Re: South Africa On Lockdown - Coronavirus - Update!

2020-04-01 Thread Matthew Petach
On Tue, Mar 24, 2020 at 10:01 AM Randy Bush wrote: > > He's a network operator. From North America, on the North American > Network > > Operators mailing list. Something you are not, so please stop spouting > your > > drivel on a list that has nothing to do with you. > > this is not how we

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-31 Thread Jay Farrell via NANOG
On Tue, Mar 31, 2020 at 6:56 AM Mark Tinka wrote: > Also, considering everyone is, pretty much, working from home, the > Internet isn't dying as it randomly does throughout a typical working > week. Human MIT (maintenance-induced trouble) continues to be the > leading cause of outages, it seems

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-31 Thread Mark Tinka
On 25/Mar/20 22:13, Paul Nash wrote: > Don’t hold your breath :-(. On the plus side, I am quite pleased to see how well this Internet thing we all built is coming into its own, these past couple of weeks, taking over as the traditions we've been accustomed to are subdued. I know the VoD

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-25 Thread Paul Nash
Don’t hold your breath :-(. > On Mar 24, 2020, at 4:55 PM, Mark Tinka wrote: > > > > On 24/Mar/20 22:48, Randy Bush wrote: > >> almost all our cultures have gaps; but some worse than others. we will >> all learn lessons in the coming many months of plague. i know an office >> which lost

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Mark Tinka
On 24/Mar/20 22:48, Randy Bush wrote: > almost all our cultures have gaps; but some worse than others. we will > all learn lessons in the coming many months of plague. i know an office > which lost key engineers last year because they would not let them work > remotely. now the entire

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Randy Bush
> And like this short message about South Africa was highly useful for > my country of residence, Lebanon, too. We are under full, quite severe > lock-down, with fines, checkpoints and etc. > Several ISPs here who kept NOC support (single person) near server > room, in office - got fined too, as

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Denys Fedoryshchenko
On 2020-03-24 18:59, Randy Bush wrote: He's a network operator. From North America, on the North American Network Operators mailing list. Something you are not, so please stop spouting your drivel on a list that has nothing to do with you. this is not how we should act in under pressure +1

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Mark Tinka
On 24/Mar/20 02:10, Joshua D'Alton wrote: > > Are there any inklings of international co-operation with regards to > "no foreigners" as per recently Australia and other nations, in terms > of allowing in those engaged in telecommunications services where in > some cases remote/local hands are

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Joshua D'Alton
On Tue, 24 Mar 2020 at 06:50, Mark Tinka wrote: > The details of the implementation of the dispensation may be nuanced. > Experience will tell us more in the coming days. Are there any inklings of international co-operation with regards to "no foreigners" as per recently Australia and other

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Tom Beecher
Alexandre- I do hope that you reconsider your decision to unsubscribe. Many of us post massively uninformed bullshit here on a regular basis, myself included. I don't think anything you have posted here rose to that curious standard. Be well! On Tue, Mar 24, 2020 at 11:47 AM Alexandre Petrescu

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Mark Tinka
On 24/Mar/20 15:47, Paul WALL wrote: > > He's a network operator. From North America, on the North American > Network Operators mailing list. Something you are not, so please stop > spouting your drivel on a list that has nothing to do with you. This > is a crisis, not a time for a European

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Randy Bush
> He's a network operator. From North America, on the North American Network > Operators mailing list. Something you are not, so please stop spouting your > drivel on a list that has nothing to do with you. this is not how we should act in under pressure

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Alexandre Petrescu
This is my last post on this email list. It is true - I am not a network operator.  In honesty I think I never claimed to be one. I do not understand the word 'spout'. You think this has nothing to do with me - I unsubscrbe. Sorry for disturbing, Alex, LF/HF 1 Le 24/03/2020 à 14:47, Paul

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Mark Tinka
So just to bring this back on-topic with an update - the South African gubbermint have classified telecoms as an essential service. Provided you possess the right authorization documentation, you can go out and perform tasks that keep the bits moving. Of course, local operators may have finer

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Mark Tinka
So just to bring this back on-topic with an update - the South African gubbermint have classified telecoms as an essential service. Provided you possess the right authorization documentation, you can go out and perform tasks to that keep the bits moving. Of course, local operators may have finer

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Paul WALL
On Tue, Mar 24, 2020 at 6:22 AM Alexandre Petrescu < alexandre.petre...@gmail.com> wrote: > > > Mr. Morrow - where are you situated approximately? > > He's a network operator. From North America, on the North American Network Operators mailing list. Something you are not, so please stop spouting

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Christopher Morrow
On Tue, Mar 24, 2020 at 6:21 AM Alexandre Petrescu wrote: > > > Le 23/03/2020 à 23:37, Christopher Morrow a écrit : > > how did 'africa on lockdown' get sidetracked into OTP conversations? > > Like this: when I hear someone tell that her country got on lockdown > then advice to not forget OTP

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Alexandre Petrescu
Le 23/03/2020 à 23:37, Christopher Morrow a écrit : how did 'africa on lockdown' get sidetracked into OTP conversations? Like this: when I hear someone tell that her country got on lockdown then advice to not forget OTP device at desk. Mr. Morrow - where are you situated approximately?

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Mark Tinka
On 24/Mar/20 00:37, Christopher Morrow wrote: > how did 'africa on lockdown' get sidetracked into OTP conversations? Well, not the whole of Africa, yet :-)... Mark.

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-24 Thread Mark Tinka
On 24/Mar/20 00:19, Eric Tykwinski wrote: > I guess I wasn’t as detailed as should be, multi factor authentication > should hopefully have 1 standard which will work for everything.  So > we have an app on our phone to authenticate after a username/password > which give a 6 digit key, or we use

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Michael Loftis
On Mon, Mar 23, 2020 at 19:25 Owen DeLong wrote: > > I confess I haven’t investigated the implementation details, but is it > possible for one to issue ubikeys > to an employee in a secure way with those features disabled? > Yes. And changing that setup either requires a separate admin pin or

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Christopher Morrow
First, for your whole message: s/\s+UBIKEY'/YUBIKEY/g s/\s+UBI/YUBI/g thanks. On Mon, Mar 23, 2020 at 9:24 PM Owen DeLong wrote: > > > > On Mar 23, 2020, at 17:24 , Warren Kumari wrote: > > On Mon, Mar 23, 2020 at 8:03 PM Owen DeLong wrote: > > > > > On Mar 23, 2020, at 16:50 , Warren

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Owen DeLong
> On Mar 23, 2020, at 17:24 , Warren Kumari wrote: > > On Mon, Mar 23, 2020 at 8:03 PM Owen DeLong > wrote: >> >> >> >>> On Mar 23, 2020, at 16:50 , Warren Kumari wrote: >>> >>> On Mon, Mar 23, 2020 at 6:53 PM Sabri Berisha wrote: Hi, In my

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Warren Kumari
On Mon, Mar 23, 2020 at 8:03 PM Owen DeLong wrote: > > > > > On Mar 23, 2020, at 16:50 , Warren Kumari wrote: > > > > On Mon, Mar 23, 2020 at 6:53 PM Sabri Berisha wrote: > >> > >> Hi, > >> > >> In my experience, yubikeys are not very secure. I know of someone in my > >> team who would

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Owen DeLong
> On Mar 23, 2020, at 16:50 , Warren Kumari wrote: > > On Mon, Mar 23, 2020 at 6:53 PM Sabri Berisha wrote: >> >> Hi, >> >> In my experience, yubikeys are not very secure. I know of someone in my team >> who would generate a few hundred tokens during a meeting and save the output >> in a

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Warren Kumari
On Mon, Mar 23, 2020 at 6:53 PM Sabri Berisha wrote: > > Hi, > > In my experience, yubikeys are not very secure. I know of someone in my team > who would generate a few hundred tokens during a meeting and save the output > in a text file. Then they'd have a small python script which was

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Michael Loftis
On Mon, Mar 23, 2020 at 4:53 PM Sabri Berisha wrote: > > Hi, > > In my experience, yubikeys are not very secure. I know of someone in my team > who would generate a few hundred tokens during a meeting and save the output > in a text file. Then they'd have a small python script which was

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Sabri Berisha
Hi, In my experience, yubikeys are not very secure. I know of someone in my team who would generate a few hundred tokens during a meeting and save the output in a text file. Then they'd have a small python script which was triggered by a hotkey on my macbook to push "keyboard" input. They did

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Christopher Morrow
how did 'africa on lockdown' get sidetracked into OTP conversations?

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Eric Tykwinski
I guess I wasn’t as detailed as should be, multi factor authentication should hopefully have 1 standard which will work for everything. So we have an app on our phone to authenticate after a username/password which give a 6 digit key, or we use a hardware based key to sign a OTP. Really

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Michael Thomas
I don't know about Fido, but i've been making that point about Oauth for a very long time. As a browser mechanism which implements a sandbox it's fine. But when you have apps that can reach out of the sandbox it is definitely not fine. Mike On 3/23/20 2:59 PM, Keith Medcalf wrote: Both Fido

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Tom Beecher
I see no possible future outcome in which "one simple authentication mechanism" could ever be remotely close to reasonably secure. On Mon, Mar 23, 2020 at 5:57 PM Eric Tykwinski wrote: > I think that’s the major sticky point, I would hope we could all agree on > one thing, but that also

RE: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Keith Medcalf
. >-Original Message- >From: NANOG On Behalf Of Eric Tykwinski >Sent: Monday, 23 March, 2020 15:55 >To: Mark Tinka >Cc: nanog@nanog.org >Subject: Re: South Africa On Lockdown - Coronavirus - Update! > >I think that’s the major sticky point, I would hope we could

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Eric Tykwinski
I think that’s the major sticky point, I would hope we could all agree on one thing, but that also leaves one entry point of failure. Hopefully we can all agree that FIDO2, OAUTH2, et al, with be a winner in the long run so everything can just use one simple authentication mechanism.

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Mark Tinka
On 23/Mar/20 22:39, Keith Medcalf wrote: > Hardware tokens are nothing more than dedicated hardware TOTP devices with > perhaps a few additional parameters programmed at manufacturing time. > Example, RSAID keyfobs are nothing more than TOTP generators with > manufacturer programmed

RE: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Keith Medcalf
On Monday, 23 March, 2020 14:21, Peter Beckman wrote: >Software-based TOTP offer more security than no one-time passwords, but >admittedly less than the physical tokens. Google Authenticator, Authy, >1Password, LastPass all support TOTP. Hardware tokens are nothing more than dedicated

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Eric Tykwinski
I’ve already been playing with YubiKeys, but sadly Google Titan wouldn't work with Windows Hello. Might be something I was doing wrong... Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300 > On Mar 23, 2020, at 4:21 PM, Peter Beckman wrote: > > Software-based TOTP offer more security

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Peter Beckman
Software-based TOTP offer more security than no one-time passwords, but admittedly less than the physical tokens. Google Authenticator, Authy, 1Password, LastPass all support TOTP. On Mon, 23 Mar 2020, Alexandre Petrescu wrote: I dont know where are people about supporting VPN and one-time

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Alexandre Petrescu
I dont know where are people about supporting VPN and one-time passwords on tokens. At my work place a few people dont have tokens (OTP - One Time PAsswords).  The reserve of these tokens has been exhausted.  NEw ones are being on order.  Until then some people cant get on VPN. Some people

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Mark Tinka
On 23/Mar/20 21:20, Peter Beckman wrote: > But also: > >     "The categories of people who will be exempted from this lockdown > are... those involved in the production, distribution and supply > of... telecommunications services" > > >

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Peter Beckman
But also: "The categories of people who will be exempted from this lockdown are... those involved in the production, distribution and supply of... telecommunications services" https://www.cnbcafrica.com/news/2020/03/23/breaking-nationwide-lockdown-announced-in-south-africa/

Re: South Africa On Lockdown - Coronavirus - Update!

2020-03-23 Thread Mark Tinka
And oh, it's for 21 days... Mark. On 23/Mar/20 20:22, Mark Tinka wrote: > So the South African president has just announced - full country > lockdown from midnight this Thursday, 26th March (SAST). > > If any of you have any work that needs to be done out here, please > bear that in mind. > >