March 2004 - Test - lists.nanog.org

Re: Packet Kiddies Invade NANOG
by albertpublic＠hushmail.com 16 Mar '04

16 Mar '04

>Matthew (yes I know it is you) No, my name is Albert. >I have not attacked any Internet Service Provider or IRC server >in several years. I am and have been retired from the underground >for a long while now, despite the constant comments made to the contrary >by people who do not represent me in any manner. Yeah, I bet. Guess that explains this exploit you contributed to recently: http://www.l33 (tsecurity.com/get.php?file=13 Furthermore, thanks for admitting to commiting felonies on this list. In case you were unaware, your statute of limitations has not yet expired. Signed, Albert Public (firstname lastname) Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Free, ultra-private instant messaging with Hush Messenger https://www.hushmail.com/services.php?subloc=messenger&l=434 Promote security and make money with the Hushmail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427

1 0

Re: Fw: Packet Kiddies Invade NANOG
by albertpublic＠hushmail.com 16 Mar '04

16 Mar '04

>I was talking more along the lines of disclosing personal information >without >permission Since when was re-pasting entries from the phonebook considered illegal? > slander is another one as well... I suggest you read a legal dictionary, and turn to the definitions of "slander" and "libel". One involves speech, the other involves print. And it's never slander or libel if it's all factually accurate. Unless, of course, you're disputing the accuracy of the phone book. Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Free, ultra-private instant messaging with Hush Messenger https://www.hushmail.com/services.php?subloc=messenger&l=434 Promote security and make money with the Hushmail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427

1 0

Re: Packet Kiddies Invade NANOG
by albertpublic＠hushmail.com 16 Mar '04

16 Mar '04

>You know how easy it is to fake IRC logs? Yes, I do. And I also know that these aren't fake. I've seen them before, from some respected sources in the ISP security community, and I've also seen Gregory's manifesto sent to the EFNet admins list admitting to having launched DDoS attacks against the servers, and attempting to rationalize his behavior. Are you denying that, too? >I don't know why you people seem to think I'm involved with all >of this stuff. Because you're friends of Andrew Kirch (aka "trelane"), who's Mr. Gregory "OseK" Taylor's right hand man. Guilt by association, and all that. >If you want to show evidence, do it offlist and among yourselves, > because I >don't think people give a crap about your little spats between one >another - >especially not based on IRC logs. Sorry Brian, but I'm not going to play these games. If you can publicly dispute the claims that you and your friends are packet kiddies, I have just as much of a right to post to the list attempting to prove them, or at the least, pointing out the hyprocisy of your ways. Hopefully some prospective employer will find this thread when googling for info on you and your friends, and think twice about hiring you for "security" work. Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Free, ultra-private instant messaging with Hush Messenger https://www.hushmail.com/services.php?subloc=messenger&l=434 Promote security and make money with the Hushmail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427

1 0

Re: who offers cheap (personal) 1U colo?
by Michael.Dillon＠radianz.com 15 Mar '04

15 Mar '04

> $50/month at 40U rentable is $2000/rack/month if it's full. And then there's the newer high-density rackmount units like this one http://www.rlx.com/products/serverblades/dense.php This product puts up to 24 server blades in a 3U chassis which basically means you can put 8 times as many servers in a rack. And if any of you have played with things like the Zaurus C760/C860 then you know where all this is headed. $50/month today, $25/month in a year or two, and then in about 5 years it will be a free perk if you sign a two-year contract with your broadband provider. --Michael Dillon

2 1

RE: AS3561 - lights are on but nobody's home?
by Burton, Chris 15 Mar '04

15 Mar '04

I spoke with their NOC about 3 days ago @800.663.9932. Chris Burton Network Engineer Walt Disney Internet Group: Network Services The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact Walt Disney Internet Group at 206-664-4000. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Mike Lewinski Sent: Monday, March 15, 2004 6:48 PM To: nanog(a)merit.edu Subject: AS3561 - lights are on but nobody's home? I know that C&W was supposed to close their US ops, and then it went to re-org and became C&W America or something of the sort, but does anyone here have a clue as to their new support info? Because just a week or so ago 800-486-9932 got me to a real human for support, and now it just rings and rings. And.... $ dig www.cw.net @ns.cw.net ; <<>> DiG 9.2.2 <<>> www.cw.net @ns.cw.net ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35298 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.cw.net. IN A ;; AUTHORITY SECTION: cw.net. 600 IN SOA ns1.cw.net. hostmaster.cw.net. 2004031502 3600 600 3600000 600 ;; Query time: 48 msec ;; SERVER: 204.70.128.1#53(ns.cw.net) ;; WHEN: Mon Mar 15 19:40:25 2004 ;; MSG SIZE rcvd: 79 So, anyone else using C&W who might know how I can report a flapping BGP session & open a ticket? TIA, Mike

2 1

Electrical Fire at 2nd + Federal Street
by Tom (UnitedLayer) 15 Mar '04

15 Mar '04

Apparently there's some PG&E problem, and a possible electrical fire. It appears that 501 2nd street is on Generator, and several other businesses on federal and 2nd streets are out of power. Bryant street appears to have spotty power in the area. Anyone else know anything about this? --- Tom Sparks UnitedLayer Office: 415-294-4111 AS23342

1 1

AS3561 - lights are on but nobody's home?
by Mike Lewinski 15 Mar '04

15 Mar '04

I know that C&W was supposed to close their US ops, and then it went to re-org and became C&W America or something of the sort, but does anyone here have a clue as to their new support info? Because just a week or so ago 800-486-9932 got me to a real human for support, and now it just rings and rings. And.... $ dig www.cw.net @ns.cw.net ; <<>> DiG 9.2.2 <<>> www.cw.net @ns.cw.net ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35298 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.cw.net. IN A ;; AUTHORITY SECTION: cw.net. 600 IN SOA ns1.cw.net. hostmaster.cw.net. 2004031502 3600 600 3600000 600 ;; Query time: 48 msec ;; SERVER: 204.70.128.1#53(ns.cw.net) ;; WHEN: Mon Mar 15 19:40:25 2004 ;; MSG SIZE rcvd: 79 So, anyone else using C&W who might know how I can report a flapping BGP session & open a ticket? TIA, Mike

2 1

Re: 3 strikes - Interior Department ordered offline again
by Fred Heutte 15 Mar '04

15 Mar '04

This is quite something. From Judge Lamberth's order, additional insight into the behavior of a contractor we know well: It is unfortunate, therefore, that Interior proposes that [e]ach bureau or office for which reconnection is intended will take steps to verify its representation that the IT system is secure from Internet access by unauthorized users. Interior Proposal at 7. In support, Interior plans to submit documentation to the Court that will incorporate the data necessary to support a riskbased decision on Internet reconnection. The assessment may include, as appropriate: (1) network mapping and enumeration; (2) SANS/FBI Top 20 Vulnerability List Comparison; (3) vulnerability assessment; and (4) penetration testing. Id. at 7. Interior further offers that the above assessment will be performed by Interior or its contractor. Id. at 7 n.9. Interiors current contractor is Science Applications International Corporation (SAIC). Id. at 8 n.11. As this Court already noted: SAIC is a contractor that is paid by the Interior Department and as such it cannot be considered to be a testing agency that operates independently of the Interior Department. 274 F.Supp.2d at 133. Furthermore, the Court observes that SAICs long history as an Interior contractor in this area and the simple fact that Interiors IT security remains poor makes this Court reticent to rely on their judgment. Allowing Interior or SAIC to provide the verification of representations made by its bureaus on the adequacy of their IT security does not offer this Court any party without a conflict of interest or a track record of incompetency and is an insufficient method of verifying IT security. The Courts desire is simple and specific. The Court wants Interior to propose and the Court to approve 1) an entity with no prior relationship to Interior, 2) that possesses the requisite expertise in IT security, 3) whose only work for Interior will be performing the tasks set forth for it in the preliminary injunction issued this date, and 4) who will report all its findings to the Court. The Court does not mandate that such an entity work for the Court, in fact they can be paid and supervised directly by Interior. In this regard the Court is now making and continues to make every effort to allow the department to manage its own affairs without Court intervention. But the Court must absolutely have an entity not tainted by the history of falsehoods and deceptions that has plagued this litigation, nor otherwise dependent upon Interior for its revenues and livelihood, to provide honest appraisals of the security of individual Indian trust data ... Interior truly brought this on themselves. Accordingly, the Office of Inspector General, the Minerals Management Service, the Bureau of Land Management, the Bureau of Reclamation, the Office of the Special Trustee, Fish and Wildlife, the Bureau of Indian Affairs, the Office of Surface Mining, and the National Business Center must disconnect all of their respective computer systems from the Internet. This includes every single IT system within that bureau whether or not that IT system houses or provides access to individual Indian trust data. In contrast, the National Park Service, the Office of Policy Management and Budget, and the United States Geological Survey do not have to disconnect any currently connected system from the Internet. Lastly, no system essential for the protection against fires or other threats to life or property should be disconnected from the Internet.

1 0

Re: Platinum accounts for the Internet (was Re: who offers cheap (personal) 1U colo?)
by Scott Weeks 15 Mar '04

15 Mar '04

On Mon, 15 Mar 2004, Randy Bush wrote: : > No true in many cases. All I have to prove is it's not the network and : > then I hand it off to the windows/*nix/<whatever> sysadmins. To prove : > it's not the network, I don't need to know the end systems in any sort of : > detail. : : to pass the buck, one needs to know nothing. what makes a great noc : engineer is taking ownership of the user's problem. In smaller networks, sure. However, it's not about passing the buck in large networks. It's about responsibilities. There, if you take ownership of the sysadmin's part of the ticket (where there're a lot of sysadmins for every OS), you'll likely get =them= chopped off and hung on the wall as an example to others. I would be pissed if one of the sysadmin folks tried to troubleshoot the backbone network instead of handing it off to me after clearing their part of the problem... All I need to do is clear my part and pass it to them with all helpful data points included in the ticket. Any more than that and I'm stomping on other folks' toes. scott

2 1

3 strikes - Interior Department ordered offline again
by Sean Donelan 15 Mar '04

15 Mar '04

The US Department of Interior was ordered to disconnect most, but not all, Internet connections. They don't have to disconnect their modems, private networks, or other agency networks. This is the third time the court has ordered the Interior Department to disconnect some or all of their systems. The court's order is interesting reading http://www.indiantrust.com/_pdfs/20040315DisconnectITSystems.pdf Although the judge is clearly frustrated with Interior's behaivor to date, there are practical limits on what a professional can say. An architect can only swear she designed a building to meet applicable codes, not that the building will never fall down.

1 0