Re: Cisco Update

2012-07-11 Thread Tyler Haske
1+ billion zombie computers source please? > This method has been proven to be very effective, considering many 100s of millions of zombie computers exist. > > Greetings, > Jeroen

Re: Cisco Update

2012-07-11 Thread Jeroen van Aart
Joe Greco wrote: No, really, how bad an idea can it be to have a central database and a system that's allowed to remotely log in, configure, and update thousands of Internet-connected CPE? I mean, talk about making an attractive target. No argument against the lack of wisdom regarding this c

Re: Cisco Update

2012-07-07 Thread Joe Greco
> On 7/5/12, Joe Greco wrote: > > It'll get real interesting when Cisco's cloud database is breached and > > some weakness in the password encryption is discovered. > [snip] > > Will the users' passwords even matter, if a compromise of the > database allows an intruder to make a system-wide chan

Re: Cisco Update

2012-07-06 Thread Hank Nussbacher
At 00:28 06/07/2012 -0700, goe...@anime.net wrote: "We take responsibility for that lack of clarity, and we are taking steps to make this right." including firing the idiot responsible? The Nussbacher axiom of management - "Management is like a cesspool - the really big chunks float to the t

Re: Cisco Update

2012-07-06 Thread goemon
"We take responsibility for that lack of clarity, and we are taking steps to make this right." including firing the idiot responsible? -Dan On Thu, 5 Jul 2012, Cameron Byrne wrote: In Cisco's defense, perhaps the legalese did not fully communicate the intent of the service. http://blogs.cis

Re: Cisco Update

2012-07-05 Thread Scott Howard
On Thu, Jul 5, 2012 at 9:42 AM, Jon Lewis wrote: > Routers are sometimes used on networks that don't have internet > connectivity [by design]. This seems amazingly short-sighted for a company > that's been around selling routing gear as long as cisco. > If the router is not connected to the int

Re: Cisco Update

2012-07-05 Thread Randy Bush
cisco has recanted on the forced cloud etc randy

Re: Cisco Update

2012-07-05 Thread Cameron Byrne
In Cisco's defense, perhaps the legalese did not fully communicate the intent of the service. http://blogs.cisco.com/home/update-answering-our-customers-questions-about-cisco-connect-cloud-2/ CB On Jul 5, 2012 8:52 AM, "Mario Eirea" wrote: > > Has anyone seen this yet? Looks like Cisco was forc

Re: Cisco Update

2012-07-05 Thread Jimmy Hess
On 7/5/12, Joe Greco wrote: > It'll get real interesting when Cisco's cloud database is breached and > some weakness in the password encryption is discovered. [snip] Will the users' passwords even matter, if a compromise of the database allows an intruder to make a system-wide change to end user

Re: Cisco Update

2012-07-05 Thread Jeff Johnstone
On Thu, Jul 5, 2012 at 6:01 PM, Joe Greco wrote: > > I see. > > > > Replace "local access" control with "let anyone on the internet > reconfigure= > > the thing". Whoever's idea it was should be p*ssed on, keelhauled, > drawn = > > and quartered, then burned at the stake. > > > It'll get real i

Re: Cisco Update

2012-07-05 Thread Joe Greco
> I see. > > Replace "local access" control with "let anyone on the internet reconfigure= > the thing". Whoever's idea it was should be p*ssed on, keelhauled, drawn = > and quartered, then burned at the stake. It'll get real interesting when Cisco's cloud database is breached and some weakne

RE: Cisco Update

2012-07-05 Thread Keith Medcalf
t; To: nanog@nanog.org > Subject: RE: Cisco Update > > Technical users could always just flash DD-WRT onto the device and replace > the Linksys/Cisco firmware; then you have a much more robust system without > any big brother stuff.

RE: Cisco Update

2012-07-05 Thread Keith Medcalf
bon.org > -Original Message- > From: Sean Harlow [mailto:s...@seanharlow.info] > Sent: Thursday, 05 July, 2012 10:26 > To: Hank Nussbacher > Cc: nanog@nanog.org > Subject: Re: Cisco Update > > On Jul 5, 2012, at 12:08, Hank Nussbacher wrote: > > > For those

Re: Cisco Update

2012-07-05 Thread Andriy Bilous
I suspect it'll be "Corporations control Internet and our private life" well before tomorrow. Domestic operators do that for ages with their branded routers and AFAIK DOCSIS is unimaginable without (part of) this functionality. I went berzerk when discovered such a checkbox in my home router, two d

Re: Cisco Update

2012-07-05 Thread Ray Soucy
Looks like they've modified their privacy policy in the last few days, but from what I understand it was originally pretty bad, including the collecting users' history and: [...] right to shut down the users' account if it finds that they have used the service for “obscene, pornographic, or offens

Re: Cisco Update

2012-07-05 Thread Thomas D Nadeau
dd-wrt or openwrt are your friend on those devices. 8) On Jul 5, 2012, at 11:51 AM, Mario Eirea wrote: > Has anyone seen this yet? Looks like Cisco was forcing people to join its > Cloud service through an update for it's consumer level routers. > > http://www.neowin.net/news/cisco-locks-use

Re: Cisco Update

2012-07-05 Thread Jeff Johnstone
On Thu, Jul 5, 2012 at 11:07 AM, Joe Greco wrote: > > Technical users could always just flash DD-WRT onto the device and = > > replace the Linksys/Cisco firmware; then you have a much more robust = > > system without any big brother stuff. > > Or Cisco could just omit the big brother stuff. > > T

Re: Cisco Update

2012-07-05 Thread Joe Greco
> Technical users could always just flash DD-WRT onto the device and = > replace the Linksys/Cisco firmware; then you have a much more robust = > system without any big brother stuff. Or Cisco could just omit the big brother stuff. This is not a technological failure. In fact, automatic updates

Re: Cisco Update

2012-07-05 Thread Grant Ridder
Keep in mind, that to receive the update, the router has to be connected to the internet. So routers that are not connected to the internet by design will be unaffected. -Grant On Thu, Jul 5, 2012 at 11:55 AM, David Hubbard < dhubb...@dino.hostasaurus.com> wrote: > Technical users could always

RE: Cisco Update

2012-07-05 Thread David Hubbard
Technical users could always just flash DD-WRT onto the device and replace the Linksys/Cisco firmware; then you have a much more robust system without any big brother stuff.

Re: Cisco Update

2012-07-05 Thread Leo Bicknell
In a message written on Thu, Jul 05, 2012 at 03:51:40PM +, Mario Eirea wrote: > Has anyone seen this yet? Looks like Cisco was forcing people to join its > Cloud service through an update for it's consumer level routers. Perhaps going right to the source would be educational: http://home.ci

Re: Cisco Update

2012-07-05 Thread Edward Salonia
. But this, as I'm sure many will agree, is not the environment in which they were intended to be deployed. Nor do I believe are they marketed as such. - Ed --Original Message-- From: Jon Lewis To: Sean Harlow Cc: nanog@nanog.org Subject: Re: Cisco Update Sent: Jul 5, 2012 12:42 PM

Re: Cisco Update

2012-07-05 Thread Sean Harlow
On Jul 5, 2012, at 12:42, Jon Lewis wrote: > Routers are sometimes used on networks that don't have internet connectivity > [by design]. This seems amazingly short-sighted for a company that's been > around selling routing gear as long as cisco. Not to defend Cisco's idiotic decision, but in t

Re: Cisco Update

2012-07-05 Thread Jon Lewis
On Thu, 5 Jul 2012, Sean Harlow wrote: On Jul 5, 2012, at 11:24, Joe Greco wrote: And what happens when your *cough* "router" isn't actually on the Internet? How can it be managed and upgraded on a regular old network? If there is no internet connection, you get a very limited page that's

Re: Cisco Update

2012-07-05 Thread Sean Harlow
On Jul 5, 2012, at 11:24, Joe Greco wrote: > And what happens when your *cough* "router" isn't actually on the > Internet? How can it be managed and upgraded on a regular old network? If there is no internet connection, you get a very limited page that's apparently only really good to get you b

Re: Cisco Update

2012-07-05 Thread Sean Harlow
On Jul 5, 2012, at 12:08, Hank Nussbacher wrote: > For those of us who have not kept up with every latest feature that Cisco > rolls out across all its platforms, can someone explain this new service? Is > it like Windows update, where Cisco will auto-update your router s/w and > thereby brick

Re: Cisco Update

2012-07-05 Thread Joe Greco
> At 15:51 05/07/2012 +, Mario Eirea wrote: > >Has anyone seen this yet? Looks like Cisco was forcing people to join its > >Cloud service through an update for it's consumer level routers. > > > >http://www.neowin.net/news/cisco-locks-users-out-of-their-routers-requires-invasive-cloud-service

Re: Cisco Update

2012-07-05 Thread Hank Nussbacher
At 15:51 05/07/2012 +, Mario Eirea wrote: Has anyone seen this yet? Looks like Cisco was forcing people to join its Cloud service through an update for it's consumer level routers. http://www.neowin.net/news/cisco-locks-users-out-of-their-routers-requires-invasive-cloud-service -Mario Eire