RE: BGP-based blackholing/hijacking patented in Australia?

2004-08-15 Thread Alex Bligh
--On 14 August 2004 22:23 +0300 Hank Nussbacher [EMAIL PROTECTED] wrote: Predating this is Bellwether (June 2000): Indeed. In days of yore, when people developed at least marginally non-obvious operational techniques, people sent email to nanog about it, explaining the technique and their

RE: BGP-based blackholing/hijacking patented in Australia?

2004-08-15 Thread Henry Linneweh
I do miss the old days of this list, technical growth and global participation in events was exciting... -her --- Alex Bligh [EMAIL PROTECTED] wrote: --On 14 August 2004 22:23 +0300 Hank Nussbacher [EMAIL PROTECTED] wrote: Predating this is Bellwether (June 2000): Indeed. In

WashingtonPost computer security stories

2004-08-15 Thread Sean Donelan
The Washington Post is running a group of stories this weekend about computer security and the problems a reporter went through with her Windows 98 computer. Interestingly, instead of ISPs the articles identify other sources of frustration for even technically savvy home computer user with

Re: WashingtonPost computer security stories

2004-08-15 Thread Hank Nussbacher
Oh how I agree! I have 3 computers at home and have lived through rebuilding 2 of them multiple times due to everything stated. My personal computer has never had to be rebuilt because I run with ZApro and CA AV, but I came near to it when I took down ZApro for 15 minutes to run a Retina scan

Re: WashingtonPost computer security stories

2004-08-15 Thread Brandon Butterworth
I put the blame not on the AV vendors but strictly on MS for building a sieve. I blame the people who purchase sieves.

Re: WashingtonPost computer security stories

2004-08-15 Thread Mikael Abrahamsson
On Sun, 15 Aug 2004, Hank Nussbacher wrote: Retina scan on something and some virus/worm got in and it took some registry editting and safe mode work to get it removed - and I know what I am doing. As far as I know, there is no remotely exploitable hole in windows that doesn't have a patch

Re: WashingtonPost computer security stories

2004-08-15 Thread Owen DeLong
Well, then bad hardware and application software are a lot more prevalant under Windows than Linux. I install/deinstall games and other application software all the time under Linux. I have the usage pattern you describe for others (except the part about patching my system regularly), and I just

FW: WashingtonPost computer security stories

2004-08-15 Thread Joe Johnson
On Sun, 15 Aug 2004, Hank Nussbacher wrote: Retina scan on something and some virus/worm got in and it took some registry editting and safe mode work to get it removed - and I know what I am doing. As far as I know, there is no remotely exploitable hole in windows that doesn't have a patch

Re: WashingtonPost computer security stories

2004-08-15 Thread David Lesher
Note these appear to be WINDOWS security articles. I've not found a mention of non-windows vulnerabilities.. Hmmm... -- A host is a host from coast to [EMAIL PROTECTED] no one will talk to a host that's close[v].(301) 56-LINUX Unless the host (that isn't

RE: WashingtonPost computer security stories

2004-08-15 Thread Joe Johnson
Owen Wrote: Well, then bad hardware and application software are a lot more prevalant under Windows than Linux. I install/deinstall games and other application software all the time under Linux. I have the usage pattern you describe for others (except the part about patching my system

Re: WashingtonPost computer security stories

2004-08-15 Thread Doug White
: : I put the blame not on the AV vendors but strictly on MS for building a : sieve. : : -Hank : I blame the miscreants who are malicious enough to want to cause as much damage as they can. MS software has tried for too long to be everything for everyone. For instance the SP2 for XP now being

Re: WashingtonPost computer security stories

2004-08-15 Thread Alexei Roudnev
JJust to clarify. SuSe linux can be installed on the first attempt by Windoze-only gurus (I did such experiment) and never require any command line interaction (except if you decide to run something complicated). redHat is a good syste... for admins and servers, not for the home. -

Re: WashingtonPost computer security stories

2004-08-15 Thread Jerry Pasker
Bad hardware and application software cause a lot more problems than the operating system itself. -- Mikael Abrahamssonemail: [EMAIL PROTECTED] Bad users cause more problems than everything else combined. Doesn't matter if you're running windows, bsd, linux, OS X, or whatever. When a dumb

Re: WashingtonPost computer security stories

2004-08-15 Thread John Underhill
Maybe you should browse through the SANS archives, plenty of bind, sendmail, apache, nfs, etc. exploits.. http://www.sans.org/top20/ The problem with *nix, is more with misconfiguration then coding flaws, but this should not be underestimated. Given the current tendency towards global

Re: WashingtonPost computer security stories

2004-08-15 Thread Fred Baker
At 12:58 PM 08/15/04 -0700, Alexei Roudnev wrote: SuSe linux can be installed on the first attempt by Windoze-only gurus (I did such experiment) and never require any command line interaction (except if you decide to run something complicated). My then-16-year-old son did the same, building a dual

Re: WashingtonPost computer security stories

2004-08-15 Thread Sean Donelan
On Sun, 15 Aug 2004, Deepak Jain wrote: I agree with Mikael here. If your box is fully patched you need not worry about that much -- if you are still having problems, check your assumptions. :) Windows 2003 Web Servers are up unfiltered out there, there isn't a real reason why a Windows XP

Domain Name System protection

2004-08-15 Thread Joe Shen
Hi, We are trying to extend our DNS service system in near future. In current stage, it consist of 2 SUN FIRE Server with Solaris8 and BIND9 installed. Each server is configured with a IP address which is known to our customers. The DNS server is set up as Cache Server because it only servers

Re: Domain Name System protection

2004-08-15 Thread Bill Woodcock
1. Is that really required to protect DNS server by firewall? Yes, it's a very, very good idea to do so. How does those ISPs, e.g. ATT, Sprint,mae their DNS system highly available? By protecting it with a firewall. :-) Could we do that by filtering traffic

Re: Domain Name System protection

2004-08-15 Thread Suresh Ramasubramanian
Joe Shen wrote: We noticed there is continous name resolution requests from IP address outside of our address pool and also there is requests not conforming to DNS documents ( like those from 10/8, 192.168/16 or something for microsoft proxy server name). We think these request waste our resource