Re: Spitballing IoT Security

2016-10-26 Thread Ken Matlock
As a relative 'outsider' I see a lot of finger-pointing and phrasing this as (effectively) someone else's fault. To me this is a failing on a number of levels all contributing to the problem. 1) The manufacturer - Backdoors, hidden accounts, remote access capabilities, no proper security testing.

Re: Spitballing IoT Security

2016-10-27 Thread Ken Matlock
And I contend that the device manufacturer is only one part in this. Yes, the manufacturers need to get better in securing their devices (that's never been in question). *But* the end users need to have better CPE that can do NetFlow/Sflow/etc in a near real-time fashion. This would allow the end

Re: ticketmaster.com 403 Forbidden

2017-02-06 Thread Ken Matlock
Honestly, I'm surprised they don't try and charge a 'convenience fee' while implementing the block! ;-) Ken On Mon, Feb 6, 2017 at 10:19 AM, Ethan E. Dee wrote: > So their policy says, if an ISP has one scalper, we'll block their entire > subnet and not tell them why? > > > > On 02/06/2017 11:4

Re: O365 IP space

2018-09-25 Thread Ken Matlock
This list? https://support.content.office.net/en-us/static/O365IPAddresses.xml >From the linked-above page (it's somewhat obscured). Ken On Tue, Sep 25, 2018 at 11:14 AM ML wrote: > In the past I've pulled down an XML file that included the IP space for > all of the O365 products. Then I fi

Re: bloomberg on supermicro: sky is falling

2018-10-04 Thread Ken Matlock
Would be remiss in our duties if we didn't also link AWS' blog, in response to the Bloomberg article. In short, AWS refutes many of Bloomberg's reporting in the article. https://aws.amazon.com/blogs/security/setting-the-record-straight-on-bloomberg-businessweeks-erroneous-article/ Ken On Thu, O

Re: any issue with Centurylink yesterday

2017-03-17 Thread Ken Matlock
I know most of the day yesterday my Centurylink DSL (Denver, CO) I was having odd... issues, but only to some sites, and intermittent. I'd have issues getting content from a URL (but pinging the host would be fine, and manual telnet to TCP/443 would work). Latencies were *slightly* higher than

Re: any issue with Centurylink yesterday

2017-03-17 Thread Ken Matlock
Yeah, not sure that was related, as my issues started earlier in the day (about 8am-9am Mountain time). Either way it all seems fine today, no hiccups, no issues. so whatever it was got resolved. Ken On Fri, Mar 17, 2017 at 9:02 AM, Pennington, Scott < scott.penning...@cinbell.com> wrote: > Th

Re: any issue with Centurylink yesterday

2017-03-17 Thread Ken Matlock
7 at 11:39 AM, Ken Matlock > wrote: > >> I know most of the day yesterday my Centurylink DSL (Denver, CO) I was >> having odd... issues, but only to some sites, and intermittent. I'd >> have issues getting content from a URL (but pinging the host would be >>

Re: 2017 NANOG Elections General Information

2017-09-10 Thread Ken Matlock
Yep, I've been in this industry since.. '94 or so, and the absolute number one reason that I do not participate in NANOG is that even going back as far as I can remember it's been a good-old-boy's club. Yes, there are some very smart people that speak up, but I see time and time again the cliques

Re: How are you configuring BFD timers?

2018-03-21 Thread Ken Matlock
Right, BFD on a dark fiber link (should) be immediately detected and the detecting end should send a cease/stop/whatever message to the remote peer to drop the neighbor relationship. BFD really comes into it's own in a derived circuit (such as metro-E or other type setup) where you can have an ind

Re: Saying goodnight to my GSR

2014-09-22 Thread Ken Matlock
Ha! I'd say that's an upgrade for the BCN! ;-) I still have nightmares about Site Mangler, and conflicting versions between it and the BCN/BLNs. Ken On Mon, Sep 22, 2014 at 10:07 AM, Justin M. Streiner < strei...@cluebyfour.org> wrote: > On Mon, 22 Sep 2014, Jim Devane wrote: > > They make

Re: A case against vendor-locking optical modules

2014-11-17 Thread Ken Matlock
On Mon, Nov 17, 2014 at 1:09 PM, ryanL wrote: > there's a reason why cisco introduced "service unsupported-transceiver", > which still remains an undocumented command. i have arista gear as well. > kinda wish they had a similar undocumented command. > Arista does have it (at least in older code

Re: bad announcement taxonomy

2015-11-19 Thread Ken Matlock
Origin NAT? ;) Ken > On Nov 18, 2015, at 11:15 PM, valdis.kletni...@vt.edu wrote: > > On Wed, 18 Nov 2015 18:21:32 -0600, David Edelman said: >> How about Origin Obfuscation > > Obfuscation implies intent. Most leaks and mis-announcements don't > have intent because they're whoopsies.

Re: do ISPs keep track of end-user IP changes within thier network?

2013-12-18 Thread Ken Matlock
Wait, you mean to say that the normal mode for TNT's was it *not* to reboot and crash all the time? :) Ascend tech support's stock answer to any issue was either 1) Upgrade the code 2) Oh, you already tried that? downgrade the code! :) And the company that managed to put out a release to 'fix a