Re: Can somebody explain these ransomwear attacks?

e gangs /do/ target infrastructure - currently known to be DNS servers (Microsoft), hypervisors, backups, etc. I wouldn't assume that they wouldn't try attacking the network itself today or in the future. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer

Re: Jenkins amplification

er - it's preferrable to publishing services to the entire world that only need to be used by empoyees. But it's not cheap or easy. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgp9x9K3M8fTy.pgp Description: OpenPGP digital signature

Re: IPv4 and Auctions

m) are outside of the control > of the RIRs because they had no involvement in them. I don't know about others but "my" SRI-NIC allocation passed to RIPE control some while back, as a "legacy" (mnt-by: RIPE-NCC-LEGACY-MNT) block. Although it was fairly easy to predict where it sho

Re: VDSL

k.a "we lied to you last time, but this > time it really is..." "We mispelt it last time - it should have been 'fibber broadband'; this time it's proper 'fibre broadband'" -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgpBXst7CoQwF.pgp Description: OpenPGP digital signature

Re: Update to BCP-38?

't successfully pick up the second stage of the payload and 'phone home'. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpuN30Tt6VQC.pgp Description: OpenPGP digital signature

Re: Update to BCP-38?

the TL;DR version is: if you don't > have to reveal something, don't. You've ignored step 1 - identifying critical information that needs protecting. It makes sense to protect information that needs protecting and don't lose sleep over information that doesn't need protecting. Not many of us are

Re: Colombia Network Operators Group

een categorised ("unknown") which is enough to block for an especially Evil Firewall Admin[0]. 0: I may be an Evil Firewall Admin, but I'm not an especially EFA. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgptidFEWJqmE.pgp Description: OpenPGP digital signature

Re: Oracle DBA

On Wed, 13 Mar 2019 17:44:13 -0700, Randy Bush may have written: > ya. none of us run oracle Yeah but some of us walk it. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgp19LcFRTpOk.pgp Description: OpenPGP digital signature

Re: a detour DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

oey IPAM thing. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpLPwWeNBTLF.pgp Description: OpenPGP digital signature

Re: a detour DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

ake all them out again immediately after. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgpCzfMA47BMs.pgp Description: OpenPGP digital signature

Re: A Zero Spam Mail System [Feedback Request]

'm also > not 100% certain that m4 was even an option for the first sendmail It wasn't a Sendmail 8 introduction perhaps? -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpavwLh2geSD.pgp Description: OpenPGP digital signature

Re: DNS Flag Day, Friday, Feb 1st, 2019

all in place back in 2004, and EDNS compliance was one of the tests back then. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpApQS1bYzQY.pgp Description: OpenPGP digital signature

Re: unwise filtering policy on abuse mailboxes

Anybody still doing > it today is doing it on purpose, which of course leads directly to the > question: why? Never assume malice ("on purpose") something which can be adequately explained by incompetance. -- Mike Meredith, University of Portsmouth Chief Systems Enginee

Re: ICANN GDPR lawsuit

ad been leaked > on its website. " Neglecting where it goes on to say "it would be subject to a new law that “mirrors” GDPR which will come into effect in the autumn.". -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgpdyFKzJLwJ4.

Re: Templating/automating configuration

On Wed, 14 Jun 2017 21:35:59 +0100, Nick Hilliard <n...@foobar.org> may have written: > What do you think the purpose of change control / management is? To provide employment for change managers of course. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster,

Re: Spitballing IoT Security

lication-based firewall, every problem looks like it would be easier to solve using an application-based firewall :) -- Mike Meredith, University of Portsmouth Principal Systems Engineer, Hostmaster, Security, and Timelord! pgpYa7dseBC5c.pgp Description: OpenPGP digital signature

Re: Recent trouble with QUIC?

s domain, so this may be specific to universities in the > Apps universe. As are we. -- Mike Meredith, University of Portsmouth Principal Systems Engineer, Hostmaster, Security, and Timelord!

Re: Anycast provider for SMTP?

Indeed. Rock solid in my experience (on a little network). -- Mike Meredith, University of Portsmouth Principal Systems Engineer, Hostmaster, Security, and Timelord!