Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Christopher Morrow
On Thu, Jul 28, 2016 at 3:55 AM, Miles Fidelman wrote: > > > On 7/27/16 10:48 PM, Randy Bush wrote: > >> They just lost all respect from here. Would someone from USA please >>> report these guys to the feds? What they are doing is outright >>> criminal. >>> >>

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Miles Fidelman
On 7/27/16 10:48 PM, Randy Bush wrote: They just lost all respect from here. Would someone from USA please report these guys to the feds? What they are doing is outright criminal. hyperbole. it is not criminal. you just don't happen to like it. Actually, as someone pointed out, it might

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Randy Bush
> They just lost all respect from here. Would someone from USA please > report these guys to the feds? What they are doing is outright > criminal. hyperbole. it is not criminal. you just don't happen to like it.

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
I am not a lawyer and I don't pretend to be, but I believe > the gamer who ticked off another gamer and got DDoSed doesn't > have the knowledge, time, or resources to file a claim that will actually > accomplish anything, and nobody else can file the claim on their behalf. I believe a class

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
He's right, conspiracy to commit X is a valid criminal charge, at least in the US. Conspiracy to commit fraud, theft, murder, racketeering, etc are all "sister charges" of charges of ones actually carried out.

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Mark Andrews
In message <31450.1469667...@turing-police.cc.vt.edu>, valdis.kletni...@vt.edu writes: > On Thu, 28 Jul 2016 10:48:47 +1000, Mark Andrews said: > > > As soon as a transaction takes place, conspiricy to harm by > > . If the DoS actually occurs you can add additional charges for > > the actual

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Valdis . Kletnieks
On Thu, 28 Jul 2016 10:48:47 +1000, Mark Andrews said: > As soon as a transaction takes place, conspiricy to harm by > . If the DoS actually occurs you can add additional charges for > the actual actions. If the claim is that a law has been broken, you have to show that is actually a crime in

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Mark Andrews
In message <23235.1469666...@turing-police.cc.vt.edu>, valdis.kletni...@vt.edu writes: > On Wed, 27 Jul 2016 11:21:02 -0700, Dan Hollis said: > > On Wed, 27 Jul 2016, b...@theworld.com wrote: > > > There isn't even general agreement on whether (or what!) Cloudfare is > > > doing is a problem. >

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Valdis . Kletnieks
On Wed, 27 Jul 2016 11:21:02 -0700, Dan Hollis said: > On Wed, 27 Jul 2016, b...@theworld.com wrote: > > There isn't even general agreement on whether (or what!) Cloudfare is > > doing is a problem. > > aiding and abetting. at the very least willful negligence. aiding and abetting of what,

Re: Operations task management software?

2016-07-27 Thread David Hubbard
Full automation is planned but does not eliminate the need for the software. Zero human auditing of fully automated processes and data collection are not acceptable to various certifying entities, the relevant auditors, the inevitably involved lawyers, and won’t pick up on bad data, like a bad

Re: Operations task management software?

2016-07-27 Thread Lee
On 7/27/16, David Hubbard wrote: > Hi all, curious if anyone has recommendations on software that helps manage > routine duties assigned to operations staff? Have computers do the routine scut work - not people. > For example, let’s say we have a P that says

Yellow Pages - YP.ca sys/net admins

2016-07-27 Thread Eric Dugas
Hello, Just trying to reach a clueful system or network admins from Yellow Pages. You can contact me off-list. Eric

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Justin Paine via NANOG
>From our side: abuse@ reports generates an auto reply indicating where our reporting form is located. Reports at our reporting form generate an auto reply confirming we received the report. All reports filed via the form are reviewed by a human and at a minimum passed on to the responsible

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Justin Paine via NANOG
Law enforcement (US or international) knows how to contact us if they have an inquiry to make. We also publish a Transparency Report that covers those legal inquiries: https://www.cloudflare.com/transparency/ Justin Paine Head of Trust & Safety CloudFlare Inc. PGP: BBAA 6BCE 3305

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Justin Paine via NANOG
Hi Paras, I covered the booter topic in a previous reply on a different (though basically the same) thread. By "non-existent" you mean we are processing thousands of reports per week. If you have something to report you can certainly do so at cloudflare.com/abuse. We'd be more than happy to

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread niels=nanog
* goe...@sasami.anime.net (Dan Hollis) [Wed 27 Jul 2016, 20:21 CEST]: On Wed, 27 Jul 2016, b...@theworld.com wrote: There isn't even general agreement on whether (or what!) Cloudfare is doing is a problem. aiding and abetting. at the very least willful negligence. I hope the armchairs y'all

Re: Operations task management software?

2016-07-27 Thread Suresh Ramasubramanian
Been meaning to dig into this one https://www.upguard.com/blog/guardrail-tasks-a-lightweight-tracking-system-for-ops --srs > On 27-Jul-2016, at 11:46 PM, David Hubbard > wrote: > > Hi all, curious if anyone has recommendations on software that helps manage >

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Dan Hollis
On Wed, 27 Jul 2016, b...@theworld.com wrote: There isn't even general agreement on whether (or what!) Cloudfare is doing is a problem. aiding and abetting. at the very least willful negligence. -Dan

Operations task management software?

2016-07-27 Thread David Hubbard
Hi all, curious if anyone has recommendations on software that helps manage routine duties assigned to operations staff? For example, let’s say we have a P that says someone from the netops group must check that Rancid is successfully backing up all router configs bi-weekly. Ideally, it would

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread bzs
This is why policy, as painful as it is to produce, is useful. There isn't even general agreement on whether (or what!) Cloudfare is doing is a problem. Which is why interested parties need to get together and agree on some sort of policy regarding this and similar things. Or not and just let

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Ken Chase
Because replying admits knowledge and creates a papertrail thereof. Esp. w.r.t. copyright infringement takedown notices etc. (or also because said providers are innundated with such requests because they don't actually care as it's all part of their profit centre.) /kc On Wed, Jul 27, 2016 at

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Christopher Morrow
On Wed, Jul 27, 2016 at 10:58 AM, Paras Jha wrote: > I consistently did not even get replies This is a common 'complaint' point for abuse senders. I often wonder why. What is a reply supposed to do or tell you?

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Mark Stevens
Thanks Elizabeth, I sent you a direct email with what you need to (hopefully) assist me. Thanks Mark On 7/27/2016 12:39 PM, Elizabeth Zwicky wrote: We encourage people to start at https://postmaster.yaho.com but I can help people who have filed tickets there and not had any luck can

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Rich Kulawiec
On Wed, Jul 27, 2016 at 10:37:21AM -0400, Paras Jha wrote: > From just a preliminary test, more than half of these domains are hiding > behind Cloudflare, and OVH has a sizable fraction too. I suppose it's > inevitable, given that both are known for having non-existent abuse > departments. Here's

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Tom Beecher
To quote Elizabeth... "but I can help people who have filed tickets there and not had any luck can contact me, specifying a) what IP addresses and From: line they're talking about and b) exactly what error message they are getting when they try to send us mail." On Wed, Jul 27, 2016 at 1:05 PM,

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Mark Stevens
I have been to https://postmaster.yahoo.com and even filled out a bulk email form (explained the issue in the notes section) but still no go. I even have a ticket opened with their support but you can guess how that is going. This is why I asked if anyone has a contact or if in fact a

RE: Yahoo Postmaster or Email Admin

2016-07-27 Thread Kain, Rebecca (.)
Maybe they could get their email working. it's been hanging, not sending mail, for 4 days, as far my experience has been. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Elizabeth Zwicky via NANOG Sent: Wednesday, July 27, 2016 12:50 PM To: Josh Luthman Cc:

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Elizabeth Zwicky via NANOG
Yes, yes I do. On Wednesday, July 27, 2016 9:44 AM, Josh Luthman wrote: Do you mean https://postmaster.yahoo.com/ ? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 27, 2016 at 12:39 PM, Elizabeth

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Josh Luthman
Do you mean https://postmaster.yahoo.com/ ? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jul 27, 2016 at 12:39 PM, Elizabeth Zwicky via NANOG < nanog@nanog.org> wrote: > We encourage people to start at https://postmaster.yaho.com but I

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Elizabeth Zwicky via NANOG
We encourage people to start at https://postmaster.yaho.com but I can help people who have filed tickets there and not had any luck can contact me, specifying a) what IP addresses and From: line they're talking about and b) exactly what error message they are getting when they try to send us

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Tom Beecher
*https://postmaster.yahoo.com * *https://help.yahoo.com/kb/postmaster/postmaster-sending-issues-sln22608.html * On Wed, Jul 27, 2016 at 12:30 PM, Tony Finch wrote: > For

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Steve Atkins
> On Jul 27, 2016, at 9:17 AM, Baldur Norddahl > wrote: > > Den 27. jul. 2016 17.12 skrev "Steve Mikulasik" : >> >> Disclaimer: I have a ton of respect for Clouldflare and what they do on > the internet. > > They just lost all respect

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Tony Finch
For this kind of question you might hav emore luck on the mailop list, https://chilli.nosignal.org/mailman/listinfo/mailop Tony. -- f.anthony.n.finch http://dotat.at/ - I xn--zr8h punycode North Fitzroy, Sole, Lundy, Fastnet: Westerly 5 or 6. Moderate, occasionally rough

Re: Yahoo Postmaster or Email Admin

2016-07-27 Thread Mark Stevens
Good afternoon, Does anyone have a contact at Yahoo that could help with getting an IP de-listed from Yahoo email blacklist? Thanks Mark On 7/27/2016 8:28 AM, Mark Stevens wrote: Good Morning, If there is a Yahoo postmaster or email Admin that could contact me offline concerning a

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Baldur Norddahl
Den 27. jul. 2016 17.12 skrev "Steve Mikulasik" : > > Disclaimer: I have a ton of respect for Clouldflare and what they do on the internet. They just lost all respect from here. Would someone from USA please report these guys to the feds? What they are doing is outright

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Dovid Bender
As was mentioned in the BlackHat video the DDOS providers don't like competition and they try to take each other out which is they they nee to be on clouadfare. If they were all kicked off of Cloudfare then they would all take each other out leaving no need for clouydfare's DDOS sevices. So by

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Steve Mikulasik
I am sure a lawyer would see it very differently, I could see someone looking at this like racketeering. They get paid to provide a service to defend against DDoS, well knowingly hosting people who conduct DDoS attacks. Cloudflare profits from both the victims and the criminals. If Cloudflare

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread J. Oquendo
On Wed, 27 Jul 2016, Paras Jha wrote: > Hi Justin, > > I have submitted abuse reports in the past, maybe from 2014 - 2015, but I > gave up after I consistently did not even get replies and saw no action > being taken. It is the same behavior with other providers who host malware > knowingly. I

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
Hi Randy, I've found the vast majority of large service providers to be very receptive to abuse reports when they contain evidence and valid information. Regards Paras

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
Hi Justin, I have submitted abuse reports in the past, maybe from 2014 - 2015, but I gave up after I consistently did not even get replies and saw no action being taken. It is the same behavior with other providers who host malware knowingly. I appreciate you coming out onto the list though, it's

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Randy Bush
> From just a preliminary test, more than half of these domains are > hiding behind Cloudflare, and OVH has a sizable fraction too. you mean are using cloudflare and ovh services. > I suppose it's inevitable, given that both are known for having > non-existent abuse departments. as the OP made

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Paras Jha
Hi Jair, This list is really interesting. >From just a preliminary test, more than half of these domains are hiding behind Cloudflare, and OVH has a sizable fraction too. I suppose it's inevitable, given that both are known for having non-existent abuse departments. Regards On Wed, Jul 27,

EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Jair Santanna
Hi folks, A friend forward me your topic about Booters and CloudFlare. Then I decided to join the NANOG list. The *answer* for the first question about CloudFlare and Booters is at: https://www.youtube.com/watch?v=wW5vJyI_HcU (minute 45:55) given by the _CloudFlare CEO_ in the blackhat2013.

Notice about project to roll the root zone KSK

2016-07-27 Thread Matt Larson
I realize DNS operational content isn't the usual NANOG fare, but rolling the root zone KSK for the first time is a significant-enough event that I wanted to send to this list anyway. TL;DR: The root zone KSK is changing on October 11, 2017 (yes, over a year away). If you're doing DNSSEC

Yahoo Postmaster or Email Admin

2016-07-27 Thread Mark Stevens
Good Morning, If there is a Yahoo postmaster or email Admin that could contact me offline concerning a deferred IP address it would be great. Thanks Mark