- NANOG - lists.nanog.org

Re: bloomberg on supermicro: sky is falling
by Scott Weeks 04 Oct '18

04 Oct '18

--- randy(a)psg.com wrote: From: Randy Bush <randy(a)psg.com> > Classified networks do not connect to other networks unless > they are equally or higher classified. that sentence makes no sense. if A can connect to B because B is more highly classified than A, then B is connecting to a less classified network A. ------------------------------------------------- Yeah, I borked that higher thing, but I still stand by the no internet access. Someone bends that rule and trouble follows. scott

1 0

bloomberg on supermicro: sky is falling
by Randy Bush 04 Oct '18

04 Oct '18

re: https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-u… from a side convo with a well known sec researcher: >> saw that a couple of years back when apple tossed them out. so who >> do we know that is for sure not poisoned. and therein lies the rub. > Yup truth is, i am surprised they had to add a chip, and one of the larger dies was not already trojaned. have visions of the chinese implant on box A fighting with the american implant on box B with occasional jabs from the israelis from box C. what i would love to see/know is how apple tries to vet the macs made in shenzhen. randy

6 6

Re: bloomberg on supermicro: sky is falling
by Scott Weeks 04 Oct '18

04 Oct '18

--- matlockken(a)gmail.com wrote: From: Ken Matlock <matlockken(a)gmail.com> Would be remiss in our duties if we didn't also link AWS' blog, in response to the Bloomberg article. -------------------------------------------------- Every company and the Chinese gov't is saying "no, Bloomberg is wrong": https://www.bloomberg.com/news/articles/2018-10-04/the-big-hack-amazon-appl… Can't wait to see how this evolves... scott

8 14

Where to send feedback on the nationwide EAS-WEA tests
by Sean Donelan 03 Oct '18

03 Oct '18

FEMA invites the public to send comments on the nationwide EAS-WEA test to FEMA-National-Test(a)fema.dhs.gov Valuable information on the effectiveness of a national WEA capability using the Presidential alert category includes: 1. Whether your mobile device displayed one, more or no WEA test messages; 2. The make, model and operating system version of your mobile device; 3. Your wireless service provider; 4. Whether the device was turned on and in the same location for at least 30 minutes after the start of the test (2:18 p.m. ET); 5. The location of the device (as precise as possible), including the device’s environment (e.g. indoors or outdoors, rural or urban, mobile or stationary); 6. Whether you are normally able to make calls, receive texts, or use apps at that location; 7. Whether the mobile device was in use at the time of the alert (for a call or a data session); and 8. Whether anyone else at your location received the WEA test alert message.

2 1

Re: Oct. 3, 2018 EAS Presidential Alert test
by Scott Weeks 03 Oct '18

03 Oct '18

--- maxh(a)maxh.me.uk wrote: From: Max Harmony <maxh(a)maxh.me.uk> I got it, but not until 14.34. For a system that's supposed to be able to warn people of incoming nuclear attack, that seems unacceptably slow. ----------------------------------------------- You mean like the one we got in Hawaii? https://en.wikipedia.org/wiki/2018_Hawaii_false_missile_alert "BALLISTIC MISSILE THREAT INBOUND TO HAWAII. SEEK IMMEDIATE SHELTER. THIS IS NOT A DRILL." Parents were putting their children into storm drains... scott

1 0

Possible Comcast Packet Loss Between Atlanta and Chandler, Az
by david peahi 03 Oct '18

03 Oct '18

I suspect random packet loss between an Xfinity (Comcast) cable modem user in Atlanta, and our Chandler, Az data center. Traceroute between the Atlanta user and Chandler shows Comcast/TW backbone handing off to Abovenet/Zayo, finally to Internap for local loop connection. Can anyone verify this? David

1 0

Re: Oct. 3, 2018 EAS Presidential Alert test
by Scott Weeks 03 Oct '18

03 Oct '18

--- andy(a)andyring.com wrote: From: Andy Ringsmuth <andy(a)andyring.com> Interesting. That seems to be a gigantic hole in this entire process. ------------------------------------------------- Surprising given it's a gov't process. Because, you know, those always go really well. ;) :: A dedicated mailbox has been created for all questions :: relating to the IPAWS National Test. Please e-mail us :: at FEMA-National-Test(a)fema.dhs.gov. I'm sure that will go well, too. No doubt... scott

1 0

Re: Oct. 3, 2018 EAS Presidential Alert test
by Brian Kantor 03 Oct '18

03 Oct '18

Alert was received on two Tracfone (Verizon?) Android in San Diego. A few minutes later, cable (Spectrum/TimeWarner) music service was interrupted by the alert tones, then a voice announcement began but cut off mid-word and the music resumed less than 5 seconds into the announcement. No terminating alert tones were heard. My AT&T (formerly PacBell) landline rang around that time but as I never answer it, I don't know if it was related. No message was recorded. - Brian

1 0

FIU Contact
by Mario Eirea 03 Oct '18

03 Oct '18

Could someone from Florida International University it please contact me. Im having an issue where one of the schools we manage cannot reach my.fiu.edu. I suspect something triggered an automatic block. Thank you, Mario Eirea IT Department Layer 8 Solutions 7701 W 26th Ave Unit 2 Hialeah, FL 33016-5603 25.892545°, -80.335783° U.S.A., Earth, Solar System, Milky Way, Local Group, Universe Ph: 786-212-1660 “I am convinced that the act of thinking logically cannot possibly be natural to the human mind. If it were, then mathematics would be everybody's easiest course at school and our species would not have taken several millennia to figure out the scientific method.” -Neil deGrasse Tyson [https://charterschoolit.com/1up_micro.png] [http://charterschoolit.com/layer8_micro.png]

1 0

Re: NANOG Security Track: Route Security
by Krassimir Tzvetanov 03 Oct '18

03 Oct '18

Hello Everyone, Here is the copy of the combined slide deck. Thanks everyone. Regards, Krassimir On Thu, Sep 27, 2018 at 9:54 PM Krassimir T. Tzvetanov <krassi(a)krassi.biz> wrote: > Hello Everyone, > > I wanted to attract your attention to the Security Track this coming > NANOG. We'll be meeting on Tuesday morning and the line up looks like this: > * Andre Toonk - examples of hijacks, other ideas > * Alexander Azimov - State of BGP Security > * David Wishnick - ARIN TAL > * Job Snijders - Routing security roadmap > * Chris Morrow - So I need to start filtering routes from peers...' and > 'hey guess who needs to update their IRR data?' > > Time permitting at the end of the time slot we'll have a panel and time > for duscussion as well. > > Regards, > Krassi > > > >

2 2