Re: what if...?

2011-12-22 Thread Steven Bellovin
On Dec 22, 2011, at 7:04 PM, Jeroen van Aart wrote: > Marshall Eubanks wrote: >> Does your Mom call you up every time she gets a dialog box complaining >> about an invalid certificate ? >> If she has been conditioned just to click "OK" when that happens, then >> she probably can't. > > Everyone

Re: what if...?

2011-12-22 Thread Jeroen van Aart
Marshall Eubanks wrote: Does your Mom call you up every time she gets a dialog box complaining about an invalid certificate ? If she has been conditioned just to click "OK" when that happens, then she probably can't. Everyone I have observed clicks "ok" or "confirm exception" (if I remember t

Re: what if...?

2011-12-20 Thread Mark Andrews
In message <20111220133723.cfjv8g999ssoc...@fcaglp.fcaglp.unlp.edu.ar>, "Eduard o A. =?iso-8859-1?b?U3XhcmV6?=" writes: > Hi, > > what if evil guys hack my mom ISP DNS servers and use RPZ to redirect =20 > traffic from mom_bank.com to evil.com? > > How can she

Re: what if...?

2011-12-20 Thread Michael Sinatra
On 12/20/11 09:31, valdis.kletni...@vt.edu wrote: On Tue, 20 Dec 2011 17:16:06 GMT, bmann...@vacation.karoshi.com said: the one difference is that ISC will be shipping RPZ enabled code v. the blackhat having to hack the machine and modify the configuration. EIther way, the bla

Re: what if...?

2011-12-20 Thread Ken Gilmour
You probably want to google for the dnschanger virus -- Sent from my smart phone. Please excuse my brevity On Dec 20, 2011 4:38 p.m., "Eduardo A. Suárez" < esua...@fcaglp.fcaglp.unlp.edu.ar> wrote: > Hi, > > what if evil guys hack my mom ISP DNS servers and use RPZ t

Re: what if...?

2011-12-20 Thread Valdis . Kletnieks
On Tue, 20 Dec 2011 17:16:06 GMT, bmann...@vacation.karoshi.com said: > the one difference is that ISC will be shipping RPZ enabled code v. > the blackhat having to hack the machine and modify the configuration. EIther way, the blackhat still has to hack the machine and modify the con

Re: what if...?

2011-12-20 Thread Seth Mattinen
On 12/20/11 9:23 AM, Christian de Larrinaga wrote: > indeed.. now have your Mom read this again > C Uh, what? ~Seth

Re: what if...?

2011-12-20 Thread Marshall Eubanks
On Tue, Dec 20, 2011 at 11:37 AM, Eduardo A. Suárez wrote: > Hi, > > what if evil guys hack my mom ISP DNS servers and use RPZ to redirect > traffic from mom_bank.com to evil.com? > > How can she detect this? Does your Mom call you up every time she gets a dialog box complainin

Re: what if...?

2011-12-20 Thread bmanning
On Tue, Dec 20, 2011 at 11:53:12AM -0500, valdis.kletni...@vt.edu wrote: > On Tue, 20 Dec 2011 13:37:23 -0300, "Eduardo A. =?iso-8859-1?b?U3XhcmV6?=" > said: > > what if evil guys hack my mom ISP DNS servers and use RPZ to redirect > > traffic from mom_bank.com to e

Re: what if...?

2011-12-20 Thread Seth Mattinen
On 12/20/11 9:14 AM, Christian de Larrinaga wrote: > You tell that to > http://www.charset.org/punycode.php?encoded=xn--m_omaaamk.com&decode=Punycode+to+normal+text > > > Normal text > FMQQSQQT.com > > to Punycode > xn--m_omaaamk.com > > ? > Dash - is a different character than underscore

Re: what if...?

2011-12-20 Thread Christian de Larrinaga
: > >> Hi, >> >> what if evil guys hack my mom ISP DNS servers and use RPZ to redirect >> traffic from mom_bank.com to evil.com? >> >> How can she detect this? > > Thankfully mom_bank.com is not valid, as underscores aren't valid in dns > names :

Re: what if...?

2011-12-20 Thread Jared Mauch
On Dec 20, 2011, at 11:37 AM, Eduardo A. Suárez wrote: > Hi, > > what if evil guys hack my mom ISP DNS servers and use RPZ to redirect traffic > from mom_bank.com to evil.com? > > How can she detect this? Thankfully mom_bank.com is not valid, as underscores aren&#x

Re: what if...?

2011-12-20 Thread Valdis . Kletnieks
On Tue, 20 Dec 2011 13:37:23 -0300, "Eduardo A. =?iso-8859-1?b?U3XhcmV6?=" said: > what if evil guys hack my mom ISP DNS servers and use RPZ to redirect > traffic from mom_bank.com to evil.com? > > How can she detect this? The snarky answer is "If your mom has to

RE: what if...?

2011-12-20 Thread Matlock, Kenneth L
...@fcaglp.fcaglp.unlp.edu.ar] Sent: Tuesday, December 20, 2011 9:37 AM To: nanog@nanog.org Subject: what if...? Hi, what if evil guys hack my mom ISP DNS servers and use RPZ to redirect traffic from mom_bank.com to evil.com? How can she detect this? Eduardo.- -- Eduardo A. Suarez Facultad de

what if...?

2011-12-20 Thread Eduardo A. Suárez
Hi, what if evil guys hack my mom ISP DNS servers and use RPZ to redirect traffic from mom_bank.com to evil.com? How can she detect this? Eduardo.- -- Eduardo A. Suarez Facultad de Ciencias Astronómicas y Geofísicas - UNLP FCAG: (0221)-4236593 int. 172/Cel: (0221)-15-4557542/Casa: (0221

Re: What If....

2011-02-28 Thread Michael Hallgren
Le lundi 28 février 2011 à 11:57 -1000, David Conrad a écrit : > On Feb 28, 2011, at 11:11 AM, Michael Hallgren wrote: > >>> I'm glad to see they are up to date: > >>> "Paper submissions should > >>> include a three and one-half inch > >>> computer diskette in HTML, ASCII, > >>> Word or WordPerfect

Re: What If....

2011-02-28 Thread David Conrad
On Feb 28, 2011, at 11:11 AM, Michael Hallgren wrote: >>> I'm glad to see they are up to date: >>> "Paper submissions should >>> include a three and one-half inch >>> computer diskette in HTML, ASCII, >>> Word or WordPerfect format (please >>> specify version)." > > Any problem with Postscript or

Re: What If....

2011-02-28 Thread Leigh Porter
On 28 Feb 2011, at 20:50, Edward Lewis wrote: > At 9:35 +1300 3/1/11, Brian E Carpenter wrote: > >>> http://www.ntia.doc.gov/frnotices/2011/fr_ianafunctionsnoi_02252011.pdf > >> I'm glad to see they are up to date: >> "Paper submissions should >> include a three and one-half inch >> computer di

Re: What If....

2011-02-28 Thread Michael Hallgren
Le lundi 28 février 2011 à 15:50 -0500, Edward Lewis a écrit : > At 9:35 +1300 3/1/11, Brian E Carpenter wrote: > > >> http://www.ntia.doc.gov/frnotices/2011/fr_ianafunctionsnoi_02252011.pdf > > >I'm glad to see they are up to date: > >"Paper submissions should > >include a three and one-half in

Re: What If....

2011-02-28 Thread Edward Lewis
At 9:35 +1300 3/1/11, Brian E Carpenter wrote: http://www.ntia.doc.gov/frnotices/2011/fr_ianafunctionsnoi_02252011.pdf I'm glad to see they are up to date: "Paper submissions should include a three and one-half inch computer diskette in HTML, ASCII, Word or WordPerfect format (please specify

Re: What If....

2011-02-28 Thread Brian E Carpenter
On 2011-02-26 10:34, bill manning wrote: > The IANA function was split? RFC 2860 already did that. It seems to work well. > http://www.ntia.doc.gov/frnotices/2011/fr_ianafunctionsnoi_02252011.pdf I'm glad to see they are up to date: "Paper submissions should include a three and one-half inch com