Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS)

2013-06-21 Thread David Walker
> https://www.networksolutions.com/blog/2013/06/important-update-for-network-solutions-customers-experiencing-website-issues/ Why are they infinitely looping a script on their web server to check for a cookie? Are these people insane?

Re: PGP/SSL/TLS really as secure as one thinks?

2013-06-07 Thread David Walker
On 08/06/2013, Jeroen Massar wrote: > On 2013-06-07 06:50, Dan White wrote: > [..] > > A nice 'it is Friday' kind of thought Caring about secrecy (or obscurity) of algorithms is a fools errand. http://en.wikipedia.org/wiki/Kerckhoffs%27s_principle Taking Shannon's maxim "the enemy knows the

Re: PRISM: NSA/FBI Internet data mining project

2013-06-07 Thread David Walker
I've been trying to find details to the contrary but as far as I see, there's no indication that the constitutional (or otherwise) rights of any US citizens (or anyone, anywhere, for that matter) are being overtly (or otherwise) trampled which would seem to be the pertinent objection. The somewhat

Re: Louisiana Optical Network Initiative

2013-05-02 Thread David Walker
On 03/05/2013, John D Caffery wrote: > The UNO AS number is 23666 ... 26333 right?

Re: Op USA - DDoS

2013-04-28 Thread David Walker
>From Wikipedia: Ultimately, #OpIsrael caused virtually no damage and was assessed by the Israeli Government's National Cyber Bureau and by numerous security experts and journalists to have been a failure. http://en.wikipedia.org/wiki/OpIsrael

Re: WW: Bruce Schneier on why security can't work

2013-03-18 Thread David Walker
In history, people get taken unawares, by their neighbours. We don't implement systems to protect against that - no matter how much betrayal stares us in the face. The price of peace is eternal diligence and no-one writes that cheque. >From Troy to Chamberlain - it's not an issue of finding new reg

Re: carping about CARP

2012-11-30 Thread David Walker
Comments inline ... as best I can. On 30/11/2012, Robert E. Seastrom wrote: > > David Walker writes: > >> [ patent fight recap ] > > Thanks for posting those. I recall the discussions surrounding the > HSRP patents well, but it's been a while and I have proport

Re: carping about CARP

2012-11-30 Thread David Walker
On 30/11/2012, Robert E. Seastrom wrote: > [*] The OpenBSD side of the story can be read at > http://en.wikipedia.org/wiki/Common_Address_Redundancy_Protocol#No_official_Internet_protocol_number > > Seems that there is a lesson to be learned here: > > "o hai, we wrote this software but can not be

Re: raging bulls

2012-08-09 Thread David Walker
http://www.ted.com/talks/kevin_slavin_how_algorithms_shape_our_world.html One of my favourite nerd talks. Although largely about trading algorithms it covers trading networks ... Best wishes.

Re: LinkedIn password database compromised

2012-06-07 Thread David Walker
On 08/06/2012, Matthew Kaufman wrote: > It also allows them to sign anyone they want as someone pretending to be > you, but with a different key pair. You're exacly correct but in this case I don't think CAs are necessary and probably detrimental so it's moot. Currently I don't care at all if so

Re: LinkedIn password database compromised

2012-06-07 Thread David Walker
On 07/06/2012, Lynda wrote: > Sorry to be the bearer of such bad tidings. I'm a very amateur cryptologist so some of this is new to me: "Any organization using SHA-1 without salting user passwords is running a great risk -- much higher than they should," said Per Thorsheim, chief information secu

Re: AS Connectivity Lookup

2012-03-07 Thread David Walker
On 08/03/2012, Anurag Bhatia wrote: > Hi Radke > > You can try http://bgp.he.net Example: http://bgp.he.net/AS4739 Guest login here: http://peeringdb.com/ > > On Wed, Mar 7, 2012 at 10:59 PM, Radke, Justin wrote: > >> How can I easily view the current peering relationship of a particular AS? >

Re: Common operational misconceptions

2012-02-16 Thread David Walker
Teach the TCP/IP model ... On 16/02/2012, John Kristoff wrote: > Hi friends, > > As some of you may know, I occasionally teach networking to college > students and I frequently encounter misconceptions about some aspect > of networking that can take a fair amount of effort to correct. > > For ins

Re: Firewalls in service provider environments

2012-02-09 Thread David Walker
I'm an end user but I refer to these from time to time: http://www.ietf.org/rfc/rfc3013.txt http://www.ietf.org/rfc/rfc3871.txt I suppose the salient question is what kind of customers are we talking about. Best wishes.

Re: Arguing against using public IP space

2011-11-13 Thread David Walker
Hey. On 14/11/2011, Jimmy Hess wrote: > In other words, your use of RFC1918 address space alone does not > create security. I had this crazy idea that somewhere in the rfcs was a "should" that manufacturers block private address space (i.e. hard coded) but it's not (in fact the opposite). Obviou

Re: Arguing against using public IP space

2011-11-13 Thread David Walker
On 14/11/2011, Jason Lewis wrote: > I don't want to start a flame war, If you didn't write it I wouldn't stress about that. > but this article seems flawed to > me. Me too. > It seems an IP is an IP. Yes but in IPv4 land there is a difference although probably not in the way the author "sugg