Re: [[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]

2014-04-15 Thread Glen Wiley


On 04/15/2014 09:56 AM, Matthew Black wrote:
> From: Doug Barton [mailto:do...@dougbarton.us] 
>> When you say "clear the disk allocated to programs" what do you mean
>> exactly?
> 
> Seriously? When files are deleted, their sectors are simply released to the 
> free space pool without erasing their contents. Allocation of disk sectors 
> without clearing them gives users/programs access to file contents previously 
> stored by other users/programs.
> 
> As to why this is a problem, well, as they write in some math textbooks, the 
> answer is trivial and left as an exercise to the reader. Well, usually 
> trivial.
> 
> matthew black
> california state university, long beach
> 
> 

Bruce Schneier gave a plug for bleachbit - it does a reasonable job of
trying to clean things up for you.

> -Original Message-
> From: Doug Barton [mailto:do...@dougbarton.us] 
> Sent: Monday, April 14, 2014 7:48 PM
> To: nanog@nanog.org
> Subject: Re: [[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]
> 
> On 04/14/2014 05:50 PM, John Levine wrote:
>> In article <534c68f4@cox.net> you write:
>>> On 4/14/2014 9:38 AM, Matthew Black wrote:
>>>> Shouldn't a decent OS scrub RAM and disk sectors before allocating
>>>> them to processes, unless that process enters processor privileged
>>>> mode and sets a call flag? I recall digging through disk sectors on
>>>> RSTS/E to look for passwords and other interesting stuff over 30
>>>> years ago.
>>>
>>> I have been out of the loop for quite a while but my strongly held
>>> belief is that such scrubbing would be an enormous (and intolerable)
>>> overhead ...
>>
>> It must be quite a while.  Unix systems have routinely cleared the RAM
>> and disk allocated to programs since the earliest days.
> 
> When you say "clear the disk allocated to programs" what do you mean 
> exactly?
> 
> 
> 
> 
> 

-- 
Glen Wiley
KK4SFV



Re: Verizon's New Repair Method: Plastic Garbage Bags

2012-08-20 Thread glen wiley
Our neighborhood lost phone service when the pedestal at the end of the
road was annihilated by a flail mowera WEEK AGO.  The repair - orange
plastic bag over the entrails of the pedestal.

Yay Verizon - I finally understand why I send them so much money - stylish
orange bags!

On Mon, Aug 20, 2012 at 3:09 PM, Eric Wieling  wrote:

> For a while we have had a customer with some lines which go down every
> time it rains.   We put in the trouble ticket, a couple of days later
> Verizon says the issue is resolved...until the next time it rains.
>
> The customer sent us some pictures today of the pole outside their office.
>   The repair appears to be wrapping some plastic bags around something up
> on the pole.  Here is link to the pictures the customer sent us, in case
> anyone in the mood for a good scare.
>
> http://rock.nyigc.net/verizon/
>
>
>
>


-- 
Glen Wiley

"A designer knows he has achieved perfection not when there is nothing left
to add, but when there is nothing left to take away." - Antoine de
Saint-Exupery


Re: DNS Reliability

2013-09-12 Thread Glen Wiley
Remember though that anycast only solves for availability in one layer of
the system and it is not difficult to create a less available anycast
presence if you do silly things with the way you manage your routes. A
system is only as available as the least available layer in that system

For example, if you use an automated system that changes your route
advertisements and that system encounters a defect that breaks your
announcements then although a well built anycast footprint might acheive
99.999, a poorly implemented management system that is less available and
creates an outage would reduce the number.


On Thu, Sep 12, 2013 at 4:25 PM, Phil Fagan  wrote:

> Its a good point about the anycast; 99.999% should be expected.
>
>
> On Thu, Sep 12, 2013 at 2:14 PM, Beavis  wrote:
>
> > I go with 99.999% given that you have a good number of DNS Servers
> > (anycasted).
> >
> >
> > On Thu, Sep 12, 2013 at 9:03 PM, Phil Fagan  wrote:
> >
> >> Everything else remaining equal...is there a standard or expectation for
> >> DNS reliability?
> >>
> >> 98%
> >> 99%
> >> 99.5%
> >> 99.9%
> >> 99.99%
> >> 99.999%
> >>
> >> Measured in queries completed vs. queries lost.
> >>
> >> Whats the consensus?
> >>
> >>
> >> --
> >> Phil Fagan
> >> Denver, CO
> >> 970-480-7618
> >>
> >
> >
> >
> > --
> > ()  ascii ribbon campaign - against html e-mail
> > /\  www.asciiribbon.org   - against proprietary attachments
> >
> > Disclaimer:
> > http://goldmark.org/jeff/stupid-disclaimers/
> >
>
>
>
> --
> Phil Fagan
> Denver, CO
> 970-480-7618
>



-- 
Glen Wiley
KK4SFV

"A designer knows he has achieved perfection not when there is nothing left
to add, but when there is nothing left to take away." - Antoine de
Saint-Exupery