and community leaders for academic coursework, leadership training, and networking at U.S. colleges and universities. While reading their biographies, I was intrigued by the various interests and industries they represent, the Internet, retail, banking, and cosmetics, to name a few. While I was humbled that this group of leaders would spend 45 minutes with me, the pressure of making this time valuable for them was very present. Given their diverse industry and leadership experience, it became clear that focusing on cybersecurity (usually a technical talk) may not be the best approach. Therefore, a topic pivot was necessary. The following is an abbreviated story to demonstrate the combined power of who you are and the network you build. The journey of my career path is somewhat non-standard; my first official computer class was in high school in the early 80s, which began with programming on the Apple ][+. In this class, I befriended another student who would be a lifelong friend. This was the first link in the chain A few years later, we were selling computers in a retail storefront, which was the only way to buy a computer at the time. The industry was far from the do-it-yourself build-from-parts. One afternoon, an elderly gentleman walked in and wanted one of the "new-fangled personal computers." Being new to the technology, he also asked if he could hire someone to teach him more, and my friend offered to help him on the weekends. Another link in the chain is now established Fast forward a few more years, and my friend and I were at lunch, where I casually mentioned that our team had openings for designing, building, and deploying the traditional 3-tier internet architectures from the late '90s. As it would turn out, the grandson of the elderly gentleman who bought the computer in the retail store was versed in computers and was looking for a new opportunity. Great, have him give me a call! During the interview, it became clear that this person was a good problem solver, and he was offered the job on the spot. The chain grows stronger with this link. A few years passed and as often happens, the gentleman I hired moved on and we no longer worked at the same company. However, he called one day and wanted me to come interview for the company he was working for. I graciously declined being happy in my current role. But he was nothing if not persistent, and a year later, he convinced me to do the interview. Today, 17 years later, we are both still at the same company, and I am eternally grateful. The 3 most powerful letters - O, H, W The story above serves as the backdrop for the title of this post and is what allowed me to bring the YALI audience on a journey while setting the stage for two crucial items for success in whatever you do. Re-arrange the letters to The HOW - In today's world, everyone is busy and often distracted; therefore, how you interact with others in your personal and work lives are inextricably intertwined. Be patient - The other individual will not be in the same place you are, nor will they have the same life experiences. Structure your discussions so that you are meeting them part way, in a manner that allows them to build context.</li> Lead with empathy - An extension of being patient involves understanding team members' emotions, needs, and experiences (or friends and family). You can do this by actively listening and minimizing those pesky distractions from computers or smartphones.</li> </ul> Combining those items allows you to take them on the proverbial casual walk in the park, where free-flowing discussion can occur. This process is foundational for building respect and rapport. Re-arrange those letters again The WHO (not the band)- If you have a good "HOW," this will allow you to build a strong network. Building your network is an essential step in helping others connect and identify opportunities. However, you will be amazed at how often this will turn around to benefit your journey through life. While not intended to be a how-to for building your personal or professional network, many different strategies can help you start small and expand your network over time: Start with friends or acquaintances that you don't have regular interactions with</li> Push your social skills and attend a speak-easy dinner where you don't know others; think supper club-type events</li> Attend local interest groups or professional organizations</li> Attend industry events or conferences</li> </ul> Practical takeaway - Don't miss an opportunity to open a door; you never know what opportunities are on the other side. When you combine the WHO with the HOW, you have a foundation for a powerful life experience and opportunities. Start building your chain of connection today. You never know where it might lead you. Mentoring Unknown — Sun, 20 Aug 2023 00:00:00 +0000 Mornings with Paul: Mentoring</h1> Do you mentor others, or have you been a mentee? Most think about mentoring as something related to their professional career, and while that is important, I find it useful in other areas as well, like personal life, volunteer efforts, etc. Have you ever paid it forward? For example, being in the drive-through line at your favorite coffee shop, and decided to pay for the drink of the person behind you? The feeling of doing good and helping others is built into us as humans. Mentoring is much the same, it not only provides a great service for the mentee, it also allows you to grow as an individual. I have been both a mentor and a mentee. As a mentor, I enjoy helping others learn and grow, while also learning from their perspectives and insights. As a mentee, I appreciate having a valuable resource to tap into, whether it's a coach, a teacher, or even a friend who is more experienced in a particular field. It is amazing how much you can learn and benefit from these relationships A good mentor is someone willing to share their knowledge and experience with others and provide support and guidance. They should be patient, approachable, and able to listen actively and provide constructive feedback. A good mentor should also be able to adapt to the needs of their mentee and provide personalized support. Additionally, a good mentor should have a positive attitude and be able to motivate and inspire others. Finally, a good mentor should be able to establish trust and build a strong mentor-mentee relationship. Find or become a mentor today and reap the rewards of strong relationships no matter how big or small the contributions may be. ADM 9F8 GR RJ45 Unknown — Fri, 03 Dec 2010 00:00:00 +0000 Once upon a time (circa 1999), RS232 was the primary mechanism for communicating and updating firmware in most computer systems. This means that we had to make a bunch of cables and rather than soldering pin the techie crew often used these modular adapters as the pinout needed for various installations varied. ADM 9F8 GR - RJ45 to db9 fem The following is for the D-Sub-RJ-45 Modular Adapter 1 - blu 2 - org 3 - blk 4 - red 5 - grn 6 - yel 7 - brn 8 - wht Onlinecomponents Link</a>

Paul Pescitelli

Innovation at Scale: Google's Next Step in Data Security & Sustainability

PATENT: Secure Racks

RS-232 and DIY Console Server

Building Your Own RS-232 Console Server</h2> Creating a DIY RS-232 console server with a Raspberry Pi is an excellent project that combines hardware tinkering with software configuration. Here's why it's worth your time:</p>

Security, Problem Solving and Scope Setting

Misc System Administration ProTips

Pro Tips</h1>

The Powerful Chain of Connection

Mentoring

ADM 9F8 GR RJ45