June 2004 - NANOG - lists.nanog.org

Justice Dept: Wiretaps should apply to Net calls
by Fergie (Paul Ferguson) 21 Jun '04

21 Jun '04

The battle rages on, apparently. The more things change, the more things stay the same, it would seem. ;-) This is from this past Wednesday --I'm surprised that I somehow overlooked it and only just now saw this. http://www.cnn.com/2004/TECH/internet/06/16/telecoms.voip.reut/index.html FYI, - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net

9 18

Level(3)->AT&T problems
by Jerry B. Altzman 21 Jun '04

21 Jun '04

Hi all, We're situated firmly on AT&T, and clients of ours who are behind Level(3) are having connectivity issues reaching us. Are there any known problems? AT&T has reported some to me, I am just curious if it is just the T/L3 link or if it is a bigger L3 problem. Thanks! //jbaltz -- jerry b. altzman jbaltz(a)omnipod.com +1 646 230 8750 Thank you for contributing to the heat death of the universe.

1 0

RE: [Fwd: [IP] Feds: VoIP a potential haven for terrorists]
by Hannigan, Martin 21 Jun '04

21 Jun '04

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Sean Donelan > Sent: Saturday, June 19, 2004 10:25 PM > To: Cade,Marilyn S - LGCRP > Cc: Steven M. Bellovin; Jim Dempsey (E-mail); North American Noise and > Off-topic Gripes > Subject: RE: [Fwd: [IP] Feds: VoIP a potential haven for terrorists] > > > > On Sat, 19 Jun 2004, Cade,Marilyn S - LGCRP wrote: [SNIP] > > A SPAN port could satisfy an ISP's obligations under > TitleIII/ECPA, but > not satisfy CALEA. What is required is TCAP information and bearer traffic. Typically delivered off the switch back to the LEA collector via a DS0. The TCAP information can be delivered in a multitude of ways.

2 1

Re: Interesting Occurrence
by Mike Tancsa 21 Jun '04

21 Jun '04

Not the best place to ask (full-discloure or the incidents list perhaps), but there are numerous phishing scams going of late (I get 3 or 4 a day) that exploit an unpatched IE bug.... e.g. the spam reads You Have a VoiceMessage Waiting Priority :Urgent From:xxx xxx http://www.ONEvoicemailbox.net/voicemail/ (replace ONE with "1" in the host)-- I strongly suggest NOT going to this site with IE This particular site crams in a keylogger into your PC by use of http://221.4.203.78/bestadult/shellscript_loader.js http://221.4.203.78/bestadult/shellscript.js ---Mike At 01:44 PM 21/06/2004, Brent_OKeeffe(a)asc.aon.com wrote: >Okay... Here is a new one for me. Got a call from my dad saying he left >his PC on last night connected to his broadband. He went to log in this >morning and noticed a new ID in his user list - IWAP_WWW. He immediately >deleted is and called me. I had him ensure his critical updates we all >applied - they were. I had him ensure his antivirus was up to date - it >was (Norton Antivirus 2004). He is running XP Home. > >I searched the antivirus sites and elsewhere for references. Any idea if >there is a new vulnerability that has not been publicly released? Any clues? > >Regards, >Brent

1 0

Re: Interesting Occurrence
by Brent_OKeeffe＠asc.aon.com 21 Jun '04

21 Jun '04

Mon, Jun 21, 2004 at 13:58, ras(a)e-gerbil.net wrote: >Dare I ask, what part of "North American Network Operators Group" made you >think that this could POSSIBLY be on-topic or of interest to anyone here? #1 - Without sounding like a suck up, some of the greatest security minds are subscribed to this list and I, being totally self centered, thought that I would try and monopolize they're time for a small portion of the day. #2 - I have seen in the past that the locomotives of security vulnerabilities are predominately discovered and discussed on this forum... likely related to others' similar feelings on #1 above. #3 - the list has been quiet today and thought I would spark up a few threads ;-) Brent

1 0

Interesting Occurrence
by Brent_OKeeffe＠asc.aon.com 21 Jun '04

21 Jun '04

Okay... Here is a new one for me. Got a call from my dad saying he left his PC on last night connected to his broadband. He went to log in this morning and noticed a new ID in his user list - IWAP_WWW. He immediately deleted is and called me. I had him ensure his critical updates we all applied - they were. I had him ensure his antivirus was up to date - it was (Norton Antivirus 2004). He is running XP Home. I searched the antivirus sites and elsewhere for references. Any idea if there is a new vulnerability that has not been publicly released? Any clues? Regards, Brent

7 6

Re: Interesting Occurrence
by Brent_OKeeffe＠asc.aon.com 21 Jun '04

21 Jun '04

Yes, the XP version. I already chastised him for that faux pax. He replied that the guy who sold him the satellite system said it would be adequate. I offered to go find the guy and.... Ummm... rectify the situation. ;-) Brent "Jeff Shultz" <jeffshultz(a)wvi.com> Sent by: owner-nanog(a)merit.edu 06/21/2004 01:55 PM Please respond to "Jeff Shultz" To: nanog(a)merit.edu cc: Subject: Re: Interesting Occurrence ** Reply to message from Brent_OKeeffe(a)asc.aon.com on Mon, 21 Jun 2004 12:44:50 -0500 > Okay... Here is a new one for me. Got a call from my dad saying he left > his PC on last night connected to his broadband. He went to log in this > morning and noticed a new ID in his user list - IWAP_WWW. He immediately > deleted is and called me. I had him ensure his critical updates we all > applied - they were. I had him ensure his antivirus was up to date - it > was (Norton Antivirus 2004). He is running XP Home. > > I searched the antivirus sites and elsewhere for references. Any idea if > there is a new vulnerability that has not been publicly released? Any > clues? > > Regards, > Brent Out of curiosity, was he running any sort of (including the XP one) of firewall software? -- Jeff Shultz A railfan pulls up to a RR crossing hoping that there will be a train.

1 0

Re: what's going on with yahoo and gmail lately?
by Joe Shen 21 Jun '04

21 Jun '04

8 8

[Fwd: [IP] Feds: VoIP a potential haven for terrorists]
by Suresh Ramasubramanian 21 Jun '04

21 Jun '04

-------- Original Message -------- Subject: [IP] Feds: VoIP a potential haven for terrorists Date: Fri, 18 Jun 2004 09:10:19 -0400 From: David Farber <dave(a)farber.net> Reply-To: dave(a)farber.net To: Ip <ip(a)v2.listbox.com> -------------------------------------------------------------- This story was printed from ZDNN, located at http://www.zdnn.com. -------------------------------------------------------------- Feds: VoIP a potential haven for terrorists By Declan McCullagh CNET News.com June 16, 2004, 10:54 AM PT URL: http://zdnet.com.com/2100-1105-5236233.html WASHINGTON--The U.S. Department of Justice on Wednesday lashed out at Internet telephony, saying the fast-growing technology could foster "drug trafficking, organized crime and terrorism." Laura Parsky, a deputy assistant attorney general in the Justice Department, told a Senate panel that law enforcement bodies are deeply worried about their ability to wiretap conversations that use voice over Internet Protocol (VoIP) services. "I am here to underscore how very important it is that this type of telephone service not become a haven for criminals, terrorists and spies," Parsky said. "Access to telephone service, regardless of how it is transmitted, is a highly valuable law enforcement tool." Police been able to conduct Internet wiretaps for at least a decade, and the FBI's controversial Carnivore (also called DCS1000) system was designed to facilitate online surveillance. But Parsky said that discerning "what the specific (VoIP) protocols are and how law enforcement can extract just the specific information" are difficult problems that could be solved by Congress requiring all VoIP providers to build in backdoors for police surveillance. The Bush administration's request was met with some skepticism from members of the Senate Commerce committee, who suggested that it was too soon to impose such weighty regulations on the fledgling VoIP industry. Such rules already apply to old-fashioned telephone networks, thanks to a 1994 law called the Communications Assistance for Law Enforcement Act (CALEA). "What you need to do is convince us first on a bipartisan basis that there's a problem here," said Sen. Ron Wyden, D-Ore. "I would like to hear specific examples of what you can't do now and where the law falls short. You're looking now for a remedy for a problem that has not been documented." Wednesday's hearing was the first to focus on a bill called the VoIP Regulatory Freedom Act, sponsored by Sen. John Sununu, R-N.H. It would ban state governments from regulating or taxing VoIP connections. It also says that VoIP companies that connect to the public telephone network may be required to follow CALEA rules, which would make it easier for agencies to wiretap such phone calls. The Justice Department's objection to the bill is twofold: Its wording leaves too much discretion with the Federal Communications Commission, Parsky argued, and it does not impose wiretapping requirements on Internet-only VoIP networks that do not touch the existing phone network, such as Pulver.com's Free World Dialup. "It is even more critical today than (when CALEA was enacted in 1994) that advances in communications technology not provide a haven for criminal activity and an undetectable means of death and destruction," Parsky said. Sen. Frank Lautenberg, D-N.J., wondered if it was too early to order VoIP firms to be wiretap-friendly by extending CALEA's rules. "Are we premature in trying to tie all of this down?" he asked. "The technology shift is so rapid and so vast." The Senate's action comes as the FCC considers a request submitted in March by the FBI. If the request is approved, all broadband Internet providers--including companies using cable and digital subscriber line technology--will be required to rewire their networks to support easy wiretapping by police. Wednesday's hearing also touched on which regulations covering 911 and "universal service" should apply to VoIP providers. The Sununu bill would require the FCC to levy universal service fees on Internet phone calls, with the proceeds to be redirected to provide discounted analog phone service to low-income and rural American households. One point of contention was whether states and counties could levy taxes on VoIP connections to support services such as 911 emergency calling. Because of that concern, "I would not support the bill as drafted and I hope we would not mark up legislation at this point," said Sen. Byron Dorgan, D-N.D. Sen. Conrad Burns, R-Mont., added: "The marketplace does not always provide for critical services such as emergency response, particularly in rural America. We must give Americans the peace of mind they deserve." Some VoIP companies, however, have announced plans to support 911 calling. In addition, Internet-based phone networks have the potential to offer far more useful information about people who make an emergency call than analog systems do. <http://zdnet.com.com/2102-1105_2-5236233.html?tag=printthis> ------------------------------------- You are subscribed as suresh(a)hserus.net To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/

19 29

Re: what's going on with yahoo and gmail lately?
by Matthew McGehrin 21 Jun '04

21 Jun '04

Thanks for reading my message. I clearly stated I was having issues accessing the site, and not ping or traceroute related. I provided them just incase you needed them. And BTW, I'm not the only Comcast user having trouble. It's been about 20 posts from others on DSLREPORTS with the same issue, so its clear there is a problem and it needs to be resolved. ----- Original Message ----- From: "Elvedin Trnjanin" <elvedin(a)ods.org> To: "Matthew McGehrin" <mcgehrin(a)reverse.net> Cc: <nanog(a)nanog.org> Sent: Sunday, June 20, 2004 7:12 PM Subject: Re: what's going on with yahoo and gmail lately? > 20 ms is not slow. It could be an issue on your end or perhaps the extra > latency is due to the increase in popularity of these two e-mail services > recently.

3 3