Re: How to catch a cracker in the US?

2014-03-14 Thread Tei
On 14 March 2014 05:14, shawn wilson ag4ve...@gmail.com wrote: On Mar 13, 2014 7:37 PM, Larry Sheldon larryshel...@cox.net wrote: .. Sorry for my note. Didn't mean it to sidetrack the question (I probably should've). /me o_O Social perception of hacking affect law-making. Computing security

[no subject]

2014-03-14 Thread MKS
Hi list I'm looking for a DNS solution to do a parental controls for a small ISP, as in ISP branded services. OpenDNS only supports corporate customers . Please contact me off or on-list, if you have any vendors that you can recommend. Regards MKS

new DNS forwarder vulnerability

2014-03-14 Thread Mark Allman
Just a quick note to let folks know about a new vulnerability we have found in some low-rent DNS forwarders---which we have been calling the 'preplay attack'. The finding is that when the vulnerable open resolvers receive a DNS response they just look at the query string in the response to see

Re: new DNS forwarder vulnerability

2014-03-14 Thread Nick Hilliard
On 14/03/2014 13:45, Mark Allman wrote: - We have found 7--9% of the open resolver population---or 2-3 million boxes---to be vulnerable to this cache poisoning attack. (The variance is from different runs of our experiments.) did you characterise what dns servers / embedded kit were

Re: new DNS forwarder vulnerability

2014-03-14 Thread Merike Kaeo
On Mar 14, 2014, at 7:06 AM, Stephane Bortzmeyer bortzme...@nic.fr wrote: On Fri, Mar 14, 2014 at 01:59:27PM +, Nick Hilliard n...@foobar.org wrote a message of 10 lines which said: did you characterise what dns servers / embedded kit were vulnerable? He said We have not been able

Re: new DNS forwarder vulnerability

2014-03-14 Thread Nick Hilliard
On 14/03/2014 16:05, Merike Kaeo wrote: Has someone / is someone doing this? someone has, and many CPEs use dnsmasq. current uplink too slow to find references. Nick

Re: new DNS forwarder vulnerability

2014-03-14 Thread Livingood, Jason
Well, at least all this CPE checks in for security updates every night so this should be fixable. Oh wait, no, nevermind, they don't. :-( This is getting to be the vulnerability of the week club for home gateway devices - quite concerning. JL On 3/14/14, 12:05 PM, Merike Kaeo

Weekly Routing Table Report

2014-03-14 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to

Re: DNS resolver reaction to non-reachable authoritative DNS server

2014-03-14 Thread Anurag Bhatia
Got it! Thankyou very much for help. Have a good weekend ahead. On Fri, Mar 14, 2014 at 6:59 AM, Doug Barton do...@dougbarton.us wrote: On 3/13/2014 5:23 PM, Mark Andrews wrote: If your customers are using BIND there is a flag you can supply to named to cause it to operate only in IPv4.

Verizon FIOS issues in the Washington DC issue with HTTPS traffic?

2014-03-14 Thread Ulf Zimmermann
We have a number of customers in the DC area on Verizon Fios who can talk to us using http, but not https. Linkedin also tweeted there are issues via Verzion Fios. Verizon support so far denies everything. Anyone else seeing issues? -- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #:

The Cidr Report

2014-03-14 Thread cidr-report
This report has been generated at Fri Mar 14 21:37:59 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History

BGP Update Report

2014-03-14 Thread cidr-report
BGP Update Report Interval: 06-Mar-14 -to- 13-Mar-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS29571 48376 2.4% 267.3 -- CITelecom-AS 2 - AS10620 36314 1.8% 14.4 --

Re: new DNS forwarder vulnerability

2014-03-14 Thread Wayne E Bouchard
Have we ascertained if there is a typical configuration adjustment that can be made to reduce or eliminate the likelihood of impact? (From the description it sounds as though this is not possible but it doesn't hurt to ask.) On Fri, Mar 14, 2014 at 09:05:00AM -0700, Merike Kaeo wrote: On Mar

US to relinquish control of Internet

2014-03-14 Thread Patrick W. Gilmore
(As if the US has control anyway) It's all over the popular press, strange I haven't seen it here. http://thehill.com/blogs/hillicon-valley/technology/200889-us-to-relinquish-internet-control

Re: US to relinquish control of Internet

2014-03-14 Thread John Levine
Was I being a pollyanna? I look forward to the ITU equitably allocating domain names and IP addresses. R's, John

Re: US to relinquish control of Internet

2014-03-14 Thread John Curran
On Mar 14, 2014, at 9:19 PM, John Levine jo...@iecc.com wrote: I look forward to the ITU equitably allocating domain names and IP addresses. While it is not possible to know what will happen in the future, we do have some idea of what _won't_ happen: From

Re: US to relinquish control of Internet

2014-03-14 Thread John R. Levine
I look forward to the ITU equitably allocating domain names and IP addresses. NTIA will not accept a proposal that replaces the NTIA role with a government or an inter-governmental organization solution. Let's hope you're right, but I note that the ITU isn't an inter-governmental

Re: US to relinquish control of Internet

2014-03-14 Thread John Curran
On Mar 14, 2014, at 11:13 PM, John R. Levine jo...@iecc.com wrote: NTIA will not accept a proposal that replaces the NTIA role with a government or an inter-governmental organization solution. Let's hope you're right, but I note that the ITU isn't an inter-governmental organization, it's

Re: US to relinquish control of Internet

2014-03-14 Thread Owen DeLong
On Mar 14, 2014, at 8:13 PM, John R. Levine jo...@iecc.com wrote: I look forward to the ITU equitably allocating domain names and IP addresses. NTIA will not accept a proposal that replaces the NTIA role with a government or an inter-governmental organization solution. Let's hope

Re: US to relinquish control of Internet

2014-03-14 Thread John Springer
On Fri, 14 Mar 2014, Patrick W. Gilmore wrote: (As if the US has control anyway) It's all over the popular press, strange I haven't seen it here. http://thehill.com/blogs/hillicon-valley/technology/200889-us-to-relinquish-internet-control