- NANOG - lists.nanog.org

Re: Assistance for Eavesdropping Legally on Avian Carriers (AELAC)
by Lyndon Nerenberg 26 Jun '13

26 Jun '13

On 2013-06-25, at 8:24 PM, "Caruso, Anthony" <acaruso(a)mre-consulting.com> wrote: > Yes, if you can identify the source of the grains, you know origin and flight path prior to your lawn. NSA approach's is getting the pigeon shit off of everyone's lawn... Then I am in favour of PRISM. NSA: come vacuum all the pigeon shit off my boat! Please!!!

1 0

Re: Fwd: [Filtering of NTP-access to swisstime.ethz.ch as of July 1st, 2013]
by Larry Sheldon 26 Jun '13

26 Jun '13

On 6/25/2013 9:52 AM, Anthony Williams wrote: > Also a Usenet posting (who still uses that, right?) to > comp.protocols.time.ntp will also help get the word out. There is a fair amount of on-topic traffic of recent vintage on that froup. What is it about people that makes them free-load on services like NTP chimes and DNSBLS but refuse to stay in contact with(or at least contactable by) the providers when important stuff is pending? -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

3 2

Re: Security over SONET/SDH
by Scott Weeks 25 Jun '13

25 Jun '13

> --- morrowc.lists(a)gmail.com wrote: > From: Christopher Morrow <morrowc.lists(a)gmail.com> > On Tue, Jun 25, 2013 at 2:02 PM, William Allen Simpson > <william.allen.simpson(a)gmail.com> wrote: > > :: ...in addition to everything else "What security protocols > :: are folks using to protect SONET/SDH? At what speeds?" > > : Correct. > > : But the answer appears to be: none. Not Google. Not any > : public N/ISP. > > >> would they say if they had? > ------------------------------------------- > > > Yes, especially in light of the current news regarding > internet privacy. Could you imagine the advertising > they'd be able to do to prospective customers? --- sam(a)wwcandt.com wrote: The sticky problem remains for any communications carrier, we are looking for a technical solution to a legal problem. I believe that if you encrypted your links sufficiently that it was impossible to siphon the wanted data from your upstream the response would be for the tapping to move down into your data center before the crypto. With CALEA requirements and the Patriot Act they could easily compel you to give them a span port prior to the crypto. Regardless of how well built our networks are internally and externally we still must obey a court order. ------------------------------------------------------------------ I'm speaking about blocking non-court ordered (in whatever country the circuits cross) sniffing of traffic in the middle by anyone. There is no legal problem there. They do not follow the laws in this country, or in others, and we need to protect ourselves. scott

1 0

Re: Security over SONET/SDH
by Scott Weeks 25 Jun '13

25 Jun '13

I hope I've gotten the quotations correct... --- joelja(a)bogus.com wrote: From: joel jaeggli <joelja(a)bogus.com> On 6/24/13 1:19 PM, Scott Weeks wrote: > ------------ joelja(a)bogus.com wrote: ------------ >> That's why I'm trying to follow up on the original question. Is >> there something similar the global public can use to secure their >> connections that is not government designed. This is even more >> important on microwave shots when security is desired. > :: plenty of standardized RF link-layers support strong encryption. > ---------------------------------------------------- > > Ah, thanks. That comment gave me the the search terms I needed, > but I keep seeing sentences like this "Due to the encryption > employed in these products, they are export controlled items and > are regulated by the Bureau of Industry and Security (BIS) of the > U.S. Department of Commerce. They may not be exported or shipped > for re-export to restricted countries..." wheee! :-) Yes, however note that the actual number of embargoed countries at this point is pretty small, and that if you are in a(n) (US) embargoed country and so inclined you can likely buy such products manufactured in China by Chinese companies. Securing the link layer however is not a replacement for an end to end solution so just because it's protecting the air interface(s) doesn't really mean somebody not looking at the traffic elsewhere. -------------------------------------------------- Yeah, but I was just thinking through what the original question asked. After reading his emails over the years, I am assuming he meant in addition to everything else "What security protocols are folks using to protect SONET/SDH? At what speeds?" I now see it quickly devolves into what various governments will allow its citizenry to do on the internet. :-( scott

5 4

Re: Security over SONET/SDH
by Scott Weeks 25 Jun '13

25 Jun '13

------------ joelja(a)bogus.com wrote: ------------ From: joel jaeggli <joelja(a)bogus.com> > That's why I'm trying to follow up on the original question. Is > there something similar the global public can use to secure their > connections that is not government designed. This is even more > important on microwave shots when security is desired. :: plenty of standardized RF link-layers support strong encryption. ---------------------------------------------------- Ah, thanks. That comment gave me the the search terms I needed, but I keep seeing sentences like this "Due to the encryption employed in these products, they are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. They may not be exported or shipped for re-export to restricted countries..." wheee! :-) scott

7 7

Re: Are undersea cables tapped before they get to ISP's? [was Re: Security over SONET/SDH]
by Hank Nussbacher 25 Jun '13

25 Jun '13

At 10:38 25/06/2013 -0400, Christopher Morrow wrote: >this involved, I think, just intuiting signals from the nearfield >effects of the cable, no? 'drop a large sensor ontop-of/next-to the >cable, win!' > > > <http://defensetech.org/2005/02/21/jimmy-carter-super-spy/> > >this I thought included the capabilities to drag the fiber/line into >the hull for 'work' to be done... I'd note that introducing signal >loss on the longhaul fiber seems 'risky', you'd have to know (and this >isn't hard I bet) the tolerances of the link in question and have a >way to stay inside those tolerances and not introduce new >splice-points/junctions/etc and be careful for the undersea cable >power (electric) requirements as well. > >fun stuff! Fun stuff indeed...sell to one org or the other: http://www.glimmerglass.com/solutions/submarine-cable-landing-stations/ http://www.glimmerglass.com/solutions/cyber-security-and-lawful-interceptio… -Hank

2 1

content streaming providers?
by Carlos Kamtha 25 Jun '13

25 Jun '13

Hello, I was wondering if anyone could possibly recommend and/or share thier experience(s) with any online ondemand content streaming service, primarily for video.. Our objective is to provide content on the roku's and appletvs of the world. Any feedback is greatly appreciated. Cheers, Carlos.

1 0

86th Street TWTC outage
by Thomas York 25 Jun '13

25 Jun '13

Just in case anyone has equipment in the 86th Street TWTC Colo, both of their AC units are dead and the fire department is here. I'll try to update as soon as I know something.

1 0

IANA Reference to hopopt as a protocol
by David Edelman 25 Jun '13

25 Jun '13

Does anyone have an explanation for the IPv6 hopopt appearing as protocol value 0 in http://www.iana.org/assignments/protocol-numbers? --Dave

2 1

PDU recommendations
by shawn wilson 24 Jun '13

24 Jun '13

We currently use Triplite stuff but they've got an issue where after a few minutes, they stop accepting new tcp connections. We're adding a new 30A circuit and I'm thinking of going with APC (ran them in the past and never had any issues). However, I figured I'd see if there was a better brand / specific model recommendations for quality or bang / buck? Specs: 30A 24+ port 0U, managed (with ssh), lcd use display.

16 20