- NANOG - lists.nanog.org

Weekly Routing Table Report
by cscora＠apnic.net 05 Oct '18

05 Oct '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 06 Oct, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 719613 Prefixes after maximum aggregation (per Origin AS): 276479 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 345397 Total ASes present in the Internet Routing Table: 62033 Prefixes per ASN: 11.60 Origin-only ASes present in the Internet Routing Table: 53570 Origin ASes announcing only one prefix: 23365 Transit ASes present in the Internet Routing Table: 8463 Transit-only ASes present in the Internet Routing Table: 265 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 36 Max AS path prepend of ASN ( 30873) 34 Prefixes from unregistered ASNs in the Routing Table: 45 Number of instances of unregistered ASNs: 45 Number of 32-bit ASNs allocated by the RIRs: 24323 Number of 32-bit ASNs visible in the Routing Table: 19649 Prefixes from 32-bit ASNs in the Routing Table: 82878 Number of bogon 32-bit ASNs visible in the Routing Table: 12 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 282 Number of addresses announced to Internet: 2855171843 Equivalent to 170 /8s, 46 /16s and 119 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.1 Total number of prefixes smaller than registry allocations: 240471 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 196173 Total APNIC prefixes after maximum aggregation: 55802 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 193872 Unique aggregates announced from the APNIC address blocks: 79906 APNIC Region origin ASes present in the Internet Routing Table: 9145 APNIC Prefixes per ASN: 21.20 APNIC Region origin ASes announcing only one prefix: 2579 APNIC Region transit ASes present in the Internet Routing Table: 1369 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4111 Number of APNIC addresses announced to Internet: 767775170 Equivalent to 45 /8s, 195 /16s and 81 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 214165 Total ARIN prefixes after maximum aggregation: 101278 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 214003 Unique aggregates announced from the ARIN address blocks: 101771 ARIN Region origin ASes present in the Internet Routing Table: 18264 ARIN Prefixes per ASN: 11.72 ARIN Region origin ASes announcing only one prefix: 6792 ARIN Region transit ASes present in the Internet Routing Table: 1816 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2455 Number of ARIN addresses announced to Internet: 1098491808 Equivalent to 65 /8s, 121 /16s and 167 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 196442 Total RIPE prefixes after maximum aggregation: 93831 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 192762 Unique aggregates announced from the RIPE address blocks: 113962 RIPE Region origin ASes present in the Internet Routing Table: 25533 RIPE Prefixes per ASN: 7.55 RIPE Region origin ASes announcing only one prefix: 11499 RIPE Region transit ASes present in the Internet Routing Table: 3519 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 36 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7459 Number of RIPE addresses announced to Internet: 714618496 Equivalent to 42 /8s, 152 /16s and 54 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 93183 Total LACNIC prefixes after maximum aggregation: 21345 LACNIC Deaggregation factor: 4.37 Prefixes being announced from the LACNIC address blocks: 94581 Unique aggregates announced from the LACNIC address blocks: 41323 LACNIC Region origin ASes present in the Internet Routing Table: 7601 LACNIC Prefixes per ASN: 12.44 LACNIC Region origin ASes announcing only one prefix: 2089 LACNIC Region transit ASes present in the Internet Routing Table: 1423 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5149 Number of LACNIC addresses announced to Internet: 172320544 Equivalent to 10 /8s, 69 /16s and 103 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19604 Total AfriNIC prefixes after maximum aggregation: 4183 AfriNIC Deaggregation factor: 4.69 Prefixes being announced from the AfriNIC address blocks: 24113 Unique aggregates announced from the AfriNIC address blocks: 8183 AfriNIC Region origin ASes present in the Internet Routing Table: 1201 AfriNIC Prefixes per ASN: 20.08 AfriNIC Region origin ASes announcing only one prefix: 406 AfriNIC Region transit ASes present in the Internet Routing Table: 246 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 475 Number of AfriNIC addresses announced to Internet: 101538304 Equivalent to 6 /8s, 13 /16s and 90 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4645 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4450 485 476 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2994 1153 93 VIETEL-AS-AP Viettel Group, VN 4766 2822 11130 764 KIXS-AS-KR Korea Telecom, KR 45899 2762 1674 159 VNPT-AS-VN VNPT Corp, VN 9829 2746 1494 557 BSNL-NIB National Internet Backbone, IN 9394 2589 4907 31 CTTNET China TieTong Telecommunications 9808 2270 8699 26 CMNET-GD Guangdong Mobile Communication 17974 2250 968 51 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4755 2132 421 171 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 3547 229 465 CABLEONE - CABLE ONE, INC., US 6327 3451 1324 83 SHAW - Shaw Communications Inc., CA 22773 3242 2971 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2315 5005 815 AMAZON-02 - Amazon.com, Inc., US 18566 2157 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2153 2739 522 CHARTER-NET-HKY-NC - Charter Communicat 16625 2143 1109 1551 AKAMAI-AS - Akamai Technologies, Inc., 5650 2085 3074 1461 FRONTIER-FRTR - Frontier Communications 30036 2047 346 149 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 2046 5081 602 CENTURYLINK-US-LEGACY-QWEST - Qwest Com Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4907 1613 129 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3054 378 50 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2568 592 1915 AKAMAI-ASN1, US 12389 2099 2048 673 ROSTELECOM-AS, RU 34984 2047 337 509 TELLCOM-AS, TR 9121 1837 1691 17 TTNET, TR 13188 1604 100 45 TRIOLAN, UA 8402 1256 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1241 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5401 3302 612 Uninet S.A. de C.V., MX 10620 3195 489 804 Telmex Colombia S.A., CO 11830 2650 370 81 Instituto Costarricense de Electricidad 6503 1648 444 65 Axtel, S.A.B. de C.V., MX 7303 1432 955 206 Telecom Argentina S.A., AR 28573 1120 2238 189 CLARO S.A., BR 6147 1040 377 31 Telefonica del Peru S.A.A., PE 3816 1014 509 121 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 933 144 71 Alestra, S. de R.L. de C.V., MX 18881 919 1114 28 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1205 396 48 LINKdotNET-AS, EG 37611 898 107 9 Afrihost, ZA 36903 795 399 143 MT-MPLS, MA 36992 749 1411 41 ETISALAT-MISR, EG 24835 653 802 18 RAYA-AS, EG 8452 607 1728 15 TE-AS TE-AS, EG 37492 466 470 57 ORANGE-, TN 29571 463 70 11 ORANGE-COTE-IVOIRE, CI 37342 394 32 1 MOVITEL, MZ 23889 375 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5401 3302 612 Uninet S.A. de C.V., MX 12479 4907 1613 129 UNI2-AS, ES 4538 4645 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4450 485 476 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3547 229 465 CABLEONE - CABLE ONE, INC., US 6327 3451 1324 83 SHAW - Shaw Communications Inc., CA 22773 3242 2971 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3195 489 804 Telmex Colombia S.A., CO 8551 3054 378 50 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 4907 4778 UNI2-AS, ES 4538 4645 4571 ERX-CERNET-BKB China Education and Research Net 7545 4450 3974 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3451 3368 SHAW - Shaw Communications Inc., CA 22773 3242 3086 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11492 3547 3082 CABLEONE - CABLE ONE, INC., US 8551 3054 3004 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 2994 2901 VIETEL-AS-AP Viettel Group, VN 45899 2762 2603 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 45474 NEXUSGUARD-AS-AP Suite 2101~02 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 65001 PRIVATE 109.161.56.0/24 13118 ASN-YARTELECOM PJSC Rostelecom 64643 PRIVATE 119.44.18.0/24 9394 CTTNET China TieTong Telecommu 64643 PRIVATE 119.44.192.0/22 9394 CTTNET China TieTong Telecommu Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 45.121.32.0/22 134356 UNKNOWN 45.121.136.0/22 22552 ESITED - eSited Solutions, US 45.124.164.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 45.252.236.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 64.28.160.0/20 20475 AS20475 - Global Capacity, LLC, US 64.29.240.0/20 27279 -Reserved AS-, ZZ 64.30.152.0/24 15830 TELECITY-LON, GB Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:98 /12:290 /13:566 /14:1104 /15:1884 /16:13315 /17:7906 /18:13774 /19:25359 /20:39581 /21:45915 /22:89388 /23:73469 /24:404701 /25:817 /26:618 /27:633 /28:36 /29:21 /30:21 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3684 4907 UNI2-AS, ES 6327 3237 3451 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2800 3547 CABLEONE - CABLE ONE, INC., US 8551 2510 3054 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2504 3242 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2051 2157 MEGAPATH5-US - MegaPath Corporation, US 11830 2000 2650 Instituto Costarricense de Electricidad y Telec 30036 1795 2047 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1762 2085 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1604 2:883 4:18 5:2660 6:44 7:1 8:1137 12:1864 13:218 14:1829 15:34 16:3 17:194 18:55 20:50 23:2546 24:2431 25:2 27:2512 31:2003 32:84 35:29 36:536 37:2878 38:1547 39:261 40:121 41:3218 42:714 43:1968 44:123 45:5699 46:3090 47:225 49:1348 50:1064 51:318 52:1087 54:364 55:1 56:12 57:39 58:1623 59:986 60:417 61:2090 62:1881 63:1800 64:5054 65:2209 66:4793 67:2680 68:1157 69:3365 70:1155 71:579 72:2256 74:2728 75:420 76:456 77:1647 78:1735 79:2234 80:1568 81:1415 82:1051 83:790 84:1043 85:2038 86:561 87:1489 88:916 89:2349 90:207 91:6440 92:1280 93:2397 94:2440 95:3029 96:934 97:353 98:928 99:142 100:86 101:1188 102:233 103:18831 104:3569 105:218 106:772 107:1805 108:709 109:3362 110:1676 111:1810 112:1332 113:1307 114:1169 115:1684 116:1666 117:1788 118:2208 119:1694 120:1084 121:1046 122:2387 123:1662 124:1444 125:1931 128:1179 129:672 130:500 131:1616 132:726 133:191 134:1033 135:237 136:530 137:658 138:1931 139:695 140:546 141:754 142:840 143:1020 144:844 145:498 146:1237 147:741 148:1685 149:776 150:767 151:997 152:867 153:325 154:1873 155:931 156:1414 157:813 158:661 159:1877 160:1490 161:838 162:2642 163:625 164:1093 165:1555 166:450 167:1258 168:3171 169:850 170:3954 171:497 172:1035 173:2074 174:999 175:806 176:2097 177:4044 178:2521 179:1329 180:2161 181:2442 182:2382 183:1303 184:1146 185:14183 186:3600 187:2474 188:2921 189:2000 190:8187 191:1368 192:9848 193:6287 194:5108 195:4026 196:2757 197:1606 198:5663 199:5948 200:7313 201:4991 202:10262 203:10234 204:4600 205:3001 206:3207 207:3176 208:3932 209:4149 210:3831 211:1986 212:3032 213:2806 214:1045 215:52 216:6012 217:2164 218:868 219:577 220:1802 221:1001 222:986 223:1392 End of report

1 0

Not announcing (to the greater internet) loopbacks/PTP/infra - how ?
by Brandon Applegate 05 Oct '18

05 Oct '18

Hello, I’ve seen mention on this list and other places about keeping one’s PTPs / loopbacks out of routing tables for security reasons. Totally get this and am on board with it. What I don’t get - is how. I’m going to list some of my ideas below and the pros/cons/problems (that I can think of at least) for them. - RFC 1918 for loopbacks and PTP - Immediately “protects” from the internet at large, as they aren’t routable. - Traceroutes are miserable. - Use public block that is allocated to you (i.e. PI) - but not announced. - So would this be a totally separate (from user/customer prefixes) announcement and allocation ? In other words, let’s say you were a small ISP getting started. You manage to get a /20 from a broker (IPv6 should be “easy”). Do you also now go out and get a /23 (I’m making these sizes up, obviously all of these will vary based on ISP size, growth plan, etc.). You have the /23 registered to you (with proper rDNS delegation, WHOIS, etc.). But you simply don’t announce it ? I’d say I need this /23 day one to even build my network before it’s ready for customers. - On the IPv6 front - would a RIR give you your /32 and then also a /48 (for loop/PTP) ? - Deaggregate and not announce your infra - Bad net behavior out of the gate with this method. The opposite of elegant. - Keeping with previously made up / arbitrary prefixes - for your /20 - you’d end up announcing 2 x /23, 1 x /22 and 1 x /21. I’m too lazy to enumerate the IPv6 gymnastics, but with IPv6 you could “waste” a bit more to get to boundaries that are a bit easier to work with I suppose. Thanks in advance for insights on this. -- Brandon Applegate - CCIE 10273 PGP Key fingerprint: 0641 D285 A36F 533A 73E5 2541 4920 533C C616 703A "For thousands of years men dreamed of pacts with demons. Only now are such things possible."

8 7

RE: bloomberg on supermicro: sky is falling
by Scott Weeks 05 Oct '18

05 Oct '18

--- SNaslund(a)medline.com wrote: From: "Naslund, Steve" <SNaslund(a)medline.com> The other thing I am highly skeptical of is the suggestion of attempting to tap sensitive intel agency systems this way. Talking to a C&C server is suicide from within their network. ---------------------------------------------------------- Classified networks do not connect to other networks unless they are equally or higher classified. No internet connection. Period. scott

6 7

Re: bloomberg on supermicro: sky is falling
by Scott Weeks 04 Oct '18

04 Oct '18

--- randy(a)psg.com wrote: From: Randy Bush <randy(a)psg.com> > Classified networks do not connect to other networks unless > they are equally or higher classified. that sentence makes no sense. if A can connect to B because B is more highly classified than A, then B is connecting to a less classified network A. ------------------------------------------------- Yeah, I borked that higher thing, but I still stand by the no internet access. Someone bends that rule and trouble follows. scott

1 0

bloomberg on supermicro: sky is falling
by Randy Bush 04 Oct '18

04 Oct '18

re: https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-u… from a side convo with a well known sec researcher: >> saw that a couple of years back when apple tossed them out. so who >> do we know that is for sure not poisoned. and therein lies the rub. > Yup truth is, i am surprised they had to add a chip, and one of the larger dies was not already trojaned. have visions of the chinese implant on box A fighting with the american implant on box B with occasional jabs from the israelis from box C. what i would love to see/know is how apple tries to vet the macs made in shenzhen. randy

6 6

Re: bloomberg on supermicro: sky is falling
by Scott Weeks 04 Oct '18

04 Oct '18

--- matlockken(a)gmail.com wrote: From: Ken Matlock <matlockken(a)gmail.com> Would be remiss in our duties if we didn't also link AWS' blog, in response to the Bloomberg article. -------------------------------------------------- Every company and the Chinese gov't is saying "no, Bloomberg is wrong": https://www.bloomberg.com/news/articles/2018-10-04/the-big-hack-amazon-appl… Can't wait to see how this evolves... scott

8 14

Where to send feedback on the nationwide EAS-WEA tests
by Sean Donelan 03 Oct '18

03 Oct '18

FEMA invites the public to send comments on the nationwide EAS-WEA test to FEMA-National-Test(a)fema.dhs.gov Valuable information on the effectiveness of a national WEA capability using the Presidential alert category includes: 1. Whether your mobile device displayed one, more or no WEA test messages; 2. The make, model and operating system version of your mobile device; 3. Your wireless service provider; 4. Whether the device was turned on and in the same location for at least 30 minutes after the start of the test (2:18 p.m. ET); 5. The location of the device (as precise as possible), including the device’s environment (e.g. indoors or outdoors, rural or urban, mobile or stationary); 6. Whether you are normally able to make calls, receive texts, or use apps at that location; 7. Whether the mobile device was in use at the time of the alert (for a call or a data session); and 8. Whether anyone else at your location received the WEA test alert message.

2 1

Re: Oct. 3, 2018 EAS Presidential Alert test
by Scott Weeks 03 Oct '18

03 Oct '18

--- maxh(a)maxh.me.uk wrote: From: Max Harmony <maxh(a)maxh.me.uk> I got it, but not until 14.34. For a system that's supposed to be able to warn people of incoming nuclear attack, that seems unacceptably slow. ----------------------------------------------- You mean like the one we got in Hawaii? https://en.wikipedia.org/wiki/2018_Hawaii_false_missile_alert "BALLISTIC MISSILE THREAT INBOUND TO HAWAII. SEEK IMMEDIATE SHELTER. THIS IS NOT A DRILL." Parents were putting their children into storm drains... scott

1 0

Possible Comcast Packet Loss Between Atlanta and Chandler, Az
by david peahi 03 Oct '18

03 Oct '18

I suspect random packet loss between an Xfinity (Comcast) cable modem user in Atlanta, and our Chandler, Az data center. Traceroute between the Atlanta user and Chandler shows Comcast/TW backbone handing off to Abovenet/Zayo, finally to Internap for local loop connection. Can anyone verify this? David

1 0

Re: Oct. 3, 2018 EAS Presidential Alert test
by Scott Weeks 03 Oct '18

03 Oct '18

--- andy(a)andyring.com wrote: From: Andy Ringsmuth <andy(a)andyring.com> Interesting. That seems to be a gigantic hole in this entire process. ------------------------------------------------- Surprising given it's a gov't process. Because, you know, those always go really well. ;) :: A dedicated mailbox has been created for all questions :: relating to the IPAWS National Test. Please e-mail us :: at FEMA-National-Test(a)fema.dhs.gov. I'm sure that will go well, too. No doubt... scott

1 0