Re: att or sonic "residential" fiber service at a "nontraditional" residence.

2020-11-01 Thread George Herbert
Sonic both has their own FTTH and layers on top of ATT FTTH with Fusion IPBB I think it’s called. I don’t know the resale agreement details in place but it’s openly advertised as such on Sonic’s site. Waiting for the true deal to land in my neighborhood ... -George Sent from my iPhone > O

Re: {Disarmed} Re: Asus wifi AP re-writing DNS packets

2020-11-04 Thread George Herbert
This is annoying behavior, because unless you are doing something weird with actually signing DNS or TCP DNS, the router can just inject a fake response for their one DNS name they need into any UDP DNS stream with a tiny bit of inspection. Hijacking all of DNS is the DUMB way to do it. And eithe

Re: NDAA passed: Internet and Online Streaming Services Emergency Alert Study

2021-01-02 Thread George Herbert
I've already had to spike one widely announced WAN UDP protocol that someone had proposed without thinking through security and DDOS features. Please don't let's try that trick again. We have perfectly good approaches that don't involve insecure untraceable transport layers. This isn't 1985. TCP

Re: Nice work Ron

2021-01-22 Thread George Herbert
> On Jan 21, 2021, at 12:59 PM, Eric Kuhnke wrote: > > > How many other Belize defuncts do they have? How many offshore countries > > like Belize are there in the region? > > Based on my cursory knowledge of offshore corporate registrations in Belize, > Panama and the Cayman Islands, identif

Re: Famous operational issues

2021-02-18 Thread George Herbert
Northridge quake. I was #2 and on call at CRL. That One Guy on dialup in Atlanta playing MUDs 23x7 pages that things are down. I wander out to my computer to dial in and see what’s up, turned on TV walking past it, sat down and turned computer on, as it was booting on comes a live helicopter

Re: OVH datacenter SBG2 in Strasbourg on fire 🔥

2021-03-11 Thread George Herbert
Sent from my iPhone > On Mar 10, 2021, at 7:45 AM, Andy Ringsmuth wrote: > > Sad to see of course, but also a little surprising that fire suppression > systems didn’t, well, suppress the fire. > > Unless they didn’t exist? I am assuming you haven’t had a real datacenter fire before. I’ve ha

RIP Dan Kaminsky

2021-04-24 Thread George Herbert
Reported widely on Twitter by his personal friends, Dan Kaminsky passed away yesterday. The DNS community has lost an immense contributor. -George Sent from my iPhone

Re: DHS letters for fuel and facility access

2020-03-16 Thread George Herbert
The SF Bay Area shelter in place rules specifically exempt news media, telecommunications and internet including infrastructure services thereof (presumably large internet companies, network and security vendors, etc), fuel deliveries. I could use infrastructure vendors excuse but $current_cl

Re: Rack rails on network equipment

2021-09-24 Thread George Herbert
I’ve seen Dell rack equipment leap for safety (ultimately very very unsuccessfully…) in big earthquakes. Lots of rack screws for me. -George Sent from my iPhone > On Sep 24, 2021, at 9:41 AM, Andrey Khomyakov > wrote: > >  > Hi folks, > Happy Friday! > > Would you, please, share your tho

Re: Rack rails on network equipment

2021-09-25 Thread George Herbert
(Crying, thinking about racks and racks and racks of AT&T 56k modems strapped to shelves above PM-2E-30s…) The early 90s were a dangerous place, man. -George Sent from my iPhone > On Sep 24, 2021, at 8:05 PM, Wayne Bouchard wrote: > > Didn't require any additional time at all when equipmen

Re: massive facebook outage presently

2021-10-04 Thread George Herbert
And WhatsApp and Instagram. Twitter users nationwide agree anecdotally. What I’m getting is DNS failure. -George Sent from my iPhone > On Oct 4, 2021, at 9:07 AM, Eric Kuhnke wrote: > >  > https://downdetector.com/status/facebook/ > > Normally not worth mentioning random $service having

Ukraine request yikes

2022-03-01 Thread George Herbert
Posted by Bill Woodcock on Twitter… https://twitter.com/woodyatpch/status/1498472865301098500?s=21 https://pastebin.com/DLbmYahS Ukraine (I think I read as) want ICANN to turn root nameservers off, revoke address delegations, and turn off TLDs for Russia. Seems… instability creating… -george

Re: Ukraine request yikes

2022-03-01 Thread George Herbert
I don’t hear anyone in the networks field supporting doing it. It was a yikes that the request was made, but not looking at all likely to happen IMHO. -george Sent from my iPhone > On Mar 1, 2022, at 2:12 PM, Brian R wrote: > >  > The problem with all this talk, especially with trusted in

RU evidently hijacked UA netblock

2022-03-04 Thread George Herbert
https://bgpstream.com/event/287556 Beware of further such activity… -george Sent from my iPhone

Retracted: Re: RU evidently hijacked UA netblock

2022-03-04 Thread George Herbert
I don’t know about Scott’s situation but the original hijack report was shown to have an innocent explanation. My apologies. -george Sent from my iPhone > On Mar 4, 2022, at 6:06 PM, Scott Weeks wrote: > >  > > --- george.herb...@gmail.com wrote: > > https://bgpstream.com/event/287556 >

Re: "Permanent" DST

2022-03-15 Thread George Herbert
> > On Mar 15, 2022, at 2:06 PM, Jay Ashworth wrote: > > It violates the international rule determining what your time zone should be > based on what your longitude is. > > That is not trivial. It’s an informal convention, not “rule”, and it not vaguely consistent in practice now. You’

Re: China Telecom in Hunan office tower fire

2022-09-16 Thread George Herbert
I think “the whole building burned” is a bit hyperbolic. Building was covered in the now known to be spectacularly flammable exterior foam insulation panels. Those panels are now largely banned because of several fires. It had intact windows and fire sprinklers when the cladding ignited on o

Re: 365 Datacenters Tampa AC Failure

2023-06-12 Thread George Herbert
Oof. Get ready to replace all spinning media you may have there. -George Sent from my iPhone > On Jun 12, 2023, at 4:06 PM, Nick Olsen wrote: > >  > Just a heads up to anyone else colo'd at 365 TPA1/TAMSFLDE. Currently seeing > floor temps of ~105F as reported by equipment. Started yeste

Re: Multi-day GNSS Galileo outage -- Civilization survives

2019-07-19 Thread George Herbert
Worthwhile noting however that they’re not reliably pushing notifications to people on their notifications list. Worthwhile checking fundamentals you do depend on with your own low level monitoring. -George Sent from my iPhone > On Jul 18, 2019, at 10:30 PM, Mikael Abrahamsson wrote: > >> O

Re: 240/4 (Re: 44/8)

2019-07-22 Thread George Herbert
Most importantly, if you're running out of 1918 space is a totally different problem than running out of global routable space. If you patch common OSes for 240/4 usability but a significant fraction of say unpatched OSes, IOT, consumer routers, old random net cruft necessary for infrastructure ar

Re: Asset management recommendations

2019-08-24 Thread George Herbert
Do you really want asset management tools, or configuration management tools with asset discovery / inventory capability? Juniper supports Chef configuration management pretty extensively, and is widely used for systems management and patch management on Linux. Scales to multisite well. There ar

Re: south bay ops channel

2019-11-19 Thread George Herbert
Not that I specifically recall since late 90s. All the local problems became nationwide. If you want to start one, sign me up. On Mon, Nov 18, 2019 at 6:53 PM Randy Bush wrote: > > dear lazynet. is there a list, irc, slack, ... for ops in the > > southern bay area? need to find/discuss colo,

Re: NIST NTP servers

2016-05-12 Thread George Herbert
> On May 11, 2016, at 6:31 AM, Leo Bicknell wrote: > ... > You're replacing one single point of failure with another. > > Personally, my network gets NTP from 14 stratum 1 sources right now. > You, and the hacker, do not know which ones. You have to guess at least > 8 to get me to move to you

Re: Level 3 issues?

2016-05-16 Thread George Herbert
Yes; you should subscribe to outa...@outages.org for better reports. (Short summary - yes, no root cause/TTR yet). George William Herbert Sent from my iPhone > On May 16, 2016, at 12:49 PM, David Hubbard > wrote: > > Anyone seeing issues with Level 3 networking right now? We’re seeing huge

Re: Impacts of Encryption Everywhere (any solution?)

2018-06-19 Thread George Herbert
I’m confused. People are using last hop (wireless) arguments against HTTPS Everywhere; that’s the part that requires full bandwidth either way (as your non-HTTPS cache is upstream somewhere). The fiber links that are physically fixed and can handle in many cases better lasers, are the ongoing

Re: Escalation point at Google

2018-11-12 Thread George Herbert
If this is re os33.com where Alex emailed from, the front page is Lets Encrypt. Which is a strange choice for a financial SAAS?... Alex, if your internal app site certs are Symantec that could well explain it; check your cert locations. On Mon, Nov 12, 2018 at 12:30 PM Guillaume Tournat wrote:

Re: AWS WAF list

2024-02-20 Thread George Herbert
This is terrible advice, but you might need another netblock for the eyeballs. Possibly a small one with enterprise NAT, but something outside the AWS list ranges... -George On Mon, Feb 19, 2024 at 7:35 PM Justin H. wrote: > That matches my experience with these types of problems in the past.

Re: puck not responding

2024-03-01 Thread George Herbert
If it wasn’t for how clunky they are with email sites, I’d suggest moving to a cloud somewhere. But … -George Sent from my iPhone > On Feb 29, 2024, at 8:01 AM, Jared Mauch wrote: > >  > >> On Feb 29, 2024, at 10:56 AM, Jay Acuna wrote: >> >>> On Thu, Feb 29, 2024 at 9:22 AM Jared Mauch

Re: Craigslist Blocks

2018-02-27 Thread George Herbert
...Anne's contact is better placed for abuse incidents but if they fail I have an alternate contact who has also indirectly helped before. He's a programmer not abuse ops guy but does know the other teams well and has helped. George William Herbert Sent from my iPhone > On Feb 26, 2018, at 1

Re: quietly....

2011-01-31 Thread George Herbert
The last 5 are, by existing agreement, to be allocated 1 per Regional registry immediately after the other /8s are exhausted. This was agreed to some time ago to ensure that no regional was disadvantaged by timing concerns on applications for space as the IANA exhaustion approached. As that has n

Re: quietly....

2011-02-01 Thread George Herbert
On Tue, Feb 1, 2011 at 7:46 PM, wrote: > On Wed, 02 Feb 2011 03:09:50 GMT, John Curran said: >> We had a small ramp up in December (about 25% increase) but that is within >> reasonable variation. Today was a little different, though, with 4 times >> the normal request rate... that would be a "rus

Re: random dns queries with random sources

2014-02-18 Thread George Herbert
Right. Nonzero chances that you (Joe's site) are the target... Also, check if you have egress filtering of spoofed addresses below these DNS resources, between them and any user objects. You could be sourcing the spoofing if not... On Tue, Feb 18, 2014 at 7:44 PM, Dobbins, Roland wrote: > >

Re: L6-20P -> L6-30R

2014-03-18 Thread George Herbert
https://www.21cii.com/ITStudio/Content/Resources/Images/Appendix/Plug%20&%20Power/SB%202P-3W_505x447.png I think the 250 v 15 amp plugs fit in the 20 amp sockets, but the 20s don't fit in the 30 sockets. This sort of thing is usually an adapter, a little cylinder with a L6-20R on one end and a L6

Re: L6-20P -> L6-30R

2014-03-18 Thread George Herbert
Crap, was looking at the non-locking ones. Ignore that. On Tue, Mar 18, 2014 at 3:54 PM, George Herbert wrote: > > https://www.21cii.com/ITStudio/Content/Resources/Images/Appendix/Plug%20&%20Power/SB%202P-3W_505x447.png > > I think the 250 v 15 amp plugs fit in the 20 amp sock

Re: misunderstanding scale

2014-03-24 Thread George Herbert
On Mon, Mar 24, 2014 at 8:02 PM, Owen DeLong wrote: > > On Mar 24, 2014, at 9:21 AM, William Herrin wrote: > > > On Sun, Mar 23, 2014 at 11:07 PM, Naslund, Steve > wrote: > >> I am not sure I agree with the basic premise here. NAT or Private > addressing does not equal security. > > > > Hi St

Re: Recommendation on NTP appliances/devices

2014-04-03 Thread George Herbert
On Thu, Apr 3, 2014 at 8:46 PM, Rob Seastrom wrote: > > Chris Adams writes: > > > Once upon a time, Rob Seastrom said: > >> Along the same lines I'm troubled by the lack of divergent sources > >> these days - everything seems slaved to GPS either directly or > >> indirectly (might be nice to ha

Re: Requirements for IPv6 Firewalls

2014-04-17 Thread George Herbert
On Thu, Apr 17, 2014 at 11:32 AM, Eugeniu Patrascu wrote: > ... > It's a bigger risk to think that NAT somehow magically protects you against > stuff on the Internet. > Also, if your problem is that someone can screw up firewalls rules, then > you have bigger issue in your organization than IPv6.

Re: Requirements for IPv6 Firewalls

2014-04-18 Thread George Herbert
On Fri, Apr 18, 2014 at 10:15 AM, Timothy Morizot wrote: > On Apr 18, 2014 10:04 AM, "William Herrin" wrote: > > That's correct: you don't understand. Until you do, just accept: there > > are more than a few folks who want to, intend to and will use NAT for > > IPv6. They will wait until NAT is a

Re: Requirements for IPv6 Firewalls

2014-04-18 Thread George Herbert
hen listen to feedback on why things are failing. On Fri, Apr 18, 2014 at 3:36 PM, Lee Howard wrote: > > > On 4/17/14 4:45 PM, "George Herbert" wrote: > > > >> There's a fair argument to be made which says that kind of NAT is > >> > unhealthy.

Re: Requirements for IPv6 Firewalls

2014-04-21 Thread George Herbert
On Mon, Apr 21, 2014 at 9:32 AM, Lee Howard wrote: > > You're describing best practice. Yes, of course, you should have well > documented technical and business needs for what's open and what's closed > in firewalls, and should have traceability from the rules in place to the > requirements, and

Re: Requirements for IPv6 Firewalls

2014-04-22 Thread George Herbert
As long as the various stateful firewalls and IDS systems offer hostile action detection and blocking capabilities that raw webservers lack, there are certainly counterarguments to the "port filter only" approach being advocated here. Focusing only on DDOS prevention from one narrow range of attac

Re: Verizon Public Policy on Netflix

2014-07-11 Thread George Herbert
> On Jul 11, 2014, at 9:44 AM, Owen DeLong wrote: > > Would it really be plausible for a small ISP to host caching clusters for > every streaming content supplier out there? No, but if you have typical internet user streaming uptake, Netflix and Akamai and then... Short list, most of the

Re: Verizon Public Policy on Netflix

2014-07-12 Thread George Herbert
> On Jul 11, 2014, at 10:31 PM, Owen DeLong wrote: > > > On Jul 11, 2014, at 8:18 PM, Randy Bush wrote: > And, for the record, it's pretty widely acknowledge that "The World" (Barry Shein) was the world's first commercial ISP - offering shell access in 1989, and at some poin

Re: Verizon Public Policy on Netflix

2014-07-14 Thread George Herbert
> On Jul 14, 2014, at 6:03 AM, Jared Mauch wrote: > > In my experience the bandwidth is typically the lowest part of the cost > equation. > > Why transcode on 1k nodes when you can do it once and distribute it at lower > cost, > including in electricity to run the host CPU. > > Centralize

Re: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-14 Thread George Herbert
> On Jul 14, 2014, at 10:41 AM, Matthew Petach wrote: > > Brett's concerns seem to center around his > ability to be cost-competitive with the big > guys in his area...which implies there *are* > big guys in his area to have to compete with. He 's running wireless links, from web and prior i

Re: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-15 Thread George Herbert
> On Jul 15, 2014, at 8:03 AM, Brett Glass wrote: > > At 06:49 AM 7/15/2014, Baldur Norddahl wrote: > >> Ah but they are charging you for it. You are paying approximately 40x as >> much for your bandwidth as you should be (you said you paid 20 USD/Mbps - >> an outrageous rate). You have a li

Re: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-15 Thread George Herbert
> On Jul 15, 2014, at 5:02 PM, Brett Glass wrote: > > At 05:10 PM 7/15/2014, George Herbert wrote: > >> Layer3 runs right through Laramie. With a redundant run slightly south. >> What conversations have you had with them?... > > At first, Level3 completely

Re: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-18 Thread George Herbert
> On Jul 17, 2014, at 5:19 AM, Jared Mauch wrote: > > The problem is partly a technological one. If you have a fiber span from > east<-> west it doesn't make sense to OEO when you can just plop in a bidi > amplifier. Almost certainly, most of the fiber going through the building just hits

Re: EFF gets into the CPE router software business..

2014-07-24 Thread George Herbert
Any idea how well CeroWRT stands up to nation-state level intrusion efforts? George William Herbert Sent from my iPhone > On Jul 24, 2014, at 10:24 AM, char...@thefnf.org wrote: > >> On 2014-07-24 12:04, Valdis Kletnieks wrote: >> So the EFF is pushing development of an open CPU router >> htt

Re: high performance open source DHCP solution?

2011-07-19 Thread George Herbert
220-ish per second sounds roughly like a 1-disk (or 2 mirrored disk) IOPS problem, personally... But any number of other things could be affecting it. The number should be thousands if your disk / filesytem RAM cache / server configuration aren't inadequate... On Tue, Jul 19, 2011 at 8:54 PM, Ji

Re: high performance open source DHCP solution?

2011-07-20 Thread George Herbert
Good luck buying X25-Es; they're out of production and all gone from supply chain. Replacement 710 and 720 models are ETA in late August at the moment. Micron has some large-cap SLC drives in the chain for September/October/ish timeframes. Ramdisk with rsync or rdiffbackup to spinning storage wi

Re: DDoS - CoD?

2011-09-06 Thread George Herbert
Arrgghhh This reminds me of the WebNFS attack. Which is why Sun aborted WebNFS's public launch, after I pointed it out during its Solaris 2.6 early access program. Never run a volume-multiplying service on UDP if you can help it, exposed to the outside world, without serious in-band source v

Re: CMDB on the cheap...

2011-12-06 Thread George Herbert
Everyone I know has either paid through the nose or written one from scratch. No good open source projects that worked out. Most people couldn't build well from scratch. I have been a couple of places that did, it was man-year of senior grade guy effort range. On Tue, Dec 6, 2011 at 1:01 PM,

Re: Adding GPS location to IPv6 header

2012-11-26 Thread George Herbert
The utility of this is somewhat moderated by limited geographical mobility while a phone's active in a single session. One rarely drives from San Francisco to LA typing all the way on their smartphone data connection, for example. To the extent that you may apply IP ranges to wider geographical a

Re: Adding GPS location to IPv6 header

2012-11-26 Thread George Herbert
On Mon, Nov 26, 2012 at 4:53 PM, Owen DeLong wrote: > > On Nov 26, 2012, at 14:51 , George Herbert wrote: > >> The utility of this is somewhat moderated by limited geographical >> mobility while a phone's active in a single session. One rarely >> drives from Sa

Syria off the net

2012-11-29 Thread George Herbert
The press is reporting on Renesys' report that Syria has finally dropped all its internet connectivity earlier this morning: http://www.renesys.com/blog/2012/11/syria-off-the-air.shtml http://m.washingtonpost.com/blogs/worldviews/wp/2012/11/29/web-monitor-100-percent-of-syrias-internet-just-shu

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
On Thu, Nov 29, 2012 at 11:18 AM, Tom Beecher wrote: > Assuming it's true, it was bound to happen. Running anything , TOR or > otherwise, that allows strangers to do whatever they want is just folly. Such as, say, an Internet Service Provider business? ... -- -george william herbert george.her

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
the US the ISP doesn't get > dinged, except in certain cases where they are legally required to remove > access to material and don't. > > End users have no such protections that I'm aware of that cover them > similarly. > > > On 11/29/2012 2:50 PM, George Herb

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
On Thu, Nov 29, 2012 at 12:00 PM, Naslund, Steve wrote: > ISPs also do not "allow strangers to do whatever they want" ISPs have > responsibilities to act on DCMA notices and CALEA requests from law > enforcement. These are things that Tor exit nodes are not capable of > doing. If you were an IS

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
On Thu, Nov 29, 2012 at 12:42 PM, Naslund, Steve wrote: > The entire point of Tor is to be untraceable back to the source. Egress > filters can prevent future abuse but do not provide for tracing back to > the original source of offending conduct. They are not trying to stop > the flow of the dat

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
be criminally negligent. This is not > so clear cut a case that there would not be a fight about it. > > Steven Naslund > > > > -Original Message- > From: George Herbert [mailto:george.herb...@gmail.com] > Sent: Thursday, November 29, 2012 2:06 PM > To: Tom Be

Re: William was raided for running a Tor exit node. Please help if

2012-11-30 Thread George Herbert
Those who do not remember history... On Fri, Nov 30, 2012 at 5:23 PM, wrote: > On Fri, 30 Nov 2012, Naslund, Steve wrote: >> >> My message to the cops and my lawyer would be charge me or lets clear >> this up. There are laws to protect you from the government from taking >> your stuff in an unf

Re: Legal Crap [was: William was raided for running a Tor exit node. Please help if you can.]

2012-12-01 Thread George Herbert
On Dec 1, 2012, at 10:37 AM, Jeffrey Ollie wrote: > On Sat, Dec 1, 2012 at 4:21 AM, Patrick W. Gilmore wrote: >> >> It amazes me how people feel free to opine on things... > > Actually, what really bugs/amazes me about that thread is that the > person whom this thread was originally about I

Re: earthquake in Japan right now

2012-12-07 Thread George Herbert
250 or so km east of Sendai, near the big offshore quake zone from last year. CNN and the USGS have the basic info but no tsunami warning or damage info yet as fas as I saw. George William Herbert Sent from my iPhone On Dec 7, 2012, at 12:36 AM, JP Viljoen wrote: > On 07 Dec 2012, at 10:33 A

Re: why haven't ethernet connectors changed?

2012-12-20 Thread George Herbert
Having (once) tapped thicknet, done a lot of thinnet termination and cable cut debugging, and then used hubs and switches in 10BT and onwards... Having had one main standard (RJ45) has been a huge benefit to advancing the state of networking to where we are today. But it is probably worth questio

Re: IP Address Management IPAM software for small ISP

2012-12-20 Thread George Herbert
On Thu, Dec 20, 2012 at 7:48 PM, Jimmy Hess wrote: ... > > But is there a decently scalable open source application for building > a CMDB, that is visually appealing and efficient for humans to use, > without a ton of manual development; other than custom building > applications and SQL schema

Re: IP Address Management IPAM software for small ISP

2012-12-21 Thread George Herbert
On Dec 20, 2012, at 10:01 PM, Jimmy Hess wrote: > On 12/20/12, Charles N Wyble wrote: >> Zenoss works very well as a cmdb. > > Zenoss is very visually appealing, but a monitoring system for network > hosts, not a CMDB. > > In particular, except through extensive custom programming, I see

Re: Fiber only in DataCenters?

2012-12-21 Thread George Herbert
On Thu, Dec 20, 2012 at 3:20 PM, Matthew Kaufman wrote: > On 12/17/2012 9:22 AM, joel jaeggli wrote: >> >> If the facility is big enough the utility of twisted pair becomes quite >> limited, both due to distance and differing electrical potential, >> multibuilding campuses in particular make this

Re: Fiber only in DataCenters?

2012-12-21 Thread George Herbert
On Fri, Dec 21, 2012 at 10:58 AM, Owen DeLong wrote: > > On Dec 21, 2012, at 10:54 , George Herbert wrote: > >> On Thu, Dec 20, 2012 at 3:20 PM, Matthew Kaufman wrote: >>> On 12/17/2012 9:22 AM, joel jaeggli wrote: >>>> >>>> If the facility i

Re: Gmail and SSL

2013-01-02 Thread George Herbert
On Wed, Jan 2, 2013 at 11:36 AM, William Herrin wrote: > Communications using a key signed by a trusted > third party suffer such attacks only with extraordinary difficulty on > the part of the attacker. It's purely a technical matter. While I agree with your general characterization of MIIM, the

Re: Gmail and SSL

2013-01-02 Thread George Herbert
On Wed, Jan 2, 2013 at 2:27 PM, William Herrin wrote: > On Wed, Jan 2, 2013 at 3:10 PM, George Herbert > wrote: >> On Wed, Jan 2, 2013 at 11:36 AM, William Herrin wrote: >>> Communications using a key signed by a trusted >>> third party suffer such attacks only wi

Re: Gmail and SSL

2013-01-02 Thread George Herbert
On Wed, Jan 2, 2013 at 7:31 PM, wrote: > On Wed, 02 Jan 2013 12:10:55 -0800, George Herbert said: > >> Google is setting a higher bar here, which may be sufficient to deter >> a lot of bots and script kiddies for the next few years, but it's not >> enough ag

Re: De-funding the ITU

2013-01-14 Thread George Herbert
On Mon, Jan 14, 2013 at 7:27 AM, John Levine wrote: >>> There'd have to be some organization to negotiate and oversee >>> international settlements and other, similar, regulations. >> >>Why? The internet has operated just fine without such for quite some time >>now. > > The Internet is held togeth

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread George Herbert
On Wed, Jan 16, 2013 at 2:00 PM, Erik Levinson wrote: > Hi everyone, > > I'm having an unusual DNS problem and would appreciate feedback. > > For the zones in question, primary DNS is provided by GoDaddy and > secondary DNS by DNS Made Easy. Over a week ago we made changes to > several A records (

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-19 Thread George Herbert
On Jan 18, 2013, at 7:52 PM, Matt Palmer wrote: > On Fri, Jan 18, 2013 at 09:41:41AM +0100, . wrote: >> On 17 January 2013 23:38, Matt Palmer wrote: >> .. >>> By the way, if anyone *does* know of a good and reliable way to prevent CSRF >>> without the need for any cookies or persistent serv

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-20 Thread George Herbert
On Jan 20, 2013, at 11:51 AM, Matt Palmer wrote: > On Sat, Jan 19, 2013 at 03:54:37PM -0800, George Herbert wrote: >> On Jan 18, 2013, at 7:52 PM, Matt Palmer wrote: >>> >>> Storing any state server-side is a really bad idea for scalability and >>> rel

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-24 Thread George Herbert
On Thu, Jan 24, 2013 at 5:48 AM, Rich Kulawiec wrote: > On Wed, Jan 23, 2013 at 01:20:07PM +0100, . wrote: >> CAPTCHAS are a "defense in depth" that reduce the number of spam >> incidents to a number manageable by humans. > > No, they do not. If you had actually bothered to read the links that >

Re: Ethernet Service at 150 S. Market Street, SJ

2013-01-29 Thread George Herbert
On Tue, Jan 29, 2013 at 12:19 PM, Mike Lyon wrote: > Last I heard, roof rights are pricey down there :) > > On Tue, Jan 29, 2013 at 12:18 PM, Warren Bailey < > wbai...@satelliteintelligencegroup.com> wrote: > >> Satellite! ;) ...And somewhat silly, given that it's *that* facility. But the roof

Re: Muni network ownership and the Fourth

2013-01-29 Thread George Herbert
On Tue, Jan 29, 2013 at 8:10 PM, Leo Bicknell wrote: > In a message written on Tue, Jan 29, 2013 at 07:46:06PM -0800, Owen DeLong > wrote: >> Case 2, you move the CO Full problem from the CO to the adjacent >> cable vaults. Even with fiber, a 10,000 strand bundle is not small. >> >> It's also a l

Re: Muni fiber: L1 or L2?

2013-02-01 Thread George Herbert
On Fri, Feb 1, 2013 at 7:54 PM, Owen DeLong wrote: > OK... Like Einstein, math is not my strong suit. > > Unfortunately, I don't have his prowess with physics, either. > > Owen A bit here, a bit there... Hey, dB is a plural of Bits! -- -george william herbert george.herb...@gmail.com

Re: Muni fiber: L1 or L2?

2013-02-01 Thread George Herbert
Ok, serious question - How is GPON's downstream AES encryption keying handled? -- -george william herbert george.herb...@gmail.com

Re: Endpoint Security and Smartphones

2013-02-19 Thread George Herbert
Normal apps can usually get the accelerometer data without breaking device security. So you download the newest cool free Mine Birds or whatnot, and its server upload traffic eventually includes guesses at your passcode along with your game status... George William Herbert Sent from my iPhon

Re: Check this out T-Mobile Launches GoSmart Prepaid Service Nationally on Phone Scoop

2013-02-19 Thread George Herbert
All in favor of phonescoop being blacklisted from nanog? Anyone? Anyone? Buehler? On Tue, Feb 19, 2013 at 5:50 PM, Grant Ridder wrote: > haha i love the header: > > Received: (from nobody@localhost) > > On Tue, Feb 19, 2013 at 7:48 PM, Jay Ashworth wrote: > >> Check this out: >> >> http://ww

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:20 PM, Warren Bailey wrote: > All, > > I have been searching our beloved internet endlessly for months on > information regarding Visio technique. Does anyone have a good resource(s) > for advanced visio drawings, or more to the point a good place for high > quality c

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:58 PM, George Herbert wrote: > [...] > My company has a Visio whiz, who I'm going to ping for his opinion on > that, but I am guessing it's a no. Our Visio guy's opinion concurred with mine; it's custom drawing, not off-the-shelf capabilit

Re: Cloudflare is down

2013-03-04 Thread George Herbert
On Mon, Mar 4, 2013 at 10:40 AM, Saku Ytti wrote: > On (2013-03-04 13:23 -0500), Jeff Wheeler wrote: > >> We have lots of stupid people in our industry because so few >> understand "The Way Things Work." > > We have tendency to view mistakes we do as unavoidable human errors and > mistakes other p

Re: What Should an Engineer Address when 'Selling' IPv6 to Executives?

2013-03-06 Thread George Herbert
On Wed, Mar 6, 2013 at 9:20 AM, Cameron Byrne wrote: > > So, your position, which is substantiated my Microsoft's / Windows > Phone's / Skype's lack of IPv6 support , is that "nobody cares" until > we "run out of IPv4". That is clearly reducto ad absurdum and does not resemble Matthew's detailed

Re: What Should an Engineer Address when 'Selling' IPv6 to Executives?

2013-03-06 Thread George Herbert
On Tue, Mar 5, 2013 at 8:20 PM, Owen DeLong wrote: >Matthew wrote: >>[...] >>> 1. Decreased application complexity: >> >> Yeah. After IPv4 goes entirely away. Which is a long, long, LONG time from >> now. Until then… >> > I don't think so. I think IPv4's demise as a supported internet p

Re: What Should an Engineer Address when 'Selling' IPv6 to Executives?

2013-03-06 Thread George Herbert
On Wed, Mar 6, 2013 at 12:30 PM, david raistrick wrote: > On Wed, 6 Mar 2013, George Herbert wrote: > >> The mindshare shift is happening, but the change won't snowball until >> IT admins - in bulk - really get it. > > > and keeping in mind that the bulk still don

Re: Class E addresses in the wild

2013-03-21 Thread George Herbert
It is (or was) fairly commonly in use among internal nets which overflowed RFC 1918 or have to internetwork with other heavy users of RFC 1918 space. I know of at least two service providers and one cell network who were using it for that 3 years ago. Someone leaking internal routes for such? Or

Re: Class E addresses in the wild

2013-03-21 Thread George Herbert
On Thu, Mar 21, 2013 at 5:10 PM, cb.list6 wrote: > I am pretty sure Class E is completely defunct and not used anywhere > since Cisco and Juniper routers do not forward the packets (circa 2008 > testing) and no known host accept it as a valid address, AFAIK. Both the net and host sides of this ar

Re: Is multihoming hard? [was: DNS amplification]

2013-03-24 Thread George Herbert
On Mar 23, 2013, at 7:47 PM, Kyle Creyts wrote: > Will they really demand ubiquitous, unabridged connectivity? Let's back up. End users do not as a rule* have persistent inbound connections. If they have DSL and a Cable Modem they can switch manually (or with a little effort automaticall

Re: glass fiber @ 0.997 c

2013-03-26 Thread George Herbert
On Tue, Mar 26, 2013 at 9:36 AM, Eugen Leitl wrote: > > http://www.newscientist.com/article/dn23309-information-superhighway-approaches-light-speed.html > > Information superhighway approaches light speed > > 18:00 24 March 2013 by Jacob Aron Nothing moves faster than light in a > vacuum, but larg

Re: RFC 1149

2013-04-01 Thread George Herbert
Packets, shmackets. I'm just upset that my BGP over Semaphore Towers routing protocol extension hasn't been experimentally validated yet. Whoever you are who keeps flying pigeons between my test towers, you can't deliver packets without proper routing updates! Knock it off long enough for me to

Re: RFC 1149

2013-04-03 Thread George Herbert
In europe? He probably was thinking of a Volvo 245... On Wed, Apr 3, 2013 at 4:40 AM, Jamie Bowden wrote: > > From: Jay Ashworth [mailto:j...@baylink.com] > > - Original Message - > > > From: "TJ" > > > > On Tue, Apr 2, 2013 at 3:41 PM, Owen DeLong > > wrote: > > > > > "Never underes

Re: Data Center Installations

2013-05-01 Thread George Herbert
Seconded Graybar. If necessary, in the absence of Graybar or for tiny stuff, a Frys or Home Depot or Lowes. On Wed, May 1, 2013 at 12:32 PM, Joe Hamelin wrote: > Graybar. > > -- > Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474 > > > On Wed, May 1, 2013 at 12:23 PM, Warren Bailey < > wbai...@sat

Re: CenturyLink Outage?

2013-05-07 Thread George Herbert
Widely discussed on outa...@outages.org list (hint!) but for those not yet list members over there, 13 or more states in southeast US affected, reportedly routing / layer 3 issue, possibly BGP to outside but not clear. Some service restorations discussed. George William Herbert Sent from my i

Re: Data Center Installations

2013-05-08 Thread George Herbert
Central Computers is ok on no-name server components, but not at all for rack / cabling / power / management / etc. Micro Center was right next to places I go to eat over there, but all gone. I can almost see Frys off Lawrence/Scott from here, and there's a Graybar 3 miles the other direction. T

Re: Cat-5 cables near 200 Paul, SF

2013-05-31 Thread George Herbert
+1 ; go Graybar. On Fri, May 31, 2013 at 11:49 AM, Majdi S. Abbas wrote: > On Fri, May 31, 2013 at 06:25:54PM +, Warren Bailey wrote: > > We walked up the counter all the time, however that was in Alaska so the > > rules may be different down here. > > You can walk up with a credit

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread George Herbert
On Tue, Jan 31, 2012 at 6:03 PM, Owen DeLong wrote: > > On Jan 31, 2012, at 5:52 PM, Mark Andrews wrote: > >> >> In message <7b85f9d8-ba9e-4341-9242-5eb514895...@virtualized.org>, David >> Conrad >> writes: I hope none of you ever get hijacked by a spammer housed at Phoenix = >>> NAP.  :) >>

  1   2   3   >