Re: Broken Mini-SAS cable removal?

2021-04-29 Thread nick hatch
On Fri, Apr 23, 2021 at 10:49 AM Warren Kumari  wrote:
>
>
> Does anyone know of a purpose built tool for this? Something that won't get 
> me on the additional screenings lists?

It's not purpose-built, but you may find a traveller hook / Shrum tool
useful. Carolina Roller is one manufacturer. Ironically, this tool has
been adopted by the locksport community, but is intended for use in
textile manufacturing.


Verizon Wireless security contact needed

2013-03-27 Thread nick hatch
Hi all,

I just discovered a somewhat-exigent issue which affects
confidentiality for Verizon Wireless customers. (PSTN / Voice)

I'm failing at trying to find a Verizon Wireless security contact
through normal means. If someone can provide a contact off-list it
would be much appreciated.

Thanks,

-Nick



Re: Network scan tool/appliance horror stories

2012-10-29 Thread nick hatch
On Mon, Oct 29, 2012 at 2:10 PM, Pedersen, Sean sean.peder...@usairways.com
 wrote:

 I was curious if anyone had any particularly gruesome horror stories of
 scanning tools run amok.


A particular model of ShoreTel voice switches I used to administer (running
VxWorks, IIRC) would reliably lock up hard when hit with nmap's OS/service
detection on a particular port. Required pulling the plug to restore
service.

The truly odd thing was that it didn't seem like a resource exhaustion
issue, it could be triggered with a single well-crafted probe or two.

After several long nights of painful troubleshooting with their level III
support, we came to the conclusion that if it hurts, you probably shouldn't
do it, and mitigating ACLs were put in place.

-n


Re: facebook spying on us?

2011-10-01 Thread nick hatch
On Thu, Sep 29, 2011 at 8:13 AM, Glen Kent glen.k...@gmail.com wrote:

 I also wonder about the kind of servers facebook must be having to be
 able to manage millions of TCP connections that must be terminating
 there.


For what it's worth, with some kernel tuning you can maintain 500k - 1MM
persistent connections on a mid-range Linux box. Providers of mobile
push-notification services seem to be the ones most actively pushing these
limits publicly.

Urban Airship has posted some information on how they maintain 500k
connections on EC2 m1.large instances:
http://urbanairship.com/blog/2010/08/24/c500k-in-action-at-urban-airship/
http://urbanairship.com/blog/2010/09/29/linux-kernel-tuning-for-c500k/

WhatsApp claim to be able to maintain 1MM connections on single machine,
although details are thin:
http://blog.whatsapp.com/index.php/2011/09/one-million/
http://news.ycombinator.com/item?id=3028547 (discussion)

-n


Re: IPv6 foot-dragging

2011-05-11 Thread nick hatch
On Wed, May 11, 2011 at 11:39 AM, George Bonser gbon...@seven.com wrote:

 There are other things to take into account.  If you
 increase the time it takes a mobile device to complete a transaction by
 only a couple of seconds,  if you multiply those couple of seconds by
 all of the users in a large metro area, you end up with devices
 increased use of network resources (and increased battery drain on the
 devices themselves).  Anything that can be done to speed transactions up
 and get those transmitters shut off as quickly as possible is a win.


I agree that seconds sometimes matters, but the latency of a transaction
doesn't have a linear relationship with radio or battery usage on a mobile
device. Because of the timers involved in the state transitions (eg
CELL_FACH - CELL_DCH), a few seconds of extra latency often is
inconsequential because there is a minimum duration for which the radio will
stay awake anyways. Coalescing techniques like Android's setInexactRepeating
method of the Alarm Manager also optimize radio access across multiple apps.

And if I'm not mistaken, it's the transition to/from CELL_DCH which is the
most expensive resource-wise for network operators, not the duration of
keeping this state.

The argument that IPv6-induced latency is going to affect mobile devices
disproportionally doesn't seem especially compelling.

-Nick


Re: A New TransAtlantic Cable System

2010-10-04 Thread nick hatch
On Mon, Oct 4, 2010 at 10:24 AM, Heath Jones hj1...@gmail.com wrote:


 I'm not clever enough to know of some way that you could do optical
 regeneration without converting the signal to electrical and
 retransmitting back as optical.. How is that done?

 I'm not sure how it's done in practice, but check out doped fiber
amplifiers for one possibility.

One has to grok laser fundamentals to get what's going on, but it's not an
especially complex topic.

-Nick


Re: IPv4 Exhaustion...

2010-07-23 Thread nick hatch
On Fri, Jul 23, 2010 at 10:11 AM, Positively Optimistic 
positivelyoptimis...@gmail.com wrote:

 How do ISPs  handle RIAA notices when NATTING customers.. ?   We have
 several customers that don't require public address space that could be
 moved to private..   We're reluctant to make the move due to legal
 liabilities..


It might be helpful to review the requirements for DMCA Safe Harbor for
conduit communication providers, specifically section 512(a). It's been my
experience that some networks (.edu's in particular) have voluntarily
expanded their actions in response to DMCA complaints, and will sometimes
falsely attribute these actions to DMCA requirements.

If I recall correctly, the primary responsibilities for a conduit provider
are limited to terminating repeat offenders, and informing subscribers of
this policy. The DMCA doesn't explicitly define what a repeat offender is,
nor does it explicitly mandate specific logging measures.

If a provider makes best-effort attempts to correlate complaints to
subscribers in order to track repeat offenders, I'm not sure there is a
liability problem here.

-Nick


Re: SNMP Monitoring of a Transfer Switch relay

2010-05-14 Thread nick hatch
On Fri, May 14, 2010 at 10:59 AM, Tom Beecher tbeec...@localnet.com wrote:

 I'm presently doing some research into a SNMP-enabled device to monitor a
 set of aux contacts on our transfer switch in order to be able to monitor
 it's status (on generator or on commercial) from our monitoring platform.
 I've seen a few interesting devices out there that can accomplish this,
 however I thought I'd query the list to see if anyone has thoughts about a
 particular unit they've worked with.


I've found the Weathergoose II to be a good general-purpose SNMP monitoring
device. They also have something called the Relaygoose which can accommodate
more inputs and trigger relays as well.

http://www.itwatchdogs.com/p_product_detail.php?pnum=1

-Nick


Re: Comcast IPv6 Trials

2010-01-27 Thread nick hatch
On Wed, Jan 27, 2010 at 2:50 PM, Steven Bellovin s...@cs.columbia.eduwrote:

 Wonderful!

 In all seriousness, will any attempt be made to select trial applicants
 based on (apparent) clue level and/or to receive feedback through channels
 other than the usual Tier 1 support?


From http://www.comcast6.net/faq.php:

*How will you select trial areas?*
Some of our trials will not be geographically-bound, meaning a customer from
anywhere in our network could participate, while other trials will be bound
to particular areas.

*How will you select customers to participate in these trials?*
Customers can volunteer to participate in a trial by completing an online
form at the Comcast IPv6 Information Center, at
http://www.comcast6.net/volunteer.php. Once we're ready to start a trial, we
will search for customers meeting any applicable criteria for participation
(geographic area, home computer OS or equipment, etc.) and invite them to
participate in a specific trial.

I'm excited to be on the same side as the 500lb gorilla for once,

-Nick