September 2016 - Test - lists.nanog.org

Israeli Online Attack Service ‘vDOS’ Earned $600,000 in Two Years
by Doug Barton 09 Sep '16

09 Sep '16

vDOS — a “booter” service that has earned in excess of $600,000 over the past two years helping customers coordinate more than 150,000 so-called distributed denial-of-service (DDoS) attacks designed to knock Web sites offline — has been massively hacked, spilling secrets about tens of thousands of paying customers and their targets. http://krebsonsecurity.com/2016/09/israeli-online-attack-service-vdos-earne…

1 0

Amazon Contact
by Shon Elliott 09 Sep '16

09 Sep '16

Hi everyone, Sorry for having to ask this, but I haven't been able to chase down anyone from Amazon. Can someone from Amazon who might be watching the list who deals with the Amazon Instant Video, FireTV, Music, and other streaming media sections please contact me off-list regarding a serious issue? I would appreciate it very much. Kind Regards, Shon Elliott, KK6TOO selliott(a)getunwired.com<mailto:selliott@getunwired.com>

2 1

Use of unique local IPv6 addressing rfc4193
by Pshem Kowalczyk 09 Sep '16

09 Sep '16

Hi, We're looking at rolling out IPv6 to our internal DC infrastructure. Those systems support only our internal network and in the IPv4 world they all live in 'private' space of 10.0.0.0/8. I was wondering if anyone uses the fc00::/7 space for these sort of things or do ppl use a bit of their public IPv6 allocation and manage the security for those ranges? I realise I'd have to use a proxy or NAT66 for the regular outbound connectivity (but we do it already for IPv4 anyway). The truth is that even if we do use something out of our public allocation we're likely to do the same thing (just to be sure that nothing spills out accidentally). So what do you do in this space? kind regards Pshem

9 11

IANA AS Numbers registry update
by Paula Wang 08 Sep '16

08 Sep '16

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to LACNIC in September 2016: 265629-266652 Assigned by LACNIC 2016-09-08 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, Paula Wang IANA Specialist ICANN

1 0

NANOG 68 Peering Track Call for Participation
by L Sean Kennedy 08 Sep '16

08 Sep '16

The NANOG Program Committee is looking for interested presenters for the NANOG 68 Peering Track (10/19/2017). If you are interested in presenting or can suggestion a presenter, please contact the NANOG Program Committee ( nanogpc(a)nanog.org) or myself. Possible topic areas are listed below, but the PC welcomes other subject related to peering and interconnection. Please note that Peering Personals will continue to be a separate activity at NANOG 68 to be held Monday 10/17 following the program. - Peering Economics and Interconnection models - Measurement and Analysis specific to peering - Alternatives to hot-potato routing - Operations including Peering Databases - Transit as an alternative to peering - 100GbE Interconnection - Validation of routing information - Peering-specific lightning talks (10 minutes or less) Thanks, Sean NANOG Program Committee

1 0

Pandora Contact
by Shon Elliott 08 Sep '16

08 Sep '16

Can someone from Pandora please contact me off-list? Thanks! Kind Regards, Shon Elliott, KK6TOO selliott(a)getunwired.com<mailto:selliott@getunwired.com>

1 0

Google Apps Contact
by Alex Wacker 08 Sep '16

08 Sep '16

Would appreciate if someone who manages or provides support for google apps could contact me off list. -- Alex Wacker

1 0

Chinese root CA issues rogue/fake certificates
by Eric Kuhnke 08 Sep '16

08 Sep '16

http://www.percya.com/2016/08/chinese-ca-wosign-faces-revocation.html One of the largest Chinese root certificate authority WoSign issued many fake certificates due to an vulnerability. WoSign's free certificate service allowed its users to get a certificate for the base domain if they were able to prove control of a subdomain. This means that if you can control a subdomain of a major website, say percy.github.io, you're able to obtain a certificate by WoSign for github.io, taking control over the entire domain.

8 16

Security Track @ NANOG 68 Call for Participation
by John Kristoff 07 Sep '16

07 Sep '16

[ Apologies if you saw this elsewhere already - jtk ] Friends, colleagues, fellow operators, The network security track, formerly known as the ISP security BoF, may be on the agenda at NANOG 68 in Dallas October 17-19 and if we can put together a reasonable agenda I may be your track facilitator. We not only seek your participation, but we are also interested you contributing to the track content. If you have an idea or if you know someone who might like to present, discuss or conduct a demonstration of something, we want to hear from you. Here is an incomplete list of relevant topics to stir your thoughts: * 802.11 authentication, authorization and accounting * abuse@ management and war stories * BGPSEC and RPKI * DDoS attacks and mitigation * Government regulatory and compliance issues * Internet of Things and security * IPv6 considerations * New security software projects and tools (non-commercial) * Privacy-related issues and topics * The latest in protocol abuse * <insert your new cool tool or idea here> John

1 0

Outdoor ADSL2+/VDSL/G.Fast NIU
by Jeremy Malli 07 Sep '16

07 Sep '16

I'm hoping somebody on the list has a recommendation for an outdoor ADSL2+/VDSL/G.Fast NIU. Been doing so some research into this and have come up empty so far. My thinking is that by housing the DSL CPE outside the residence in an enclosure we can reduce the issues with IW (since we would only need a small jumper from the LEC handoff to the NIU) and also gain access to the DSL CPE remotely for management and troubleshooting. We would then hand off ethernet to the customer using existing wiring or running cat5. Interested in how this problem may have already been addressed in the provider community. Thanks, --------------------- Jeremy Malli jeremy(a)vcn.com

6 5