From where do you assume they draw their data? It's all based on IP info, which is referenced to the owner of the IP and other possible geographical clues (BGP Object IDs of routers).
The only real solution to preventing DDoS attacks is cooperation with your upstream provider(s) and something like Cisco's Secure IDS box which will dynamically update and block DDoS type attacks as fast as they appear. Fast enough to make it useless to even attempt. I didn't say it was cheap solution, but it's a very effective one.
How long does it take for an expired domain to become available again? I've got my eye on one such domain that expired earlier in the month, but NetSol, et. al., say it's unavailable. The NS for the domain don't answer for it, so I can't even contact the owner (not that I necessarily would, but if I wanted to, I couldn't).
I've been with a few companies that basically put a price to the training (if it's free and just taking company time) and/or the actual training/books/tests.
The worst I had to deal with had a 2-year policy. Basically half the cost of any book they bought for you (even though it stays in the company library), all of any class they paid for you to take (paid for the actual training and/or paid you to be their on their time), all of any tests they paid for you, these totals were kept for two years and if you left before any one item was over two years old, you had to pay for it in full.
Since that time, the company I've been working for merged and we have a much better policy: Only actual out of pocket training or test costs are tallied, and they are only kept for a year and are prorated (so if you leave in 11 months, you only pay 11/12th the cost).
Along with that, we also got bonuses for getting certs, and generally get pay raises resulting from performance: A Cisco/Microsoft certed engineer bills $150/hr minimim, Microsoft engineer bills $135/hr minimum, vs. a tech with only his A+ cert bills $95/hr. Obviously if you've got more certs and can bill more per hour with customers, you should have better performance (although we've got some slacker engineers and have techs beat them in billing at times).
Does this work all of the time? Not always, we have some people leave, but we retain the better folks most of the time. However, we've stolen a ton of employees from others due to their lame employee personal growth policies (most places wouldn't do jack for their employees, and sure weren't going to pay them more just for getting certs).
You can skip the first 30 minutes of sound checks and zoom practice. Nice that they got the archive up so fast, but it would have be nicer still if they'd trimmed that first part out.
roysdon.modesto.ca.us was registered 06/18/00. Turn around with the nic.us folks was about two weeks (just for kicks, to see if I could even do it... surprise, I could). It's much nicer when your city.st.us isn't run by some lamer.
I wonder if it has occured to folks at Napster that they might apply for free colocation services at Havenco? Of course, it'd quickly get them all in hot water with the court (if they lose for good, and would then be defying the judge's orders), but they could just move to Mexico and remotely manage the whole thing from there.
HavenCo is donating free colocation space to Non-Governmental Organizations of our choosing. In general, the types of organizations that we will want to provide hosting for are those that
promote free speech - check
promote human rights - uhm, check, I think
give a voice to minority and oppressed groups that otherwise may not be heard - check!
Re:Decentralization=Good, and Bad
on
Pirate DNS?
·
· Score: 1
Rumor has it that someone even came up with the idea of giving each state/local province their extension, (so North Carolina would have the extension of www.*****.ncs.us, and the venezia regional government of italy could have www.*****.vez.it
No rumor about it, the.US ccTLD is already set up this way. However, each ccTLD makes its own decision on how to designate subdomains, ie co.uk is the equiavalent of.com in the UK. However, the.US domain is setup under a more complicated locality system which makes it less attractive than.com, etc. Also, it's free. Just for kicks, I registered roysdon.modesto.ca.us/>
My biggest beef is that local government agencies don't use this, but instead are lured to the.COM-inization of the internet. My local city and county got it right using the proper locality.US domains: ci.modesto.ca.us and co.stanislaus.ca.us. However, the local Police use ModestoPD.com (albeit, just for email) and the Sheriffs Office will be getting stansherrif.com or something close. I wouldn't even mind them using.COMs, if they also had the "official/standard".US locality domains forwarding to the same.COMs (police.ci.modesto.ca.us & sherrif.co.stanislaus.ca.us).
I'm sure it could be a combination of MAC address and/or having the right WEP key. They'd almost have to implement WEP, as otherwise one could just sniff and snag another valid MAC address and just softwire it in once it went silent.
Oh, and anyone living near me can already get access to my ADSL via 802.11. Of course, you'd have to be within about 3 houses (I've walked down my court with my laptop, and that seems to be the reach). Of course, the AP base is inside my house, but it covers my the areas I want.
A simple query at eBay on "France" and "Banned" returned: http://pages.ebay.com/help/rulesandsafety/42020019 .html
They can access it, but are not allowed to bid/purchase items, and sellers are banned from selling to them.
Of course, all someone has to do is make a few IRC buddies online outside France and get it shipped to them first, and have them remail it to you.
From where do you assume they draw their data? It's all based on IP info, which is referenced to the owner of the IP and other possible geographical clues (BGP Object IDs of routers).
The only real solution to preventing DDoS attacks is cooperation with your upstream provider(s) and something like Cisco's Secure IDS box which will dynamically update and block DDoS type attacks as fast as they appear. Fast enough to make it useless to even attempt. I didn't say it was cheap solution, but it's a very effective one.
Jason Roysdon, CCNP: Security Specilization
PS Normally I wouldn't use a signature or pull out cert letters, but here it's appropriate (plus I left off a bunch of my other nifty initials).
Simply traced where your fire would go. So you could get cheap precision before you shot off your big heavy (and expensive) ammo for a miss.
How long does it take for an expired domain to become available again? I've got my eye on one such domain that expired earlier in the month, but NetSol, et. al., say it's unavailable. The NS for the domain don't answer for it, so I can't even contact the owner (not that I necessarily would, but if I wanted to, I couldn't).
$4.50 matinee
That's funny, I just got snailmail spam from them yesterday advertising their Linux Office Suite.
I've been with a few companies that basically put a price to the training (if it's free and just taking company time) and/or the actual training/books/tests.
The worst I had to deal with had a 2-year policy. Basically half the cost of any book they bought for you (even though it stays in the company library), all of any class they paid for you to take (paid for the actual training and/or paid you to be their on their time), all of any tests they paid for you, these totals were kept for two years and if you left before any one item was over two years old, you had to pay for it in full.
Since that time, the company I've been working for merged and we have a much better policy: Only actual out of pocket training or test costs are tallied, and they are only kept for a year and are prorated (so if you leave in 11 months, you only pay 11/12th the cost).
Along with that, we also got bonuses for getting certs, and generally get pay raises resulting from performance: A Cisco/Microsoft certed engineer bills $150/hr minimim, Microsoft engineer bills $135/hr minimum, vs. a tech with only his A+ cert bills $95/hr. Obviously if you've got more certs and can bill more per hour with customers, you should have better performance (although we've got some slacker engineers and have techs beat them in billing at times).
Does this work all of the time? Not always, we have some people leave, but we retain the better folks most of the time. However, we've stolen a ton of employees from others due to their lame employee personal growth policies (most places wouldn't do jack for their employees, and sure weren't going to pay them more just for getting certs).
You can skip the first 30 minutes of sound checks and zoom practice. Nice that they got the archive up so fast, but it would have be nicer still if they'd trimmed that first part out.
Now that it's over, catch the archive: http://cyber.law.harvard.edu/f utu reofip/archive.asp
roysdon.modesto.ca.us was registered 06/18/00. Turn around with the nic.us folks was about two weeks (just for kicks, to see if I could even do it... surprise, I could). It's much nicer when your city.st.us isn't run by some lamer.
I wonder if it has occured to folks at Napster that they might apply for free colocation services at Havenco ? Of course, it'd quickly get them all in hot water with the court (if they lose for good, and would then be defying the judge's orders), but they could just move to Mexico and remotely manage the whole thing from there.
HavenCo is donating free colocation space to Non-Governmental Organizations of our choosing. In general, the types of organizations that we will want to provide hosting for are those that
promote free speech - check
promote human rights - uhm, check, I think
give a voice to minority and oppressed groups that otherwise may not be heard - check!
Rumor has it that someone even came up with the idea of giving each state/local province their extension, (so North Carolina would have the extension of www.*****.ncs.us, and the venezia regional government of italy could have www.*****.vez.it
No rumor about it, the .US ccTLD is already set up this way. However, each ccTLD makes its own decision on how to designate subdomains, ie co.uk is the equiavalent of .com in the UK. However, the .US domain is setup under a more complicated locality system which makes it less attractive than .com, etc. Also, it's free. Just for kicks, I registered roysdon.modesto.ca.us/>
My biggest beef is that local government agencies don't use this, but instead are lured to the .COM-inization of the internet. My local city and county got it right using the proper locality .US domains: ci.modesto.ca.us and co.stanislaus.ca.us. However, the local Police use ModestoPD.com (albeit, just for email) and the Sheriffs Office will be getting stansherrif.com or something close. I wouldn't even mind them using .COMs, if they also had the "official/standard" .US locality domains forwarding to the same .COMs (police.ci.modesto.ca.us & sherrif.co.stanislaus.ca.us).
Just my two cents.
I'm sure it could be a combination of MAC address and/or having the right WEP key. They'd almost have to implement WEP, as otherwise one could just sniff and snag another valid MAC address and just softwire it in once it went silent.
Oh, and anyone living near me can already get access to my ADSL via 802.11. Of course, you'd have to be within about 3 houses (I've walked down my court with my laptop, and that seems to be the reach). Of course, the AP base is inside my house, but it covers my the areas I want.