Re: Dear Linkedin,

2012-06-08 Thread Lyndon Nerenberg
On 2012-06-08, at 12:48 PM, Michael Thomas wrote: > I'm sorry, my brain doesn't hold that many passwords. Unless you're a savant, > neither does > yours. So what you're telling me and the rest of the world is impossible. https://agilebits.com/onepassword (1Password) is one solution to managing

Re: cable markers for marine environments

2012-03-08 Thread Lyndon Nerenberg
On 2012-03-08, at 2:10 PM, George Herbert wrote: > Which fuel is present affects the label durability... Diesel.

Re: cable markers for marine environments

2012-03-08 Thread Lyndon Nerenberg
On 2012-03-08, at 2:01 PM, Jim Richardson wrote: > I have had good results with printed labels covered in clear > heatshrink. Awkward, time consuming, and generally annoying, but > works, and lasts. A bit more detail I should have included ... These are pleasure craft, so stuff goes under the

cable markers for marine environments

2012-03-08 Thread Lyndon Nerenberg
I have a couple of wiring projects coming up on salt water-going vessels and I'm curious as to people's experiences with different types of cable marking products in a high-humidity / salt air / bilge environment None of the markers will be directly exposed to the outside elements, but quite a

Re: AD and enforced password policies

2012-01-02 Thread Lyndon Nerenberg
I just went through some calculations for a (government) site that has the following rules: [...] Under the plausible assumption that very many people will start with a string of digits, continue with a string of lower-case letters to reach seven characters, and then add a period, there are onl

Re: Ok; let's have the "Does DNAT contribute to Security" argument one more time...

2011-11-14 Thread Lyndon Nerenberg
There really is no winner or "right way" on this thread. In IPv4 as a security guy we have often implemented NAT as an extra layer of obfuscation. It's worse than just obfuscation. The 'security' side effect of NAT can typically be implemented by four or five rules in a traditional firewall.

Re: Vancouver, BC providers

2011-10-25 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> The last mile for the Level3 is coming on Telus (after a punch to > the face and gut for build out fee) so I'd like someone else. > Shaw does not offer service without what I suspect is another > punch to the face for a build out. Bell didn't return any of my > inquiries via email of voice messa

How long is your rack?

2011-08-14 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
I hope someone will explain the operational relevance of this ... Sun V100 FreeBSD firewall/border gateway Sun V100 Plan 9 kernel porting test bed Sun V100 OpenBSD build/test/port box Intel 8-core Solaris fileserver and zones host AMDx4Random OS workstation

Re: Ham Radio Networking (was Re: Rogers Canada using 7.0.0.0/8 for internal address space)

2011-05-26 Thread Lyndon Nerenberg
Sorry, poorly worded. What I was wondering is there is an equivalent of KA9Q for IPv6. I believe one of the comments we got back when we were trying to reclaim 44/8 was that folks couldn't migrate to IPv6 because no software was available... We've come a little way since NOS. Linux has nati

Re: Rogers Canada using 7.0.0.0/8 for internal address space

2011-05-25 Thread Lyndon Nerenberg
Does it make sense that ham radio operators have routable IP address space any longer? Yes. Keep your mitts off 44!

Re: Had an idea - looking for a math buff to tell me if it's possible

2011-05-18 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> no no no.. it's simply, since the OP posited a math solution, md5. > ship the size of file + hash, compute file on the other side. All > files can be moved anywhere regardless of the size of the file in a > single packet. MD5 compression is lossy in this context. Given big enough files you're g

Re: Syngenta space

2011-04-13 Thread Lyndon Nerenberg
and pigs fly Well, sometimes they do. There underlying problem here is flying sheep: http://www.youtube.com/watch?v=Vkw2DdoskPY Note the accurate summarization of the entire issue.

Re: Syngenta space

2011-04-13 Thread Lyndon Nerenberg
sorry for the noise, but my contact at Syngenta says they have 147.0.0.0/8 168.0.0.0/8 and 172.0.0.0/8, Bugger. Now I have to renumber out of my 172.16/12 subnets :-(

Re: OT: Question/Netflix issues?

2011-03-22 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> Guess that move to Amazon EC2 wasn't such a good idea. First reddit, > now netflix. > http://techblog.netflix.com/2010/12/four-reasons-we-choose-amazons-cloud-as.html FWIW, at $DAYJOB we haven't been able to run out a pool of a couple of dozen EC2 instances for more than two weeks (since last Ju

Re: The scale of streaming video on the Internet.

2010-12-05 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> Just how much free time do you have? :) 1 minute to google the capacity of a 747-400F. 1 minute to google the dimensions and weight of an lto-4 cartridge. 1 minute to punch the numbers into bc(1). --lyndon

Re: Blocking International DNS

2010-12-01 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> Also, who you will really trust to run it ? The UUCP network chugged along quite nicely for many years without any central authority. (Pathalias and the maps weren't an authority, just a hint.) --lyndon

Re: Mystery open source switching company claims top-of-rack price

2010-10-30 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> Marketing by annoyance, smoke, and mirrors? Gotta love the strategy But as was demonstrated by the link they posted earlier today, they make a good filter for determining "news" organizations that operate on the theory of "news by press release." Think of them as a honeypot feed :-P --lyndon

Re: Randy in Nevis

2010-09-27 Thread Lyndon Nerenberg
On 10-09-27 7:20 AM, Robert E. Seastrom wrote: > "Cannot establish SSL with SMTP server 67.202.37.63:465" does not > sound like a 587 problem to me. > > netalyzr folks? comment? Sorry, I hit send too soon ... I've heard from a couple of people that the PIX will remap 587 (and 25) to oddball por

Re: Randy in Nevis

2010-09-27 Thread Lyndon Nerenberg
On 10-09-27 7:20 AM, Robert E. Seastrom wrote: > "Cannot establish SSL with SMTP server 67.202.37.63:465" does not > sound like a 587 problem to me. > > netalyzr folks? comment? Cisco PIX?

Re: Numbering nameservers and resolvers

2010-08-18 Thread Lyndon Nerenberg
because most of the end users who would be querying it are in Canada, and, with one nameserver in Canada and one in Japan, they would get a long RTT on DNS queries roughly half the time. But only, say, once per week if you're running a reasonable TTL on your zone.

Re: What is "The Internet" TCP/IP or UNIX-to-UNIX ?

2010-04-04 Thread Lyndon Nerenberg
You could certainly add uux and uux to the list of legal remote commands, but I confess that my memory is also dim about whether uucp file a!b!c would be translated automatically. It has indeed been a while... I'm pretty sure it was adding 'uucp' in the commands list that enabled the

Re: What is "The Internet" TCP/IP or UNIX-to-UNIX ?

2010-04-04 Thread Lyndon Nerenberg
File transfer wasn't multihop It was, for at least some versions (V2 and later?), if the intermediate site(s) allowed execution of the uucp command. 25 years on the brain is fuzzy on the details ... --lyndon

Re: Email Portability Approved by Knesset Committee

2010-02-22 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
s...@cs.columbia.edu: > I am seriously suggesting that a redirect mechanism -- perhaps the email > equivalent of HTPP's 301/302 -- would be worth considering. We already have SMTP's 221 and 521 response codes for this. But because the response text is free-form there's no way to reliably parse ou

Network Provider Recommendation in Edmonton AB

2010-01-15 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
I have a client in Edmonton who's looking for a network drop to their office, something in the 2-10 MB/s range. The location is at 46 Ave. and 99 St. The core requirement is for a bare unfiltered *symmetric* pipe (no ADSL). Traffic volume will be low: 2-4 laptop VPNs plus some light web server an

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-13 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> RFID tags are generic, you don't put data into them unique to your > application. Field programmable RFID-like tags do exist. They aren't common, but they're out there.

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-13 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> Barry's right, for at least some scenarios. If I have an unauthorized somebody > walking down the row with a wand in their pocket, the fact they have a wand in > their pocket is the least of my problems. Encrypt the data?

Re: HE.net, Fremont-2 outage?

2009-11-03 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> FWIW: http://www.he.net/releases/release18.html How long can they go on those 3000 gallons under their current load?

Re: ISP port blocking practice

2009-10-23 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> Rogers > says they don't do that, and lots of other people seem to be able to > use port 587 on Rogers (and other ISPs) without problems. I'm in Calgary right now so I can't check the current behaviour, but as of June 1st it was still broken. Broken in the sense that any connection to port 587

Re: ISP port blocking practice

2009-10-22 Thread Lyndon Nerenberg (VE6BBM/VE7TFX)
> Few > companies use the MSP port (tcp/587). Can you elaborate. Is this based on analysis you've conducted on your own network? And if so, is the data (anonymized) available for the rest of us to look at? My experience is that port 587 isn't used because ISPs block it out-of-hand. Or in the ca

Re: OT: Bringing Cisco equipment to US

2009-06-29 Thread Lyndon Nerenberg
On Mon, 2009-06-29 at 13:46 -0700, Aaron J. Grier wrote: > On Mon, Jun 29, 2009 at 12:19:36PM -0400, Joe Abley wrote: > > If you want to avoid any unpleasant questions at the border, then the > > right thing to do is probably to find out what supporting paperwork is > > required to support the impo

Re: Is your ISP blocking outgoing port 25?

2009-06-18 Thread Lyndon Nerenberg
On Thu, 2009-06-18 at 16:14 -0400, Joe Provo wrote: > then you should be shifting your userbase to authenticated on the > SUBMIT > port [587] anyway... Except for those ISPs who choose to intercept port 587 as well. This is a big problem with Rogers in Vancouver. They hijack port 587 connections

RE: Wireless bridge

2009-06-18 Thread Lyndon Nerenberg
On Thu, 2009-06-18 at 11:54 -0400, Peter Boone wrote: > Oh I know. Luckily it's located in an industrial area just on the > outskirts > of the city. There isn't a lot of other WiFi (in my opinion); 3-5 > total > SSIDs spread across 2 of the 3 physical channels (1,6,11) depending on > which > roofto

Re: Redundant AS's

2009-03-22 Thread Lyndon Nerenberg
Autonomous systems will be assigned 16-bit identification numbers (in much the same ways as network and protocol numbers are now assigned), and every EGP message header contains one word for this number. Was that a 36-bit word? --lyndon I think 3B2 code deserves its own place

Re: an over-the-top data center

2008-12-01 Thread Lyndon Nerenberg
Not if the ship is literally encased in concrete at the shore. Which solves all your other problems as well. But that's not a ship, it's a building. There are even examples of actual free-floating ships which have been stable for a decade or more. And many counter-examples. --lyndon

Re: an over-the-top data center

2008-12-01 Thread Lyndon Nerenberg
On 1-Dec-08, at 10:27 AM, Danny McPherson wrote: On a related noted, some have professed that adapting old ships into data centers would provide eco-friendly secure data center solutions. Your data connection to shore is going to be tenuous at best. One good blow strong enough to make you dr

Rogers cluefuls

2008-11-16 Thread Lyndon Nerenberg
Anyone from Rogers out there that can help me with port 587 proxy insanity? (Don't give me the 1-8xx numbers, thank you.)

Re: ASN Name of the week

2007-07-24 Thread Lyndon Nerenberg
ASN Number NameHandle Location Organization 40543 1-800-GOT-JUNK [ABI19-ARIN] {Vancouver, BC, CA} 1-800-GOT-JUNK I guess somebody thinks that whois has advertising potential. Thats actually th

<    1   2