Leap Second

2013-07-02 Thread Todd S
We found we got leap seconds added on some systems over the weekend. There were no leap seconds planned ( http://www.usno.navy.mil/USNO/earth-orientation/leap-second-announcement), however some of our systems got one. We run our own s2/s3/s4 system, with only the s2s going to the Internet. We

Re: Leap Second

2013-07-02 Thread Michael Loftis
On Tue, Jul 2, 2013 at 7:23 AM, Todd S t...@borked.ca wrote: We found we got leap seconds added on some systems over the weekend. There were no leap seconds planned ( http://www.usno.navy.mil/USNO/earth-orientation/leap-second-announcement), however some of our systems got one. We run our

Re: Leap Second

2013-07-02 Thread David Ramsey
I saw alerts from Symmetricom about it for their NTP hardware, and got notified from Infoblox also. Relevant links: http://www.symmetricom.com/media/files/downloads/leap-second/S200_S250_SyncServer_Leap_Second_SRN_v1.30.pdf

Re: Leap Second

2013-07-02 Thread Måns Nilsson
Subject: Leap Second Date: Tue, Jul 02, 2013 at 10:23:58AM -0400 Quoting Todd S (t...@borked.ca): We found we got leap seconds added on some systems over the weekend. There were no leap seconds planned ( http://www.usno.navy.mil/USNO/earth-orientation/leap-second-announcement), however some

Re: Leap Second

2013-07-02 Thread Michael Loftis
On Tue, Jul 2, 2013 at 7:35 AM, Michael Loftis mlof...@wgops.com wrote: Had a leap happen here on the 30th. My stratum 1 source is a CDMA timekeeper, I'll ping the operator of it and see if he knows anything or if it logged anything. It's probably not isolated at all since all my S2

Re: Leap Second

2013-07-02 Thread Todd S
My S2s are Symmetricoms, so we may have a winner here. Cheers! On Tue, Jul 2, 2013 at 10:39 AM, Måns Nilsson mansa...@besserwisser.orgwrote: Subject: Leap Second Date: Tue, Jul 02, 2013 at 10:23:58AM -0400 Quoting Todd S (t...@borked.ca): We found we got leap seconds added on some systems

IPMI vulnerabilities

2013-07-02 Thread Steven Bellovin
http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! --Steve Bellovin, https://www.cs.columbia.edu/~smb

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 16:51 , Steven Bellovin wrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access right? :) Anybody not putting them behind a properly restricted firewall and/or VLAN is asking

Re: IPMI vulnerabilities

2013-07-02 Thread Dave Lindner
On Tue, Jul 2, 2013 at 10:51 AM, Steven Bellovin s...@cs.columbia.eduwrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! --Steve Bellovin, https://www.cs.columbia.edu/~smb Dan Farmer wrote a really nice paper on this subject, complete with

RE: IPMI vulnerabilities

2013-07-02 Thread Jamie Bowden
From: Jeroen Massar [mailto:jer...@massar.ch] On 2013-07-02 16:51 , Steven Bellovin wrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access right? :) Anybody not putting them

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 17:54 , Jamie Bowden wrote: From: Jeroen Massar [mailto:jer...@massar.ch] On 2013-07-02 16:51 , Steven Bellovin wrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access

Re: Leap Second

2013-07-02 Thread Steve Allen
On Tue 2013-07-02T10:23:58 -0400, Todd S hath writ: Anyone else run in to this, or have any further intel about servers that advertised the leap second? David Malone has been monitoring the NTP pool for years. See his plots http://www.maths.tcd.ie/~dwmalone/time/leaps/ This time pool was

Re: IPMI vulnerabilities

2013-07-02 Thread Valdis . Kletnieks
On Tue, 02 Jul 2013 17:58:16 +0200, Jeroen Massar said: On 2013-07-02 17:54 , Jamie Bowden wrote: That same reasoning has worked wonders at keeping SCADA systems off the public internet too. People problems cannot be resolved with code. Would an Linux cluebat driver count? :)

Re: Google's QUIC

2013-07-02 Thread Saku Ytti
On (2013-06-29 23:36 +0100), Tony Finch wrote: Reminds me of MinimaLT: http://cr.yp.to/tcpip/minimalt-20130522.pdf Now that I read separate 'QUIC Crypto' page. It sounds bit of a deja vu. QUIC also uses Curve25519 pubkey and Salsa20 cipher, which is hard to attribute as chance, considering

Re: Google's QUIC

2013-07-02 Thread Darius Jahandarie
On Tue, Jul 2, 2013 at 2:35 PM, Saku Ytti s...@ytti.fi wrote: On (2013-06-29 23:36 +0100), Tony Finch wrote: Reminds me of MinimaLT: http://cr.yp.to/tcpip/minimalt-20130522.pdf Now that I read separate 'QUIC Crypto' page. It sounds bit of a deja vu. QUIC also uses Curve25519 pubkey and

Ciena 6200 clue?

2013-07-02 Thread Jason Lixfeld
So I've got a bunch of Ciena 6200 kit in, with some of their professional services folks onsite, helping with the initial setup. I know nothing of this kit, other than from what I'm being told, it's pretty bleeding edge, so much so that not even many people at Ciena know how to use it. The SE

Re: Ciena 6200 clue?

2013-07-02 Thread Larry Sheldon
On 7/2/2013 6:30 PM, Jason Lixfeld wrote: So I've got a bunch of Ciena 6200 kit in, with some of their professional services folks onsite, helping with the initial setup. I know nothing of this kit, other than from what I'm being told, it's pretty bleeding edge, so much so that not even many

Re: Ciena 6200 clue?

2013-07-02 Thread Jeff Shultz
On 7/2/2013 4:30 PM, Jason Lixfeld wrote: The SE who's onsite is apparently claiming that there is no provision to set a default gateway on the management interface. This seems odd to me. Me too, which is why I've got a call in to another company regarding their management LAN port that I

Re: Ciena 6200 clue?

2013-07-02 Thread Christopher Morrow
it's probably fair to point out that practically all optical vendors don't actually understand 'ip' and 'routing' and 'systems management' ... try doing ntp with ONS boxes? got ntpv1? then ... oops :( never mind the situations where you install a 0/0 route on a management interface/config and

.nyc - here we go...

2013-07-02 Thread Scott Weeks
careful there may be a troll in here... :) https://en.wikipedia.org/wiki/.nyc As of July 2, 2013, .nyc has been approved by ICANN as a city-level top-level domain (TLD) for New York City As places like that see $186,000 as small change, I wonder what other countries (much less the cities

Re: .nyc - here we go...

2013-07-02 Thread Rubens Kuhl
On Tue, Jul 2, 2013 at 10:12 PM, Scott Weeks sur...@mauigateway.com wrote: careful there may be a troll in here... :) https://en.wikipedia.org/wiki/.nyc As of July 2, 2013, .nyc has been approved by ICANN as a city-level top-level domain (TLD) for New York City .nyc has been approved

Re: .nyc - here we go...

2013-07-02 Thread Eric Brunner-Williams
Thank you Rubens, you saved me the effort. Eric

Re: .nyc - here we go...

2013-07-02 Thread Scott Weeks
--- rube...@gmail.com wrote: From: Rubens Kuhl rube...@gmail.com As places like that see $186,000 as small change, I wonder what other countries (much less the cities within them) like .nu, .sb or .vu will do? For them this is an astronomical number. Someone's about to hit a financial home

Perl router snmp to DNS

2013-07-02 Thread Jensen Tyler
My Google fu is failing. Can anybody point me to a script that will create DNS entries from router snmp info? Jensen Tyler Sr Engineering Manager Fiberutilities Group, LLC

Re: .nyc - here we go...

2013-07-02 Thread John Levine
I haven't read enough, but what's to stop speculators paying the $186,000 then ... Rather than asking random strangers, you can read the applicant guidebook and find out what the actual rules are: http://newgtlds.icann.org/en/applicants/agb

Re: .nyc - here we go...

2013-07-02 Thread Scott Weeks
--- jo...@iecc.com wrote: From: John Levine jo...@iecc.com I haven't read enough, but what's to stop speculators paying the $186,000 then ... Rather than asking random strangers, you can read the applicant guidebook and find out what the actual rules are:

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
On Tue, Jul 2, 2013 at 7:17 PM, Scott Weeks sur...@mauigateway.com wrote: Ok, you're correct. I need to add that to my list of reading. I am just thinking about the digital divide getting larger (not smaller) as these places are writing about on their various technical mailing lists. That

Re: .nyc - here we go...

2013-07-02 Thread Eric Brunner-Williams
On 7/2/13 7:06 PM, John Levine wrote: Rather than asking random strangers, you can read the applicant guidebook and find out what the actual rules are: There really should be a kinder introduction to those who lack basic clue than to attempt to read the last version of the DAG, even for the

Re: .nyc - here we go...

2013-07-02 Thread Rubens Kuhl
Thank you for explaining this. Again, probably. So the cities in those countries could buy them (if they could afford them) but not the countries? So .portvila is available, but not .vanuatu? Yes. Country names will be part of the expansion of the ccTLD space, where usually countries are

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
On Tue, Jul 2, 2013 at 8:12 PM, Rubens Kuhl rube...@gmail.com wrote: Summary: there are residual risks, but the checks and balances of the process are likely to stop bad actors, at the cost of also stopping some good actors. Error in the side of caution preferred. You're missing the

Re: .nyc - here we go...

2013-07-02 Thread John Levine
Rather than asking random strangers, you can read the applicant guidebook and find out what the actual rules are: http://newgtlds.icann.org/en/applicants/agb Ok, you're correct. I need to add that to my list of reading. I am just thinking about the digital divide getting larger (not smaller)

Re: .nyc - here we go...

2013-07-02 Thread Rubens Kuhl
On Wed, Jul 3, 2013 at 12:21 AM, Paul Ferguson fergdawgs...@gmail.com wrote: On Tue, Jul 2, 2013 at 8:12 PM, Rubens Kuhl rube...@gmail.com wrote: Summary: there are residual risks, but the checks and balances of the process are likely to stop bad actors, at the cost of also stopping some

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
On Tue, Jul 2, 2013 at 8:41 PM, Rubens Kuhl rube...@gmail.com wrote: From http://www.icann.org/en/groups/board/documents/resolutions-new-gtld-annex-ii-agenda-2b-25jun13-en.pdf Registry Operator will periodically conduct a technical analysis to assess whether domains in the TLD are being used

Re: .nyc - here we go...

2013-07-02 Thread Larry Sheldon
Makes me wonder if concern for routing table size is worrying about the right thing. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to

Re: .nyc - here we go...

2013-07-02 Thread Rubens Kuhl
Great, Let's see what happens. If history is any teacher... There is not much history here to look at... .cc and .tk are ccTLDs, based out of sovereign states. They are delegated into the root by ICANN (more precisely by IANA, which is currently a contract also granted to ICANN) and that's

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
Now you are thinking. :-) - ferg On Tue, Jul 2, 2013 at 9:15 PM, Larry Sheldon larryshel...@cox.net wrote: Makes me wonder if concern for routing table size is worrying about the right thing. -- Fergie, a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
On Tue, Jul 2, 2013 at 9:23 PM, Rubens Kuhl rube...@gmail.com wrote: gTLDs operate under ICANN compliance regime and are required to abide by community policies. Will this be enough ? We don't know yet, but people have given some thought trying to find a way it is enough, and can require

Re: .nyc - here we go...

2013-07-02 Thread Andrew Sullivan
On Wed, Jul 3, 2013 at 12:15 AM, Larry Sheldon larryshel...@cox.net wrote: Makes me wonder if concern for routing table size is worrying about the right thing. Because obviously, the problems of scaling router memory and scaling DNS servers are the same kind? Yes, having many many new TLDs

Re: .nyc - here we go...

2013-07-02 Thread Larry Sheldon
On 7/2/2013 11:39 PM, Andrew Sullivan wrote: On Wed, Jul 3, 2013 at 12:15 AM, Larry Sheldon larryshel...@cox.net wrote: Makes me wonder if concern for routing table size is worrying about the right thing. Because obviously, the problems of scaling router memory and scaling DNS servers are

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
Why does this discussion have to always be one or the other? We have multiple problems here, friends. Focus. - ferg On Tue, Jul 2, 2013 at 9:39 PM, Andrew Sullivan asulli...@dyn.com wrote: On Wed, Jul 3, 2013 at 12:15 AM, Larry Sheldon larryshel...@cox.net wrote: Makes me wonder if