Re: gmail security is a joke

2015-05-26 Thread Anil Kumar
> On May 27, 2015, at 8:09 AM, Harald Koch wrote: > > On 26 May 2015 at 11:32, Alex Brooks wrote: > >> >> Can you not set account recory options which change the way password >> reset requests are handled. >> https://support.google.com/accounts/answer/183723 Gives some guidance? >> >> Alex >

looking glass software

2015-05-26 Thread Bogdan
hello what software do you use for looking glass. for cisco ios and ios-xr? i use the old cougar/version6.net for ios, but ios-xr is not supported. i came across https://github.com/tmshlvck/ulg/ but did't installed yet. are there any other interesting lg's out there? thanks. -- Bogdan

Re: 10Gb CPE

2015-05-26 Thread Brant Ian Stevens
Any feedback on the new 7250’s yet? On 5/26/15, 3:02 PM, "NANOG on behalf of Chris Lane" wrote: >We use Brocade ICX 6450s for this. > >-Chris > >On Tue, May 26, 2015 at 2:40 PM, Daniel Rohan wrote: > >> With the deluge of 10Gb X device recommendations, I thought I'd hit the >> list with one

Re: gmail security is a joke

2015-05-26 Thread Harald Koch
On 26 May 2015 at 11:32, Alex Brooks wrote: > > Can you not set account recory options which change the way password > reset requests are handled. > https://support.google.com/accounts/answer/183723 Gives some guidance? > > Alex > Unfortunately, setting these options does not disable the separat

Re: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761]

2015-05-26 Thread Randy
Ignore my noise, I don't think there was new activity today (although something weird def. happened). BGPmon list was sorted by wrong column and I mixed the dates up. Although it's still showing as active since march which I thought said provider resolved... On 03/26/2015 8:26 pm, ML wrote

Re: More specifics from AS18978 [was: Prefix hijack by INDOSAT AS4795 / AS4761]

2015-05-26 Thread Randy
I guess AS18978 didn't learn from their mistake. Got a slew of identical bgpmon alerts for withdrawals and more specifics within the last 30 minutes. Worse than last time. Some still active, like: update time (UTC) Update Type Probe ASn Probe Location Prefix AS path Cleared

Re: gmail security is a joke

2015-05-26 Thread Mark Andrews
In message <20150526161151.ga14...@pob.ytti.fi>, Saku Ytti writes: > On (2015-05-26 17:44 +0200), Owen DeLong wrote: > > Hey, > > > I think opt-out of password recovery choices on a line-item basis is not a > bad concept. > > This sounds reasonable. At least then you could decide which balance

Re: Multiple vendors' IPv6 issues

2015-05-26 Thread Ca By
On Tuesday, May 26, 2015, David Sotnick wrote: > Hi NANOG, > > The company I work for has no business case for being on the IPv6-Internet. > However, I am an inquisitive person and I am always looking to learn new > things, so about 3 years ago I started down the IPv6 path. This was early > 2012.

Multiple vendors' IPv6 issues

2015-05-26 Thread David Sotnick
Hi NANOG, The company I work for has no business case for being on the IPv6-Internet. However, I am an inquisitive person and I am always looking to learn new things, so about 3 years ago I started down the IPv6 path. This was early 2012. Fast forward to today. We have a /44 presence for our comp

RE: SAS Drive Enclosure

2015-05-26 Thread Jameson, Daniel
What are you thinking for connectivity, Ethernet, FiberChannel, Infiniband ... Building *Storage Nodes* or in need of just drive connectivity? -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Ray Van Dolson Sent: Tuesday, May 26, 2015 2:53 PM To: Graham Joh

Re: gmail security is a joke

2015-05-26 Thread Scott Howard
On Tue, May 26, 2015 at 12:28 PM, Aaron C. de Bruyn wrote: > > If they can e-mail you your existing password (*cough*Netgear*cough*), > it means they are storing your credentials in the database > un-encrypted. > No, it doesn't mean that at all. It means they are storing it unhashed which is pro

Re: SAS Drive Enclosure

2015-05-26 Thread Ray Van Dolson
On Tue, May 26, 2015 at 07:19:59PM +, Graham Johnston wrote: > I am looking for information about SAS drive enclosures, is there a > list like NANOG that covers that area of IT? > > I am specifically looking for an enclosure that can handle 12 or more > drives, I am looking to create a cluster

Re: gmail security is a joke

2015-05-26 Thread Aaron C. de Bruyn
*facepalm* Right. Sorry. Forgot which group I was addressing. ;) I swear half of the United States forgot their passwords over the three-day weekend. -A On Tue, May 26, 2015 at 12:39 PM, John R. Levine wrote: >> If they can e-mail you your existing password (*cough*Netgear*cough*), >> it mea

Re: gmail security is a joke

2015-05-26 Thread John R. Levine
If they can e-mail you your existing password (*cough*Netgear*cough*), it means they are storing your credentials in the database un-encrypted. What I had in mind was creating a new password and mailing you that. R's, John

Re: gmail security is a joke

2015-05-26 Thread Aaron C. de Bruyn
On Tue, May 26, 2015 at 9:06 AM, John Levine wrote: > If they do a reset, what difference does it make whether they send the > password in plain text or as a one-time link? Either way, if a bad > guy can read the mail, he can steal the account. If they can e-mail you your existing password (*cou

SAS Drive Enclosure

2015-05-26 Thread Graham Johnston
I am looking for information about SAS drive enclosures, is there a list like NANOG that covers that area of IT? I am specifically looking for an enclosure that can handle 12 or more drives, I am looking to create a clustered file system between multiple servers and would like to avoid a drive

RE: 10Gb CPE

2015-05-26 Thread Tony Wicks
I would say these are what you are after, last time I tested these I seem to remember Accedian coming out on top, but they are all good. http://www.rad.com/10/Carrier-Ethernet-Demarcation/27932/ http://accedian.com/ http://www.mrv.com/products/carrier-ethernet -Original Message- From: NA

Re: 10Gb CPE

2015-05-26 Thread Chris Lane
We use Brocade ICX 6450s for this. -Chris On Tue, May 26, 2015 at 2:40 PM, Daniel Rohan wrote: > With the deluge of 10Gb X device recommendations, I thought I'd hit the > list with one more. Does anyone out there running 10Gb managed CPE feel > like sharing their experiences? > > Our use case

10Gb CPE

2015-05-26 Thread Daniel Rohan
With the deluge of 10Gb X device recommendations, I thought I'd hit the list with one more. Does anyone out there running 10Gb managed CPE feel like sharing their experiences? Our use case would be a managed endpoint that would allow for testing and circuit verification while providing a layer 2

Re: gmail security is a joke

2015-05-26 Thread Christopher Morrow
On Tue, May 26, 2015 at 2:15 PM, wrote: > On Tue, 26 May 2015 19:11:51 +0300, Saku Ytti said: > >> > OTOH, recovery by receiving a token at a previously registered alternate >> > email address >> > seems relatively secure to me and I wouldn???t want to opt out of that. >> >> It's probably machin

Re: gmail security is a joke

2015-05-26 Thread Valdis . Kletnieks
On Tue, 26 May 2015 19:11:51 +0300, Saku Ytti said: > > OTOH, recovery by receiving a token at a previously registered alternate > > email address > > seems relatively secure to me and I wouldn???t want to opt out of that. > > It's probably machine sent in seconds or minute after request, so doin

Re: gmail security is a joke

2015-05-26 Thread Jim Popovitch
On Tue, May 26, 2015 at 10:26 AM, Markus wrote: > Did you know that anyone, anywhere in the world can get into a gmail account > merely by knowing its creation date (month and year is sufficient) and the > last login date (try "today")? What a joke. We don't even know if this email originated by

Re: gmail security is a joke

2015-05-26 Thread John R. Levine
I get what you are saying but my point was more about lack of crypto or reversible crypto than stealing the account. I am all in favor of using crypto when it improves security. But I am also in favor of not obsessing about it in places where it makes no difference. I like what Owen is desc

Re: gmail security is a joke

2015-05-26 Thread Saku Ytti
On (2015-05-26 17:44 +0200), Owen DeLong wrote: Hey, > I think opt-out of password recovery choices on a line-item basis is not a > bad concept. This sounds reasonable. At least then you could decide which balance of risk/convenience fits their use-case for given service. > OTOH, recovery by r

Re: gmail security is a joke

2015-05-26 Thread chris
I get what you are saying but my point was more about lack of crypto or reversible crypto than stealing the account. I like what Owen is describing, they should present all account recovery options and let the user toggle on/off which ones they want to be usable this way the user can make their own

Re: gmail security is a joke

2015-05-26 Thread John Levine
In article you write: >Haha I cringe when I do a password recovery at a site and they either email >the current pw to me in plain text or just as bad reset it then email it in >plain text. Its really sad that stuff this bad is still so common. If they do a reset, what difference does it make whe

Re: gmail security is a joke

2015-05-26 Thread chris
Haha I cringe when I do a password recovery at a site and they either email the current pw to me in plain text or just as bad reset it then email it in plain text. Its really sad that stuff this bad is still so common. On Tue, May 26, 2015 at 11:44 AM, Owen DeLong wrote: > > > On May 26, 2015, a

Re: gmail security is a joke

2015-05-26 Thread Owen DeLong
> On May 26, 2015, at 5:22 PM, Saku Ytti wrote: > > On (2015-05-26 16:26 +0200), Markus wrote: > > Hey, > >> Did you know that anyone, anywhere in the world can get into a gmail account >> merely by knowing its creation date (month and year is sufficient) and the > > Without any comment on wh

RE: gmail security is a joke

2015-05-26 Thread Thijs Stuurman
Perhaps this is still a void in the market? A business which operates small officers at which you can real-world verify your personal being using the most solid evidence available (perhaps in cooperation with governments) for that location/country which works together with the sorts of big-@rand

Re: gmail security is a joke

2015-05-26 Thread Alex Brooks
Hi, On Tue, May 26, 2015 at 3:26 PM, Markus wrote: > Did you know that anyone, anywhere in the world can get into a gmail account > merely by knowing its creation date (month and year is sufficient) and the > last login date (try "today")? What a joke. Can you not set account recory options whic

Re: gmail security is a joke

2015-05-26 Thread Saku Ytti
On (2015-05-26 16:26 +0200), Markus wrote: Hey, > Did you know that anyone, anywhere in the world can get into a gmail account > merely by knowing its creation date (month and year is sufficient) and the Without any comment on what gmail is or is not doing, the topic interests me. How should re

gmail security is a joke

2015-05-26 Thread Markus
Did you know that anyone, anywhere in the world can get into a gmail account merely by knowing its creation date (month and year is sufficient) and the last login date (try "today")? What a joke. Try it by yourself, its "fun". Even worse, once the attacker had control of your account once, and