On the morning on November 7, while folks in my part of the country (Oklahoma) were still trying to come to grips with being rocked by two damage-causing earthquakes in less than 24 hours (that’s unheard of for OK), a previously unknown software bug in the BGP function of Juniper routers caused a major hiccup in the Internet. Details on what exactly the problem was are very thin, but Juniper acknowledged that “a small percentage of customers” was affected. Unfortunately, that small percentage happened to be companies that run routers in the core of the Internet (like Level 3). The outage was widespread, but short.Read more
Juniper BGP Bug Briefly Takes Down the Internet
November 10th, 2011 | Posted by in Give me more Internets! | Terrorism - (0 Comments)The Sky is Falling…Again
October 1st, 2008 | Posted by in Give me more Internets! | Security - (0 Comments)The Internet security community is abuzz with rumors of an attack against the TCP protocol that can DoS almost (if not all) machines. The attack is against the TCP state machine. Details are very sketchy, but the rumors suggest that an extremely low-bandwidth attack could effectively kill a machine to the point that it must be rebooted to once again be effective at communicating on the network.
Adding to the hype is the claim that almost all machines running TCP can be attacked, regardless of the vendor. Windows, Linux, Mac, Solaris, all manner of embedded devices, etc., are all supposedly vulnerable.
It seems like a “vulnerability” like this (that is, one that will completely cripple the Internet) is announced once a year. A few details[t2.fi] are released to the media that make the vulnerability sound really scary in an effort to hype the conference where the full details are going to be discussed (which, in this case, is “T2 ’08″ in Helsinki, Finland).
Call me a skeptic, but these usually turn out to be false. The sallacious details released to the media are mere propaganda items to increase interest. This particular vulnerability will probably turn out to be a non-issue except on your local network, which should be a (relatively) trustworthy area, anyway.
To sum it up: don’t go jumping out of a window yet.
Chicken Little at The Times (London)
July 7th, 2008 | Posted by in Give me more Internets! - (0 Comments)Here is an hilarious article[timesonline.co.uk] from The (London) Times. Foxnews.com’s title is even more hilarious: “Report: The End of the Internet Is Near”. OMG!!! Gather up the Ponies!!
Messr. Harris at The Times either has no idea what he’s writing about or owns a ton of stock in Cisco or Juniper. Or perhaps both. The following line from the article is particularly ridiculous:
If, for example, Google wants to support IPv6, it will need to build a whole new IPv6 web service, complete with new domain names, servers and bandwidth.
Hogwash, my good chap! The only bloody thing good ol’ Google will need to do is get IPv6 addresses from its ISPs. Its servers undoubtedly already support IPv6 as do almost all recent Un*x and Windows OSes (Linux and Mac OSX included). All Google will have to do is tell its servers what each one’s IPv6 address is and everything will work just the same as it has. No need for a new domain name, new servers, or new bandwidth. And certainly not any new code for their web services.
In fact, what I said above isn’t even necessarily true: Google doesn’t need to get an IPv6 address from its ISPs because there is an IPv6 prefix[wikipedia.com] already reserved for all the old IPv4 addresses. In essence, if you have an IPv4 address, you already have an IPv6 address that will route to all other IPv6 addresses–if only your upstream ISPs supported IPv6.
I tend to believe that Google has already prepared for this. I’m betting that their servers are already configured for IPv6. Their routers are probably configured for IPv6. Google might even have pure IPv6 connections to the Internet already. It’s hard for me to confirm my suspicions, though, because I don’t have a pure IPv6 connection to the Internet although I could setup something like 6to4[wikipedia.com].
Messr. Harris pumps the same old doom-and-gloom line that has been going around since the mid-1990s. Yes, friends, back when IPv6 was started the “experts” were prediciting we would run out of IPv4 addresses within a few years. Over a decade later, the new “experts” are predicting another three years.
Here’s a prediction: NASA will land men on Mars before IPv6 makes its way down to the home user, and I’m talking about his Cable/DSL router, not his actual PC.
Google to the rescue
May 23rd, 2008 | Posted by in Give me more Internets! | privacy | Security - (0 Comments)With yesterday’s introduction[reuters.com] of Google Health, we can now add personal health records and related information to the types of data Google is storing. This service includes connections to pharmacies, like Walgreen Co. and CVS Caremark, and other health groups. It will “allow patients to schedule appointments, refill prescriptions, receive diagnostic results online, and instantly add their doctors’ email addresses to a list of contacts.”
This service sounds very useful and is likely to be used by many people. My concern is that as the diversity and sensitivity of data Google is storing increases, so does it’s attractiveness as a target for those with malicious intent. According to Marissa Mayer, Google’s vice president for search services and user experience, the service involves an additional layer of security and the data is stored separately from Google’s other data. Mayer stated that, “We certainly have put in place the foremost privacy policy[google.com] that we could construct.” We all hope so!






