Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Mark Tinka
On 1/2/21 22:40, Sabri Berisha wrote: Aliens always invade New York, so I'm safe up here :) I thought that was Roswell :-). Mark.

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Matthew Petach
On Sun, Jan 3, 2021 at 5:03 PM Keith Medcalf wrote: > >I think the challenge here is that there's a category of people > >who don't have cell phones, who don't have cable TV, but > >receive content over their internet connection. I happen to > >live with someone like that, so I know it's a

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Jay R. Ashworth
- Original Message - > From: "Keith Medcalf" >>I think the challenge here is that there's a category of people >>who don't have cell phones, who don't have cable TV, but >>receive content over their internet connection. I happen to >>live with someone like that, so I know it's a

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Valdis Klētnieks
On Sun, 03 Jan 2021 18:00:22 -0700, "Keith Medcalf" said: > This is the same thing I tell shithead politicians and pollsters that cause > my phone to ring. If you wish to speak with me then you can pay to install > your own communications equipment at your own expense. Um... Keith? Pretty much

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 5:00 PM, Keith Medcalf wrote: I think the challenge here is that there's a category of people who don't have cell phones, who don't have cable TV, but receive content over their internet connection. I happen to live with someone like that, so I know it's a non-zero portion of the

RE: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Keith Medcalf
>I think the challenge here is that there's a category of people >who don't have cell phones, who don't have cable TV, but >receive content over their internet connection. I happen to >live with someone like that, so I know it's a non-zero portion >of the population. I pay for my Internet

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 2:27 PM, Ask Bjørn Hansen wrote: On Jan 3, 2021, at 13:57, Michael Thomas wrote: I just sent some mail to the myshakes folks at UCB asking if they have an achitecture/network document. In their case for earthquakes it need to be less than ~10 seconds so they are really pushing

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 2:23 PM, Jay R. Ashworth wrote: - Original Message - From: "Michael Thomas" Well, TCP means that the servers have to expect to have 100k's of open connections; I remember that used to be a problem. As for D'oH, sure; let's centralize the attack surface. The only reason I

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Ask Bjørn Hansen
On Jan 3, 2021, at 13:57, Michael Thomas wrote: > I just sent some mail to the myshakes folks at UCB asking if they have an > achitecture/network document. In their case for earthquakes it need to be > less than ~10 seconds so they are really pushing the limit. If they get back > to me, I'll

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Jay R. Ashworth
- Original Message - > From: "Michael Thomas" >> Well, TCP means that the servers have to expect to have 100k's of open >> connections; I remember that used to be a problem. >> >> As for D'oH, sure; let's centralize the attack surface. > The only reason I bring up DoH is because now

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Andy Brezinsky
At this point I would assume that nearly every device is persisting at least one long lived TCP connection.  Whether it's for telemetry or command and control, everything these days seems to have this capability.  As an example, I can hit a button in the Nintendo Switch parent app on my phone

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 1:50 PM, Mark Delany wrote: On 03Jan21, Brandon Martin allegedly wrote: I was thinking more in the original context of this thread w.r.t. potential distribution of emergency alerts. That could, if semi-centralized, easily result in 100s of million connections to juggle across a

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 1:22 PM, Mark Delany wrote: Even with a participating application, quiescing in-memory state to something less than, say, 1KB is probably hard but might be doable with a participating TLS library. If so, a million quiescent connections could conceivably be stashed in a coupla GB

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Mark Delany
On 03Jan21, Brandon Martin allegedly wrote: > I was thinking more in the original context of this thread w.r.t. > potential distribution of emergency alerts. That could, if > semi-centralized, easily result in 100s of million connections to juggle > across a single service just for the USA.

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Jay R. Ashworth
- Original Message - > From: "Brandon Martin" > The nice thing is that such emergency alerts don't require > confidentiality and can relatively easily bear in-band, > application-level authentication (in fact, that seems preferable to only > using session-level authentication). That

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Brandon Martin
On 1/3/21 4:22 PM, Mark Delany wrote: Creating quiescent sockets has certainly been discussed in the context of RSS where you might want to server-notify a large number of long-held client connections very infrequently. While a kernel could quiesce a TCP socket down to maybe 100 bytes or so

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Mark Delany
On 03Jan21, Brandon Martin allegedly wrote: > On 1/3/21 3:11 PM, Jay R. Ashworth wrote: > > Well, TCP means that the servers have to expect to have 100k's of open > > connections; I remember that used to be a problem. > > Out of curiosity, has anyone investigated if it's possible to hold open >

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Brandon Martin
On 1/3/21 3:11 PM, Jay R. Ashworth wrote: Well, TCP means that the servers have to expect to have 100k's of open connections; I remember that used to be a problem. Out of curiosity, has anyone investigated if it's possible to hold open a low-traffic, long-lived TCP session without actually

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 12:11 PM, Jay R. Ashworth wrote: - Original Message - From: "Michael Thomas" To: nanog@nanog.org On 1/2/21 10:31 PM, Jay R. Ashworth wrote: Yup; it's messy, and in many many different ways. Won't be a snapshot rollout. Not a bad idea, though, if implemented correctly;

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Jay R. Ashworth
- Original Message - > From: "Michael Thomas" > To: nanog@nanog.org > On 1/2/21 10:31 PM, Jay R. Ashworth wrote: >> Yup; it's messy, and in many many different ways. Won't be a snapshot >> rollout. Not a bad idea, though, if implemented correctly; time to dig >> out my notes, I guess.

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Jim
On Sun, Jan 3, 2021 at 12:02 PM Rich Kulawiec wrote: [snip] > streaming company need to be able to authenticate the alerts from > all those different agencies. Those agencies also need to secure [...] The agencies would already submit their alerts through IPAWS gateways managed by FEMA;

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Chris Adams
Once upon a time, Rich Kulawiec said: > And then there's another problem, which is that once all those different > agencies have this facility, they're going to (ab)use it as they see fit. A year or two ago, Alabama issued a state-wide "blue alert" when a police officer was shot. So my

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 10:01 AM, Rich Kulawiec wrote: On Sun, Jan 03, 2021 at 03:26:07AM -0500, Valdis Kl??tnieks wrote: Meanwhile, this causes yet another problem - if Hulu has to be able to know what alerts should be piped down to my device, this now means that every single police and public safety

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Rich Kulawiec
On Sun, Jan 03, 2021 at 03:26:07AM -0500, Valdis Kl??tnieks wrote: > Meanwhile, this causes yet another problem - if Hulu has to be able to > know what alerts should be piped down to my device, this now means that > every single police and public safety agency has to be able to send the > alerts

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/2/21 10:31 PM, Jay R. Ashworth wrote: including foreign locations, generations of emergency alert packets *MUST* be responsibility of *LOCAL* ISPs. A problem is that home routers may filter the broadcast packets from ISPs, but the routers may be upgraded or some device to snoop the

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Valdis Klētnieks
On Sun, 03 Jan 2021 09:26:07 +, Mark Foster said:' > Yeah my family got a PS4 for Christmas. But we've had an Xbox One for > the last few years. There are quite a few streaming apps, true. But a > lot fewer of those than worldwide telcos, or jurisdictions, or emergency > services. You

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/2/21 10:15 PM, b...@theworld.com wrote: Let's just go back to air-raid sirens. I'm old enough to remember when they were tested every day at noon, which also told you it was noon (lunch!) We'd say heaven help us if The Enemy attacked at noon. They still do in San Francisco garbled

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Michael Thomas
On 1/3/21 12:26 AM, Valdis Klētnieks wrote: On Sun, 03 Jan 2021 18:59:37 +1300, Mark Foster said: In my mind it's simple.� The streaming companies need to have a channel within their streaming system to get a message to a 'currently active customer' (emergency popup notification that appears

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Mark Foster
On 2021-01-03 08:26, Valdis Klētnieks wrote: On Sun, 03 Jan 2021 18:59:37 +1300, Mark Foster said: In my mind it's simple.� The streaming companies need to have a channel within their streaming system to get a message to a 'currently active customer' (emergency popup notification that appears

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Masataka Ohta
Mark Foster wrote: On 3/01/2021 2:41 am, Masataka Ohta wrote: Sean Donelan wrote: the Commission shall complete an inquiry to examine the feasibility of updating the Emergency Alert System to enable or improve alerts to consumers provided through the internet, including through streaming

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-03 Thread Valdis Klētnieks
On Sun, 03 Jan 2021 18:59:37 +1300, Mark Foster said: > In my mind it's simple.� The streaming companies need to have a channel > within their streaming system to get a message to a 'currently active > customer' (emergency popup notification that appears when their app is > open or their