January 2021 - NANOG - lists.nanog.org

Re Parler
by Jeff P 15 Jan '21

15 Jan '21

ICYMI: Amazon's response to Parler Antitrust relief: https://cdn.pacermonitor.com/pdfserver/LHNWTAI/137249864/Parler_LLC_v_Amazo… JeffP jeffp(a)jeffp.us

16 20

AS 701 ?
by Craig 15 Jan '21

15 Jan '21

Anyone else having peering issues problems with AS 701?

2 2

DNSSEC failures for www.cdc.gov
by John R. Levine 15 Jan '21

15 Jan '21

I see that www.cdc.gov is a CNAME for www.akam.cdc.gov. which in turn is a CNAME for www.cdc.gov.edgekey.net. But it appears that while www.cdc.gov is signed, www.akam.cdc.gov in the same zone on the same server is not. Huh? What? $ dig @ns1.cdc.gov www.cdc.gov +dnssec ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27760 ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.cdc.gov. IN A ;; ANSWER SECTION: www.cdc.gov. 300 IN CNAME www.akam.cdc.gov. www.cdc.gov. 300 IN RRSIG CNAME 7 3 300 20210119032636 20210109024411 9155 cdc.gov. FxxFahuaCEw8gUXH6CuiqUgXWzPDkQlY0HTtJwjMAVMS7Lc3VOelfkmT hT/ZmDpdUiYsNr7YXMUNhF4Ii/49lu5AGTxwlu9dtX66HSK+8vf/FnzF XUZrC0UXFEPLl0K+pmdLEiUpiHDq3lIwAfKNmiOrwlPvtXttqDs+JC1d w6A= www.akam.cdc.gov. 3600 IN CNAME www.cdc.gov.edgekey.net. $ dig @ns1.cdc.gov www.akam.cdc.gov +dnssec ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59380 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.akam.cdc.gov. IN A ;; ANSWER SECTION: www.akam.cdc.gov. 3600 IN CNAME www.cdc.gov.edgekey.net. Regards, John Levine, johnl(a)taugh.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly

2 1

Re: Petition for Board of Trustees adoption consideration of ARIN-2020-2
by Adam Thompson 15 Jan '21

15 Jan '21

Frankly, at this point, I'll support whatever lets me never have to hear about the subject again. -Adam (Yes, I know Outlook has filters, thank you. In fact, I think I'll go create one right now.) Adam Thompson Consultant, Infrastructure Services [1593169877849] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/> ________________________________ From: ARIN-PPML <arin-ppml-bounces(a)arin.net> on behalf of Jon Bachtold <jcbach(a)cirbn.org> Sent: January 12, 2021 05:56 To: arin-ppml(a)arin.net <arin-ppml(a)arin.net> Subject: [arin-ppml] Petition for Board of Trustees adoption consideration of ARIN-2020-2 I continue to support Reinstatement ie, ARIN-2020-2, and I support this petition to move the policy consideration to the Board of Trustees. Jon Bachtold CIRBN ARIN-2020-2: Reinstatement of Organizations Removed from Waitlist by Implementation of ARIN-2019-16 ARIN-2020-2 reverted to Draft Policy on 6 January following a Last Call period. Per ARIN's Policy Development Process (PDP), all Recommended Draft Policies not sent to the ARIN Board of Trustees for adoption consideration within 60 days of Last Call completion will revert to Draft Policy status. Jon Bachtold Chief Technology Officer CIRBN, LLC Tel: 309-820-7321<tel:309-820-7321> Email: jcbach(a)cirbn.org<mailto:jcbach@cirbn.org> Web: www.cirbn.org<https://www.cirbn.org/> [CIRBN]<http://www.cirbn.org/> 200 W Front St, Ste 500A Bloomington, IL 61701 [Facebook]<https://www.facebook.com/cirbn> [LinkedIn]<https://www.linkedin.com/company/3729509/> [CIRBN Twitter]<https://twitter.com/CIRBN_LLC>

1 0

Looking for hosted SMTP service for small ISP
by chiel 14 Jan '21

14 Jan '21

Hello, We are a small ISP. Most of our customers have a hosted e-mail service (gmail/office365/etc..) and have their own outgoing email sorted. But a handful of customers rely on our SMTP server for outgoing e-mail. Currently we host this our self with a physical box. But I would like to have a hosted solution so that I don't have to worry about keeping up with updates and latest spam techniques. Preferred I'm looking to make a DNS name like smtp.example.com and point this to a hosted solution. This excepts any email from our IP ranges. All controlled with a nice dashboard. I was in contact with Solarwinds (Mail Assure) but they don't seem to be able to help. Chiel

7 6

Re: Parler
by sronan＠ronan-online.com 14 Jan '21

14 Jan '21

This is a list for Network Operators, AWS certainly operates networks. Sent from my iPhone > On Jan 10, 2021, at 4:27 PM, K. Scott Helms <kscott.helms(a)gmail.com> wrote: > > > No, > > It really does not. Section 230 only applies to publishers, and not to network providers. If this were a cloud hosting provider list then you'd be correct, but as a network provider's list it does not belong here. > > > Scott Helms > > > >> On Sun, Jan 10, 2021 at 3:21 PM Lady Benjamin PD Cannon <ben(a)6by7.net> wrote: >> As network operations and compute/cloud/hosting operations continue to coalesce, I very much disagree with you. Section 230 is absolutely relevant, this discussion is timely and relevant, and it directly affects me as both a telecom and cloud compute/services provider. >> >> >> —L.B. >> >> Lady Benjamin PD Cannon, ASCE >> 6x7 Networks & 6x7 Telecom, LLC >> CEO >> ben(a)6by7.net >> "The only fully end-to-end encrypted global telecommunications company in the world.” >> FCC License KJ6FJJ >> >> <Speedtest9118.png> >> <Ben LIC.png> >> >>> On Jan 10, 2021, at 12:13 PM, K. Scott Helms <kscott.helms(a)gmail.com> wrote: >>> >>> It's not, and frankly it's disappointing to see people pushing an agenda here. >>> >>> >>> Scott Helms >>> >>> >>>> On Sun, Jan 10, 2021 at 9:37 AM <sronan(a)ronan-online.com> wrote: >>>> >>>> NANOG is a group of Operators, discussion does not have to be about networking. I have already explained how this represents a significant issue for Network Operators. >>>> >>>> On Jan 10, 2021, at 9:09 AM, Mike Bolitho <mikebolitho(a)gmail.com> wrote: >>>> >>>> >>>> It has nothing to do with networking. Their decision was necessarily political. If you can specifically bring up an issue, beyond speculative, on how their new chosen CDN is somehow now causing congestion or routing issues on the public internet, then great. But as of now, that isn't even a thing. It's just best to leave it alone because it will devolve into chaos. >>>> >>>> - Mike Bolitho >>>> >>>>> On Sun, Jan 10, 2021, 6:54 AM <sronan(a)ronan-online.com> wrote: >>>>> >>>>> Why? This is extremely relevant to network operators and is not political at all. >>>>> >>>>> On Jan 10, 2021, at 8:51 AM, Mike Bolitho <mikebolitho(a)gmail.com> wrote: >>>>> >>>>> >>>>> Can we please not go down this rabbit hole on here? List admins? >>>>> >>>>> - Mike Bolitho >>>>> >>>>>> On Sun, Jan 10, 2021, 1:26 AM William Herrin <bill(a)herrin.us> wrote: >>>>>> >>>>>> Anybody looking for a new customer opportunity? It seems Parler is in >>>>>> search of a new service provider. Vendors need only provide all the >>>>>> proprietary AWS APIs that Parler depends upon to function. >>>>>> >>>>>> https://www.washingtonpost.com/technology/2021/01/09/amazon-parler-suspensi… >>>>>> >>>>>> Regards, >>>>>> Bill HErrin >>

12 14

DoNotPay Spam?
by Robert Webb 14 Jan '21

14 Jan '21

Anyone else getting spam from DoNotPay everytime they send an email to the list? I have not sent anything in a while until my ATT email and now I am getting this on every new email I send to the list. [image: Alternate text] *You’re almost there! Sign up once to unlock lifetime protection (and even compensation) on all spam emails. *

10 13

Nashville
by Andy Ringsmuth 14 Jan '21

14 Jan '21

Certainly thankful no serious injuries or fatalities in this clusterblank. It seems the AT&T building at 185 2nd Ave N may have been a target, which would explain the timing (holiday morning when no one is out, as opposed to a holiday evening when there would be mass casualties). A little curious what that building has. Is it just a big co-lo place? Regional CLEC/ILEC? No earth-shattering revelations here. Admittedly just bored on a slow Christmas Day when my wife is at work (nurse) and kid is playing with a new tablet and I’m just watching the news trying to understand/figure out a little what and why. ---- Andy Ringsmuth 5609 Harding Drive Lincoln, NE 68521-5831 (402) 304-0083 andy(a)andyring.com “Better even die free, than to live slaves.” - Frederick Douglas, 1863

13 22

NDAA passed: Internet and Online Streaming Services Emergency Alert Study
by Sean Donelan 14 Jan '21

14 Jan '21

The House on Monday and the Senate on Friday have overriden the President's veto of the National Defense Authorization Act for Fiscal Year 2021 passing it into law. Among the NDAA's various sections, it includes the Reliable Emergency Alert Distribution Improvement (READI) Act. The READI Act includes a study and report for Emergency Alerts via the internet and streaming services. SEC. 9201. RELIABLE EMERGENCY ALERT DISTRIBUTION IMPROVEMENT. [...] (e) INTERNET AND ONLINE STREAMING SERVICES EMERGENCY ALERT EXAMINATION.— (1) STUDY.—Not later than 180 days after the date of enactment of this Act, and after providing public notice and opportunity for comment, the Commission shall complete an inquiry to examine the feasibility of updating the Emergency Alert System to enable or improve alerts to consumers provided through the internet, including through streaming services.

35 101

Looking for alternate providers
by james jones 14 Jan '21

14 Jan '21

Greetings, Looking for upstream alternatives in Ayer, MA (01432). Need a gigabit link. Can be async but needs to be at least 35Mb up. Comcast need not apply. -James

1 0

ATT Outage in South Florida?
by Robert Webb 13 Jan '21

13 Jan '21

Getting complaints from internet and wireless users of no data or voice access. Anyone down that way having the same experience?

3 3

Re: DMVPN via Internet or Private APN
by Joel M Snyder 13 Jan '21

13 Jan '21

> I offer a question to help me settle an internal debate. As a network > engineer for a large enterprise, do you choose ISP flexibility or ISP > security when you build an OOB network? Flexibility. (will not joke about immense problem of including the words "ISP" and "security" in same sentence, unless accompanied by the phrase "complete and total absence of" as well) My particular area of concentration the last decade or so has been large multi-national WANs. I've been fortunate enough to see entire waves of deployment and redeployment, which has added a thick layer of scarring. One of the lessons that I take away from these deployments is that anything which is not pure "Internet" IP must be avoided, because if it doesn't bite you in the *ss on day 1, it will on day 1,000 or 10,000. Providers love to deliver a customized service, and in small deployments (such as connecting offices within a metropolitan area) I can see the value. But whether the provider is creating lock-in (sinister conspiracy theory) or just wants to give you a better service (optimistic world view theory), it *always* ends up being a problem sooner or later. I can pull a dozen anecdotes out where this happened and cost between $ and $$$$ to deal with, but my long-term experience is that the more vanilla the pipe, the better off you will be in the long run especially as the clock ticks past years and years. There are certainly issues with having multiple contracts, and the overhead of handling hundreds of semi-overlapping and slightly different bills and contact points is not to be dismissed lightly; it is a BIG deal especially for larger organizations with high internal costs for administrative overhead. Providers also claim better pricing on big contracts, but rarely is this true, because of the sharp and continuous drop in costs for Internet worldwide. Go with vanilla. It's easier to pour syrup and nuts on top than it is to dig out those disgusting frozen marshmallow chunks from the rocky road someone committed to. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

Loss from USA to Singapore
by nanoguser99 13 Jan '21

13 Jan '21

Reporting packet loss getting from US to Singapore. Our prefix is being announced by AS 7473. The problem appears to be with transport to the US through STIX. Anyone else experiencing these issues? Are there other transit providers that do not use STIX? Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

DMVPN via Internet or Private APN
by Sean Kelly 12 Jan '21

12 Jan '21

Hello Nanog's I offer a question to help me settle an internal debate. As a network engineer for a large enterprise, do you choose ISP flexibility or ISP security when you build an OOB network? I was tasked to create an OOB network for my company. Realistically it would only be deployed to 25% of the companies sites as they are considered important enough to justify the cost. The design is simple enough. Hub and spoke using cellular routers. DMVPN will carry data from the spoke to the hub. The real debate arrives when it's time to choose a carrier to host the router. I choose to go with a major cell carrier using a "private" APN. It allows me to connect my cell routers to a private layer 2 network and my private IP addresses will be used to provide layer 3 connectivity. I know that there will be outliers that can't use this carrier or cellular at all. These outliers, in my opinion, shouldn't have a majority stake in the overall design. The APN overall cost is low and so is the data plan for the hosted routers. The private APN also eliminates the router as an internet attack vector. I don't believe routers are appropriate security appliances to defend and monitor against network threats. Some of my colleagues believe that the flexibility of public cellular access outweighs the security risks. The cellular internet will provide us with a solution for more of the outliers than a private APN. I don't agree with this philosophy even though it's not "technically" wrong. I am interested in a broader range of opinion and technical reasoning. Nanog member KELLYSP

5 4

RE: Parler
by Keith Medcalf 12 Jan '21

12 Jan '21

That would make me wonder how many cases there have been of someone "shouting fire in a crowded theatre" where there was no fire and at least one person died as a result; and the charge laid against the shouter was "reckless disregard for human life resulting in culpable homocide" and the elements of that offence being proved, was dismissed on the basis that the "speech" was protected by the first amendment? -- Be decisive. Make a decision, right or wrong. The road of life is paved with flat squirrels who could not make a decision. >-----Original Message----- >From: Rod Beck <rod.beck(a)unitedcablecompany.com> >Sent: Monday, 11 January, 2021 05:13 >To: Keith Medcalf <kmedcalf(a)dessus.com> >Subject: Re: Parler > >Hi, > > >Your distinction sounds specious. The Courts have consistently that the >1st amendment protects free speech from government retaliation in many >instances. It is not just prior restraint. > > >Best, > > >Roderick. > > >________________________________ > >From: NANOG <nanog-bounces+rod.beck=unitedcablecompany.com(a)nanog.org> on >behalf of Keith Medcalf <kmedcalf(a)dessus.com> >Sent: Monday, January 11, 2021 3:11 AM >To: nanog(a)nanog.org <nanog(a)nanog.org> >Subject: RE: Parler > >>The first amendment deals with the government passing laws restricting >>freedom of speech. It has nothing to do with to whom AWS chooses to sell >>their services. It is also not absolute (fire, crowded theater, etc.) > >You are correct and incorrect. The First Amendment prohibits the >Government from passing laws which constitute "prior restraint". It does >nothing with respect to anyone other then the "Government" and its >agents. > >You are also incorrect. Freedom of Speech is Absolute. There is no >prior restraint which precludes you from "(fire, crowded theatre, etc.)" >whatever that means. That does not mean that speech does not have >"consequences". The first amendment only protects against prior >restraint, it does not protect against the suffering of consequences. >And of course "consequences" come AFTER the speech, not BEFORE the >speech. > >Furthermore your "(fire, crowded theater, etc.)" (whatever the hell that >means) cannot, as a matter of fact, possibly justify any action taken >prior to the so-called speech having been made as that would be an >assumption of fact not in evidence (also known as a hypothetical >question) and the courts do not rule on hypotheticals. If you do not >understand the difference then perhaps you should be sentenced to death >since you have a hand, and having a hand it could hold a gun, and since >it could hold a gun, you could also murder someone. So therefore you >should be put to death now as "prior restraint" to prevent you from >committing murder. > >I am neither a lawyer nor a yankee doodle and I know these facts to be >self-evident. > >-- >Be decisive. Make a decision, right or wrong. The road of life is paved >with flat squirrels who could not make a decision. > > >

10 10

Register now for our DNS Fundamentals Webinar 👉 Jan 22, via NANOG U
by NANOG News 12 Jan '21

12 Jan '21

NANOG U Webinars provide students across North America a way to virtually connect and engage with industry innovators, while learning the latest Internet technologies + best practices, and accessing career-building tools + resources. Our next Webinar will take place on Friday, January 22! *DNS Fundamentals * *Date + Time: * Jan 22, 11am - 1pm PST / 2pm - 4pm EST *Speaker:* Eddy Winstead, Internet Systems Consortium (ISC) *Agenda:* DNS is a distributed database which maps domain names to IP addresses. Join us for an overview of how DNS works, and how to leverage the system to support your Internet related communications. *Registration: * NANOG U Webinars are free to attend, but registration is required to participate. All sessions are conducted at nanog.org. To register for the webinar, you'll first need to sign up for a NANOG account. It's free, simple, and takes less than a minute. Register Now <https://www.nanog.org/meetings/webinar-dns-fundamentals/> Watch Past Webinars <https://nanog.org/news-stories/nanog-tv/nanog-u/>

1 0

Just a heads up, apparently Ubiquiti had a breach.
by eric-list＠truenet.com 11 Jan '21

11 Jan '21

Official statement: https://mailchi.mp/ubnt/account-notification?e=30527b2904 Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300

2 1

Amazon peering
by JASON BOTHE 11 Jan '21

11 Jan '21

Hi all Just curious if anyone has recently requested Amazon peering and if they’ve gotten a timely response. I know historically it was months and months but I thought I had read where they had turned over a new leaf and were responding promptly. I have a pending request but it was done over the holidays so hoping it’s just in a small backlog :-) Thanks J~

2 2

Re: more bad lawyering about Parler
by William Herrin 11 Jan '21

11 Jan '21

On Mon, Jan 11, 2021 at 2:19 AM Danny O'Brien <danny(a)spesh.com> wrote: > On Sun, Jan 10, 2021 at 8:54 PM William Herrin <bill(a)herrin.us> wrote: >> there have been some real post-CDA head scratchers where >> a court decided that an online service exercised sufficient control of >> the content to have made itself a publisher. > > You really need to give citations here, because IMHO not only is this *exactly* the scenario that Section 230 was intended to provide legal clarity regarding (and so protect service providers from this kind of moderation double-bind), but as I understand it pretty much all the subsequent caselaw has *strengthened* the ability for providers to moderate and manage content, including user-generated content, without triggering liability. Well, for example, Oberdorf v. Amazon.com, No. 18-1041 (3rd Cir. July 3, 2019) which found that Amazon was a seller of goods and not merely hosting information about a third party's sale, and thus subject to product liability law for the product that was sold. But in the Erie Insurance case, with similar circumstances, the court found the opposite, that section 230 barred the plaintiff from suing Amazon over a defective third-party product. Regards, Bill Herrin -- Hire me! https://bill.herrin.us/resume/

3 3

Re: Parler
by hank＠interall.co.il 11 Jan '21

11 Jan '21

Toma, I would assume Google and Azure would act the same to Parler. So what will end up happening is that US based fringe content will end up being hosted in China or Russia, and Chinese and Russian fringe content will end up being hosted in the USA. -Hank Caveat: The views expressed above are solely my own and do not express the views or opinions of my employer ------------------ In my experience, moving off Amazon services isn't that much of a trouble, especially if compared to moving off Azure. Cloud Active Directory + Sentinel + PowerBI ? and boom, your company is with Azure for life. -- Töma

2 1

RE: Parler
by Keith Medcalf 10 Jan '21

10 Jan '21

That is an exercise for the reader. Unfortunately I do not have the answer sheet for the exercizes to hand yet. -- Be decisive. Make a decision, right or wrong. The road of life is paved with flat squirrels who could not make a decision. >-----Original Message----- >From: James Laszko <jamesl(a)mythostech.com> >Sent: Sunday, 10 January, 2021 15:07 >To: Keith Medcalf <kmedcalf(a)dessus.com> >Subject: RE: Parler > >Which ones are the Nazi’s? > > > > > >James > > > >From: NANOG <nanog-bounces+jamesl=mythostech.com(a)nanog.org> On Behalf Of >Keith Medcalf >Sent: Sunday, January 10, 2021 1:59 PM >To: nanog(a)nanog.org >Cc: niels=nanog(a)bakker.net >Subject: RE: Parler > > > > > > > >>It's amazing how far the world has stumbled that "fomenting violent > >>insurrection and calling for the murder of elected officials" now > >>falls under standard T&Cs against abusive behaviour where this used > >>to be perfectly fine a year ago. > > > >The world is now a different place with the election of the Nazi's. > > > >-- > >Be decisive. Make a decision, right or wrong. The road of life is > >paved with flat squirrels who could not make a decision. > > > > > >

1 0

Re: Parler
by sronan＠ronan-online.com 10 Jan '21

10 Jan '21

Yes, it seems subsection (c)(2)(b) gives them cover, perhaps it’s time that this is revised, less the Internet content become moderated by a small group of private platform owners. Sent from my iPhone > On Jan 10, 2021, at 9:05 AM, Daniel Jurado <jurado98(a)mail.com> wrote: > > > Government made it political. > Parler is free conservative speech that the MSM doesn't control. > CNN stated that it was a threat to democracy because they didn't have control over what was posted like Twitter or Facebook. > So at this point it is 100% political. > > -- > Sent from my Android phone with mail.com Mail. Please excuse my brevity. >> On 1/10/21, 8:57 AM sronan(a)ronan-online.com wrote: >> Why? This is extremely relevant to network operators and is not political at all. >> >> On Jan 10, 2021, at 8:51 AM, Mike Bolitho <mikebolitho(a)gmail.com> wrote: >> >> >> Can we please not go down this rabbit hole on here? List admins? >> >> - Mike Bolitho >> >>> On Sun, Jan 10, 2021, 1:26 AM William Herrin <bill(a)herrin.us> wrote: >>> Anybody looking for a new customer opportunity? It seems Parler is in >>> search of a new service provider. Vendors need only provide all the >>> proprietary AWS APIs that Parler depends upon to function. >>> >>> https://www.washingtonpost.com/technology/2021/01/09/amazon-parler-suspensi… >>> >>> Regards, >>> Bill HErrin > > <Daniel Jurado.vcf>

3 2

WhatsApp's New Policy Has...
by Mark Tinka 09 Jan '21

09 Jan '21

... finally been the final push all my friends needed to dump it and move to Signal. Several of the WhatsApp groups I'm on have, as of this morning, been disbanded and re-launched on Signal. Facebook say the new policy applies to business accounts, but heck, the cat's out the bag and gone. What's most amazing to me is that a lot more people seem to be a tad more concerned about their privacy, when they ordinarily wouldn't have. Mark.

10 17

ROV++: Improved Deployable Defense against BGP Hijacking
by Amir Herzberg 09 Jan '21

09 Jan '21

Hi, the paper: ROV++: Improved Deployable Defense against BGP Hijacking will be presented in the NDSS'21 conference. The paper is available in: https://www.researchgate.net/publication/346777643_ROV_Improved_Deployable_… Feedback, by discussion here or by direct email to me, is welcome, thanks. btw, I keep most publications there (researchgate), incl. the drafts of `foundations of cybersecurity' ; the 1st part (mostly applied crypto) is in pretty advanced stage, feedback is also very welcome. URL in sig. -- Amir Herzberg Comcast professor of Security Innovations, University of Connecticut Homepage: https://sites.google.com/site/amirherzberg/home Foundations of Cyber-Security (part I: applied crypto, part II: network-security): https://www.researchgate.net/project/Foundations-of-Cyber-Security

2 3

Show NOCs: OIG report: Should you charge extra for NOC tours?
by Sean Donelan 08 Jan '21

08 Jan '21

Department of Commerce OIG review of FirstNet request to tour AT&T GNOC https://www.oversight.gov/sites/default/files/oig-reports/DOC/OIG-21-016-I.… Continued FirstNet Authority Management Attention is Needed to Address Control Environment Weaknesses [...] FirstNet Authority disagreed that the request for a GNOC tour “constituted a request for ‘additional contract services outside the scope of the contract.’” In its response, FirstNet Authority stated, “GNOC tours are not governed or limited by the [NPSBN] contract as these kinds of tours are commonplace for AT&T to provide to outside parties.” However, we found that the contractor only offers a multi-media presentation regarding the GNOC at its Corporate Briefing Center. FirstNet Authority requested a visit and tour of the GNOC, which is neither included in the contract nor offered widely to the public. We reaffirm that the tour was not in the contract and could be viewed as exerting indirect pressure for the contractor to perform unreimbursed services outside the contract. [...]

11 13