- Test - lists.nanog.org

Reports of flooding in Tyson's Corner Virginia
by Sean Donelan 23 Feb '03

23 Feb '03

The associated press is reporting that parts of Tyson's Corner is experiencing flooding, and officials are restricting access. As some folks are aware the Tyson's Corner area is/was a very dense colocation and peering center for the Internet.

7 7

Operating Agreement
by Christopher J. Wolff 23 Feb '03

23 Feb '03

Hello, I'm trying to track down a sample operating agreement, specifically when one network operator offers to manage another's telecommunications assets, in exchange for an IRU. Something close to this would be wonderful. Google lists many network operating agreements for power interconnection but not for telecom. Thank you for your assistance. Regards, Christopher J. Wolff, VP CIO Broadband Laboratories, Inc. http://www.bblabs.com

1 0

SSL crack in the news
by Mark Radabaugh 22 Feb '03

22 Feb '03

http://www.cnn.com/2003/TECH/internet/02/21/email.encryption.reut/index.html Very little real information... Mark Radabaugh Amplex (419) 720-3635

4 3

RE: SSL crack in the news
by St. Clair, James 22 Feb '03

22 Feb '03

Yeah, CNN screwed up the story more than they releaed anything.. Jim -----Original Message----- From: Matt Zimmerman To: nanog(a)merit.edu Sent: 2/22/03 5:13 PM Subject: Re: SSL crack in the news On Sat, Feb 22, 2003 at 03:55:14PM -0500, Mark Radabaugh wrote: > http://www.cnn.com/2003/TECH/internet/02/21/email.encryption.reut/index. html > > Very little real information... Sounds like a CNN-digested version of CAN-2003-0078, which is a (relatively minor) bug in OpenSSL which allows for a timing attack. OpenSSL CHANGES file: *) In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078) [Bodo Moeller; problem pointed out by Brice Canvel (EPFL), Alain Hiltgen (UBS), Serge Vaudenay (EPFL), and Martin Vuagnoux (EPFL, Ilion)] CNN: NEW YORK (Reuters) -- Researchers at a Swiss university have cracked the technology used to keep people from eavesdropping on e-mail sent over the Web... Typical. -- - mdz

1 0

Fast.Net / Netaxs down?
by up＠3.am 22 Feb '03

22 Feb '03

Our link to FastNet (formerly Netaxs) went down a while ago, and their phone lines are all busy. I can get to fast.net's website, but none of the netaxs servers, including NewsRead.com. They are at a somewhat low elevation, so I'm wondering if they're dealing with a flooding situation. Our circuit to sprintlink in Pennsauken is fine (for now). Does anybody have any info on this they can share? James Smallacombe PlantageNet, Inc. CEO and Janitor up(a)3.am http://3.am =========================================================================

1 0

Re: [Re: [Re: M$SQL cleanup incentives]]
by Joshua Smith 22 Feb '03

22 Feb '03

it isn't legit for what i have in my network though :-) "Gary E. Miller" <gem(a)rellim.com> wrote: > Yo Joshua! > > On Thu, 20 Feb 2003, Joshua Smith wrote: > > > i still get 8K plus hits against my acls per day for udp/1434...(75 in the > > time it took to write this email) > > You are probably doing as much damage as good. > > udp/1434 is not a reserved port. A lot of what you are blocking is legit > traffic that picked a random port to use for an ad-hoc use. > > RGDS > GARY > --------------------------------------------------------------------------- > Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701 > gem(a)rellim.com Tel:+1(541)382-8588 Fax: +1(541)382-8676 > "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

8 8

Re: manhole covers
by Sean Donelan 22 Feb '03

22 Feb '03

Check out Georgetown in Washington DC, the exploding manhole capital of the world. They have a lot of experience with exploding manholes, from many different causes. The most recent incident was in the last couple of days. There is a lot of energy in being pumped into utility lines. A short circuit can release that energy into the underground vaults, and blow the manhole cover a considerable distance. http://www.washingtonpost.com/wp-dyn/articles/A33073-2003Feb19.html The Washington Post also has a special report covering exploding manholes http://www.washingtonpost.com/wp-dyn/metro/specials/manholes/ On Thu, 20 Feb 2003, Allen Hamner wrote: > I am a chemist who consults with the mayor of Bluefield WV where an > incident two weeks ago (a cold day) blew a 70 pound iron cover 10 feet > from an conduit tunnel containing several public untility lines. We > believe we can exclude a natural gas leak. Rumor has it that hydrogen > is involved, which may arise by electrolysis (?) or pyrolysis of > insulation (?). A previous incident had done no damage but this > explosion destroyed a nearby plate-glass window. > > There is no coal in the area so mine gas seepage is excluded. Sewer > gas is tentatively not an issue. The source of the spark is unknown. > > I would like to participate in the exchange on this topic. > > Allen Hamner (Ph.D.) > hamner_a(a)wvwc.edu

4 3

Fwd: A warning from Register.com, Inc.
by David Diaz 22 Feb '03

22 Feb '03

Thought this might be important. If anyone has any more information please post. dd We have learned that a Website located at Renewal-Center.com has been soliciting our customers and encouraging them to renew and enter their credit card, address, and other personal information. Register.com is not affiliated with Renewal-Center.com. Any renewal attempts through this site will not be successful. The personal information that you have provided to Register.com remains safe and secure. If you receive a solicitation from Renewal-Center.com, delete it. Customers who fall prey to this scheme could have their personal information abused. If you have already submitted your credit card information to Renewal-Center.com you should contact your credit card company immediately and have the card number cancelled and report the problem as fraud. We have taken the appropriate steps to have this Website turned off so that none of our customer's accounts or personal information will be threatened. In addition, we've contacted the appropriate authorities who are taking all necessary steps to address this situation. Register.com's customers are incredibly important to us. As always, we are committed to providing a secure environment for our customers and their information. Should you have any questions regarding this email or any inquiries concerning your Register.com account, please do not hesitate to contact us through our Website (<http://e.register.com/a/hA$VvaxADcorcAMSTdPAMNnRZiL/regi1>http://www.register.com) or by calling: Within the U.S. and Canada: (800) 899-9723 Outside the U.S. and Canada: +1 (902) 742-1466 Sincerely, Richard D. Forman President and CEO Register.com, Inc. -- David Diaz dave(a)smoton.net [Email] pagedave(a)smoton.net [Pager] www.smoton.net [Peering Site under development] Smotons (Smart Photons) trump dumb photons

2 1

Not to beat a dead hose, but about the Bank of America ATM Articl e
by Temkin, David 21 Feb '03

21 Feb '03

... some very interesting reading to follow up on the discussions that were had last month regarding ATM machine security and PIN storage. Turns out CitiBank has a serious flaw in their system that they'd rather everyone not know about. As well, as was noted, the PIN numbers are no longer stored on the cards. See the article @ cryptome: http://cryptome.org/pacc.htm <http://cryptome.org/pacc.htm> -Dave David Temkin S-I-G 401 City Avenue Bala Cynwyd, PA 19004 http://www.sig.com <http://www.sig.com/> IMPORTANT:The information contained in this email and/or its attachments is confidential. If you are not the intended recipient, please notify the sender immediately by reply and immediately delete this message and all its attachments. Any review, use, reproduction, disclosure or dissemination of this message or any attachment by an unintended recipient is strictly prohibited. Neither this message nor any attachment is intended as or should be construed as an offer, solicitation or recommendation to buy or sell any security or other financial instrument. Neither the sender, his or her employer nor any of their respective affiliates makes any warranties as to the completeness or accuracy of any of the information contained herein or that this message or any of its attachments is free of viruses.

1 0

Re: [Re: [Re: [Re: M$SQL cleanup incentives]]]
by Joshua Smith 21 Feb '03

21 Feb '03

Bryan Bradsby <Bryan.Bradsby(a)capnet.state.tx.us> wrote: > > > udp/1434 is not a reserved port. [...] legit > > > traffic that picked a random port to use for an ad-hoc use. > > > > it isn't legit for what i have in my network though :-) > i should clarify this - my data center has www/dns/ftp servers and a bunch of voip gateways (mostly cisco), so they all talk on the same udp ports (most of which are greater than 30000) my corporate lan does have a ms sql server or two (running on nt4), but there is no reason that those servers should be talking to anything outside of my network (or outside of their vlan) > > Really? So you're blocking udp/1434 both in and out? > yep > Got any DNS servers on your network? Any of your desktop clients use DNS? > options { query-source * port 53 }; > Recent versions of un*x BIND will pick a random port above 1024 for udp > conversations. It can and has picked 1434. destination port will be 53, i suppose it is possible that the client could pick 1434 for a source..... > > DNS clients will eventually timeout and fall back to another server, so > any problems would be transient, but the packets were legit, right? > on the off chance that someone's windows desktop picked 1434 for a source. those packets however will not be leaving my network. it may not be the best way to do all of it, but it keeps my network from being killed (it also helps that the lan admin keeps all the servers well patched) > > -bryan bradsby > Texas State Government Net > > > joshua (the grouchy ip/security/*nix guy sitting alone in the dark corner of the office) "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

1 0