Re: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761]

2015-05-26 Thread Randy
I guess AS18978 didn't learn from their mistake. Got a slew of identical bgpmon alerts for withdrawals and more specifics within the last 30 minutes. Worse than last time. Some still active, like: update time (UTC) Update Type Probe ASn Probe Location Prefix AS path Cleared

Re: gmail security is a joke

2015-05-26 Thread Mark Andrews
In message 20150526161151.ga14...@pob.ytti.fi, Saku Ytti writes: On (2015-05-26 17:44 +0200), Owen DeLong wrote: Hey, I think opt-out of password recovery choices on a line-item basis is not a bad concept. This sounds reasonable. At least then you could decide which balance of

Re: gmail security is a joke

2015-05-26 Thread Harald Koch
On 26 May 2015 at 11:32, Alex Brooks askoorb+na...@gmail.com wrote: Can you not set account recory options which change the way password reset requests are handled. https://support.google.com/accounts/answer/183723 Gives some guidance? Alex Unfortunately, setting these options does not

Re: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761]

2015-05-26 Thread Randy
Ignore my noise, I don't think there was new activity today (although something weird def. happened). BGPmon list was sorted by wrong column and I mixed the dates up. Although it's still showing as active since march which I thought said provider resolved... On 03/26/2015 8:26 pm, ML

Re: 10Gb CPE

2015-05-26 Thread Brant Ian Stevens
Any feedback on the new 7250’s yet? On 5/26/15, 3:02 PM, NANOG on behalf of Chris Lane nanog-boun...@nanog.org on behalf of clane1...@gmail.com wrote: We use Brocade ICX 6450s for this. -Chris On Tue, May 26, 2015 at 2:40 PM, Daniel Rohan dro...@gmail.com wrote: With the deluge of 10Gb X

looking glass software

2015-05-26 Thread Bogdan
hello what software do you use for looking glass. for cisco ios and ios-xr? i use the old cougar/version6.net for ios, but ios-xr is not supported. i came across https://github.com/tmshlvck/ulg/ but did't installed yet. are there any other interesting lg's out there? thanks. -- Bogdan

Re: gmail security is a joke

2015-05-26 Thread Anil Kumar
On May 27, 2015, at 8:09 AM, Harald Koch c...@pobox.com wrote: On 26 May 2015 at 11:32, Alex Brooks askoorb+na...@gmail.com wrote: Can you not set account recory options which change the way password reset requests are handled. https://support.google.com/accounts/answer/183723 Gives

Re: gmail security is a joke

2015-05-26 Thread Christopher Morrow
On Tue, May 26, 2015 at 2:15 PM, valdis.kletni...@vt.edu wrote: On Tue, 26 May 2015 19:11:51 +0300, Saku Ytti said: OTOH, recovery by receiving a token at a previously registered alternate email address seems relatively secure to me and I wouldn???t want to opt out of that. It's

Re: gmail security is a joke

2015-05-26 Thread Valdis . Kletnieks
On Tue, 26 May 2015 19:11:51 +0300, Saku Ytti said: OTOH, recovery by receiving a token at a previously registered alternate email address seems relatively secure to me and I wouldn???t want to opt out of that. It's probably machine sent in seconds or minute after request, so doing

10Gb CPE

2015-05-26 Thread Daniel Rohan
With the deluge of 10Gb X device recommendations, I thought I'd hit the list with one more. Does anyone out there running 10Gb managed CPE feel like sharing their experiences? Our use case would be a managed endpoint that would allow for testing and circuit verification while providing a layer

Re: gmail security is a joke

2015-05-26 Thread Alex Brooks
Hi, On Tue, May 26, 2015 at 3:26 PM, Markus unive...@truemetal.org wrote: Did you know that anyone, anywhere in the world can get into a gmail account merely by knowing its creation date (month and year is sufficient) and the last login date (try today)? What a joke. Can you not set account

Re: gmail security is a joke

2015-05-26 Thread chris
Haha I cringe when I do a password recovery at a site and they either email the current pw to me in plain text or just as bad reset it then email it in plain text. Its really sad that stuff this bad is still so common. On Tue, May 26, 2015 at 11:44 AM, Owen DeLong o...@delong.com wrote: On

Re: gmail security is a joke

2015-05-26 Thread Saku Ytti
On (2015-05-26 17:44 +0200), Owen DeLong wrote: Hey, I think opt-out of password recovery choices on a line-item basis is not a bad concept. This sounds reasonable. At least then you could decide which balance of risk/convenience fits their use-case for given service. OTOH, recovery by

Re: gmail security is a joke

2015-05-26 Thread John R. Levine
I get what you are saying but my point was more about lack of crypto or reversible crypto than stealing the account. I am all in favor of using crypto when it improves security. But I am also in favor of not obsessing about it in places where it makes no difference. I like what Owen is

Re: gmail security is a joke

2015-05-26 Thread Owen DeLong
On May 26, 2015, at 5:22 PM, Saku Ytti s...@ytti.fi wrote: On (2015-05-26 16:26 +0200), Markus wrote: Hey, Did you know that anyone, anywhere in the world can get into a gmail account merely by knowing its creation date (month and year is sufficient) and the Without any comment on

Re: gmail security is a joke

2015-05-26 Thread John Levine
In article caknnfz_apy8khbxj0umgoq6ufcd640jtxe9a+2tqu-d761-...@mail.gmail.com you write: Haha I cringe when I do a password recovery at a site and they either email the current pw to me in plain text or just as bad reset it then email it in plain text. Its really sad that stuff this bad is still

RE: SAS Drive Enclosure

2015-05-26 Thread Jameson, Daniel
What are you thinking for connectivity, Ethernet, FiberChannel, Infiniband ... Building *Storage Nodes* or in need of just drive connectivity? -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Ray Van Dolson Sent: Tuesday, May 26, 2015 2:53 PM To: Graham

Re: gmail security is a joke

2015-05-26 Thread Scott Howard
On Tue, May 26, 2015 at 12:28 PM, Aaron C. de Bruyn aa...@heyaaron.com wrote: If they can e-mail you your existing password (*cough*Netgear*cough*), it means they are storing your credentials in the database un-encrypted. No, it doesn't mean that at all. It means they are storing it

Re: SAS Drive Enclosure

2015-05-26 Thread Ray Van Dolson
On Tue, May 26, 2015 at 07:19:59PM +, Graham Johnston wrote: I am looking for information about SAS drive enclosures, is there a list like NANOG that covers that area of IT? I am specifically looking for an enclosure that can handle 12 or more drives, I am looking to create a clustered

SAS Drive Enclosure

2015-05-26 Thread Graham Johnston
I am looking for information about SAS drive enclosures, is there a list like NANOG that covers that area of IT? I am specifically looking for an enclosure that can handle 12 or more drives, I am looking to create a clustered file system between multiple servers and would like to avoid a drive

Re: gmail security is a joke

2015-05-26 Thread Aaron C. de Bruyn
On Tue, May 26, 2015 at 9:06 AM, John Levine jo...@iecc.com wrote: If they do a reset, what difference does it make whether they send the password in plain text or as a one-time link? Either way, if a bad guy can read the mail, he can steal the account. If they can e-mail you your existing

Re: 10Gb CPE

2015-05-26 Thread Chris Lane
We use Brocade ICX 6450s for this. -Chris On Tue, May 26, 2015 at 2:40 PM, Daniel Rohan dro...@gmail.com wrote: With the deluge of 10Gb X device recommendations, I thought I'd hit the list with one more. Does anyone out there running 10Gb managed CPE feel like sharing their experiences?

RE: 10Gb CPE

2015-05-26 Thread Tony Wicks
I would say these are what you are after, last time I tested these I seem to remember Accedian coming out on top, but they are all good. http://www.rad.com/10/Carrier-Ethernet-Demarcation/27932/ http://accedian.com/ http://www.mrv.com/products/carrier-ethernet -Original Message- From:

Re: gmail security is a joke

2015-05-26 Thread John R. Levine
If they can e-mail you your existing password (*cough*Netgear*cough*), it means they are storing your credentials in the database un-encrypted. What I had in mind was creating a new password and mailing you that. R's, John

Re: gmail security is a joke

2015-05-26 Thread Aaron C. de Bruyn
*facepalm* Right. Sorry. Forgot which group I was addressing. ;) I swear half of the United States forgot their passwords over the three-day weekend. -A On Tue, May 26, 2015 at 12:39 PM, John R. Levine jo...@iecc.com wrote: If they can e-mail you your existing password

Re: gmail security is a joke

2015-05-26 Thread Saku Ytti
On (2015-05-26 16:26 +0200), Markus wrote: Hey, Did you know that anyone, anywhere in the world can get into a gmail account merely by knowing its creation date (month and year is sufficient) and the Without any comment on what gmail is or is not doing, the topic interests me. How should

gmail security is a joke

2015-05-26 Thread Markus
Did you know that anyone, anywhere in the world can get into a gmail account merely by knowing its creation date (month and year is sufficient) and the last login date (try today)? What a joke. Try it by yourself, its fun. Even worse, once the attacker had control of your account once, and

Re: Multiple vendors' IPv6 issues

2015-05-26 Thread Ca By
On Tuesday, May 26, 2015, David Sotnick sotnickd-na...@ddv.com wrote: Hi NANOG, The company I work for has no business case for being on the IPv6-Internet. However, I am an inquisitive person and I am always looking to learn new things, so about 3 years ago I started down the IPv6 path. This

Multiple vendors' IPv6 issues

2015-05-26 Thread David Sotnick
Hi NANOG, The company I work for has no business case for being on the IPv6-Internet. However, I am an inquisitive person and I am always looking to learn new things, so about 3 years ago I started down the IPv6 path. This was early 2012. Fast forward to today. We have a /44 presence for our

RE: gmail security is a joke

2015-05-26 Thread Thijs Stuurman
Perhaps this is still a void in the market? A business which operates small officers at which you can real-world verify your personal being using the most solid evidence available (perhaps in cooperation with governments) for that location/country which works together with the sorts of

Re: gmail security is a joke

2015-05-26 Thread Jim Popovitch
On Tue, May 26, 2015 at 10:26 AM, Markus unive...@truemetal.org wrote: Did you know that anyone, anywhere in the world can get into a gmail account merely by knowing its creation date (month and year is sufficient) and the last login date (try today)? What a joke. We don't even know if this