- NANOG - lists.nanog.org

Stanford Hack Exposes 10,000
by Fergie (Paul Ferguson) 01 Jun '05

01 Jun '05

Yet another unfortunate disclosure... http://www.techweb.com/showArticle.jhtml?articleID=163701121 - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

14 14

RE: Administration Asks Appeals Court To Compel ISP Searches
by Chris Ranch 31 May '05

31 May '05

Looks like they want us to turn over customer info without the subpoena, but simply with a phone call (or whatever) from an investigator. I would hope that would be just for specific accounts, and not the entire customer list. In any event, now we're going to have to at least confirm the investigator's identity, whereas currently the sub carries sufficient authority. I don't think you meant to say 'without any specific criminal charges having been filed', as subpoena'd evidence leads to charges. Chris Ranch Affinity Internet, Inc. > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Jason Frisvold > Sent: Tuesday, May 31, 2005 11:53 AM > To: Fergie (Paul Ferguson) > Cc: nanog(a)merit.edu > Subject: Re: Administration Asks Appeals Court To Compel ISP Searches > > > On 5/31/05, Fergie (Paul Ferguson) <fergdawg(a)netzero.net> wrote: > > Worth knowing how this all falls out, methinks. > > > > http://www.securitypipeline.com/163702151 > > Am I understanding this correctly? Are they trying to get > ISP's to release all customer information up front without > any sort of legal request? I don't have a problem releasing > information asked for in a subpeona, but to turn over an > entire customer list without any specific criminal charges > having been files is a little much. > > Please tell me I'm misreading this... > > > - ferg > > -- > Jason 'XenoPhage' Frisvold > XenoPhage0(a)gmail.com >

3 3

RE: Administration Asks Appeals Court To Compel ISP Searches
by Chris Ranch 31 May '05

31 May '05

On May 31, 2005 12:39 PM, Jason Frisvold wrote: > On 5/31/05, Chris Ranch <CRanch(a)affinity.com> wrote: > > Looks like they want us to turn over customer info without the > > subpoena, but simply with a phone call (or whatever) from an > > investigator. I would hope that would be just for specific > accounts, > > and not the entire customer list. In any event, now we're going to > > have to at least confirm the investigator's identity, whereas > > currently the sub carries sufficient authority. > > Ugh.. Ok, so it's a "Hi, I'm an FBI Agent. Gimme info on > Joe Blow and Mary Jane" and I'm supposed to jump and give out > that info... No questions asked... I just reread the article, and realized I got it wrong. There is some paperwork: "The ruling came in a lawsuit by the American Civil Liberties Union and an Internet access firm that received a national security letter (NSL) from the FBI demanding records." So, the NSL isn't judge or grand jury authorized, just the FBI investigator. > I'm not so opposed to the "don't tell anyone" part. When we > receive a subpeona for a criminal case (as opposed to a civil > case), the subpeona usually states that the subpeona and > information being requested can't be discussed by anyone. > Whereas a civil case allows us to tell the customer if we want to. That's a good question. Has anyone seen an NSL, and/or know if we're gagged? > My problem would be the handing over of information to what > is essentially an unknown party.. That wonderful law would > allow a terrorist or other crook to impersonate an > investigator and gather information.. Do you double-check sups back to the signing judge? Does anyone? Chris Affinity Internet, Inc.

2 1

RE: Administration Asks Appeals Court To Compel ISP Searches
by W. Mark Herrick, Jr. 31 May '05

31 May '05

At 01:54 PM 5/31/2005, Chris Ranch wrote: > > I'm not so opposed to the "don't tell anyone" part. When we > > receive a subpeona for a criminal case (as opposed to a civil > > case), the subpeona usually states that the subpeona and > > information being requested can't be discussed by anyone. > > Whereas a civil case allows us to tell the customer if we want to. > >That's a good question. Has anyone seen an NSL, and/or know if we're >gagged? See Title 18, USC, Section 2709(c) -MH W. Mark Herrick, Jr. Director - Data and Network Security - Adelphia Communications 5619 DTC Parkway, Greenwood Village, CO 80111 (O) 303-268-6440 (C) 720-252-5929 (F) 303-268-6687 AIM: AdelphiaSecWMH

1 0

Real usage opinions of arbor networks DDOS and traffic shaping product?
by Drew Weaver 31 May '05

31 May '05

Offlist please, Thanks, -Drew

1 0

Looking for Eastlink Abuse Contact
by Aaron Thomas 30 May '05

30 May '05

Anyone from East Link Cable able to contact me off list. Much appreciated. Cheers, Aaron --- Aaron Thomas Network Engineer Delta Cable Communications v 604.940.3649 c 604.218.0759 f 604.946.5627

1 0

3rd and 4th place horses swap positions
by Eric Brunner-Williams in Portland Maine 30 May '05

30 May '05

Apparently DENIC is more qualified than Afilias to not run the .net registry. http://www.icann.org/tlds/dotnet-reassignment/net-rfp-finalreport-issue4-27…

2 1

Open nominations for Program Committee members
by Steve Feldman 29 May '05

29 May '05

There are currently three vacant positions on the NANOG Program Committee. According to the draft charter[1]: "... the three Program Committee seats vacant as of May 2005 will be filled through appointment by the current committee after an open nomination process." Accordingly, the committee is soliciting nominations for these open positions, from now through Friday, June 10, 2005. ** Procedure ** To nominate yourself or someone else, please send mail to nominate(a)nanogpc.org with the following information, no later than Friday, June 10: - Your name - Nominee's name (if not you) - Nominee's email address - Nominee's phone number - Reasons why you believe the nominee is qualified to serve on the Program Committee. A committee member will contact each of the nominees to verify interest and possibly request additional information. Once all nominations have been received, the committee will begin selecting the three new members from among the nominees. The results will be announced to the nanog-announce list. ** Eligibility ** The draft charter states: "To be eligible to be appointed as a member of the Program Committee, an individual must have attended one NANOG meeting within the prior calendar year (12 months). " ** Duties ** Again quoting the draft charter: "The Program Committee is responsible for motivating/soliciting people to submit interesting talks, selecting the submissions which seem most appropriate (with some attention to presentation skills), and following up with speakers after acceptances to ensure that presentations are completed in time, with ample warning of potential problems with the presentation." "Each member of the Program Committee must review all presentations submitted for each meeting. The Chair may excuse a member from one meeting's review cycle due to extenuating circumstances, but if a member misses two meetings in a row, he or she may be removed from the committee." ** Length of term ** These appointments are temporary (as are those for the rest of the current committee), lasting only until the October 2005 meeting. The draft charter does require that the Steering Committee in forming their first appointed Program Committee, carry forward at least half the current members as of that time. If you have any further questions, please post to the nanog list, contact me directly, or entire committee at nanogpc(a)nanog.org. Finally, on behalf of the Program Committee, I would like to thank our three outgoing members, Barry Raveendran Greene, kc claffy, and Curtis Villamizar, for their years of dedicated service to NANOG and the Internet operations community. Steve Feldman PC Chair [1] The draft charter is available at http://www.nanog.org/charter05.html

1 0

soBGP deployment
by vijay gill 28 May '05

28 May '05

If you are an operator, would you deploy soBGP or something like it? If not, why not. http://www.cisco.com/en/US/about/ac123/ac147/ac174/ac236/about_cisco_ipj_ar… /vijay

29 82

Re: More on Moscow power failure( was RE: Moscow: global power outage)
by Fergie (Paul Ferguson) 28 May '05

28 May '05

More from MosNews: UES Management Faces Criminal Investigation After Moscow Power Cut Russian prosecutors on Wednesday opened a criminal case against the management of power monopoly Unified Energy System (UES) after a major power outage in Moscow, agencies reported Wednesday. The case was opened to investigate possible negligence, the Interfax agency quoted the Prosecutor Generals Office as saying. Under Russian law, prosecutors must formally open a criminal case to allow police fully to investigate the incident. It does not necessarily lead to prosecution, Reuters reports. President Vladimir Putin has already blamed UES Chief Executive Anatoly Chubais for the power cut which left much of the capital without power, saying management had neglected the companys problems to concentrate on a restructuring plan. Chubais, a leading political liberal who is spearheading the reform of the electricity giant, is viewed with suspicion by Kremlin hardliners, Reuters adds. http://mosnews.com/news/2005/05/25/chubaiscriminalcase.shtml - ferg -- Michael.Dillon(a)radianz.com wrote: If you can read Russian, there is a lot more information on the BBC's Russian language page here http://news.bbc.co.uk/hi/russian/russia/newsid_4578000/4578219.stm The cascading failure affected Moscow and towns as far as 200km south of the city. 95% of people were evacuated from the Metro by 1pm. They are restoring power in phases, hospitals are expected to be running by 3 pm Moscow time. The outage hit the southern half of Moscow and some parts of the northern half of the city. Many traffic signals were down and militia officers were manually directing traffic. No mention of Internet stuff but they do point out that the space flight centre in Korolev was functioning normally. --Michael Dillon -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

4 5