Re: Friday Fun: UK Government (Dept of Work & Pensions) selling off an entire "/8"

2015-03-13 Thread Alec Muffett
eing a lot of 6 in mobile, loads of NAT, and folk seem far less petrified of the future? -a On 13 March 2015 at 20:23, Christopher Morrow wrote: > On Fri, Mar 13, 2015 at 3:30 PM, wrote: > > On Fri, 13 Mar 2015 18:46:31 -, Alec Muffett said: > > > >> > IPv4 M

Friday Fun: UK Government (Dept of Work & Pensions) selling off an entire "/8"

2015-03-13 Thread Alec Muffett
Perhaps I'm odd, but I find the novelty of this to be amusing: IPv4 Market Group Announces the Availability of a Significant Portfolio of > IPv4 Addresses for Purchase in the RIPE Region: > > IPv4 Market Group, a global leader in IPv4 sales, has just announced the > availability of up to 2.6 mil

Re: Dear Linkedin,

2012-06-08 Thread Alec Muffett
> Does anybody have a good URL explaining that idea? It's been kicking around > for many years. I've never seen a convincing writeup. I've tried to do that in another mail - it's in the realms of philosophy more than strategy; like if you're a really security-aware person and take great care

Re: Dear Linkedin,

2012-06-08 Thread Alec Muffett
On 8 Jun 2012, at 22:59, John Levine wrote: > Given that most compromised passwords these days are stolen by malware > or phishing, I'm not understanding the threat, unless you're planning > to change passwords more frequently than the interval between malware > stealing your password and the bad

Re: Dear Linkedin,

2012-06-08 Thread Alec Muffett
On 8 Jun 2012, at 21:55, Michael Thomas wrote: > With apps and browsers that > can remember passwords why are we still insisting that users generate > and remember their own bad passwords? That's one reason that I > find the finger wagging tone of that Linkedin post extremely problematic -- > the

Re: Dear Linkedin,

2012-06-08 Thread Alec Muffett
> PS: when security is hard, people simply don't do it. Blaming the victim > of poor engineering that leads people to not be able to perform best > practices is not the answer. Passwords suck, but they are the best that we have at the moment in terms of being cheap and free from infrastructure -

Re: Dear Linkedin,

2012-06-08 Thread Alec Muffett
> Does your password safe know how to change the password on each > website every several months? Not far off, actually; my 1Password has an auto-login-page feature which you can often wire to be the same as the password-change URL. So, nyah. -a

Re: Dear Linkedin,

2012-06-08 Thread Alec Muffett
> I have accounts at probably 100's of sites. Am I to understand that I am > supposed to remember > each one of them and dutifully update them every month or two? Yes; of course if most of those accounts are moribund and unused then you don't need to change them so often, but the passwords you u

CCDP (Was: April fools joke?)

2012-04-01 Thread Alec Muffett
On 1 Apr 2012, at 15:30, Justin Wilson wrote: > I hate April 1 on the Web. You are right you never can tell. I would be > appalled if someone as respectable as the BBC stoops to downright dumb > pranks. It is true. It's called the Communications Capabilities Development Programme (CCDP)

Re: Megaupload.com seized

2012-01-20 Thread Alec Muffett
On 20 Jan 2012, at 11:00, Tei wrote: > Fileshares can organize thenselves in sites based on a forum software > that is private by default (open with registration), then share some > "information" file that include the url to the files hosted, and the > key to unencrypt these files, and some metad