- Test - lists.nanog.org

RE: Yes it's off topic but who cares right now.
by Greg Mirsky 14 Sep '01

14 Sep '01

RE: celebrations BACKGROUND ---------- According to the AP, the Palestinians have been threatening news organizations and their workers in an effort to stop the broadcast of video and the publishing of photographs showing large crowds of Palestinians in Nablus and Ramallah joyfully celebrating the deadly terrorist attacks against Americans. Photographers and stringers (mostly Palestinians themselves) were forced by Palestinian gunmen to stop filming the celebrations (see the Agence France Press report below), and they were threatened with death if their video were broadcast. The news organizations they work for were told that everyone from their news organization would lose their access to PA officials and be unable to cover events in PA territory if they broadcast any video or photos of the large celebrations. (See reports below for more details). An AP photographer was specifically threatened with death if his photos were published. Here is the real news: THE AP HAS PUBLISHED A REPORT OF THE THREAT BUT HAS CAVED IN TO THE PA'S REQUEST not to publish these photos. So far we have only seen videos and photos of small crowds celebrating in eastern Jerusalem and Lebanon. At this moment, it looks like the Palestinian intimidation tactics are working to keep the most damning scenes from Ramallah and Nablus off American (and worldwide) television screens and out of the newspapers. Please urge AP and other news organizations to broadcast any video and/or photos they have of celebrations by Palestinian crowds in Nablus and Ramallah. Only by exposing and standing up to intimidation can it be stopped. Thank AP for publishing the story about the death threat to their videographer, but urge them to publish the photos. By appeasing those who threaten them, they are only encouraging further censorship and violence against their staff. * PA NEWSPAPER PRAISES SUICIDE BOMBERS: On a similar note, it is odd indeed that when Arafat's words of condolence were so widely broadcast by many in the media, so few in the press made note that on the very day of the attacks, the PA-controlled daily newspaper published an article praising suicide bombers as "the engines of history... the most honorable among us." See below for articles from AP, Agence France Press, IMRA, the Jerusalem Post, and PMW.

2 1

RE: Yes it's off topic but who cares right now.
by Greg Mirsky 14 Sep '01

14 Sep '01

This is a LIE!!! I''ll forward pictures that are not from that tape. -----Original Message----- From: Patrick Greenwell [mailto:patrick@cybernothing.org] Sent: Friday, September 14, 2001 1:23 PM To: Borchers, Mark Cc: 'Los, Ralph'; 'Dmitri Krioukov'; 'Arman Khalili'; 'nanog(a)merit.edu' Subject: RE: Yes it's off topic but who cares right now. On Fri, 14 Sep 2001, Borchers, Mark wrote: > doing. I do not think the people we saw dancing in the streets > on the news were typical Arab citizens. You might find this very interesting: From: "Marcio A. V. de Carvalho" <marcio.carv(a)UOL.COM.BR> Subject: Fourth Power All around the world we are subjected to 3 or 4 huge news distributors, and one of them - as you well know - is CNN. Very well, I guess all of you have been seeing (just as I've been) images from this company. In particular, one set of images called my attencion: the Palestinians celebrating the bombing, out on the streets, eating some cake and making funny faces for the camera. Well, THOSE IMAGES WERE SHOT BACK IN 1991!!! Those are images of Palestinians celebrating the invasion of Kuwait! It's simply unacceptable that a super-power of cumminications as CNN uses images which do not correspond to the reality in talking about so serious an issue. A teacher of mine, here in Brazil, has videotapes recorded in 1991, with the very same images; he's been sending emails to CNN, Globo (the major TV network in Brazil) and newspapers, denouncing what I myself classify as a crime against the public opinion. If anyone of you has access to this kind of files, search for it. In the meanwhile, I'll try to 'put my hands' on a copy of this tape. But now, think for a moment about the impact of such images. Your people is hurt, emotionally fragile, and this kind broadcast have very high possibility of causing waves of anger and rage against Palestinians. It's simply irresponsible to show images such as those. ____________ ------- End of forwarded message ------- De Balie Kleine gartmanplantsoen 10 1017 RR Amsterdam t 020 55 35 151 f 020 55 35 155 e lucas.evers(a)balie.nl ______________________________________________________ * Verspreid via nettime-nl. Commercieel gebruik niet * toegestaan zonder toestemming. <nettime-nl> is een * open en ongemodereerde mailinglist over net-kritiek. * Meer info, archief & anderstalige edities: * http://www.nettime.org/. * Contact: Menno Grootveld (rabotnik(a)xs4all.nl) ==============End of original message text===========

2 1

new mailing list: nanog-offtopic
by Nathan J . Mehl 14 Sep '01

14 Sep '01

I have created a mailing list, nanog-offtopic(a)lists.blank.org. It's only natural that, as a community of people as well as a gathering of professional peers, we would feel the need to discuss the non-operational aspects of events like the WTC bombing (and even ones of far lesser magnitude) with the same people who's opinions we value on technical topics. Unfortunatly, there's no escaping that it swamps the signal-to-noise ratio on the main list. I would like to extend an invitation to any and all nanog(a)merit.edu members to subscribe, and continue the various fascinating (seriously) side-discussions we've been having there. Agreement with my personal views is not a criterion for membership -- I expect to be as largely an invisible administrator there as Susan is here. To subscribe, send email to nanog-offtopic-subscribe(a)lists.blank.org from the account you wish to receive the mail at. My thanks to you all, -Nathan J. Mehl p.s. my apologies if this has already been done elsewhere; a cursory seach of my own nanog archives did not turn it up. ------------------------------------------------------------<memory(a)blank.org> "The beauty you like is precisely that which escapes you." (--Issey Miyake) <http://blank.org/memory/>----------------------------------------------------

1 0

RE: New Worm
by Roeland Meyer 14 Sep '01

14 Sep '01

Strange that this one resurfaces just after we discussed Win shares t'other day. -----Original Message----- From: Hire, Ejay [mailto:Ejay.Hire@Broadslate.net] Sent: Friday, September 14, 2001 8:25 AM To: nanog(a)merit.edu Subject: RE: New Worm I was in error. This is not a new worm. Just an old one that won't die. http://www.Symantec.com/avcenter/venc/data/w32.hllw.bymer.html Apologies. -----Original Message----- From: Ejay Hire [mailto:Ejay.hire@broadslate.net] Sent: Friday, September 14, 2001 12:04 PM To: nanog(a)merit.edu Subject: New Worm My Honeypot was infected with a new self-replicating worm yesterday. It appears to check for open win95/98/me netbios shares with read/write permission and installs wininit.exe (the scanner/infector) and the distributed.net client (In quiet Mode). Upon reboot, the scanner will start and search for infectable hosts during periods of inactivity. The windows 2000 pro pc seems unaffected. I will make the files available for dis-assembly if anyone is interested. To check for infection, look for the following files in c:/windows/system wininit.exe --Application wininit.log --Apparent Log file info.dll --Apparent Log file dnetc.exe -- Distributed.net client dnetc.ini -- Distributed.net config Buff-in.* -- Distributed.net work units ms216.exe -- Unknown, but the timestamp matched the other files...

1 0

FW: We'll go forward from this moment
by Stafford, Todd 14 Sep '01

14 Sep '01

> -----Original Message----- > > It's my job to have something to say. > > They pay me to provide words that help make sense of that which > troubles the American soul. But in this moment of airless shock when > hot tears sting disbelieving eyes, the only thing I can find to say, > the only words that seem to fit, must be addressed to the unknown > author of this suffering. > > You monster. You beast. You unspeakable bastard. > > What lesson did you hope to teach us by your coward's attack on our > World Trade Center, our Pentagon, us? What was it you hoped we would > learn? Whatever it was, please know that you failed. > > Did you want us to respect your cause? You just damned your cause. > > Did you want to make us fear? You just steeled our resolve. > > Did you want to tear us apart? You just brought us together. > > Let me tell you about my people. We are a vast and quarrelsome > family, a family rent by racial, social, political and class > division, but a family nonetheless. We're frivolous, yes, capable of > expending tremendous emotional energy on pop cultural minutiae -- a > singer's revealing dress, a ball team's misfortune, a cartoon mouse. > We're wealthy, too, spoiled by the ready availability of trinkets > and material goods, and maybe because of that, we walk through life > with a certain sense of blithe entitlement. We are fundamentally > decent, though -- peace-loving and compassionate. We struggle to > know the right thing and to do it. And we are, the overwhelming > majority of us, people of faith, believers in a just and loving God. > > Some people -- you, perhaps -- think that any or all of this makes > us weak. You're mistaken. We are not weak. Indeed, we are strong in > ways that cannot be measured by arsenals. > > IN PAIN > > Yes, we're in pain now. We are in mourning and we are in shock. > We're still grappling with the unreality of the awful thing you did, > still working to make ourselves understand that this isn't a special > effect from some Hollywood blockbuster, isn't the plot development > from a Tom Clancy novel. Both in terms of the awful scope of their > ambition and the probable final death toll, your attacks are likely > to go down as the worst acts of terrorism in the history of the > United States and, probably, the history of the world. You've > bloodied us as we have never been bloodied before. > > But there's a gulf of difference between making us bloody and making > us fall. This is the lesson Japan was taught to its bitter sorrow > the last time anyone hit us this hard, the last time anyone brought > us such abrupt and monumental pain. When roused, we are righteous in > our outrage, terrible in our force. When provoked by this level of > barbarism, we will bear any suffering, pay any cost, go to any > length, in the pursuit of justice. > > I tell you this without fear of contradiction. I know my people, as > you, I think, do not. What I know reassures me. It also causes me to > tremble with dread of the future. > > In the days to come, there will be recrimination and accusation, > fingers pointing to determine whose failure allowed this to happen > and what can be done to prevent it from happening again. There will > be heightened security, misguided talk of revoking basic freedoms. > We'll go forward from this moment sobered, chastened, sad. But > determined, too. Unimaginably determined. > > THE STEEL IN US > > You see, the steel in us is not always readily apparent. That aspect > of our character is seldom understood by people who don't know us > well. On this day, the family's bickering is put on hold. > > As Americans we will weep, as Americans we will mourn, and as > Americans, we will rise in defense of all that we cherish. > > So I ask again: What was it you hoped to teach us? It occurs to me > that maybe you just wanted us to know the depths of your hatred. If > that's the case, consider the message received. And take this > message in exchange: You don't know my people. You don't know what > we're capable of. You don't know what you just started. > > But you're about to learn. >

1 0

Re: Internet assessment - September 13 2001
by Marshall Eubanks 14 Sep '01

14 Sep '01

> >On Fri, 14 September 2001, Leo Bicknell wrote: >> On Fri, Sep 14, 2001 at 01:10:55AM -0700, Sean Donelan wrote: >> > The Internet routed around much of the failure, but there seem to be >> > only a few individual networks which are unreachable. The generator >> >> I know that MFN/AboveNet is quite willing to provide temporary >> peering/transit services in the US and Europe for networks affected >> by this action. I suspect most other providers are offering similar >> help. I would hope that the Internet community could get these >> networks back online in fairly short order to help keep communications >> flowing. For those networks completely offline, can those with >> phone contacts pass this message along to them via voice lines? > > >I don't have a breakout of individual networks, so I can't give you >contact information for the networks offline. I've just been following >total networks, ASNs, etc. In particular Geoff's great graphs > >http://www.telstra.net/ops/bgp/bgp-active.html > >It appears a few hundred route announcements disappeared from the total >of 104,400 routes. In other words, less that 1% of the routes. > >Telstra may be located on the other side of the globe, but I'll take >data where I can find it. > >I can't tell how many are single-homed networks and servers located in >directly impacted area of New York, and how much is due to a combination >of failures in the area affecting both the primary, backup or alternate >facilities. Sean; Here is what we have from DC (times are EDT, from http://www.multicasttech.com/status/index.html ) Tueseday : 6:00 AM - we saw 11617 ASN & 103978 bgp routes Tueseday :12:00 AM - we saw 11597 ASN & 103697 bgp routes Tueseday : 6:00 PM - we saw 11583 ASN & 103548 bgp routes Wednesday : 6:00 AM - we saw 11566 ASN & 103321 bgp routes Thursday : 6:00 AM - we saw 11590 ASN & 103447 bgp routes Friday : 6:00 AM - we saw 11534 ASN & 103376 bgp routes This is all the granularity I have, alas. The Friday drop is due apparently to loosing 25 Broadway. The Tuesday drop is slower and more complicated - Verio dropped 12 ASN by noon. Renater (AS 2200) dropped 32 ASN between noon and 6 PM. Other interesting ones lost include AS 98 ROCKEFELLER-AS AS 4190 BINGHAMTON-U AS 11872 SYRACUSE-UNIVERSITY AS 13619 BASELINEFINANCIALWTC (a sad AS name now). AS 17087 NYSA AS 19072 OFFICEMAX AS 19073 DIGITRADE AS 19755 KIMBANET Some of these may have lost peering, some, such as AS 13619 and 17087, may have been taken out entirely. Regards Marshall Eubanks > > > Marshall Eubanks tme(a)21rst-century.com

2 1

New Worm
by Ejay Hire 14 Sep '01

14 Sep '01

My Honeypot was infected with a new self-replicating worm yesterday. It appears to check for open win95/98/me netbios shares with read/write permission and installs wininit.exe (the scanner/infector) and the distributed.net client (In quiet Mode). Upon reboot, the scanner will start and search for infectable hosts during periods of inactivity. The windows 2000 pro pc seems unaffected. I will make the files available for dis-assembly if anyone is interested. To check for infection, look for the following files in c:/windows/system wininit.exe --Application wininit.log --Apparent Log file info.dll --Apparent Log file dnetc.exe -- Distributed.net client dnetc.ini -- Distributed.net config Buff-in.* -- Distributed.net work units ms216.exe -- Unknown, but the timestamp matched the other files...

2 1

RE: New Worm
by Hire, Ejay 14 Sep '01

14 Sep '01

I was in error. This is not a new worm. Just an old one that won't die. http://www.Symantec.com/avcenter/venc/data/w32.hllw.bymer.html <http://www.Symantec.com/avcenter/venc/data/w32.hllw.bymer.html> Apologies. -----Original Message----- From: Ejay Hire [mailto:Ejay.hire@broadslate.net] Sent: Friday, September 14, 2001 12:04 PM To: nanog(a)merit.edu Subject: New Worm My Honeypot was infected with a new self-replicating worm yesterday. It appears to check for open win95/98/me netbios shares with read/write permission and installs wininit.exe (the scanner/infector) and the distributed.net client (In quiet Mode). Upon reboot, the scanner will start and search for infectable hosts during periods of inactivity. The windows 2000 pro pc seems unaffected. I will make the files available for dis-assembly if anyone is interested. To check for infection, look for the following files in c:/windows/system wininit.exe --Application wininit.log --Apparent Log file info.dll --Apparent Log file dnetc.exe -- Distributed.net client dnetc.ini -- Distributed.net config Buff-in.* -- Distributed.net work units ms216.exe -- Unknown, but the timestamp matched the other files...

1 0

Forwarding - Reference - Assistance
by Richard Beach 14 Sep '01

14 Sep '01

The Following is a response I received from Tom Thomas regarding Assistance listing. He is having trouble posting to NANOG and asked me to send it along...... .......clipped............ -----Original Message----- From: Tom Thomas [mailto:tthomas@torrentnet.com] Sent: Friday, September 14, 2001 9:11 AM To: rbeach(a)nycap.rr.com; nanog(a)merit.edu Subject: Assistance Listing I have been reading Nanog and all the various opinions, I have my own here but its irrelevant to the list suffice to say the US will respond and that is a fact. Having spent most of my adult life in the military for the first time I wish I was still in but I cannot help in that manner anymore so I see lots of people expressing the need to help and I want to as well. So the point of this posting is if you can send me information on what you can offer in terms of support, when you can do this, how to get in touch with you I will compile this information onto a web site that we can all use to get help as needed. This I can and will do. I will be placing a page off the www.cpaw.org site for this purpose thanks for letting me intrude and thanks for letting me contribute. Tom Thomas .......clipped........ THANKS TOM! Richard A. Beach Troy, NY "What seems to be coming at you........ Is coming from you" Jack Flanders

1 0

Re: Internet assessment - September 13 2001
by Sean Donelan 14 Sep '01

14 Sep '01

On Fri, 14 September 2001, Leo Bicknell wrote: > On Fri, Sep 14, 2001 at 01:10:55AM -0700, Sean Donelan wrote: > > The Internet routed around much of the failure, but there seem to be > > only a few individual networks which are unreachable. The generator > > I know that MFN/AboveNet is quite willing to provide temporary > peering/transit services in the US and Europe for networks affected > by this action. I suspect most other providers are offering similar > help. I would hope that the Internet community could get these > networks back online in fairly short order to help keep communications > flowing. For those networks completely offline, can those with > phone contacts pass this message along to them via voice lines? I don't have a breakout of individual networks, so I can't give you contact information for the networks offline. I've just been following total networks, ASNs, etc. In particular Geoff's great graphs http://www.telstra.net/ops/bgp/bgp-active.html It appears a few hundred route announcements disappeared from the total of 104,400 routes. In other words, less that 1% of the routes. Telstra may be located on the other side of the globe, but I'll take data where I can find it. I can't tell how many are single-homed networks and servers located in directly impacted area of New York, and how much is due to a combination of failures in the area affecting both the primary, backup or alternate facilities.

1 0