- Test - lists.nanog.org

Zebra users?
by Timothy R. McKee 25 Sep '01

25 Sep '01

A friend has asked me to find out if anyone on Nanog is using Zebra (a gated replacement) and, if so, to ask for their assessment of the program. Tim McKee

6 5

Re: Points of Failure (was Re: National infrastructure asset) (fwd)
by David Lesher 25 Sep '01

25 Sep '01

George William Herbert leaked to the press: > Part of the insidiousness of all this is that currently there is > insufficient information available to a telco line end user to properly > plan for that sort of loss. Right now, it is nigh-on impossible to > get, verify, and keep on a permanent basis truly widely separated > leased lines / bandwidth from point A to point B. Because of the > increasing cooperation, shared facilities, etc. in the telco and > fiber arenas, with many providers you're really getting someone > else's service for part of the connection. Recall the train tunnel > fire from not that long ago, now seemingly trivial, but at the time > a huge disaster... That is fixable. Not easily. Not once {ie it takes ongoing effort to counter entropy} but it could be done... by the industry, IFF demanded by its customers. > On top of that, none of these facilities are sufficiently hardened. > What takes a backhoe operator ten minutes by accident would be no more > than an hours work by hand of a sufficiently educated attacker. > None of these telco buildings are hardened in the traditional > anti-terrorist sense of the word. There are still co-loc facilities > in buildings shared with offices of unrelated companies, etc., > there are still co-loc facilities in buildings with windows into > server rooms, etc. I could go on but will stop now. The situation > is hopeless in many areas. Fixing THAT is a far far harder issue. We did tackle it once. It's called variously "Continuity Of Government" or "ATT Underground" or "L4".. During our last Cold War, ATT spend a few zillion rate-payer dollars building hardened underground facilities for the #5 Transcontinental Coaxial Cable. The #5 was buried deep {~48"} from coast to coast. The underground facilities were solid; some rated for 10psi shock waves. (The crapper is hung on springs...) Air filters; generators; airlocks. There was also hardened microwave; check out the "dish in the hillside" at Mt. Weather. Most have been sold off, but not all. (DSN is based in one, as is GEP.) We gave up when things like MIRVS made it obvious that the undergrounds could be direct targets. Plus, I strongly doubt any facility other than Cheyenne Mountain or Site R would survive a 767 hit. > Longer term, we all need to think about multi-level hardening of facilities > and connectivity to avoid "cheap kills" due to accident or malicious attack. > This gets into traditional datacenter design issues and beyond, into building > hardening (the new standards for Federal buildings, for example, or even > better the new standards for US Embassies...). Note the biggest safety measure for both the above is also the hardest to get & keep.... stand-off distance. It's especially hard to maintain same when you have an active airport's flight path going overhead. And the biggest impediment is the oldest one; they co$t. LOTS. Who is going to pay? -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

Re: The wyrms and the law.
by ken lindahl 25 Sep '01

25 Sep '01

On Tue, 25 Sep 2001, bmanning(a)vacation.karoshi.com wrote: > "Visualize Whorld Peas" > >bonus points for quote attribution. Gregor Mendel (1822-1884)

1 0

RE: Points of Failure (was Re: National infrastructure asset)
by Roeland Meyer 25 Sep '01

25 Sep '01

|> From: Randy Bush [mailto:randy@psg.com] |> Sent: Tuesday, September 25, 2001 1:19 PM |> |> note that richer meshes may increase forwarding reliability but they |> exacerbate routing convergence problems. see abha's nanog |> presentation. for many of us, forwarding reliability is what it's all about and convergence is what we pay you for. Are you saying that isn't factored into COGs?

1 0

RE: The wyrms and the law.
by Roeland Meyer 25 Sep '01

25 Sep '01

1 0

RE: The wyrms and the law.
by Roeland Meyer 25 Sep '01

25 Sep '01

1 0

RE: The wyrms and the law.
by Los, Ralph 25 Sep '01

25 Sep '01

-----Original Message----- From: Vivien M. [mailto:vivienm@dyndns.org] Sent: Tuesday, September 25, 2001 2:38 PM To: nanog(a)merit.edu Subject: RE: The wyrms and the law. > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > bmanning(a)vacation.karoshi.com > Sent: September 25, 2001 3:57 PM > To: Larry Diffey > Cc: nanog(a)merit.edu > Subject: Re: The wyrms and the law. > > > its worse than that.... :) > > releasing buggy software that increases your systems vulnerability > might fall within the boundary of "terrorist acts". ::Does that mean that the new training camps for terrorists will be in Redmond, WA instead of Afghanistan? <RL>That's uncalled for.....</RL> ::Vivien ::-- ::Vivien M. ::vivienm@dyndns.org ::Assistant System Administrator ::Dynamic DNS Network Services ::http://www.dyndns.org/

1 0

Re: National infrastructure asset
by Steven M. Bellovin 25 Sep '01

25 Sep '01

In message <A86EB3E9F548D411AA6B00B0D020F53490C88C@ENVESTMAIL>, "Los, Ralph" wr ites: > >Raul, > > Yep. Look at it's stock trading! I have it on an internal link >which I can't give you. > >Here's the Reuters link: >http://www.reuters.com/news_article.jhtml?type=internetnews&StoryID=243901 > > Also see http://interactive.wsj.com/articles/SB1001378816537875400.htm if you subscribe to the Wall Street Journal --Steve Bellovin, http://www.research.att.com/~smb http://www.wilyhacker.com

1 0

RE: 3rd Party Security Audits
by Steve Smith 25 Sep '01

25 Sep '01

We had ISS (Internet Security Solutions) do ours per British Standards. -----Original Message----- From: Allen Baragar [mailto:abaragar@bridge-way.com] Sent: Tuesday, September 25, 2001 10:52 AM To: nanog(a)merit.edu Subject: 3rd Party Security Audits I am looking for information on 3rd party security audits. If you have information on who will perform these audits, what standards they use, what we would do as far as minimum requirements, etc. it would be greatly appreciated. Regards Allen Baragar C.C.A. Technical Analyst - Hosting Bridgeway Software, Inc. Abaragar(a)Bridge-way.com

1 0

RE: National infrastructure asset
by Los, Ralph 25 Sep '01

25 Sep '01

Raul, Yep. Look at it's stock trading! I have it on an internal link which I can't give you. Here's the Reuters link: http://www.reuters.com/news_article.jhtml?type=internetnews&StoryID=243901 Ralph M. Los Asst. Vice-President, Internet Systems and Security EnvestnetPMC rlos(a)envestnet.com (312) 827-3945 (direct) (312) 296-9003 (wireless w/voicemail) * If you haven't been hacked, you don't know where your vulnerabilities lie* -----Original Message----- From: Raul D. Rincon [mailto:raul@dn.net] Sent: Tuesday, September 25, 2001 11:22 AM To: Los, Ralph Subject: Re: National infrastructure asset i'm looking for stories on this... did it just get announced? r > Exodus Stock plummets >55% as news of them filing bankruptcy fill Wall > Street. Ouch. (Just s side note) > > Ralph M. Los > Asst. Vice-President, Internet Systems and Security EnvestnetPMC > rlos(a)envestnet.com > (312) 827-3945 (direct) > (312) 296-9003 (wireless w/voicemail) > * If you haven't been hacked, you don't know where your vulnerabilities lie* > > > -----Original Message----- > From: Steve Meuse [mailto:smeuse@genuity.net] > Sent: Tuesday, September 25, 2001 11:05 AM > To: Joel Jaeggli > Cc: nanog(a)merit.edu > Subject: Re: National infrastructure asset > > > > At 01:33 PM 9/24/01 -0700, Joel Jaeggli wrote: > > >tat-14's landing sites are green hill, rhode-island and shirley, new > >york are they not? > > > >joelja > > I saw that you answered your own question, but to elaborate, the TAT-14 > domestic landing points are Tuckerton, NJ and Manasquan, NJ. > > -Steve > >

1 0