- Test - lists.nanog.org

cnn.com - Homeland Security seeks cyber counterattack system (Einstein 3.0)
by Tony Patti 09 Oct '08

09 Oct '08

I presume this CNN article falls within the "Internet operational and technical issues" (especially security) criteria of the NANOG AUP, in terms of "operat[ing] an Internet connected network", especially where Chertoff refers to " like an anti-aircraft weapon, shoot down an [Internet] attack before it hits its target". http://www.cnn.com/2008/TECH/10/04/chertoff.cyber.security/index.html Homeland Security seeks cyber counterattack system WASHINGTON (CNN) -- First, there was "Einstein," the federal government's effort to protect itself from cyber attacks by limiting the number of portals to government computer systems and searching for signs of cyber tampering. Then Einstein 2.0, a system now being tested to detect computer intrusions as they happen. And in the future? Perhaps Einstein 3.0, which would give the government the ability to fight back. Homeland Security Secretary Michael Chertoff on Friday said he'd like to see a government computer infrastructure that could look for early indications of computer skullduggery and stop it before it happens. The system "would literally, like an anti-aircraft weapon, shoot down an attack before it hits its target," he said. "And that's what we call Einstein 3.0." At a meeting with reporters to highlight National Cyber Security Month, Chertoff reiterated his belief that the government should aggressively defend its computer systems, saying that terrorists, if they gain expertise already available to others, would "cause potentially very serious havoc" to government systems. "Let's make the investment now rather than wait until there's a huge catastrophe," he said. But despite his emphasis on the risks posed, Chertoff said the government is moving slowly to avoid stepping on the toes of the private sector as it addresses calls to reorganize the governance of cyberspace to provide accountability and authority. "I think the question of what is the government's role in cyberspace in general needs to be discussed among all the stakeholders, because there is a culture of cyberspace that is an open architecture," he said. "And I think if we just came in and said we want to take it over, there'd be, understandably, a considerable amount of discomfort with that." "We are deliberately going slowly because we recognize that the issue of government involvement in the Internet is fraught with all kinds of potential concerns and potential anxieties about not having the government have a big-foot impact on an area of communication and commerce that has traditionally been viewed as really independent and free." Chertoff said the government is "feeling our way to what is the right mix of government involvement with protecting the Internet in the private domain while preserving everybody's comfort level that we're not going to be in their business in a way that would be inappropriate." Asked if he envisioned a world with two cyberspaces, he said he envisions a world with "a lot of different levels of security and trust, depending upon the nature of what it is that you're doing." "We already have that now, in the sense that we have classified systems which are walled off from unclassified systems," he said. The Bush administration released its National Cyber Security Initiative in January. The "most immediate component" of it from the Department of Homeland Security's perspective, Chertoff said, is to increase security for federal government computer systems. But another priority is to work with the private sector to address threats to businesses. This includes not only protection from hackers, but also from counterfeit parts, which an individual or another nation could use to create vulnerabilities in the United States, he said. E-mail to a friend Tony Patti CIO S. Walter Packaging Corp.

21 32

Rackmount Vendors
by Israel Lopez 09 Oct '08

09 Oct '08

Hey there, Anyone know of a good rackmount supplies vendor near the greater Los Angeles, CA area? Looking for a rack and some rackmount power strips if possible. Contact me off list. Thanks Much, Israel

5 4

Some odd harvesting going on?
by Howard C. Berkowitz 09 Oct '08

09 Oct '08

I just received the following: Your message From: "Howard C. Berkowitz" <hcb(a)netcases.net> To: <nanog(a)nanog.org> Subject: RE: Fwd: cnn.com - Homeland Security seeks cyber counterattacksystem(Einstein 3.0) Date: 10/7/2008 has been just received by nanog.org mailserver. To prove that your message was sent by a human and not a computer, please visit the URL below and type in the alphanumeric text you will see in the image. You will be asked to do this only once for this recipient. http://mail.tcwireless.us/challenge/?folder=2008100714452628877295 Your message will be automatically deleted in a few days if you do not confirm this request. ===================================================== DO NOT REPLY TO THIS MESSAGE. NO ONE WILL RECEIVE IT. ===================================================== I don't have an appropriately air-gapped browser to visit that link, which rather screams "scam phish". Anyone know anythig about it?

9 9

OK, who's the idiot using tcwireless.us?
by Valdis.Kletnieks＠vt.edu 08 Oct '08

08 Oct '08

Somebody on the NANOG mailing list has their mail pointing to tcwireless.us, which is throwing challenge/response mail like the following: Your message From: Valdis.Kletnieks(a)vt.edu To: n3td3v <xploitable(a)gmail.com> Subject: Re: Fwd: cnn.com - Homeland Security seeks cyber counterattack system ( Einstein 3.0) Date: 10/6/2008 has been just received by gmail.com mailserver. To prove that your message was sent by a human and not a computer, please visit the URL below and type in the alphanumeric text you will see in the image. You will be asked to do this only once for this recipient. http://mail.tcwireless.us/challenge/?folder=2008100614384085099427 Your message will be automatically deleted in a few days if you do not confirm this request. ===================================================== DO NOT REPLY TO THIS MESSAGE. NO ONE WILL RECEIVE IT. ===================================================== Note it says 'gmail.com mailserver'. Paul Ferguson reported to me that the one he saw said 'received by vt.edu mailserver'. Also note that the From/To has lost nanog(a)nanog.org - for both my note and Paul's (in fact, looking at Paul's actual posting and mine show nanog(a)nanog.org as being the only common link, thus the "must be a nanog subscriber" conclusion). Please, if you're going to use a C/R, at least learn how to whitelist the mailing lists you're on. And if you can't figure out how to do that, please do us all a favor and not try to run an operational network...

5 5

Nanog 44 Hockey Event -- Last Call
by Ralph E. Whitmore, III 08 Oct '08

08 Oct '08

For those that are attending NANOG 44 and interested in catching the: Los Angeles Kings vs. the San Jose Sharks NHL Hockey game If you are interested in going and have not already contacted me about the game please be sure to do so Before 3PM today Wednesday Oct. 8th at either 310-856-0550. You may speak to Myself Ralph or my Assistant Nancy. Tickets are $90.50 each and we will be sitting In sections 112-114 based on the total number of people that go. Thus far we have a group of 10 people going to the game. Be sure to let me ASAP. Ralph Whitmore InterWorld Communications, Inc. 310-856-0550 M-F 9A-6P

6 5

Re: UltraDNS mail admin around?
by Andrey Gordon 08 Oct '08

08 Oct '08

we are actually not using ultraDNS for email. DNS only. It does awfully close to some local host spamming. tx for the help to y'all ----- Andrey Gordon [andrey.gordon(a)gmail.com] On Wed, Oct 8, 2008 at 1:34 PM, Randy Bush <randy(a)psg.com> wrote: > Rodney Joffe wrote: > > I suspect that Andrey/his $workplace uses UltraDNS and uses the Ultra > > mail forwarder, which forwards and does not filter. > > > > I can't tell from the minimal headers what his workplace is, so can't > > really conform for him. > > in private email, andrey said no received: line above that one. so, > unless his mail spool is on one of your servers, it's a local forge. > > randy > >

1 0

UltraDNS mail admin around?
by Andrey Gordon 08 Oct '08

08 Oct '08

I'm getting bombarded by these Received: from 80.224.33.155.static.user.ono.com ([80.224.33.155])by mxb2eqsj.ultradns.net with esmtp (Exim 4.43)id 1J7YZc-0007qU-4ifor mason_johnn(a)i2c.com; Wed, 26 Dec 2007 15:53:36 +0000 Message-ID: <000701c847d7$0379bd21$79a237a3@muffejda> From: "Handbags" <andrzej(a)myrealbox.com> To: "Replica Watches" <mason_johnn(a)i2c.com> ----- Andrey Gordon [andrey.gordon(a)gmail.com]

3 3

NANOG 44 (Los Angeles): ISP Security BOF
by Warren Kumari 08 Oct '08

08 Oct '08

Hi all, NANOG 44 is fast approaching and once again we are looking for topics for the ISP Security BOF. If you have any security related topics that you would like to hear about, not hear about, or (best of all) speak about, please let me know as soon as possible... This is your chance to air your views --- slides are welcome but not required. Danny McPherson and I are going to be moderating this year... W

3 5

Yahoo postmaster around?
by Mark Jeftovic 07 Oct '08

07 Oct '08

Argghhh, the downside to migrating to new mailserver IPs is rebuilding your rep on the new IPs. Are there any Yahoo postmaster's around? Please contact me offlist, thx -mark -- Mark Jeftovic <markjr(a)easydns.com> Founder / President, easyDNS Technologies Inc. Company Website: http://www.easyDNS.com I ramble pointlessly from my blog: http://www.PrivateWorld.com

1 0

RE: Fwd: cnn.com - Homeland Security seeks cybercounterattack system(Einstein 3.0)
by Scott Weeks 07 Oct '08

07 Oct '08

-------Original Message------- From: *Hobbit* [mailto:hobbit@avian.org] We've got plenty of military toyz we could level at Redmond... ------------------------------- ----- hcb(a)netcases.net wrote: ----- From: "Howard C. Berkowitz" <hcb(a)netcases.net> This one? http://www.wired.com/science/discoveries/news/1998/07/13987 -------------------------------- This: http://upload.wikimedia.org/wikipedia/commons/5/57/USS_Yorktown.jpg was rendered unusable by a sh!++y OS? !!! <wipes tears from eyes after rolling around on the floor in convulsive laughter> BWAHAHAHAHA! GREAT link! I needed to smile as I constantly go through Micro$loth vs. *nix arguments here. :-) "Using Microsoft's Windows NT operating system in such a critical environment, some engineers said, was a bad move. " - The sky is blue, too. "Technically, Windows NT Server 4.0 is no match for any Unix operating system." - DUH!

4 4