Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-11 Thread Robert Glover
*SNIP* located ten feet down a manhole on Monterey Highway, north of Blossom Hill Road in San Jose. Authorities also found two other locations where fiber optic cables were similarly cut -- near Hayes Avenue and Cottle Road in San Jose *SNIP* Just for clarification, these locations are one in

Re: Fiber cut in SF area

2009-04-11 Thread Joel Jaeggli
Jo¢ wrote: I'm confussed, but please pardon the ignorance. All the data centers we have are at minimum keys to access data areas. Not that every area of fiber should have such, but at least should they? Manhole covers can be keyed. For those of you arguing that this is not enough, I

Re: Fiber cut in SF area

2009-04-11 Thread Joe Greco
Jo¢ wrote: I'm confussed, but please pardon the ignorance. All the data centers we have are at minimum keys to access data areas. Not that every area of fiber should have such, but at least should they? Manhole covers can be keyed. For those of you arguing that this is not enough, I

Re: BGP FlowSpec support on provider networks

2009-04-11 Thread Jared Mauch
On Apr 11, 2009, at 12:54 AM, Christopher Morrow wrote: On Fri, Apr 10, 2009 at 6:38 PM, John Payne j...@sackheads.org wrote: On Apr 10, 2009, at 4:27 PM, Fouant, Stefan stefan.fou...@neustar.biz wrote: Hi folks, I am trying to compile data on which providers are currently

Re: Fiber cut in SF area

2009-04-11 Thread Chris Adams
Once upon a time, Jo¢ jbfixu...@gmail.com said: Yes if enough time goes by anything can happen, but how can one argue an ATM machince that has (at times) thousands of dollars stands out 24/7 without more immediate wealth. Perhaps I am missing something here, do the Cops stake out those areas?

Re: Fiber cut in SF area

2009-04-11 Thread Florian Weimer
* Joe Greco: The ATM machine is somewhat protected for the extremely obvious reason that it has cash in it, but an ATM is hardly impervious. http://www.youtube.com/watch?v=4P8WM8ZZDHk Heh. Once you install ATMs into solid walls, the attacks get a tad more interesting. In some places of

Re: Fiber cut in SF area

2009-04-11 Thread Christopher Morrow
On Sat, Apr 11, 2009 at 11:10 AM, Florian Weimer f...@deneb.enyo.de wrote: * Joe Greco: The ATM machine is somewhat protected for the extremely obvious reason that it has cash in it, but an ATM is hardly impervious. http://www.youtube.com/watch?v=4P8WM8ZZDHk Heh.  Once you install ATMs

Re: Fiber cut in SF area

2009-04-11 Thread Jorge Amodio
The best protecion is good engineering taking advantage of technologies and architecures available since long time ago at any of the different network layers. Why network operators/carriers don't do it ?, it's another issue and most of the time is a question of bottom line numbers for which there

Re: SIP - perhaps botnet? anyone else seeing this?

2009-04-11 Thread Steven M. Bellovin
On Fri, 10 Apr 2009 10:20:35 + (GMT) Leland E. Vandervort lel...@taranta.discpro.org wrote: On Fri, 10 Apr 2009, Roland Dobbins wrote: IANAL, but I suggest you check again with your legal department - I doubt this is actually the case (your jurisdiction may vary, but in most

[OT] Re: Fiber cut in SF area

2009-04-11 Thread Lamar Owen
On Saturday 11 April 2009 08:31:55 Joe Greco wrote: Speaking of that, a manhole cover is typically protecting some hole, accessway, or vault that's made out of concrete. An oxyacetylene torch or a plasma cutter will slice through regular steel manhole covers in minutes. You can cut the

Re: [OT] Re: Fiber cut in SF area

2009-04-11 Thread Brandon Butterworth
You can cut the concrete, too, for that matter, with oxyacetylene, as long as you wear certain protective gear. We have a few vault covers here that are concrete covering the largest vaults we have. You need more than a manhole hook to get one of those covers up. And when you think you

RE: Fiber cut in SF area

2009-04-11 Thread Roger Marquis
Jo? wrote: I'm confussed, but please pardon the ignorance. All the data centers we have are at minimum keys to access data areas. Not that every area of fiber should have such, but at least should they? Manhole covers can be keyed. For those of you arguing that this is not enough, I would say at

Re: Fiber cut in SF area

2009-04-11 Thread Jorge Amodio
The real problem is route redundancy.  This is what the original contract from DARPA to BBM, to create the Internet, was about! s/DARPA/ARPA/; s/BBM/BBN/; s/Internet/ARPAnet/. BBN won the contract to build the first four IMPs. Theory and research about it is older, look at:

Re: [OT] Re: Fiber cut in SF area

2009-04-11 Thread Joe Greco
On Saturday 11 April 2009 08:31:55 Joe Greco wrote: Speaking of that, a manhole cover is typically protecting some hole, accessway, or vault that's made out of concrete. An oxyacetylene torch or a plasma cutter will slice through regular steel manhole covers in minutes. Yes, but we

RE: BGP FlowSpec support on provider networks

2009-04-11 Thread Fouant, Stefan
-Original Message- From: Jared Mauch [mailto:ja...@puck.nether.net] Can you name 3 major vendors who support it? I suspect more providers would juniper... and when they dropped the IPR stuff other vendors basically walked away :( Causing consultations with lawyers by

Re: BGP FlowSpec support on provider networks

2009-04-11 Thread sthaug
Now I realize that FlowSpec isn't a panacea, but it certainly meets some of the requirements that many customers have today, and it gives us a lot more flexibility over simply destination based filtering. Whether it's FlowSpec or something else, what's it going to take to get the vendors and

RE: Fiber cut in SF area

2009-04-11 Thread Sean Donelan
On Sat, 11 Apr 2009, Roger Marquis wrote: The real problem is route redundancy. This is what the original contract from DARPA to BBM, to create the Internet, was about! The net was created to enable communications bttn point A and point B in this exact scenario. Uh, not exactly. There was

Re: Fiber cut in SF area

2009-04-11 Thread Mike Lyon
Anyone know how banks in the Bay Area did through this? I wonder how many banks went dark and whether they had any backup plans/connectivity. Me thinks its doubtful. I also wonder if the bigger pharmacies such as Longs, Walgreens, Rite-Aid, Etc had thought about these kinds of issues? I

Re: Fiber cut in SF area

2009-04-11 Thread Ravi Pina
While OT the news reports indicated ATMs were offline and many credit card processing machines were down. This is no big shock because many ATM networks are on frame relay and POS credit card machines use POTS lines. The outage also impacted mobile service too if it hadn't been said. I hope we

Re: Fiber cut in SF area

2009-04-11 Thread Roy
Mike Lyon wrote: Anyone know how banks in the Bay Area did through this? I wonder how many banks went dark and whether they had any backup plans/connectivity. Me thinks its doubtful. ... Because of the loss of the alarm systems, many banks went to a method where only one or two people were

Re: Fiber cut in SF area

2009-04-11 Thread Mike Lyon
Don't really care so much about the bank's security, especially if it was one that received some the bailout money :) I was more worried about if people could make withdraws from their bank accounts. Deposits they could do as they could enter them in later but withdraws I think would be

Re: Fiber cut in SF area

2009-04-11 Thread Roy
Sean Donelan wrote: Uh, not exactly. There was diversity in this case, but there was also N+1 breaks. Outside of a few counties in the Bay Area, the rest of the country's telecommunication system was unaffected. So in that sense the system worked as designed. About eight or ten

Re: [OT] Re: Fiber cut in SF area

2009-04-11 Thread Christopher Morrow
On Sat, Apr 11, 2009 at 2:43 PM, Joe Greco jgr...@ns.sol.net wrote: On Saturday 11 April 2009 08:31:55 Joe Greco wrote: Speaking of that, a manhole cover is typically protecting some hole, accessway, or vault that's made out of concrete. An oxyacetylene torch or a plasma cutter will slice

RE: Fiber cut in SF area

2009-04-11 Thread Carlos Alcantar
I know as far as att/sbc/pacbell a lot of the time they run the ring within the same conduit to at least have hardware protection on the circuit I'm sure it's the same with other providers. -carlos -Original Message- From: Roy [mailto:r.engehau...@gmail.com] Sent: Saturday, April 11,

Re: Fiber cut in SF area

2009-04-11 Thread Roger Marquis
Jorge Amodio wrote: s/DARPA/ARPA/; s/BBM/BBN/; s/Internet/ARPAnet/. /DARPA/ARPA/ may be splitting hairs. According to http://www.livinginternet.com/i/ii_roberts.htm DARPA head Charlie Hertzfeld promised IPTO Director Bob Taylor a million dollars to build a distributed communications

Re: [OT] Re: Fiber cut in SF area

2009-04-11 Thread Paul Vixie
Christopher Morrow morrowc.li...@gmail.com writes: and I also would ask.. what's the cost/risk here? 'We' lost at best ~1day for some folks in the outage, nothing global and nothing earth-shattering... This has happened (this sort of thing) 1 time in how many years? Expending $$ and time and

Re: Fiber cut in SF area

2009-04-11 Thread Shane Ronan
An easy way to describe what your saying is Security by obscurity is not security On Apr 11, 2009, at 8:31 AM, Joe Greco wrote: Jo¢ wrote: I'm confussed, but please pardon the ignorance. All the data centers we have are at minimum keys to access data areas. Not that every area of fiber

Re: Fiber cut in SF area

2009-04-11 Thread Joel Jaeggli
Roger Marquis wrote: Why didn't the man in the street pharmacy have its own backup plans? I assume they, as most of us, believed the government was taking care of the country's critical infrastructure. Interesting how well this illustrates the growing importance of the Internet vis-a-vis

Re: [OT] Re: Fiber cut in SF area

2009-04-11 Thread Peter Beckman
On Sat, 11 Apr 2009, Lamar Owen wrote: The locking covers I have seen here put the lock(s) on the inside cover cam jackscrew (holes through the jackscrew close to the inside cover seal rod nut), rather than on the outside cover, thus keeping the padlocks out of the weather. I'm starting to

Re: Fiber cut in SF area

2009-04-11 Thread Joe Greco
An easy way to describe what your saying is Security by obscurity is not security Yes and no. From a certain point of view, security is almost always closely tied to obscurity. A cylinder lock is simply a device that operates through principles that are relatively unknown to the average

Re: Fiber cut in SF area

2009-04-11 Thread Mike Lewinski
Joe Greco wrote: My point was more the inverse, which is that a determined, equipped, and knowledgeable attacker is a very difficult thing to defend against. The Untold Story of the World's Biggest Diamond Heist published recently in Wired was a good read on that subject: