Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Saku Ytti
On (2014-09-20 13:32 +0900), Randy Bush wrote: http://mailman.apnic.net/mailing-lists/sig-policy/archive/2014/09/msg00049.html Interesting quote from the paper. I've sometimes wondered if RIR's do too much, if there is inherent mission creep to justify increasing revenue due to increasing

Saying goodnight to my GSR

2014-09-20 Thread Matthew Crocker
Has been running for a while, time to shut ‘er down. She (is a router a she?) used to handle all of my BGP GigE links but over the years has been demoted to OSPF and T1 aggregation. If anyone needs a boat anchor let me know. gsr8-1#show version Cisco Internetwork Operating System Software

Re: Saying goodnight to my GSR

2014-09-20 Thread Jeroen Massar
On 2014-09-20 16:18, Matthew Crocker wrote: [..] IOS (tm) GS Software (GSR-P-M), Version 12.0(30)S3, RELEASE SOFTWARE (fc2) [..] gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Thank you for finally taking a vulnerable system of the Internet! Greets, Jeroen

Re: Saying goodnight to my GSR

2014-09-20 Thread James R Cutler
On Sep 20, 2014, at 10:18 AM, Matthew Crocker matt...@corp.crocker.com wrote about his old router: SNIP/ gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Uptime for this control processor is 9 years, 2 weeks, 2 days, 18 minutes System returned to ROM by Stateful Switchover at

Re: Saying goodnight to my GSR

2014-09-20 Thread Matthew S. Crocker
-48VDC. On Sep 20, 2014, at 10:58 AM, James R Cutler james.cut...@consultant.com wrote: On Sep 20, 2014, at 10:18 AM, Matthew Crocker matt...@corp.crocker.com wrote about his old router: SNIP/ gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Uptime for this control

Re: Saying goodnight to my GSR

2014-09-20 Thread Bacon Zombie
So when was the last time you patched this internet facing device? On Sep 20, 2014 7:12 PM, Matthew S. Crocker matt...@corp.crocker.com wrote: -48VDC. On Sep 20, 2014, at 10:58 AM, James R Cutler james.cut...@consultant.com wrote: On Sep 20, 2014, at 10:18 AM, Matthew Crocker

Re: Saying goodnight to my GSR

2014-09-20 Thread Bacon Zombie
OK thank you for decommissioning this.* * Only if you either had authority to do so for max 1 year or had no authority but were fighting to have it patches or replaced for years. On Sep 20, 2014 7:54 PM, Daniel Sterling sterling.dan...@gmail.com wrote: On Sat, Sep 20, 2014 at 1:37 PM, Bacon

Re: Saying goodnight to my GSR

2014-09-20 Thread Joel Jaeggli
On Sep 20, 2014, at 10:37, Bacon Zombie baconzom...@gmail.com wrote: So when was the last time you patched this internet facing device? Sunday sept 4 2005? Seems like a good run. If it hasn't been rooted or fallen over since then it's apparently pretty secure... On Sep 20, 2014 7:12 PM,

Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Barry Shein
Quis custodiet ipsos custodes? -b

Re: Saying goodnight to my GSR

2014-09-20 Thread Daniel Sterling
On Sat, Sep 20, 2014 at 1:37 PM, Bacon Zombie baconzom...@gmail.com wrote: So when was the last time you patched this internet facing device? Isn't the better response, thank you for decommissioning it? Can someone from cisco set up a poll or release whatever numbers they have about how many

Re: Saying goodnight to my GSR

2014-09-20 Thread Daniel Sterling
Again, you're focusing resentment towards someone who did the right thing. Negative reinforcement will discourage others from taking action and will discourage them from encouraging others to take action. Let's focus on who still has vulnerable equipment and how to help them. Let's not shame

Re: Saying goodnight to my GSR

2014-09-20 Thread Jared Mauch
On Sep 20, 2014, at 1:54 PM, Daniel Sterling sterling.dan...@gmail.com wrote: On Sat, Sep 20, 2014 at 1:37 PM, Bacon Zombie baconzom...@gmail.com wrote: So when was the last time you patched this internet facing device? Isn't the better response, thank you for decommissioning it?

RE: Saying goodnight to my GSR

2014-09-20 Thread Keith Medcalf
And what, exactly, is it vulnerable to? -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Daniel Sterling Sent: Saturday, 20 September, 2014 12:06 To: Bacon Zombie Cc: nanog@nanog.org Subject: Re: Saying goodnight to my GSR Again, you're focusing resentment

Re: Saying goodnight to my GSR

2014-09-20 Thread Ruairi Carroll
And what, exactly, is it vulnerable to? Most of these, I'd imagine: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/release/ntes/120SCAVS.html On 20 September 2014 14:25, Keith Medcalf kmedc...@dessus.com wrote: And what, exactly, is it vulnerable to? -Original Message- From:

Re: Saying goodnight to my GSR

2014-09-20 Thread Saku Ytti
On (2014-09-20 14:25 -0600), Keith Medcalf wrote: And what, exactly, is it vulnerable to? Fair question. Felix Lindner has shown some ~0 budget attacks on IOS. But I'm not sure if there actually are known attack vectors for properly secured system (iACL, rACL in this case) Crash bugs are there

RE: Saying goodnight to my GSR

2014-09-20 Thread Keith Medcalf
I do not see any vulnerabilities listed there. Only documentation of behavioral bugs, caveats, and restrictions. A vulnerability would be something like the one Microsoft introduced into all versions of the Windows IP stack after Windows 2003 and Windows XP wherein the Operating System will

Re: Saying goodnight to my GSR

2014-09-20 Thread Jay Ashworth
- Original Message - From: Matthew Crocker matt...@corp.crocker.com Has been running for a while, time to shut ‘er down. She (is a router a she?) used to handle all of my BGP GigE links but over the years has been demoted to OSPF and T1 aggregation. If anyone needs a boat anchor

Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Christopher Morrow
On Sat, Sep 20, 2014 at 3:56 AM, Saku Ytti s...@ytti.fi wrote: I'm not sure for example, if 11MEUR is needed for number registry personnel costs, that could give you 100 hostmasters with 5500EUR/month salary, in good likelihood, we'd be able to run focused number registry with volunteers. I

Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Randy Bush
I'm not sure for example, if 11GER is needed for number registry personnel costs, that could give you 100 hostmasters with 5500EUR/month salary, in good likelihood, we'd be able to run focused number registry with volunteers. I think your math is off? 11,000,000 / 100 == 110,000 / 12 ==

Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Christopher Morrow
On Sat, Sep 20, 2014 at 9:32 PM, Randy Bush ra...@psg.com wrote: I'm not sure for example, if 11GER is needed for number registry personnel costs, that could give you 100 hostmasters with 5500EUR/month salary, in good likelihood, we'd be able to run focused number registry with volunteers.

Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Randy Bush
I also agree that 'lots of policy' hasn't really gotten us anywhere :( cheap shot this is not exactly true. we just don't like where it has gotten us :) randy

Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Christopher Morrow
On Sat, Sep 20, 2014 at 9:47 PM, Randy Bush ra...@psg.com wrote: I also agree that 'lots of policy' hasn't really gotten us anywhere :( cheap shot this is not exactly true. we just don't like where it has gotten us :) that's a fair cheap shot.

Re: internet governance, rir policy, and the decline of civilization

2014-09-20 Thread Randy Bush
I also agree that 'lots of policy' hasn't really gotten us anywhere :( cheap shot this is not exactly true. we just don't like where it has gotten us :) that's a fair cheap shot. https://www.apnic.net/policy/proposals/prop-103 randy