Re: Wired access to SMS?

2012-10-09 Thread steve pirk [egrep]
Have you looked at Google Voice much? I have mine set up to SMS all my
devices, including email delivery, and can enable/disable devices as
needed. The big benefit, is that I have an inbox full of all my old inbound
and outbound text messages.

It might be that I am missing a key element, but it looks like you want a
virtual (VoIP) SMS number, and be able to decide which devices in the US
receive the messages.
On Oct 9, 2012 12:56 PM, Lyle Giese l...@lcrcomputer.net wrote:

 On 10/09/12 14:35, William Herrin wrote:

 Hi Folks,

 I'm looking for a way to do wireline access to send and receive
 cellular phone short message service (SMS) messages. Despite all my
 google-fu, I have had limited luck finding anyone that meets my needs,
 so I'm hoping someone here has found the path through. My main
 criteria are:


 1. Low quantity, high reliability. I'll want a few dozen phone numbers
 and effectively I'll be sending to and receiving from phones I own.
 2. Wireline delivery to Honolulu and Northern Virginia. Dynamically
 move numbers between the two locations for failover purposes.
 3. U.S. based carrier. Tying in to the SMS system via Europe isn't
 acceptable to my customer.
 4. Solution must reach phones on all U.S. cellular carriers.
 5. Price is a very distant fifth criteria to the preceding four.

 I can consider Internet based systems where the provider uses U.S.
 based facilities and ties in to a U.S. phone network, provided that my
 standards of reliability and redundancy are met by their
 infrastructure.

 Alternately, I can also consider a wireless carrier that can provide
 two SIM-based phones with the same phone number for sending and
 receiving SMS messages. I'd put the sims in a pair of modems and
 manage deduplication of the received messages in software.


 Has anybody had any luck with this kind of requirement? Which vendors
 should I talk to and who at the vendor?

 Thanks,
 Bill Herrin


  If these are your phones, you will be controlling the carrier.  If they
 are all one carrier, you can find out how to send to that carrier.  For
 other uses where you don't control the carrier, it becomes a nightmare and
 where you may want to get a service provider to do that for you.

 Most carriers have a way to send messages directly to phones and I use a
 phone from one specific carrier that has access via modems(using TAP
 protocol and I use qpage(www.qpage.org)).  You can also use qpage via a
 public(but carrier specific) snpp server, but I have not had a need for
 that as I need/want off Internet delivery of messages to the carrier's
 network.

 On the expensive side, lookup 'sms short code' and you will see
 information on how that works and more info on service providers in this
 area.

 Lyle Giese
 LCR Computer Services, Inc.




Re: Wired access to SMS?

2012-10-09 Thread steve pirk [egrep]
I will need to look into the Google Apps for business part of the voice
product. I have not really tried apps accounts yet.

As far as APIs go, it looks like most are unofficial, but there is
community support.
Check googlevoice.org  and also code.google. com/p/pygooglevoice for
examples of what can be accomplished today.

The Canada part is a showstopper, but it should be fairly easy to use a for
exit node in the US to allow you to sign up for a US number. I do know that
US users can still call all of Canada for free through the end of this
year.

My gut feel is that the telcos are what is keeping Google from releasing
the product to a broader audience, e.g. more countries than the US.
On Oct 9, 2012 3:25 PM, TJ trej...@gmail.com wrote:

 On Tue, Oct 9, 2012 at 5:47 PM, William Herrin b...@herrin.us wrote:

 On Tue, Oct 9, 2012 at 5:05 PM, steve pirk [egrep] st...@pirk.com
 wrote:
  Have you looked at Google Voice much? I have mine set up to SMS all my
  devices, including email delivery, and can enable/disable devices as
  needed. The big benefit, is that I have an inbox full of all my old
 inbound
  and outbound text messages.


 ++1 on Google Voice.



 Hi Steve,

 Google voice is a fine service and if they sold it with an API, I
 might well buy it. As a free public service with a strictly unofficial
 API, I can't seriously consider using it in my product's critical
 path. I need a service whose provider is actually obligated to keep it
 working to the standard of resilience typical of the rest of my
 system.

 Let me put it another way: with google voice, google mail, google
 search you are not the customer. You're the product. I use gmail for
 my personal mail and I can live with that. For business services, I
 need to be the customer.



 FWLIW - I think that is a bit harsh, even if mostly accurate.

 I love GVoice for sending  receiving  texts across multiple devices, some
 of which aren't cellular - or wired - at all :).
 *(Also have phone calls ring not just my phones, but Skype and GChat as
 well ...)*


 /TJ



Re: Fyi...

2012-08-01 Thread steve pirk [egrep]
On Wed, Aug 1, 2012 at 12:50 PM, Robert Mathews (OSIA)
math...@hawaii.eduwrote:


 It it is of interest...


 https://www.change.org/petitions/from-educause-higher-ed-wireless-networking-admin-group


I was not aware of this limitation. Android and other Chrome devices do not
have issues like these. Wow.

--steve


Re: FYI Netflix is down

2012-07-11 Thread steve pirk [egrep]
On Mon, Jul 9, 2012 at 10:20 AM, Dave Hart daveh...@gmail.com wrote:

 We continue to investigate why these connections were timing out
 during connect, rather than quickly determining that there was no
 route to the unavailable hosts and failing quickly.

 potential translation:

 We continue to shoot ourselves in the foot by filtering all ICMP
 without understanding the implications.


Sorry to mention my favorite hardware vendor again, but that is what I
liked about using F5 BigIP as load balancing devices... They did layer 7
url checking to see if the service was really responding (instead of just
pinging or opening a connection to the IP).
We performed tests that would do a complete LDAP SSL query to verify a
directory server could actually look up a person. If it failed to answer
within a certain time frame, then it was taken out of rotation.

I do not know if that was ever implemented in production, but we did verify
it worked.

On the software in the hardware can fail point, my only defense is you do
redundant testing of the watcher devices, and have enough of them to vote
misbehaving ones out of service. Oh, and it is best if the global load
balancing hardware/software is located somewhere else besides the data
centers being monitored.

-- 
steve pirk


Re: FYI Netflix is down

2012-07-08 Thread steve pirk [egrep]
On Tue, Jul 3, 2012 at 1:00 PM, Ryan Malayter malay...@gmail.com wrote:

 Doing it the right way makes the cloud far less cost-effective and far
 less agile. Once you get it all set up just so, change becomes very
 difficult. All the monitoring and fail-over/fail-back operations are
 generally application-specific and provider-specific, so there's a lot
 of lock-in. Tools like RightScale are a step in the right direction,
 but don't really touch the application layer. You also have to worry
 about the availability of yet another provider!


I am pretty sure Netflix and others were trying to do it right, as they
all had graceful fail-over to a secondary AWS zone defined.
It looks to me like Amazon uses DNS round-robin to load balance the zones,
because they mention returning a list of addresses for DNS queries, and
explains the failure of the services to shunt over to other zones in their
postmortem.

 Elastic Load Balancers (ELBs) allow web traffic directed at a single IP
 address to be spread across many EC2 instances. They are a tool for high
 availability as traffic to a single end-point can be handled by many
 redundant servers. ELBs live in individual Availability Zones and front EC2
 instances in those same zones or in other Availability Zones.



 ELBs can also be deployed in multiple Availability Zones. In this
 configuration, each Availability Zone’s end-point will have a separate IP
 address. A single Domain Name will point to all of the end-points’ IP
 addresses. When a client, such as a web browser, queries DNS with a Domain
 Name, it receives the IP address (“A”) records of all of the ELBs in random
 order. While some clients only process a single IP address, many (such as
 newer versions of web-browsers) will retry the subsequent IP addresses if
 they fail to connect to the first. A large number of non-browser clients
 only operate with a single IP address.
 During the disruption this past Friday night, the control plane (which
 encompasses calls to add a new ELB, scale an ELB, add EC2 instances to an
 ELB, and remove traffic from ELBs) began performing traffic shifts to
 account for the loss of load balancers in the affected Availability Zone.
 As the power and systems returned, a large number of ELBs came up in a
 state which triggered a bug we hadn’t seen before. The bug caused the ELB
 control plane to attempt to scale these ELBs to larger ELB instance sizes.
 This resulted in a sudden flood of requests which began to backlog the
 control plane. At the same time, customers began launching new EC2
 instances to replace capacity lost in the impacted Availability Zone,
 requesting the instances be added to existing load balancers in the other
 zones. These requests further increased the ELB control plane backlog.
 Because the ELB control plane currently manages requests for the US East-1
 Region through a shared queue, it fell increasingly behind in processing
 these requests; and pretty soon, these requests started taking a very long
 time to complete.

 http://aws.amazon.com/message/67457/


 *In reality, though, Amazon data centers have outages all the time. In
 fact, Amazon tells its customers to plan for this to happen, and to be
 ready to roll over to a new data center whenever there’s an outage.*

 *That’s what was supposed to happen at Netflix Friday night. But it
 didn’t work out that way. According to Twitter messages from Netflix
 Director of Cloud Architecture Adrian Cockcroft and Instagram Engineer Rick
 Branson, it looks like an Amazon Elastic Load Balancing service, designed
 to spread Netflix’s processing loads across data centers, failed during the
 outage. Without that ELB service working properly, the Netflix and Pintrest
 services hosted by Amazon crashed.*

 http://www.wired.com/wiredenterprise/2012/06/real-clouds-crush-amazon/

I am a big believer in using hardware to load balance data centers, and not
leave it up to software in the data center which might fail.

Speaking of services like RightScale, Google announced Compute Engine at
Google I/O this year. BuildFax was an early Adopter, and they gave it great
reviews...
http://www.youtube.com/watch?v=LCjSJ778tGU

It looks like Google has entered into the VPS market. 'bout time... ;-]
http://cloud.google.com/products/compute-engine.html

--steve pirk


Re: FYI Netflix is down

2012-07-01 Thread steve pirk [egrep]
On Sun, Jul 1, 2012 at 11:38 AM, Jay Ashworth j...@baylink.com wrote:

 Not entirely.  Datacenters do go down, our best efforts to the contrary
 notwithstanding.  Amazon doesn't guarantee you redundancy on EC2, only
 the tools to provide it yourself.  25% Amazon; 75% service provider
 clients;
 that's my appraisal of the blame.


From a Wired article:

 That’s what was supposed to happen at Netflix Friday night. But it didn’t
 work out that way. According to Twitter messages from Netflix Director of
 Cloud Architecture Adrian Cockcroft and Instagram Engineer Rick Branson, it
 looks like an Amazon Elastic Load Balancing service, designed to spread
 Netflix’s processing loads across data centers, failed during the outage.
 Without that ELB service working properly, the Netflix and Pintrest
 services hosted by Amazon crashed.

http://www.wired.com/wiredenterprise/2012/06/real-clouds-crush-amazon/

The GSLB fail-over that was supposed to take place for the affected
services (that had configured their applications to fail-over) failed.

I heard about this the day after Google announced the Compute Engine
addition to the App Engine product lines they have. The demo was awesome.
I imagine Google has GSLB down pat by now, so some companies might start
looking... ;-]

--steve


Re: Verisign deep-hacked. For months.

2012-02-05 Thread steve pirk [egrep]
On Thu, Feb 2, 2012 at 16:42, Zaid Ali z...@zaidali.com wrote:

 That part is ambiguous at the moment since Verisign has not released
 details. Symantec has bought the SSL part of the business and claim that
 the SSL acquired network is not compromised. Sounds like lots of
 assumptions being drawn.

 Zaid


I am thinking it is related to the Chinese hacking of Gmail accounts in the
fall of 2010. Symantic acquired the SSL business in August 2010. The
hacking could have been in the spring for all we know. Google uses Thwate
as it's CA, but Thwate has Builtin Object Token: Verisign Class 3 Public
Primary Certificate Authority as it's root.

Seems to me part of the problem was traced back to browsers not checking
revoked certs via the browser CRLs. Didn't some in the chain have revoked
certs still installed?

-- 
steve pirk
yensid
father... the sleeper has awakened... paul atreides - dune
Google+ pirk.com


Google+ now available for Google Apps domains

2011-10-27 Thread steve pirk [egrep]
Y'all ragged on me because Google+ was only available to gmail users...
Well, now you can enable it for your users from the control panel on your
Google Apps domains...

Google Apps administrators can manually turn on
Google+http://www.google.com/support/a/bin/answer.py?answer=1631744
for
 their organization. Once Google+ is turned on, users will need to sign up
 at google.com/+ http://www.google.com/+ to get started. For customers
 who use Google Apps for Business or the free version of Google Apps and who
 have chosen to automatically enable new 
 serviceshttp://www.google.com/support/a/bin/answer.py?answer=82691,
 Google+ will automatically become available to all of your users over the
 next several days.

 *Editions included:*
 Google Apps, Google Apps for Business, Government and Education*


http://googleappsupdates.blogspot.com/2011/10/google-now-available-for-google-apps.html

Now, do I toss the last 1.5 years of posts and use my apps domain, or stay
as my gmail user account. Decisions, decisions... Methjinks history is the
better part of valor, so I will stay using my gmail account. It would be
cool if you could link them.

-- 
steve pirk
yensid
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09 - Google+ pirk.com


Re: Facebook insecure by design

2011-10-26 Thread steve pirk [egrep]
On Oct 24, 2011 7:55 AM, Robert Bonomi bon...@mail.r-bonomi.com wrote:


   You can even download it all and erase yourself
if
  you want out.

 Don't count on it.  You may 'disappear' from public view, but that does
 not necessarily mean the data is truely 'gone'.  Specific example -- if
you
 request a USENET posting to be removed, all they do is make it 'invisible'
 to the world.  It is _not_ removed from the databases, or from inernal
 access/use.



That is a very good point, and one of the things that is being tested now
that Buzz is going into archive mode. Users are given the option of backing
up their posts on Buzz, and then deleting their Buzz content. Many like
myself will just leave it there. It is a year+ of history, and what I posted
publicly can stay public.

It is supposed to remove all your Buzz content from the service and I
believe it includes the content shared only with certain individuals. It
does not completely erase it, because I believe email copies of the posts
and comments that people had sent to their Gmail accounts will remain with
those users.

Deleting a product like your Picasa web albums is permanent as far as I
know, but I will definitely ask some people on the Picasa team. Deleting
your search history and other Dashboard items is supposed to be permanent,
but as you pointed out, we are taking Google's word for it.

--steve


Re: Facebook insecure by design

2011-10-23 Thread steve pirk [egrep]
Just about everything on Google pages is https these days, even search if
you enable it.

If anybody on this thread uses gmail com a you really ought to take a look
at google plus. Compare the way user privacy is the primary objective,
versus the share everything by default of facebook.

I cannot think of anything that could do something like this in the Gmail or
Plus products.
 On Oct 19, 2011 11:22 PM, Murtaza leothelion.murt...@gmail.com wrote:

 Going back to the initial security problem identified by Williams, I also
 experienced something today. I guess he is right about that. I am behind a
 proxy and I just disabled the proxy for Secure Web which means HTTPS.
 Now guess what I was still able to access facebook while I was not able to
 access google. That clearly means there is something wrong. What do you
 guys
 think?
 Ghulam

 On Wed, Oct 5, 2011 at 2:28 AM, Bill.Pilloud bill.pill...@gmail.com
 wrote:

  Is this not the nature of social media? If you want to make sure
 something
  is secure (sensitive information), Why is it on social media. If you are
  worried about it being monetised, I think Google has already done that.
  - Original Message - From: Joel jaeggli joe...@bogus.com
  To: Jimmy Hess mysi...@gmail.com
  Cc: nanog@nanog.org
  Sent: Sunday, October 02, 2011 4:05 PM
  Subject: Re: Facebook insecure by design
 
 
 
   On 10/2/11 15:43 , Joel jaeggli wrote:
 
  On 10/2/11 15:25 , Jimmy Hess wrote:
 
  On Sun, Oct 2, 2011 at 4:53 PM,  valdis.kletni...@vt.edu wrote:
 
  On Sun, 02 Oct 2011 08:38:36 PDT, Michael Thomas said:
 
  I'm not sure why lack of TLS is considered to be problem with
  Facebook.
  The man in the middle is the other side of the connection, tls or
  otherwise.
 
  Ooh.. subtle. :)
 
 
  Man in the Middle (MITM) is a technical term that refers to a rather
  specific kind of attack.
 
  In this case, I believe the proper term would be just The man.
  [Or  Man at the Other End  (MATOE)];  you either trust Facebook with
  info to send to
  them or you don't, and network security is only for securing the
  transportation of that information
  you opt to send facebook.
 
 
  alice sends charlie a message using bob's api, bob can observe and
  probably monetize the contents.
 
   Yes, if Alice sends Bob an encrypted message that Bob can read, and
  Bob turns out to
  be untrustworthy,  then  Bob can sell/re-use the information in an
  abusive/unapproved way for
  personal or economic profit.
 
 
  charlie is probably untrustworthy, bob is probably moreso (mostly
 
   ^
  trustworthy
 
  because bob has more to lose than charlie), alice isn't cognizant of
 the
  implications of running charlie's app on bob's platform despite the
  numerous disclaimers she blindly clicked through on the way there.
 
 
 
   --
  -JH
 
 
 
 
 
 
 
 



Re: Facebook insecure by design

2011-10-23 Thread steve pirk [egrep]
I follow Lauren on plus, and also on buzz, and we have discussed privacy
stuff a lot.

The way I look at it, unless you want to host everything yourself, you have
to choose someone to be your Unix like home directory in the cloud.

Of all the internet entities out there, Google has had the best track record
of protecting your data. You can even download it all and erase yourself if
you want out.

Apps accounts and pseudonym  accounts are coming soon. It was announced by
Vic himself at web 2.0.

I need to send that post by Lauren to the gmail account. He always finds
good issues. It could be that I am off base.
On Oct 23, 2011 4:04 PM, Jay Ashworth j...@baylink.com wrote:

 - Original Message -
  From: Jeroen Massar jer...@unfix.org

  On 2011-10-23 19:43 , steve pirk [egrep] wrote:
   Just about everything on Google pages is https these days, even
   search if you enable it.
 
  (or just use https://encrypted.google.com which is available for quite
  some time already)

 Note that Lauren Weinstein has just put out a Privacy Digest posting noting
 that the referer behavior differs between https://encrypted.google.com and
 https://www.google.com in a way that implies that, again, someone at
 Google
 may not have gotten the Don't Be Evil memo...

  http://lauren.vortex.com/archive/000906.html

 Cheers,
 -- jra
 --
 Jay R. Ashworth  Baylink
 j...@baylink.com
 Designer The Things I Think   RFC
 2100
 Ashworth  Associates http://baylink.pitas.com 2000 Land Rover
 DII
 St Petersburg FL USA  http://photo.imageinc.us +1 727 647
 1274




Re: Facebook insecure by design

2011-10-23 Thread steve pirk [egrep]
That was a most excellent example Jay. I see what the issue is now.

This could be related to work Google did to plus shortly after launch. Buzz
and now Google+ are https only. Google cooked up a URL processer that took
clicks to external content like article links, and massaged the referrer be
readable as http to show where the visitor came from. Sanitized of any
personal data I assume.

The problem they were trying to fix was no one knew any users were coming
from Buzz clicks. They fixed that in +. I am thinking something of the same
might fix the search issues. It could also be that a Googler saw Lauren's
post and the debate has already started.

-steve
On Oct 23, 2011 4:04 PM, Jay Ashworth j...@baylink.com wrote:

 - Original Message -
  From: Jeroen Massar jer...@unfix.org

  On 2011-10-23 19:43 , steve pirk [egrep] wrote:
   Just about everything on Google pages is https these days, even
   search if you enable it.
 
  (or just use https://encrypted.google.com which is available for quite
  some time already)

 Note that Lauren Weinstein has just put out a Privacy Digest posting noting
 that the referer behavior differs between https://encrypted.google.com and
 https://www.google.com in a way that implies that, again, someone at
 Google
 may not have gotten the Don't Be Evil memo...

  http://lauren.vortex.com/archive/000906.html

 Cheers,
 -- jra
 --
 Jay R. Ashworth  Baylink
 j...@baylink.com
 Designer The Things I Think   RFC
 2100
 Ashworth  Associates http://baylink.pitas.com 2000 Land Rover
 DII
 St Petersburg FL USA  http://photo.imageinc.us +1 727 647
 1274




Re: [outages] News item: Blackberry services down worldwide

2011-10-12 Thread steve pirk [egrep]
Found this posting:

 Blackberry down. Research in Motion (RIM) sent the following e-mail to all
 clients:
 To: All Blackberry Clients

 Please be advised that Research in Motion (RIM) is experiencing world-wide
 connectivity issues affecting email flow to and from all Blackberries.
 RIM has not provided an expected time to resolution as of yet.
 Once we receive notice that the issue is resolved, we will forward that
 information to you.

 Thank you,
 Corporate Information Systems/Mobile Services



On Wed, Oct 12, 2011 at 10:05, Leigh Porter leigh.por...@ukbroadband.comwrote:



  -Original Message-
  From: D. Marshall Lemcoe Jr. [mailto:fo...@lemcoe.com]
  Sent: 12 October 2011 18:01
  Cc: nanog@nanog.org
  Subject: Re: [outages] News item: Blackberry services down worldwide
 
  Haven't received an e-mail on my Blackberry since around 4AM, located
  in Atlanta.
 

 Email on my iPhone is working fine.. ;-)

 --
 Leigh


 __
 This email has been scanned by the MessageLabs Email Security System.
 For more information please visit http://www.messagelabs.com/email
 __




-- 
steve pirk
yensid
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09 - Google+ pirk.com


Re: Were A record domain names ever limited to 23 characters?

2011-10-11 Thread steve pirk [egrep]
Hahahahaha! That is awesome.

On Mon, Oct 10, 2011 at 17:50, bmann...@vacation.karoshi.com wrote:

  back in the day,

  abcdefghijklmnopqrstuvwxyz1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ.ca.us.

  existed to test the length of DNS label.  circa 1992

  ^b.com also existed (yes, we considered ^p)


  the heady days of DNS evolution!

 /bill


 On Fri, Oct 07, 2011 at 06:16:46PM -0700, Owen DeLong wrote:
  NSI was never the only registrar. They were just the only registrar
  for COM, ORG, NET, EDU, and possibly a few other TLDs, but,
  they were, for example, never the registrar for US or many other
  CCTLDs.
 
  Therefore, it was not internet wide, though I will admit that it did
  cover most of the widely known gTLDs.
 
  Owen
 
  On Oct 7, 2011, at 4:45 PM, steve pirk [egrep] wrote:
 
   It turns out it was an artificial limitation on Network Solution's
 part.
   Being the only registrar at the time, it was pretty much internet wide
 at
   that point, contrary to the RFC spec.
  
   What was so funny was that someone got Internic/Network Solutions to up
 the
   limit. Apparently just to save some money on reprinting movie
 posters... ok,
   so they would have had to change some trailers...
   ;-]
  
   On Fri, Oct 7, 2011 at 16:39, Jimmy Hess mysi...@gmail.com wrote:
  
   On Fri, Sep 30, 2011 at 10:32 PM, Joe Hamelin j...@nethead.com
 wrote:
   I remember tales from when there was an eight character limit.  But
 that
   was
   back when you didn't have to pay for them and they assigned you a
 class-c
   block automatically.  Of course it took six weeks to register because
   there
   was only one person running the registry.
  
   You may be referring to a limitation of a certain OS regarding a
   hostname; or some network's policy.
   But the DNS protocol itself never had a limit of 8 characters.
   When we are talking about the contents of A record names,
  
   I would refer you to
   http://www.rfc-editor.org/rfc/rfc2181.txt
   RFC 2181
   Clarifications to the DNS Specification R. Elz, R. Bush
   [ July 1997 ] (TXT = 36989) (Updates RFC1034, RFC1035, RFC1123)
   (Updated-By RFC4035, RFC2535, RFC4343, RFC4033, RFC4034, RFC5452)
   (Status: PROPOSED STANDARD) (Stream: IETF, Area: int, WG: dnsind) 
  
   
   Elz  Bush  Standards Track[Page
 12]
   ...
   Occasionally it is assumed that the Domain Name System serves only
the purpose of mapping Internet host names to data, and mapping
Internet addresses to host names.  This is not correct, the DNS is a
general (if somewhat limited) hierarchical database, and can store
almost any kind of data, for almost any purpose.
   ...
   11. Name syntax
   
   The length of any one label is limited to between 1 and 63 octets.  A
   full domain
name is limited to 255 octets (including the separators).  The zero
length full name is defined as representing the root of the DNS tree,
and is typically written and displayed as ..  Those restrictions
aside, any binary string whatever can be used as the label of any
resource record.
   
  
   --
   -JH
  
  
  
  
   --
   steve pirk
   refiamerica.org
   father... the sleeper has awakened... paul atreides - dune
   kexp.org member august '09
 





-- 
steve pirk
yensid
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09 - Google+ pirk.com


Y'all know Google is offering public DNS services now?

2011-10-10 Thread steve pirk [egrep]
I saw this in a post from Travis Wise of Google yesterday. Pretty cool for
those users who do not want to use their ISP's name servers, or just want to
have dns resolve quickly from anywhere in the world. In either case, I think
it is cool ;-]

http://code.google.com/speed/public-dns/

Here is the original post - Yes, this one is public... oops!
https://plus.google.com/111937447827665620879/posts/27S6QB8j1Ry

Nice easy numbers to remember too. 8.8.8.8 and 8.8.4.4

-- 
steve pirk
yensid
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09


Re: Y'all know Google is offering public DNS services now?

2011-10-10 Thread steve pirk [egrep]
Wow, consider me educated on old news. LOL
I imagine it is new to many of the users on the new service they launched. I
completely forgot that Nanog would probably be the first to comment and
chime in when it first became available.

Thanks for the information. I will definitely research the CDN issues. Back
to school steve...Why did I

Awesome link Todd - Why did I think that the resolving server would already
know where network path wise the request came from. Let me post this as a
comment and ask how the CDN endpoint routing is working.

Better yet, change the dns on my router, and Netflix on the Google TV should
let me know how well it is streaming.

--steve
On Mon, Oct 10, 2011 at 15:10, Michael Painter tvhaw...@shaka.com wrote:

 Todd Underwood wrote:

 not bad for CDNs anymore:

 http://arstechnica.com/**telecom/news/2011/08/opendns-**
 and-google-working-with-cdns-**on-dns-speedup.arshttp://arstechnica.com/telecom/news/2011/08/opendns-and-google-working-with-cdns-on-dns-speedup.ars

 t


 Fwiw, ol' Steve Gibson has written a small (167KB), .exe, DNS Benchmark.
 It's easy to add 8.8.8.8 and 8.8.8.4 (or any nameserver) to the .ini file
 from within the program .
 http://www.grc.com/dns/**benchmark.htmhttp://www.grc.com/dns/benchmark.htm
 --Michael





-- 
steve pirk
yensid
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09 - Google+ pirk.com


Re: Were A record domain names ever limited to 23 characters?

2011-10-07 Thread steve pirk [egrep]
I posted a story about a domain that was one character too long on Google+.
A few old-school Disney Online people remembered it enough to comment/+1 it,
and agreed that it did happen. This event has bothered me for years, because
everyone seemed to think long names were always possible. I kept thinking I
imagined the whole thing, but it did happen after all.
Too funny.

https://plus.google.com/114144561369449816821/posts/MvZYRvGmH5a
or
http://goo.gl/WHEP3
if you prefer a shortened url.
--steve

On Fri, Oct 7, 2011 at 11:28, Lamar Owen lo...@pari.edu wrote:

 On Friday, September 30, 2011 05:54:38 PM steve pirk [egrep] wrote:
  I seem to recollect back the 1999 or 2000 times that I was unable to
  register a domain name that was 24 characters long. Shortly after that, I
  heard that the character limit had been increased to like 128 characters,
  and we were able to register the name.
 
  Can anyone offer some input, or is this a memory of a bad dream?
  ;-]

 At least as of 2008, you could go 45 characters, not counting the TLD:
 ++
 $ whois pneumonoultramicroscopicsilicovolcanoconiosis.com
 [Querying whois.verisign-grs.com]
 [Redirected to whois.above.com]
 [Querying whois.above.com]
 [whois.above.com]
 The Registry database contains ONLY .COM, .NET, .EDU domains and
 Registrars.Registration Service Provided By: ABOVE.COM, Pty. Ltd.
 Contact: +613.95897946

Domain Name: PNEUMONOULTRAMICROSCOPICSILICOVOLCANOCONIOSIS.COM

Registrant:
Above.com Domain Privacy
8 East concourse
Beaumaris
VIC
3193
AU
pneumonoultramicroscopicsilicovolcanoconiosis@privacy.above.com
Tel. +61.395897946
Fax.

Creation date: 2008-02-20
Expiration Date: 2012-02-20
 ...
 $ ping www.pneumonoultramicroscopicsilicovolcanoconiosis.com
 PING www.pneumonoultramicroscopicsilicovolcanoconiosis.com (69.43.161.151)
 56(84) bytes of data.
 64 bytes from 69.43.161.151: icmp_req=1 ttl=50 time=85.9 ms
 64 bytes from 69.43.161.151: icmp_req=3 ttl=50 time=85.7 ms
 64 bytes from 69.43.161.151: icmp_req=4 ttl=50 time=85.8 ms
 64 bytes from 69.43.161.151: icmp_req=5 ttl=50 time=85.6 ms
 ^C
 --- www.pneumonoultramicroscopicsilicovolcanoconiosis.com ping statistics
 ---
 5 packets transmitted, 4 received, 20% packet loss, time 4002ms
 rtt min/avg/max/mdev = 85.618/85.815/85.984/0.132 ms
 +

 FWIW.




-- 
steve pirk
refiamerica.org
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09


Re: Were A record domain names ever limited to 23 characters?

2011-10-07 Thread steve pirk [egrep]
It turns out it was an artificial limitation on Network Solution's part.
Being the only registrar at the time, it was pretty much internet wide at
that point, contrary to the RFC spec.

What was so funny was that someone got Internic/Network Solutions to up the
limit. Apparently just to save some money on reprinting movie posters... ok,
so they would have had to change some trailers...
;-]

On Fri, Oct 7, 2011 at 16:39, Jimmy Hess mysi...@gmail.com wrote:

 On Fri, Sep 30, 2011 at 10:32 PM, Joe Hamelin j...@nethead.com wrote:
  I remember tales from when there was an eight character limit.  But that
 was
  back when you didn't have to pay for them and they assigned you a class-c
  block automatically.  Of course it took six weeks to register because
 there
  was only one person running the registry.

 You may be referring to a limitation of a certain OS regarding a
 hostname; or some network's policy.
 But the DNS protocol itself never had a limit of 8 characters.
 When we are talking about the contents of A record names,

 I would refer you to
 http://www.rfc-editor.org/rfc/rfc2181.txt
 RFC 2181
 Clarifications to the DNS Specification R. Elz, R. Bush
 [ July 1997 ] (TXT = 36989) (Updates RFC1034, RFC1035, RFC1123)
 (Updated-By RFC4035, RFC2535, RFC4343, RFC4033, RFC4034, RFC5452)
 (Status: PROPOSED STANDARD) (Stream: IETF, Area: int, WG: dnsind) 

 
 Elz  Bush  Standards Track[Page 12]
 ...
 Occasionally it is assumed that the Domain Name System serves only
   the purpose of mapping Internet host names to data, and mapping
   Internet addresses to host names.  This is not correct, the DNS is a
   general (if somewhat limited) hierarchical database, and can store
   almost any kind of data, for almost any purpose.
 ...
 11. Name syntax
 
 The length of any one label is limited to between 1 and 63 octets.  A
 full domain
   name is limited to 255 octets (including the separators).  The zero
   length full name is defined as representing the root of the DNS tree,
   and is typically written and displayed as ..  Those restrictions
   aside, any binary string whatever can be used as the label of any
   resource record.
 

 --
 -JH




-- 
steve pirk
refiamerica.org
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09


Re: Were A record domain names ever limited to 23 characters?

2011-09-30 Thread steve pirk [egrep]
Found a decent starting reference. It was a Network solutions limit... I
*knew* it! LOL
http://www.123-domain-register.com/longdomainnames.htm

The domain in question was inspectorgadgetthemovie.com 27 characters long
including the .tld. I was off by one, the limit was 22 characters for the A
record name and 4 characters for .com, .net, .org, .gov and .edu.

From the 123-domain-register web page:

 The word is out... and the experts have been taking advantage of a change
 in Domain Name regulations that allows up to 67 characters in domain names.

 How this will impact you:

-

Long domain names filled with keywords can get you ranked higher on the
search engines. (yes, the search engines will rank them)

-

For those who could not get a DOT.COM domain name, or were limited by
the 22 character limit, those days are over...for awhile anyway.

-

This revolution is driven by entrepreneurs who can act quickly. If you
do not act soon, all the good domains will be gone, and you will have to 
 pay
premiums you do not want to in order get the domain name you want.

 Since 1993, Network Solutions has registered more than 3.4 million domain
 names -- all limited to 26 characters. Now that their exclusive government
 contract is ending, competitors have tossed this artificial limit and are
 allowing longer names.

Cool, I was not dreaming... ;-]
--steve

On Fri, Sep 30, 2011 at 15:00, bmann...@vacation.karoshi.com wrote:

 On Fri, Sep 30, 2011 at 02:54:38PM -0700, steve pirk [egrep] wrote:
  I seem to recollect back the 1999 or 2000 times that I was unable to
  register a domain name that was 24 characters long. Shortly after that, I
  heard that the character limit had been increased to like 128 characters,
  and we were able to register the name.
 
  Can anyone offer some input, or is this a memory of a bad dream?
  ;-]
 
  -- Steve Pirk
  Yensid

 the foundational DNS spec sez:


 http://www.ietf.org/rfc/rfc1035.txt

 2.3.1
 [elided]
 There are also some restrictions on the length.  Labels must be 63
 characters or less.

 /bill




-- 
steve pirk
refiamerica.org
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09


Re: Google DNS just disappeared

2011-07-18 Thread steve pirk [egrep]
If you want to be able to ask Googlers directly on issues like this, you
might try Google+. I am trying to spam, it is just that they are all
available on there. Here is something Scoble posted the other day:

 I just spent an hour talking with a Google exec about + and I came away
 with a few things:


 1. Google employees used to not be able to tell you what they are working
 on. Those days are gone.

 2. There is more intellectual curiosity inside Google than I have seen in
 quite some time.

 3. The + team is driven by our excitement and that has caused sizable
 shifts in employee attention. Translation: new features are coming. Everyone
 wants to work for a winner.

 This new Google attitude is something that feeds on itself. Translation: I
 am excited about the future here in a way that I was never excited about
 Buzz.



It has been a while since I posted, but if anyone wants an invite, ping this
account or pirkster at gmail.
--steve

On Thu, Jul 14, 2011 at 23:00, Cody Rose c...@killsudo.info wrote:

 It appeared to be very brief, I just happened to be in a Google Plus
 Hangout
 when the chat died then my Gtalk died followed by my Google homepage.

 By the time I got done checking DNS and was getting on a trace-route server
 my
 chat reconnected and  service was back to normal.

 Just thought it was unusual to see all my Google services go offline at the
 same
 time.

 Regards,

 Cody Rose
 NOC  Sys Admin
 Website: www.killsudo.info
 email: c...@killsudo.info




-- 
steve pirk
refiamerica.org
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09
_
NANOG mailing list
NANOG@nanog.org
https://mailman.nanog.org/mailman/listinfo/nanog


Re: Post positive reviews

2010-12-22 Thread steve pirk [egrep]
Is this spam? ;-]

I have been doing a lot of playing with Google Places and the new HotPot
user ranking/review product, and for once, you get an honest list of reviews
by local people.

Only Google account holders can post reviews in the by Google users
section. I believe they also have to have a public profile.

So, trashing is possible, but you have to be able to back it up or you might
find the local community shouting you down ;-]

I really is a fairly neat twist on building a new kind of Yellow Pages...

--steve
On Tue, Dec 14, 2010 at 11:40, Eugene Zola angelar...@gmail.com wrote:

 Google’s Huge Change and How it affects you.

 •Anyone can now post bad reviews and kill your rank.
 •We post good reviews and improve your rank.
 •We post good reviews to keep others from killing your rank.

 Google: Judge, Jury and Online Shopping Executioner

  Google rank is based on reviews of your business?

 Google Statement:
 ...in the last few days we developed an algorithmic solution which detects
 the merchant from the Times article along with hundreds of other merchants
 that, in our opinion, provide an extremely poor user experience. The
 algorithm we incorporated into our search rankings represents an initial
 solution to this issue, and Google users are now getting a better
 experience
 as a result.

 This means that anyone can write bad reviews about your business and lower
 your ranking.
 We knew that getting good reviews and not getting bad reviews was always
 important. Now it is a must to have good reviews for your business to keep
 the rank safe or to improve rank with Google.

 We post positive reviews for your company.

 We have the experience and ability to post hundreds of positive reviews
 that
 are all unique content and posted on unique IP addresses.


 wwwpostgoodreviews.com




-- 
steve pirk
refiamerica.org
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09


Re: dark fiber

2010-02-11 Thread steve pirk [egrep]
On Thu, Feb 11, 2010 at 08:21, Jess Cohen j...@corenap.com wrote:

 GOOGLE: Dark fiber is optical fiber infrastructure (cabling and repeaters)
 that is currently in place but is not being used. Optical fiber conveys
 information in the form of light pulses so the dark means no light pulses
 are being sent. For example, some electric utilities have installed optical
 fiber cable where they already have power lines installed in the expectation
 that they can lease the infrastructure to telephone or cable TV companies or
 use it to interconnect their own offices. To the extent that these
 installations are unused, they are described as dark.


That is better than the link I was going to reference - reason I was going
there was the recent announcement of the Google fiber to the community beta
test. Are we seeing the beginnings of another move? Android phone OS, Google
voice, Nexus One with the ability to make all calls voip...

I heard Google made some major concessions [charging tax on internet
purchases of the Nexus One] and is still being blocked on the cannot be a
phone company end. Maybe if you can show you own a certain amount of
infrastructure you automatically qualify as a phone company? I have no idea,
I just see lots of little pieces coming together right now...

--steve
--
steve pirk
refiamerica.org
father... the sleeper has awakened... paul atreides - dune
kexp.org member august '09


Re: Using twitter as an outage notification

2009-07-05 Thread Steve Pirk

On Sun, 5 Jul 2009, Roland Perry wrote:

There's the temptation by some of companies to leverage the latest
technology to appear cool and in tune with customers, but by far and
large, when something goes down customers either do no nothing, wait, or
call in.  I think the best use of everyone's time is to make sure their 
call
center/support desk has the capability to post an announcement to those 
that

call in.


It's a High School. They don't have a support desk (or more than handful of 
phone lines [1]). Even the local radio station can't cope with one call per 
school asking them to broadcast the news that they have closed due to bad 
weather.


If your resources are that tight, do what our local school district 
did, mandate that all bus schedules will only be available on the web 
site.



And then make sure something gets posted to the website.


Unfortunately, the number of students polling the website for news means it 
can't cope with the traffic. I don't believe they can justify paying more for 
better web hosting, just to manage this once-a-year half hour event.




Roland, sounds like you should have a few public service 
announcements saying that school closures will be delivered via a 
certain twitter username. Also send a flyer home with the students.


The radio station can pick up the twitter feed like everyone else, and 
announce closures. That is the way a certain group of people are doing 
it in the middle east right now, word gets around and word gets 
out... In your case, the community will know quickly, all from a 
couple of people logging into twitter and sending a few messages. 
Sounds like a simple, ideal solution given your budget constraints.


--
steve



Re: Tor abuse FAQs

2009-06-25 Thread Steve Pirk

On Thu, 25 Jun 2009, Steven M. Bellovin wrote:

A friend sent me these links:

  https://www.torproject.org/faq.html.en#ExitPolicies
  https://www.torproject.org/faq-abuse.html.en
  https://www.torproject.org/eff/tor-legal-faq.html.en
  https://www.torproject.org/torusers.html.en

Btw -- several folks have raised the issue of Iran.  Here's a blog
posting that may be of interest:

  https://blog.torproject.org/blog/measuring-tor-and-iran


An official site on what the group is doing is at:

http://nedanet.org/

On a related note, I posted a question about ipv6 a while back and the 
ticket I also opened is gertting bounced around with no one saying 
yes, this is my space.


My ipv6 skills are seriously lacking... Can anyone shed light on how 
to find out where a certain IP is coming from? This device on a 
_very_ large pipe is becoming quite a pain.


[eg...@pixel notes]$ host gateway01.sikt.ir
Using domain server:
Name: 67.19.72.206
Address: 67.19.72.206#53
Aliases:

gateway01.sikt.ir has IPv6 address 2001:470:f15d:fe1d:33f:ad43:1:fa4

--
-steve
 On Thu, 25 Jun 2009, Steven M. Bellovin 
wrote:



A friend sent me these links:

https://www.torproject.org/faq.html.en#ExitPolicies
https://www.torproject.org/faq-abuse.html.en
https://www.torproject.org/eff/tor-legal-faq.html.en
https://www.torproject.org/torusers.html.en

Btw -- several folks have raised the issue of Iran.  Here's a blog
posting that may be of interest:

https://blog.torproject.org/blog/measuring-tor-and-iran

(My apologies if these have already been posted -- for assorted reasons
involving my email setup, I cannot easily see any NANOG posts until some
time tonight EDT.)



--
steve



Re: Tor abuse FAQs

2009-06-25 Thread Steve Pirk

On Thu, 25 Jun 2009, Suresh Ramasubramanian wrote:


Hurricane Electric.  Probably a tunnel from their tunnelbroker free v6 service.

$ whois 2001:470:f15d:fe1d:33f:ad43:1:fa4



Doh! See, I said my skills were lacking. How lacking I had not 
realized. Dh, use whois. What a dummy. Consider me educated list, 
I will crawl back into my cave :-)


Thanks to everyone who responded with how to confirm HE. Abuse to them 
was passed to a customer of HE. Customer says not their space. Oh, 
well, back to searching. Thanks!


--
steve



RE: tor

2009-06-24 Thread Steve Pirk

On Wed, 24 Jun 2009, Rod Beck wrote:

This has nothing to do with telecommunications or any kind of carrier or
business relationship. This is intentionally leaving your computer open
so that anyone on the Internet can come along and appear to be coming
from your IP, where they will promptly set off doing bad stuff that will
get traced back to you rather than them. Think of it like intentionally

[snip]

Not sure if this just happened to pop up on the radar because of all 
the tor work being done to provide access out of Iran for citizens 
there that are blocked. Probably just a co-incidence, but since I just 
got done reading a bunch and setting up a bridge node (provate relay), 
I can say that there are also levels of liability.


There are tor entry/egress points (where users enter and exit the tor 
netowrk), usually referred to as exit nodes, and then there are a 
bunch of tor relay nodes. A relay node just becomes part of the 
network, and sends and receives traffic inside the tor network. This 
_should_ be the most common configuration, but some people do not RTM 
and make themselves exit nodes. That is where you get into trouble.

Relay nodes just pass encrypted packets - no exiting allowed.

The third configuration is called a bridge node. This is a relay 
that does not tell anyone it is a node. A controller has a copy of 
that nodes public key, and builds a private network.


Moral: you can help with tor without leaving yourself open to sbuse. 
From what I know, the bigger exit node operators are fully aware of 

the responsibility they have.

--
steve



Re: Verio taking twitter down during Iran Election Riots?

2009-06-16 Thread Steve Pirk

On Tue, 16 Jun 2009, Marshall Eubanks wrote:
Tehran is currently UTC/GMT +4:30 hours. The current downtime is for 2:00 PM 
Pacific, or 1:30 AM in
Tehran. That seems to be unfortunately still prime time for the nightly 
demonstrations, one of which is

going on now.

If the idea is to avoid such collisions, 5:00 PM or even 6:00 PM PDT would 
probably be better.


Speaking of critical timings and demonstrations, anyone in the 
community have contacts/ideas for last mile connections in Teheran? 
The protesters are getting blocked right and left trying to get 'net 
access.


There are some, ehrm, boxen out on the 'net to allow them to get 
around the active blocking going on, but most of the citizen reporters 
are unable to even get a conection to allow proxying out. Some serious 
censoring of 'net access going on.


Just curious - replies off list if desired. Thanks in advance.
--
steve



[inquiry] Internet/cell in Teheran down?

2009-06-13 Thread Steve Pirk
Npr (All things considered) is reporting that cell phones and Internet 
access in at least Teheran if not all of Iran is down. Reporters are

unable to connect out.

Anyone hear of anything?
-steve



Re: Michael Mooney releases another worm: Law Enforcement / Intelligence Agency's do nothing

2009-04-17 Thread Steve Pirk

I get it now... Chaim Rieger = netdev
Nice trick.

--
Steve

On Sat, 18 Apr 2009, Chaim Rieger wrote:


And I want cnet to not report this crap.

They glamorise it.
--Original Message--
From: andrew.wallace
To: nanog@nanog.org
To: n3td3v
Subject: Re: Michael Mooney releases another worm: Law Enforcement / 
Intelligence Agency's do nothing
Sent: Apr 17, 2009 18:38

So if Al-Qaeda blow up a shopping centre and the guy who masterminded
it turns out to be 17 he gets a job in MI5?

OH MY GOD.

On Sat, Apr 18, 2009 at 2:28 AM, Jack Bates jba...@brightok.net wrote:

andrew.wallace wrote:


I want this individual made an example of and im not joking.



And I'd like an example made of companies that ignore reports of security
flaws and leave their customers open to such worms; not to mention giving
the impression to misguided teenagers that the only way they will be heard
is to release a worm.

Historically, I believe some companies have ignored security concerns until
someone (sometimes non-maliciously) released a worm. Of course, even
non-malicious worms can have unpredictable results which result in
catastrophic behavior. The earliest examples predate my residence on the
network, but I've read a small bug made them extremely bad.

Jack






Sent via BlackBerry from T-Mobile




Re: Can anyone shed some light as to what is happening with Register.com?

2009-04-02 Thread Steve Pirk

On Wed, 1 Apr 2009, Steve Pirk wrote:


On Wed, 1 Apr 2009, Steven M. Bellovin wrote:


On Wed, 1 Apr 2009 17:10:24 -0500
Erich Kolb ek...@kolbsoft.com wrote:


Looks like they are having some serious issues.  It doesn't appear
that any of their domains are resolving.  Hosted or otherwise.


Hmm -- UltraDNS was attacked; I wonder if there's a connection.
http://blogs.zdnet.com/BTL/?p=15601


--Steve Bellovin, http://www.cs.columbia.edu/~smb



A few weeks ago, there was tons of dns pounding all over the net.
Today, we see registrars going dark because of dns issues.
Today, people think Conficker will do something.
I am puzzled. Maybe it is just 04/01 paranoia?


Thought of one more thing...

Wasn't Conficker also configured to try and register a ton of randomly 
generated domains? Two registrars go dark today?


Ok, put the imagination on hold...
--
Steve
Equal bytes for women.



Re: Can anyone shed some light as to what is happening with Register.com?

2009-04-01 Thread Steve Pirk

On Wed, 1 Apr 2009, Steven M. Bellovin wrote:


On Wed, 1 Apr 2009 17:10:24 -0500
Erich Kolb ek...@kolbsoft.com wrote:


Looks like they are having some serious issues.  It doesn't appear
that any of their domains are resolving.  Hosted or otherwise.


Hmm -- UltraDNS was attacked; I wonder if there's a connection.
http://blogs.zdnet.com/BTL/?p=15601


--Steve Bellovin, http://www.cs.columbia.edu/~smb



A few weeks ago, there was tons of dns pounding all over the net.
Today, we see registrars going dark because of dns issues.
Today, people think Conficker will do something.
I am puzzled. Maybe it is just 04/01 paranoia?
--
Steve
Equal bytes for women.




Re: Craptastic Service! (was: Re: comcast price check)

2009-02-20 Thread Steve Pirk

Ouch! We have some unsatisfied customers... :-)

I have had business class for 1.5 years now, and granted, there have been 
issues and I usually ask for tier 2 within a few minutes, but I am fairly 
satisfied. Speed just jumped to say 6-10Mbs down, 2+ up a couple of weeks 
ago and it works well for me. I pay ~$68.00 a month for 5 ips.


dsl is not really an option here. Too far to the co.

--
Steve

On Sat, 21 Feb 2009, Jeffrey Lyon wrote:


Ryan,

Last I talked to Comcast running BSD meant you're a hacker.

Jeff

On Sat, Feb 21, 2009 at 1:27 AM, Ryan A. Krenzischek r...@bbnx.net wrote:


Well that explains it all since we are a *BSD shop.

Ryan

On Sat, 21 Feb 2009, Jeffrey Lyon wrote:


Date: Sat, 21 Feb 2009 01:02:12 -0500
From: Jeffrey Lyon jeffrey.l...@blacklotus.net
To: Ryan A. Krenzischek r...@bbnx.net
Cc: NANOG list nanog@nanog.org
Subject: Re: Craptastic Service! (was: Re: comcast price check)

Ryan,

It's always your equipment. You should know that none of their
customers have any clue how to run a network and therefore should
remove them immediately. Any customer who is not running Windows and
not connected directly to the router is to blame for any problems.

Jeff

On Sat, Feb 21, 2009 at 12:46 AM, Ryan A. Krenzischek r...@bbnx.net
wrote:


Yes, they do.  You can find more information here:

http://business.comcast.com/ethernet/dedicated-internet.aspx

Although, I'm sufficiently disappointed with Comcast's Business Cable
service.  I have had them since 6-NOV-2008 and they took 4 months and 1
week
to fix a cabling problem at the head-end for my business Internet.
Apparently the head-end was wired wrong in regards to how power was
supplied
to it.  I had nothing but dropped packets and latency (400-500 MS,
sometimes
1200 MS) problems.  I lost so much business.  I tried multiple times to
speak with a manager but they would only pick up their phone after I sat
for
30 minutes with the phone, pressing the redial key and placed 60 calls to
them.  I had to call their corporate office and file a complaint.  I am
still having dropped packet issues.

Comcast support also had the nerve to say it was my equipment and that I
should immediately disconnect everything.  Remind me again how is it my
problem with *MY* equipment when the modem takes 25 minutes to sync/lock
on
the upstream channel?

I would *highly* recommend a T1 or partial T3.  While they are more
expensive and highly reliable, ATT or other major telcos will fix the
problem within a reasonable SLA.  Comcast does NOT have a SLA.  It took 4
months to fix my problems on a business account.

A Very Unhappy Comcast Customer,

Ryan Krenzischek

On Fri, 20 Feb 2009, Steven King wrote:


Date: Fri, 20 Feb 2009 23:45:48 -0500
From: Steven King sk...@kingrst.com
To: John Martinez jmarti...@zero11.com
Cc: NANOG list nanog@nanog.org
Subject: Re: comcast price check

Comcast has an Ethernet service?

John Martinez wrote:


Does any one here use comcast's ethernet services?
If so, what is their price range?


Thanks in advance.





















--
Jeffrey Lyon, Leadership Team
jeffrey.l...@blacklotus.net | http://www.blacklotus.net
Black Lotus Communications of The IRC Company, Inc.

Look for us at HostingCon 2009 in Washington, DC on August 10th - 12th
at Booth #401.





HUMOR: NANOG stop the economic downturn :-)

2008-12-24 Thread Steve Pirk

Heard this on NPR's All Things Considered today... Get busy people! :-)
http://www.npr.org/templates/story/story.php?storyId=98694231

Poet on Call
by Andrei Codrescu

The Machines Haven't Taken Over

All Things Considered, December 24, 2008  With one pull of a switch, the 
ocean of junk that spilled out of my mailbox every day, was swooshed back 
into the speechless abyss. If you had asked me before this news, what hand 
human or divine could stop spam, I'd have answered like Heraclitus, Who 
can stop the sea from rising?


It turns out that somebody before a keyboard can, thank you. There is 
hope. Machines haven't yet taken over. If it's that easy to stop what 
seemed like unstoppable, why can't other seemingly unstoppable 
human-generated and computer-driven phenomena be switched off the same 
way? Why isn't somebody pulling the switch on the collapsing world trade 
going on in the cracks between time zones? What's going on while I sleep 
and my retirement money slips down some unfathomable hole? Why don't the 
providers capable of such cosmic gestures as making the spam-ocean vanish, 
not exercise their benevolent force against other oceans that threaten us: 
the automatic unfair trades, the silent streams of world capital vanishing 
into invisible dead zones, the globe-circling panics?

--
Steve
Equal bytes for women.



Re: Rackmount Vendors

2008-09-26 Thread Steve Pirk

Not to plug people I know, but Chatsworth Products Inc.
I know they are the best in the area and supply lots of fairly
large cusomers (my real job included).

http://www.chatsworth.com/datacenter

--
Steve
Equal bytes for women.

On Thu, 25 Sep 2008, Israel Lopez wrote:


Hey there,

Anyone know of a good rackmount supplies vendor near the greater Los
Angeles, CA area?  Looking for a rack and some rackmount power strips if
possible.

Contact me off list.

Thanks Much,

Israel





Re: comcast

2008-06-12 Thread Steve Pirk

On Fri, 13 Jun 2008, Randy Bush wrote:


Does anybody heard if comcast is having problems today?


lucy was having problems in eugene orygun.  she diagnosed and then gave
up and went to dinner.

randy



I have a comcast business line in Western WA and have seen no hiccups
so far today. Main IP is 75.146.60.201.

If someone that is seeing issues can send me an IP, I can traceroute
to see if I can reach it from within Comcast.
--
Steve
Equal bytes for women.





RE: Oregon/Washington Comcast outage

2008-05-27 Thread Steve Pirk

I have a Comcast business line, and have bbeen up all day. Here is
my trace to the same IP (from Bremerton WA):

[EMAIL PROTECTED]:~/tmp$ traceroute 208.74.128.9
traceroute to 208.74.128.9 (208.74.128.9), 30 hops max, 38 byte packets
 1  73.96.188.1 (73.96.188.1)  8.051 ms  11.888 ms  6.731 ms
 2  GE-2-35-ur01.bremerton.wa.seattle.comcast.net (68.86.98.81)  8.541 ms 
7.219 ms *
 3  te-7-3-ar01.burien.wa.seattle.comcast.net (68.86.96.46)  13.948 ms 
8.413 ms *

 4  * * te-9-1-ar02.burien.wa.seattle.comcast.net (68.86.96.170)  9.484 ms
 5  te-7-4-ar02.seattle.wa.seattle.comcast.net (68.86.96.198)  9.429 ms 
10.701 ms  10.251 ms
 6  te-9-1-ar02.seattle.wa.seattle.comcast.net (68.86.90.210)  13.720 ms 
11.470 ms  10.241 ms

 7  * * *
 8  TenGigabitethernet1-4.ar5.SEA1.gblx.net (64.209.111.93)  13.467 ms 
12.165 ms  10.647 ms
 9  Prime-Time-Ventures.so-2-1-0.ar2.SEA1.gblx.net (64.212.109.182) 
36.033 ms  40.281 ms  36.884 ms

10  gp-edge-04.visp.net (69.9.134.66)  44.607 ms *  39.161 ms

--
Steve
Equal bytes for women.

On Tue, 27 May 2008, Darryl Dunkin wrote:


Here is the reverse view from one of my systems on residential Comcast
in the Everett/Mill Creek area (source is 76.121.150.xxx):
Tracing route to 208.74.128.9 over a maximum of 30 hops

 11 ms1 ms1 ms  192.168.254.254
 2 *** Request timed out.
 3 9 ms *9 ms
ge-1-8-ur01.everett.wa.seattle.comcast.net [68.86.177.117]
 410 ms *   18 ms
te-9-1-ar01.burien.wa.seattle.comcast.net [68.86.96.177]
 510 ms *   11 ms
te-9-1-ar02.burien.wa.seattle.comcast.net [68.86.96.170]
 611 ms 9 ms 9 ms
te-8-1-ar02.seattle.wa.seattle.comcast.net [68.86.96.134]
 711 ms11 ms12 ms
te-9-1-ar02.seattle.wa.seattle.comcast.net [68.86.90.210]
 811 ms11 ms12 ms
COMCAST-IP-SERVICES.TenGigabitethernet1-4.ar5.SEA1.gblx.net
[64.209.111.94]
 910 ms11 ms11 ms  TenGigabitethernet1-4.ar5.SEA1.gblx.net
[64.209.111.93]
1038 ms38 ms39 ms
Prime-Time-Ventures.so-2-1-0.ar2.SEA1.gblx.net [64.212.109.182]
1139 ms40 ms38 ms  208.74.128.9

-Original Message-
From: Kameron Gasso [mailto:[EMAIL PROTECTED]
Sent: Tuesday, May 27, 2008 13:21
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Oregon/Washington Comcast outage

Looks like I can't reach several of Comcast's fiber/coax customers in
Oregon and Washington:

grps-edge-rtr-1#trace 75.145.64.XXX

Type escape sequence to abort.
Tracing the route to 75-145-64-XXX-Oregon.hfc.comcastbusiness.net
(75.145.64.XXX)

  1 fa-6-0.grps-edge-rtr-2.visp.net (208.74.128.9) 0 msec 4 msec 0 msec
  2 c1-mdfd-s40-visp.mind.net (69.9.134.65) [AS 6296] 0 msec 4 msec 0
msec
  3 so-2-1-0.ar2.SEA1.gblx.net (64.212.109.181) [AS 3549] 12 msec 12
msec 12 msec
  4 pos10-0-2488M.cr1.SEA1.gblx.net (67.17.71.182) [AS 3549] !H  *  !H

Our NOC has had several calls from folks using Comcast who weren't able
to reach us, and we then confirmed that they had no network connectivity

whatsoever...

--
Kameron Gasso | Senior Systems Administrator | visp.net
Direct: 541-955-6903 | Fax: 541-471-0821