Send Outages-discussion mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/outages-discussion
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Outages-discussion digest..."
Today's Topics:
1. Re: [outages] Google 8.8.8.8 Resolution of Route53 domains
(Charles Sprickman)
2. Re: Level3 Connectivity Issues (Joseph Jackson)
3. Re: [outages] Google 8.8.8.8 Resolution of Route53 domains
(outages)
----------------------------------------------------------------------
Message: 1
Date: Wed, 25 Apr 2018 15:03:15 -0400
From: Charles Sprickman <[email protected]>
To: outages-discussion <[email protected]>
Subject: Re: [Outages-discussion] [outages] Google 8.8.8.8 Resolution
of Route53 domains
Message-ID: <[email protected]>
Content-Type: text/plain; charset="utf-8"
Moving to -discuss? (a second time, sent to outages-discuss@)
> On Apr 25, 2018, at 10:35 AM, Zach Hanna via Outages <[email protected]
> <mailto:[email protected]>> wrote:
>
> That would require 1) the wallet company understanding the technical details
> of the outage (a stretch), and 2) understanding that it is preventable, and
> 3) how and by whom.
I think the wallet company understands, and I think they probably felt pretty
safe using one of the world?s largest DNS providers for their service. If they
thought about this they probably figured ?who could hijack Amazon?? and ?Google
is clever, 8.8.8.8 probably can?t be fooled?.
Although I guess they didn?t think about DNSSEC, so maybe I?m all wrong. :)
Domain Name: MYETHERWALLET.COM <http://myetherwallet.com/>
Name Server: NS-1007.AWSDNS-61.NET <http://ns-1007.awsdns-61.net/>
Name Server: NS-1498.AWSDNS-59.ORG <http://ns-1498.awsdns-59.org/>
Name Server: NS-1993.AWSDNS-57.CO.UK
Name Server: NS-73.AWSDNS-09.COM <http://ns-73.awsdns-09.com/>
DNSSEC: unsigned
One of my clients is a customer of HE, and I?m wondering if they will have
anything to say about this. I only do very small-fry stuff with BGP, but even I
know that if I provide a customer the ability to speak BGP to me, I have to be
paranoid and only let them announce an agreed-upon list of networks.
Anyone have any articles that look more at the two providers involved here,
preferably with some statements from HE or eNet?
Charles
>
> On Wed, Apr 25, 2018 at 12:04 AM Gert Doering via Outages
> <[email protected] <mailto:[email protected]>> wrote:
> Hi,
>
> On Tue, Apr 24, 2018 at 07:47:36PM -0400, J Kibler via Outages wrote:
> > Here is a more detailed analysis of what happened:
> > https://arstechnica.com/information-technology/2018/04/suspicious-event-hijacks-amazon-traffic-for-2-hours-steals-cryptocurrency/
> >
> > <https://arstechnica.com/information-technology/2018/04/suspicious-event-hijacks-amazon-traffic-for-2-hours-steals-cryptocurrency/>
>
> Maybe that is actually good news.
>
> Financial damages have been done, by a US company, to a US company, due
> to neglicience in BGP filtering. This is going to be an expensive lawsuit,
> and hopefully people will start proper BGP filtering afterwards...
>
> gert
> --
> "If was one thing all people took for granted, was conviction that if you
> feed honest figures into a computer, honest figures come out. Never doubted
> it myself till I met a computer with a sense of humor."
> Robert A. Heinlein, The Moon is a Harsh Mistress
>
> Gert Doering - Munich, Germany
> [email protected] <mailto:[email protected]>
> _______________________________________________
> Outages mailing list
> [email protected] <mailto:[email protected]>
> https://puck.nether.net/mailman/listinfo/outages
> <https://puck.nether.net/mailman/listinfo/outages>
> _______________________________________________
> Outages mailing list
> [email protected] <mailto:[email protected]>
> https://puck.nether.net/mailman/listinfo/outages
--
Charles Sprickman
NetEng/SysAdmin
Bway.net - New York's Best Internet www.bway.net
[email protected] - 212.982.9800
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/outages-discussion/attachments/20180425/fbef8e25/attachment-0001.html>
------------------------------
Message: 2
Date: Wed, 25 Apr 2018 19:33:44 +0000
From: Joseph Jackson <[email protected]>
To: Jordan Morris <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [Outages-discussion] Level3 Connectivity Issues
Message-ID:
<50fccb8d26f84b509a59823c5776e...@mbx080-w3-co-2.exch080.serverpod.net>
Content-Type: text/plain; charset="us-ascii"
We've been having issues with Level3 in LA market for the past week.
From: Outages [mailto:[email protected]] On Behalf Of Jordan Morris
via Outages
Sent: Wednesday, April 25, 2018 2:30 PM
To: [email protected]
Subject: [outages] Level3 Connectivity Issues
We are seeing Level 3 connectivity issues in multiple city's can anyone else
confirm
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/outages-discussion/attachments/20180425/65a2846c/attachment-0001.html>
------------------------------
Message: 3
Date: Wed, 25 Apr 2018 17:16:49 -0700
From: outages <[email protected]>
To: Charles Sprickman <[email protected]>, outages-discussion
<[email protected]>
Subject: Re: [Outages-discussion] [outages] Google 8.8.8.8 Resolution
of Route53 domains
Message-ID: <[email protected]>
Content-Type: text/plain; charset="utf-8"
On Wed, 2018-04-25 at 15:03 -0400, Charles Sprickman wrote:
> Moving to -discuss? (a second time, sent to outages-discuss@)
>
>
> > On Apr 25, 2018, at 10:35 AM, Zach Hanna via Outages <[email protected]>
> > wrote:
> > That would require 1) the wallet company understanding the technical details
> > of the outage (a stretch), and 2) understanding that it is preventable, and
> > 3) how and by whom.?
>
> I think the wallet company understands, and I think they probably felt pretty
> safe using one of the world?s largest DNS providers for their service. ?If
> they thought about this they probably figured ?who could hijack Amazon?? and
> ?Google is clever, 8.8.8.8 probably can?t be fooled?.
>
> Although I guess they didn?t think about DNSSEC, so maybe I?m all wrong. :)
>
> ? ?Domain Name: MYETHERWALLET.COM
> ? ?Name Server: NS-1007.AWSDNS-61.NET
> ? ?Name Server: NS-1498.AWSDNS-59.ORG
> ? ?Name Server: NS-1993.AWSDNS-57.CO.UK
> ? ?Name Server: NS-73.AWSDNS-09.COM
> ? ?DNSSEC: unsigned
>
> One of my clients is a customer of HE, and I?m wondering if they will have
> anything to say about this. I only do very small-fry stuff with BGP, but even
> I know that if I provide a customer the ability to speak BGP to me, I have to
> be paranoid and only let them announce an agreed-upon list of networks.
>
> Anyone have any articles that look more at the two providers involved here,
> preferably with some statements from HE or eNet?
>
> Charles
--------
Not to be philosophical but the big part of this is Network itself is the enemy.
An old slogan from dutch hacker community comes to mind, someone you trust is
one of us and the leak is higher up in the chain of command that you ;-)
--?
regards,
/vrode
On Wed, Apr 25, 2018 at 12:04 AM Gert Doering via Outages <[email protected]>
wrote:
Hi,
On Tue, Apr 24, 2018 at 07:47:36PM -0400, J Kibler via Outages wrote:
> Here is a more detailed analysis of what happened:
> https://arstechnica.com/information-technology/2018/04/suspicious-event-hijacks-amazon-traffic-for-2-hours-steals-cryptocurrency/
Maybe that is actually good news.
Financial damages have been done, by a US company, to a US company, due
to neglicience in BGP filtering.? This is going to be an expensive lawsuit,
and hopefully people will start proper BGP filtering afterwards...
gert
--
"If was one thing all people took for granted, was conviction that if you
?feed honest figures into a computer, honest figures come out. Never doubted
?it myself till I met a computer with a sense of humor."
? ? ? ? ? ? ? ? ? ? ? ? ? ? ?Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany? ? ? ? ? ? ? ? ? ? ? ? ? ? [email protected]
_______________________________________________
Outages mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/outages
_______________________________________________
Outages mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/outages
--?
Charles Sprickman
NetEng/SysAdmin
Bway.net - New?York's Best Internet?www.bway.net
[email protected] - 212.982.9800
> _______________________________________________
> Outages-discussion mailing list
> [email protected]
> https://puck.nether.net/mailman/listinfo/outages-discussion
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://puck.nether.net/pipermail/outages-discussion/attachments/20180425/c98eb050/attachment.html>
------------------------------
Subject: Digest Footer
_______________________________________________
Outages-discussion mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/outages-discussion
------------------------------
End of Outages-discussion Digest, Vol 106, Issue 3
**************************************************
