- Test - lists.nanog.org

Fwd: Byte Night Manchester - Action for Children - donation help needed please :)
by Colin Johnston 28 Sep '15

28 Sep '15

Hopefully IT folks will donate to this great cause, hopefully folks will allow this posting :) > Dear all, > As my regular yearly charity participation event please support below > Byte Night Manchester - BT Manchester folks – Colin team of one. > > On Friday night next, 2nd Oct 2015 from 7pm to 6am next morning, I (Colin Johnston) am participating in > Action for Children Byte Night Manchester. > As we have been asked to dress up for nice social media pictures I decided that being dressed as a Sylvester Cat > would be good fun. > I have managed to get http://celebrationpartyshoponline.co.uk/stores <http://celebrationpartyshoponline.co.uk/stores> to give me a discount on the costume hire as well. > The Byte Night for Manchester is being held at Granada Studios in Manchester on the street of Coronation Street. > > We(Byte Night participants) are sleeping on the street in sleeping bags and foil survival bag. > > Please donate to this great cause, either by donation bucket in BT Bolton AMTE (Sylvester will be in Bolton on Thursday/Friday) or > BT Dial House Manchester (Sylvester will make a visit on Friday), > or via internet https://www.justgiving.com/bt-bt-manchester-folks/4w350m3/donate#MessageAnd… <https://www.justgiving.com/bt-bt-manchester-folks/4w350m3/donate#MessageAnd…> > > Please email me colin.johnstone(a)bt.com <mailto:colin.johnstone@bt.com> if donation made so I can keep track of donators list. > I want to transfer the total raised to Action for Children by middle of Oct so please give money via above either this week coming or next. > I will email folks with acknowledgement of final donation amount once received, would be great to get 500 pounds ++.. > > Pictures will be sent after the event for BT Today and all on this email to listJ > > Please give generously if you can afford it, pay day on Wednesday J > > Please distribute widely if you think others not mentioned would be willing to donate JJ > > Yours > > Colin Johnston

1 0

Re: Question re session hijacking in dual stack environments w/MacOS
by Dovid Bender 27 Sep '15

27 Sep '15

What about users on cgnat? I know isp's in the far east that only offer cgnat and it's pot lock how you go out. ------Original Message------ From: Michael Brown Sender: NANOG To: Brandon Butterworth To: nanog(a)nanog.org To: dhubbard(a)dino.hostasaurus.com Subject: Re: Question re session hijacking in dual stack environments w/MacOS Sent: Sep 26, 2015 23:19 ‎> Those site eventually learnt after much feedback not to assume on IPv4 address continuity. I could envision that those checks might now be relaxed‎ to checking for address continuity in the same /24 for instance. But when you're seeing the same session being used from two wildly different places (in this case, IPv4 and IPv6) at the SAME TIME, that does seem rather suspicious in the absence of other information. M. Regards, Dovid

4 3

Re: ARIN Region IPv4 Free Pool Reaches Zero
by Connor Wilkins 27 Sep '15

27 Sep '15

On 2015-09-26 22:56, Seth Mattinen wrote: > What's worked for me is not signing or renewing or buying things that > lack IPv6 support. While you're demanding better technology you may also want to include things like crypto in there. I've gotten proposals for things that support IPv6 but only work with SSLv2/SSLv3 with a weak cipher and with MD5 or SHA1 only. I've even had ones that didn't implement certificate verification at all or say they did but then it turned out not to work at all. Disgusting and unacceptable. (But they did support IPv6!) -- “Simply stated, we have a new formula for Coke.” --- Roberto C. Goizueta, Company Chairman, Coca-Cola

1 0

Re: Recent trouble with QUIC?
by Dovid Bender 27 Sep '15

27 Sep '15

I forgot who it was but I think it was a uni network. As an isp everything should be allowed as an end network you want to cya. Much like the hospital I was just at that had free wifi. Only ports 80 and 443 over tcp were allowed. That's when having ssh on 443 so you can proxy for alt ports really helps. ------Original Message------ From: James Bensley Sender: NANOG To: NANOG Operators' Group Subject: Re: Recent trouble with QUIC? Sent: Sep 26, 2015 10:54 On 26 September 2015 at 08:20, Mike Hale <eyeronic.design(a)gmail.com> wrote: > OH SNAP! Tiny Rick!!! Regards, Dovid

2 1

Re: Ear protection
by Dovid Bender 27 Sep '15

27 Sep '15

No but some one in Australia just bought the iPhone 6s via a robot. ------Original Message------ From: Alan Buxey Sender: NANOG To: Nick Hilliard To: nanog(a)nanog.org Subject: Re: Ear protection Sent: Sep 26, 2015 04:21 Great summary of the thread No-one using remote control robots with video feed etc for working in these environments then? Plans to? ;) alan Regards, Dovid

1 0

Re: Question re session hijacking in dual stack environments w/MacOS
by Brandon Butterworth 27 Sep '15

27 Sep '15

> From: David Hubbard <dhubbard(a)dino.hostasaurus.com> > Websites that require some type of authentication that is handled via > session cookies have been booting our users out randomly with "your ip > address has changed" type message. This occurs when their Mac decides > to switch between protocols because the site views it as a session > hijacking attempt when Joe User with session ID xyz switches from > 192.0.2.10 to 2001:db8::1:1:a or vice versa. > > Has anyone run into this? It's 1997 again? This used to be a common IPv4 problem for us as users exited through a cluster of squid caches which could result in a different address per request. Those site eventually learnt after much feedback not to assume on IPv4 address continuity. brandon

2 1

ARIN Region IPv4 Free Pool Reaches Zero
by John Curran 26 Sep '15

26 Sep '15

(Apologies for redistribution, but need to insure that this is seen by all in the region.) The IPv4 free pool for the ARIN region is now depleted; ISPs are encouraged to utilize IPv6 for additional customer growth and the IPv4 transfer market for their IPv4 interim needs. Thanks! /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] ARIN IPv4 Free Pool Reaches Zero Date: September 24, 2015 at 12:04:22 PM EDT To: <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> On 24 September 2015, ARIN issued the final IPv4 addresses in its free pool. ARIN will continue to process and approve requests for IPv4 address blocks. Those approved requests may be fulfilled via the Wait List for Unmet IPv4 Requests, or through the IPv4 Transfer Market. For information on the Waiting List, visit: https://www.arin.net/resources/request/waiting_list.html For information on IPv4 Transfers, visit: https://www.arin.net/resources/transfers/index.html Exhaustion of the ARIN Free Pool does trigger changes in ARIN's Specified Transfer policy (NRPM 8.3) and Inter-RIR Transfer policy (NRPM 8.4). In both cases, these changes impact organizations that have been the source entity in a specified transfer within the last twelve months: "The source entity (-ies within the ARIN Region (8.4)) will be ineligible to receive any further IPv4 address allocations or assignments from ARIN for a period of 12 months after a transfer approval, or until the exhaustion of ARIN's IPv4 space, whichever occurs first." Effective today, because exhaustion of the ARIN IPv4 free pool has occurred for the first time, there is no longer a restriction on how often organizations may request transfers to specified recipients. In the future, any IPv4 address space that ARIN receives from IANA, or recovers from revocations or returns from organizations, will be used to satisfy approved requests on the Waiting List for Unmet Requests. If we are able to fully satisfy all of the requests on the waiting list, any remaining IPv4 addresses would be placed into the ARIN free pool of IPv4 addresses to satisfy future requests. ARIN encourages customers with questions about IPv4 availability to contact hostmaster(a)arin.net or the Registration Services Help Desk at +1.703.227.0660. Regards, John Curran President and CEO American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

26 35

Last Call for presentations and Draft programme for RIPE 71
by Benno Overeinder 26 Sep '15

26 Sep '15

Colleagues, A list of currently accepted RIPE 71 presentations is now published at: https://ripe71.ripe.net/programme/ There are still few slots remaining for a final RIPE 71 programme and RIPE Programme Committee will accept new proposals until 11 October 2015. This is our last call for you to submit your proposals. You can find the CFP for RIPE 71 below, or at https://ripe71.ripe.net/submit-topic/cfp/, for your proposals for plenary session presentations, tutorials, workshops, BoFs (Birds of a Feather sessions) and lightning talks. Please also note that speakers do not receive any extra reduction or funding towards the meeting fee at the RIPE Meetings. Kind regards, Benno Overeinder RIPE PC Chair https://www.ripe.net/participate/meetings/ripe-meetings/pc ---------------------------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 71 will take place from 16-20 November 2015 in Bucharest, Romania. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 71. See the full descriptions of the different presentation formats, https://ripe71.ripe.net/submit-topic/presentation-formats/. Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than 11 October 2015. Proposals submitted after this date will be considered depending on the remaining available space in the programme. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity in operations - Commercial transactions of IPv4 addresses - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange Submissions RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour - Lightning talks: 10 minutes The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe71.ripe.net/submit-topic/submission-form/. - Lightning talks should also be submitted using the meeting submission system (https://ripe71.ripe.net/submit-topic/submission-form/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice---in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. - Due to potential technical issues, presenters/panellists should be physically present at the RIPE Meeting. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. -- Benno J. Overeinder NLnet Labs http://www.nlnetlabs.nl/

1 0

Re: Synful Knock questions...
by Hank Nussbacher 26 Sep '15

26 Sep '15

At 11:42 25/09/2015 -0700, Jake Mertel wrote: >Looks like Cisco's Talos just released a tool to scan your network for >indications of the SYNful Knock malware. Details @ >http://talosintel.com/scanner/ . More details here: http://blogs.cisco.com/security/talos/synful-scanner -Hank >-- >Regards, > >Jake Mertel >Ubiquity Hosting > > > >*Web: *https://www.ubiquityhosting.com >*Phone (direct): *1-480-478-1510 >*Mail:* 5350 East High Street, Suite 300, Phoenix, AZ 85054 > > >On Wed, Sep 16, 2015 at 7:33 AM, Stephen Fulton <sf(a)lists.esoteric.ca> >wrote: > > > Follow-up to my own post, Fireeye has code on github: > > > > https://github.com/fireeye/synfulknock > > > > > > On 2015-09-16 10:27 AM, Stephen Fulton wrote: > > > >> Interesting, anyone have more details on how to construct the scan using > >> something like nmap? > >> > >> -- Stephen > >> > >> On 2015-09-16 9:20 AM, Royce Williams wrote: > >> > >>> HD Moore just posted the results of a full-Internet ZMap scan. I didn't > >>> realize that it was remotely detectable. > >>> > >>> 79 hosts total in 19 countries. > >>> > >>> https://zmap.io/synful/ > >>> > >>> Royce > >>> > >>>

1 0

Ear protection
by Nick Hilliard 26 Sep '15

26 Sep '15

What are people using for ear protection for datacenters these days? I'm down to my last couple of corded 3M 1110: http://www.shop3m.com/3m-corded-earplugs-hearing-conservation-1110.html These work reasonably well in practice, with a rated nominal noise reduction rate of 29dB. Some people find them uncomfortable, but they work well for me. There are other ear plugs with rated NRR of up to 32-33dB. Anyone have any opinions on what brands work well for them? Nick

28 33