May 2000 - Test - lists.nanog.org

NETWORK SOLUTIONS SECURITY TRUTHS?
by Exiled Dave 09 May '00

09 May '00

http://www.networksolutions.com/cgi-bin/makechanges/easysteps/easysteps.pl?… Check out /var/named/internic.net as well. __________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/

7 6

Intermedia fiber cut
by Paul Froutan 09 May '00

09 May '00

FYI, seems like Intermedia has a major fiber cut in Texas. I'm seeing problems in other places too but it may be related. Paul Froutan Email: pfroutan(a)rackspace.com Rackspace, Ltd <http://www.rackspace.com>

1 0

Re: UUNET outage in Palo Alto
by Garlic 09 May '00

09 May '00

It seems to be a Frame Relay failure. I show the circuit up but my PVC is dead :-( Thank goodness for multihoming! Steve Cundall wrote: > It must be pretty serious, we are a UUnet T1 customer and have been offline > with them since about 8am PDT this morning. We are in Mtn View, Calif. > > Steve > > -----Original Message----- > From: Christian Nielsen [mailto:cnielsen@nielsen.net] > Sent: Tuesday, May 09, 2000 1:55 PM > To: Garlic > Cc: nanog(a)merit.edu > Subject: Re: UUNET outage in Palo Alto > > On Tue, 9 May 2000, Garlic wrote: > > > There seems to be a significant outage in the UUNET network at their > > Palo Alto POP. Their status pages and telephone messages are not > > showing this. > > There is a fiber cut with ALS/ATT in the bay area right now. They could have > some circuits on the ATT ring. > > Christian

1 0

Re: Re: product liability (was: Virus Update)
by Shawn McMahon 09 May '00

09 May '00

On Tue, 9 May 2000, Jim Mercer wrote: > > it is not enough to say that people don't have time to read and/or patch > their systems. > > that is like saying that there is no time to train school bus drivers, > just send them out to pick up our kids. However, if the bus were designed so that it was possible for a passing driver to honk his horn in a certain way and cause the wheels to fall off, and there was a switch under the dash to turn that behavior off, *AND* the company that makes the bus ships them with the switched turn ON and no big sign on the dash that says "warning; turn this switch off before you drive this thing", we'd sue the bejeezus out of them. You're talking about a product sold under the advertising promise that little to no training is necessary, and with default behavior that makes it TRIVIAL to write crap like this. Not just possible; not even easy, but TRIVIAL. Any high school kid with a couple of "Idiots Guide to Visual Basic in 21 Days for Dummies" books under his belt could have written this, and if he'd had a class on programming he'd have written better code than this piece of crap. If he'd tried to write something similar for a Unix system, he'd have done a little damage to a couple of systems, max. Most of those hit would have at worst lost the files of a single user. But as it is, even large companies that don't use Outlook had expensive damage, because of Microsoft shipping complex unmanageable cruft-accumulated bloatware that can't be locked down very well even by the top experts in the field without removing functionality that Microsoft proclaims to the world that you need to go Where You Want To Go Today. Where I want to go today is to work without having to recover 1,300 files damaged by two idiots double-clicking something they shouldn't have. Ask CBS' network folks where they want to go today. They'll probably tell you "to Redmond, with AK-47s".

3 2

Re: NETWORK SOLUTIONS SECURITY TRUTHS?
by Declan McCullagh 09 May '00

09 May '00

They've since fixed the problem. Pathetic. -Declan At 09:38 5/10/2000 +1200, Joe Abley wrote: >On Tue, 9 May 2000, Christian Nielsen wrote: > > > Yea, Netsol is broken. they cant always get domain info correct or make > > updates in a timely matter. But I think a quick mail to Netsol first and if > > they didnt do anything, maybe bugtraq if it effects others. > >Of course, it would be easier to let them know that something was wrong if >the whois record for networksolutions.com didn't contain the e-mail >address: > > not_valid_email(a)WORLDNIC.COM > >and the phone number: > > 123 234 1234 > >for Administrative, Technical and Zone Contacts. > >

1 0

Re: Hot Air Balloon Event at NANOG
by Howard C. Berkowitz 09 May '00

09 May '00

>Delivered-To: nanog-outgoing(a)merit.edu >Date: Tue, 9 May 2000 12:20:59 -0600 >From: "John M. Brown" <jmbrown(a)ihighway.net> >To: nanog(a)merit.edu >Subject: Hot Air Balloon Event at NANOG >Mime-Version: 1.0 >Sender: owner-nanog(a)merit.edu >Precedence: bulk >X-Loop: nanog > > >New Mexico is the Balloon Capital of the world. Each year >hundreds of Hot Air Balloons come to New Mexico for the >annual Balloon Fiesta. Please be precise in your definition. I concede the balloon title, but we in the Washington metropolitan area still retain the edge on hot air itself. Ottawa, for its size, is a powerful contender for the hot air title. Perhaps we need heavyweight and lightweight classes. > >Normally that takes place in October. > >Several local balloon people are offering rides to >NANOG Members :). > >The cost will be somewhere around $75 to $85 per person. >Rides will be last about 20 or more minutes. > >This needs to happen in the EARLY morning. > >If you are interested please send me PRIVATE email and >I'll forward the specific details. > >All of this depends on local weather conditions. > > >jmbrown

1 0

Re: product liability (was: Virus Update)
by owen＠dixon.delong.sj.ca.us 09 May '00

09 May '00

As an academic argument, I would like to consider the following: 1. Given: M$ released a product which contained "enabling technology" which allowed this event to occur. 2. Given: This event was a Virus/Worm which used Visual Basic Scripting and the Outlook Address Book to duplicate and proliferate itself to a large number of systems at a fairly high rate of speed. 3. Given: Storing and forwarding mail costs money. 3. Fact: M$ Has a monopoly position. (Federal court ruling) 4. Theorum: Companies and other Entities which provide relay service for an organization which falls victim to this event incurred costs as a result of the event. Proof: Statement Reason =========================================== ============================== Storing and Forwarding mail costs money. Given (3). Relays store and forward mail. Definition of Relay. The virus generated a large amount of mail Given (2), nature of email to be relayed. forwarding. Entities providing relay service incurred Given (3) and previous costs. statements As such, I would argue that M$ release of a product with such widely known exploitable vulnerabilities into a the market including customers of any given relay service entity may, indeed, create standing for that service entity to sue M$ on the basis of costs incurred due to M$ negligence and negligent business practices. Owen

4 3

Hot Air Balloon Event at NANOG
by John M. Brown 09 May '00

09 May '00

New Mexico is the Balloon Capital of the world. Each year hundreds of Hot Air Balloons come to New Mexico for the annual Balloon Fiesta. Normally that takes place in October. Several local balloon people are offering rides to NANOG Members :). The cost will be somewhere around $75 to $85 per person. Rides will be last about 20 or more minutes. This needs to happen in the EARLY morning. If you are interested please send me PRIVATE email and I'll forward the specific details. All of this depends on local weather conditions. jmbrown

1 0

Invitation
by Brandon Ross 09 May '00

09 May '00

The Spring 2000 NANOG meeting will be held June 11-13 in Albuquerque, New Mexico. http://www.netrail.net/ and http://www.riverstonenet.com/ are hosting a special event: What: White Water Rafting Trip and Steak Dinner Cook-out http://www.bigriverrafts.com/ When: Saturday, June 10, 2000 - 10:00 AM (The day before NANOG begins) Where: We will pick you up at and return you to the Hyatt Regency in Albuquerque. http://www.hyatt.com/albuq/g-nano/index.html Who: The first 40 Nanogers to respond to: nanogerswww(a)netrail.net Brandon Ross 404-522-5400 VP Engineering, NetRail http://www.netrail.net AIM: BrandonNR ICQ: 2269442 Read RFC 2644! Stop Smurf attacks! Configure your router interfaces to block directed broadcasts. See http://www.quadrunner.com/~chuegen/smurf.cgi for details.

2 1

Re: product liability (was: Virus Update)
by Jim Mercer 09 May '00

09 May '00

On Tue, May 09, 2000 at 09:55:16AM -0700, Eugene Wong wrote: > This seems a little strange. In Jim's case the company wouldn't be suing > anybody, because they'd only have themselves to blame. i was speaking mostly with regards to the ILOVEYOU virus and variants, as well as the melissa virus before. if people insist on leaving their systems open to invasion, then they are solely responsible for the damage that occurs. it is not enough to say that people don't have time to read and/or patch their systems. that is like saying that there is no time to train school bus drivers, just send them out to pick up our kids. computers have become critical business tools. many companies live and die by their IS operations. if they are gonna be so complacent that they get hit by things like this virus, then i guess it is some kinda darwinian theory for business at work. the ILOVEYOU virus is not the first, nor the last, expolit to make its rounds. every time we see one hit, we hear about the millions and millions of dollars "lost". well, maybe a bit of preventative medicine would save some of those "losses". -- [ Jim Mercer jim(a)reptiles.org +1 416 506-0654 ] [ Reptilian Research -- Longer Life through Colder Blood ] [ Don't be fooled by cheap Finnish imitations; BSD is the One True Code. ]

1 0