- NANOG - lists.nanog.org

Rita Scams Call to Arms - Update
by Gadi Evron 22 Sep '05

22 Sep '05

To report a Rita Phishing Scam to the MWP Call to Arms Rita Task Force, please contact: US-CERT at soc(a)us-cert.gov OR SANS ISC at handlers(a)sans.org Gadi.

1 0

Minneapolis: 2 reports of tornado touchdowns
by Fergie (Paul Ferguson) 22 Sep '05

22 Sep '05

I'm kind of surprised that there has been no metion of network outages in Minneapolis, despite tornado(es) touching down there tonight and power outages: http://www.startribune.com/stories/127/5628282.html - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

3 2

IOS exploit
by J. Oquendo 22 Sep '05

22 Sep '05

"Supposedly"/"Allegedly"/"Theoretically", rumor mill has it that a worm exploit of sorts has been published. My Russian is so so, not good enough to make sense it a majority of what was posted. A translation made me want to yank my hair out. // CLIP On September, 19th, 2005 19th September in ? the expert in the field of safety Andrey Vladimirovym (? dr_nicodimus), known as the co-author of the book " Wi-Foo: The Secrets of Wireless Hacking ", the information on the termination of " brain storm ", directed on operation ? in the software of products of company Cisco has been published. As a result of research in Cisco IOS and methods of a writing exploit and shellcode methods of introduction of a code have been developed for this platform. Mechanisms of realization ................... a worm for IOS are developed." // END CLIP Someone set us up the bomb! Translations are horrible. Further down the road in this article, someone points to "Cisco Games" from an ezine. So here is that copy with no silly little uploader javafoofoofoo scripting bs. www.infiltrated.net/cisco/ciscogames.html =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo GPG Key ID 0x97B43D89 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x97B43D89 "Just one more time for the sake of sanity tell me why explain the gravity that drove you to this..." Assemblage

11 30

RE: [afnog] ARIN to allocate from 74/8 & 75/8
by Manish Karir 22 Sep '05

22 Sep '05

I put up some pre-run queries for these prefixes based on the routeviews data at: http://bgpinspect.merit.edu/reports.php But you can probably run these yourself if you like. >From the perspective of atleast the 5 routeviews peers we track(att, level3,aol,sprint,glx), all prefixes are pretty much visible by now, what is perhaps more interesting is that it looks like these(and a bunch more) were being incorrectly announced by AS9802 prior to Aug 30th. -manish > Date: Wed, 21 Sep 2005 08:38:11 -0400 > From: "Hannigan, Martin" <hannigan(a)verisign.com> > Subject: RE: [afnog] ARIN to allocate from 74/8 & 75/8 >> if it's useful, i'd be happy to report what percentage of my peers >> have/don't have routes to these prefixes. > I'd be interested.=20 Best, ---------------------

4 3

EV1Servers Hunkers Down for Hurricane Rita
by Fergie (Paul Ferguson) 22 Sep '05

22 Sep '05

Via Netcraft: [snip] With one of history's most powerful hurricanes bearing down on the Houston/Galveston area, EV1Servers is taking steps to protect the more than 1 million web sites hosted in its Houston data centers. CEO Robert Marsh says the company has more than 10,000 gallons of diesel fuel on site, and has procured an extra generator in case grid power is unavailable for an extended period. "We anticipate that the coming storm will have no impact on our operations," Marsh said in a message to customers. "However, we are prepared to deal with any eventuality." [snip] http://news.netcraft.com/archives/2005/09/22/ev1servers_hunkers_down_for_hu… - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Hurricane Rita targeting Texas Gulf Coast
by Fergie (Paul Ferguson) 22 Sep '05

22 Sep '05

This looks really bad, folks. - ferg (in Austin, TX) [snip] 000 WTNT63 KNHC 212351 TCUAT3 HURRICANE RITA TROPICAL CYCLONE UPDATE NWS TPC/NATIONAL HURRICANE CENTER MIAMI FL 650 PM CDT WED SEP 21 2005 ...RITA BECOMES THE THIRD MOST INTENSE HURRICANE ON RECORD... DROPSONDE DATA FROM AN AIR FORCE RESERVE UNIT RECONNAISSANCE AIRCRAFT AT 623 PM CDT...2323Z...INDICATED THE CENTRAL PRESSURE HAS FALLEN TO BELOW 899 MB...OR 26.55 INCHES. THE DROPSONDE INSTRUMENT MEASURED 32 KT/35 MPH WINDS AT THE SURFACE...WHICH MEANS IT LIKELY DID NOT RECORD THE LOWEST PRESSURE IN THE EYE OF RITA. THE CENTRAL PRESSURE IS PROBABLY AT LEAST AS LOW AS 898 MB...AND PERHAPS EVEN LOWER. FOR OFFICIAL PURPOSES... A PRESSURE OF 898 MB IS ASSUMED... WHICH NOW MAKES RITA THE THIRD MOST INTENSE HURRICANE IN TERMS OF PRESSURE IN THE ATLANTIC BASIN. SOME ADDITIONAL DEEPENING AND INTENSIFICATION IS POSSIBLE FOR THE NEXT 12 HOURS OR SO. RITA CURRENTLY RANKS BEHIND HURRICANE GILBERT IN 1988 WITH 888 MB AND THE 1935 LABOR DAY HURRICANE WITH 892 MB. [snip] http://www.nhc.noaa.gov/text/refresh/MIATCUAT3+shtml/211955.shtml - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

3 2

RE: Don't Cache that check
by Hannigan, Martin 22 Sep '05

22 Sep '05

> > Somewhere, there's a shepard listening for your cries of "Wolf..." > > > > -doug > > Shouldn't a provider know their cache servers are "STORING" > copyrights. You demonstrate why companies need lawyers. And why this list isn't called "The Lawyers Operator Group". Did Vint mark you yet? -M<

1 0

RE: tli back in start-up mode...
by Susan Hares 21 Sep '05

21 Sep '05

Best of luck to Tony Li. Sue Hares -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Fergie (Paul Ferguson) Sent: Tuesday, September 20, 2005 9:37 AM To: nanog(a)merit.edu Subject: tli back in start-up mode... http://www.businessweek.com/technology/content/sep2005/tc20050920_0054_t c024.htm :-) - ferg p.s. BTW, good luck, Tony.

1 0

MCI refusing to turn up OC-3 due to katrina relief efforts?
by Drew Weaver 21 Sep '05

21 Sep '05

Howdy, has anyone heard of MCI putting orders on hold in order to help with the Katrina relief effort? We ordered an OC-3 from them about 2 months ago and they've missed the install deadline 4 times now. The reseller we're working with said that they claim that they can't turn it up due to Katrina relief efforts. The local loop is installed and the port is connected, they just cant turn the order up. Has anyone else heard this or should I assume (as usual) the reseller is BS'ing me? -Drew

4 3

Don't Cache that check
by J. Oquendo 21 Sep '05

21 Sep '05

Might or might not be offtopic: 1. Plaintiffs are published authors and The Authors Guild, the nation's largest organization of book authors, which has as its primary purpose to advocate for and support the copyright and contractual interests of published writers. The authors' works are contained in certain public and university libraries, and have not been licensed for commercial use. 2. Defendant Google Inc. (.Google.) owns and operates a major Internet search engine that, among other things, provides access to commercial and other sites on the Internet. Google has contracted with several public and university libraries to create digital "archives" of the libraries' collections of books, including that of the University of Michigan library. As part of the consideration for creating digital copies of these collections, the agreement entitles Google to reproduce and retain for its own commercial use a digital copy of the libraries' archives. http://wendy.seltzer.org/media/AuthorsGuild-v-Google.pdf I wonder what this will do for you ISP guys out there that use Cache servers. Technically if the suit holds, your company too would be violating laws. Which makes me wonder... If I listened to say a streaming audio clip of an unreleased album... That album goes to my computer's cache, can I be sued if I turn around and sell my cache. ;) =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo GPG Key ID 0x97B43D89 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x97B43D89 "Just one more time for the sake of sanity tell me why explain the gravity that drove you to this..." Assemblage

7 6