Re: Whois vs GDPR, latest news

2018-06-05 Thread Matt Baldwin
You mean something like this?

https://certikit.com/products/gdpr-toolkit/

While not CC licensed it might get you where you need to go.


On Sat, May 26, 2018, 7:06 PM Dan Hollis  wrote:

> On Sat, 26 May 2018, Royce Williams wrote:
> > Naively ... to counter potential panic, it would be awesome to
> crowdsource
> > some kind of CC-licensed GDPR toolkit for small orgs. Something like a
> > boilerplate privacy policy (perhaps generated by answers to questions),
> > plus some simplified checklists, could go a long way - towards both
> > compliance and actual security benefit.
>
> who is willing to accept the risk of being involved in creation of such a
> thing? would you?
>
> if someone uses it and ends up being hit by eu regulators, you can bet
> the toolkit creators will be sued.
>
> who would be willing to use a crowdsourced legal toolkit given the risks
> of a violation? would you?
>
> -Dan
>


Re: Office 365..? how Microsoft handed the NSA access to encrypted messages

2013-07-12 Thread Matt Baldwin
While that would secure the connections from snooping if you're mailboxes
are on Office 365 and those mailbox stores do not exits on an encrypted LUN
then a service can easily read the Exchange database; anyone with server
access can read mail across all mailboxes. In fact, Microsoft supports this
type of setup with impersonation, e.g. a global user that can query any
mailbox it has permissions to within Exchange. This is how some EWS
integrated applications work. It wouldn't be that far fetched for the NSA
to incorporate the same type of query to monitor the mailboxes -- even
subscribing to change notifications so it only queries and collects when a
new mail item has arrived. Additionally, Office 365 can simply create a
journal rule and have all inbound / outbound mail journal to a location
that makes it easier for snoops to look through the messages, e.g. an
external SMTP endpoint, all without the end customers' knowledge.

If anyone has any questions on Exchange they, too, can contact me off list.

Just my 2-cents.

-matt


On Fri, Jul 12, 2013 at 1:04 PM, Nick Khamis sym...@gmail.com wrote:

 We are currently working on something right now where all connections
 are doing over an encrypted vpn. We are bringing SIP, email, search,
 and cloud to the tunnel.

 You can contact me off list if you would like to know more.

 Nick Khamis




Re: Office 365..? how Microsoft handed the NSA access to encrypted messages

2013-07-12 Thread Matt Baldwin
I should also note that even if the stores are on an encrypted LUN you are
still exposed to impersonation and journaling.

-matt


On Fri, Jul 12, 2013 at 1:25 PM, Matt Baldwin baldwinmat...@gmail.comwrote:

 While that would secure the connections from snooping if you're mailboxes
 are on Office 365 and those mailbox stores do not exits on an encrypted LUN
 then a service can easily read the Exchange database; anyone with server
 access can read mail across all mailboxes. In fact, Microsoft supports this
 type of setup with impersonation, e.g. a global user that can query any
 mailbox it has permissions to within Exchange. This is how some EWS
 integrated applications work. It wouldn't be that far fetched for the NSA
 to incorporate the same type of query to monitor the mailboxes -- even
 subscribing to change notifications so it only queries and collects when a
 new mail item has arrived. Additionally, Office 365 can simply create a
 journal rule and have all inbound / outbound mail journal to a location
 that makes it easier for snoops to look through the messages, e.g. an
 external SMTP endpoint, all without the end customers' knowledge.

 If anyone has any questions on Exchange they, too, can contact me off
 list.

 Just my 2-cents.

 -matt


 On Fri, Jul 12, 2013 at 1:04 PM, Nick Khamis sym...@gmail.com wrote:

 We are currently working on something right now where all connections
 are doing over an encrypted vpn. We are bringing SIP, email, search,
 and cloud to the tunnel.

 You can contact me off list if you would like to know more.

 Nick Khamis





Re: Anyone seeing traffic flow problems in the SanFrancisco / San Jose areas?

2012-04-27 Thread Matt Baldwin
Yes, we were seeing issues out of SF, too, however those have cleared as of
now.

-matt

On Fri, Apr 27, 2012 at 12:26 PM, eric clark cabe...@gmail.com wrote:

 I was working with a vendor down there and couldn't get files in or out to
 save our lives. Additionally, he was having trouble locally.

 I didn't see anything on the pulse site.



Re: Facebook down!! Alert!

2010-10-06 Thread Matt Baldwin
I would imagine more businesses benefit from a FB outage in terms of a
tick up in productivity versus businesses harmed by a FB outage, e.g.
Zygna.  So, net net a FB outage could be seen as a positive thing in
the course of a work day.

-matt

On Wed, Oct 6, 2010 at 12:31 PM, david raistrick dr...@icantclick.org wrote:
 On Wed, 6 Oct 2010, Bret Clark wrote:

 I have to agree on this as well. I can understand when a service provider
 is


 you've forgotten that facebook (and indeed twitter too) are service
 providers that provide business-critical services.

 just because you don't want to play facebook games doesn't make a facebook
 outage any less operationally relevant than, say, an akamai or limelight
 outage.





 --
 david raistrick        http://www.netmeister.org/news/learn2quote.html
 dr...@icantclick.org             http://www.expita.com/nomime.html






Yahoo Mail Admin

2010-03-16 Thread Matt Baldwin
Hi:

Can a Yahoo! mail admin please contact me off-list, please?

Tnx.
-matt



Re: Register.com DNS hosting issues

2009-04-03 Thread Matt Baldwin
Yep, we're seeing issues with mail delivery to any domain that has
their zone hosted by register.com.  You can follow the action on
twitter:

http://search.twitter.com/search?q=register.com

Various reports that some of the register.com support staff is denying
issues, while others aren't, while others can't get through.

-matt

On Fri, Apr 3, 2009 at 12:30 PM, Jeffrey Negro jne...@billtrust.com wrote:
 For anyone trying to troubleshoot any strange resolution or page loading
 issues, Register.com is apparently having a massive DNS hosting outage
 that has been going on since 2 days ago, and is still continuing.  I
 only found out because our monitoring was complaining about one single
 domain on and off.  After speaking with register.com support, they
 admitted to the ongoing issue.



 If anyone has reported this already on the list, I apologize in advance
 for the repetition.



 Jeffrey





Re: Register.com DNS hosting issues

2009-04-03 Thread Matt Baldwin
Looks like we're seeing DNS queries succeeding again.  Hopefully this
time they'll stay up. :)

-matt

On Fri, Apr 3, 2009 at 1:10 PM, Paul Ferguson fergdawgs...@gmail.com wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On Fri, Apr 3, 2009 at 12:52 PM, Clinton Popovich crpop...@nauticom.net
 wrote:


 Looks like a routing issue to their DNS servers from here.

 traceroute to DNS020.C.REGISTER.COM (216.21.235.20), 64 hops max, 40 byte
 packets
  1  c28.134.nauticom.net (209.195.134.28)  0.778 ms  0.894 ms  0.829 ms
  2  10.11.11.9 (10.11.11.9)  1.010 ms  0.799 ms  0.829 ms
  3  c246.134.nauticom.net (209.195.134.246)  1.271 ms  1.379 ms  1.350 ms
  4  207.88.183.141.ptr.us.xo.net (207.88.183.141)  84.817 ms  7.764 ms
 7.699 ms
  5  65.106.3.185.ptr.us.xo.net (65.106.3.185)  7.606 ms  7.634 ms  7.504
 ms
  6  206.111.0.54.ptr.us.xo.net (206.111.0.54)  31.458 ms  28.509 ms
 20.199 ms
  7  Vlan424.icore1.MLN-Miami.as6453.net (66.110.9.13)  48.740 ms  36.118
 ms 36.211 ms
  8  ix-6-2.icore1.MLN-Miami.as6453.net (66.110.9.54)  36.328 ms  36.851
 ms 36.334 ms
  9  * * *
 10  blackhole.prolexic.com (209.200.132.42)  36.127 ms  36.136 ms  36.298
 ms 11  *


 Notice:

  blackhole.prolexic.com

 blackhole =! routing issue   or blackhole = routing issue

 Technically, both are correct. :-)

 - - ferg

 -BEGIN PGP SIGNATURE-
 Version: PGP Desktop 9.5.3 (Build 5003)

 wj8DBQFJ1m0sq1pz9mNUZTMRAhJrAJwI437Klcg0joD8ZF1qRLhPQaC4jQCg7CoR
 ynmlfRuPl7oOSX8aCFzMm1A=
 =lJCm
 -END PGP SIGNATURE-



 --
 Fergie, a.k.a. Paul Ferguson
  Engineering Architecture for the Internet
  fergdawgster(at)gmail.com
  ferg's tech blog: http://fergdawg.blogspot.com/





Re: Telstra NOC

2008-10-22 Thread Matt Baldwin
Based upon the NOCs I've been in I would say that chick is a dude. :)

-matt

On Wed, Oct 22, 2008 at 12:28 PM, Steve Church [EMAIL PROTECTED] wrote:
 Who's the hot chick in the bottom right corner?

 S

 On Wed, Oct 22, 2008 at 3:20 PM, Charles Wyble [EMAIL PROTECTED]wrote:


 http://www.telstra.com.au/abouttelstra/images/media/photos/73764g2_hires.jpg