Security: Get ready for some real-life doom and gloom. “All computer security defenses will ultimately fail,” Roger Grimes points out in Honeypots sticky as ever. Point being that when such failures occur, an early warning system is key. “Take a box you’re getting ready to throw away and make it a honeypot. Stick it somewhere in your environment where it’s likely to get noticed by an intruder, and tell it to page your incident response team (or you) if anything unexpected tries to connect to it,” Grimes advises. Related: VMware scripting automation API allows local exploitation. Columnist’s corner: Open source is creeping its way into storage and two announcements from Coraid offer more evidence in the ATA over Ethernet realm, aka AoE, the SAN transport protocol that uses MAC addresses to connect servers to their storage. Knocks against AoE include the fact that it doesn’t support SCSI or FC drives and it is not routable. “You can have as many arrays and disk drives as needed, but those machines and their application servers must live within broadcast reach,” Mario Apicella writes in Open source storage gets a virtual lift. As for Coraid, the company announced two new appliances at LinuxWorld: the 3U, 16-drive SR1661 and the 4U, 24-drive SR2461. The SR stands for SATA plus RAID.Quoteworthy: I don’t understand why Sun would want to market the fact that while they “own” Java, IBM, Oracle, BEA and even JBoss have all built and grown middleware businesses of varying size with Java. Sun on the other hand was never able to gain any traction in the middleware market. Imagine if Sun had to play from a level field. — Savio Rodrigues. Sun = Java? Security