What I was trying to say is that it would be VERY difficult for a scammer to hijack a banks actual 800 number, so if you call the 800 on your card or statement it is very safe.
I've installed IVR's before, some for banks, but I was surprised a few months ago when I got a call on my cell with a blocked caller ID saying there was a potential fraud issue and that I needed to enter in my credit card number and my complete SSN. Needless to say I hung up on that one.
I called the 800 on the back of the card, only to find out that it really was the credit card company's IVR that called and there really was a fraud block being put on my card awaiting some verification info.
I suggest you ignore the initial call, but actively call the bank back since they won't be able to steal the actual 800 number even if they can display it in your caller ID.
I am running FreeBSD 6.0 on a P200 sony with fluxbox and a light load of standard apps. My only complaint is Firefox load time, all other apps load and run great.
IF the backbones segmented everyone with dual links would keep their UUnet, people without UUnet would get one or pressure their provider to use the UUnet uplink, basically it would be survival of the strongest and UUnet would win.
Yeah I am just a network guy but I bet I know more about this than the "expert" "predicting" gas prices on CNN.
If that is a Cisco router running IP/IPX/DECnet try to enter this "sho decnet traffic" and check the input output counts.
Re:Cliff's Notes: Start Using TCP Sequence Number
on
Examining ICMP Flaws
·
· Score: 2, Insightful
I just ran my sniffer and inspected a icmp echo request. I see the ICMP seq#, there is no TCP header on the packet. While I can see this being a potential tool to defend against a barage of ICMP echo replies (or any reply protocol under ICMP) but I still cannot see how it would be a usefull tool in other scenarios, e.g. if I were sending Echo's or Information Requests.
Regardless I see greater challenges for ICMP with much more complicated answers needed. Until then I still see old school acl's as the best prevention, I will have to owe everyone some change on those two cents.
Re:Cliff's Notes: Start Using TCP Sequence Number
on
Examining ICMP Flaws
·
· Score: 2, Insightful
Help me out here, I seriously want to understand you comment. How can ICMP outlined in RFC792 http://www.ietf.org/rfc/rfc0792.txt?number=792/ allow for a sequence number when it is designed as an unreliable protocol without a port number or sequence number in the header? I mean unless we rewrite ICMP as a layer four protocol I don't see how we can prevent this?
OK, you caught me. The real answer is IBM just wanted a chance to pick up a minority share (10%) of Lenovo, whoever the fuck they are. Now that I have breached security the guys with short sleeved JC Penny shirts and polyester clip-on ties will be coming to get me!
Just a little more seriously; compared to the asinine comment I was responding to, you may as well put my words in stone because I, P, and Z are here to stay. Blade servers are changing the way we build and run data centers, they are incredibly efficient and resilient. Personally I can't believe more of my clients haven't already started converting to them, but IBM is not going to put their big servers out to pasture because blade servers are sending them the way of the dinosaur.
IBM dropped thinkpads (intel based) due to too much competition.
How long will it be before they drop the X series (intel based) since everyone can beat them on price there too? Lets face it the only people who pay extra for an X are people who already have a huge investment in IBM, probably a mid-range or mainframe.
Now look at blades: anyone with an x86 anything is jumping on blades even if they really suck at it like Dell or HP. Dell, as much as they really do suck at blade servers, cost half as much. How long will IBM keep pursuing the Blade Center (intel based) market if they can't make a good profit?
They will never give up mainframes and the printers and storage solutions that equate to huge add on sales for them. It really makes no sense for them since they have no competition in the proprietary space and they can hold that high margin business without having to bid against other competitors. Business is good right now for I, P, and Z series. Business don't look so good for blade with all the competition catching up...
not dead, it just lurks in the dark, more like undead. I got called to troubleshoot a server farm with occasionally severely degraded network performance. Occasionally like every Tuesday --> Saturday at noon.
Once I flipped my sniffer to look at more than just TCP/IP I found both IPX and DECnet running hard, doing full file system backups, copying gig's of old logs, etc. Their network "admins" valuable input was limited to: "sniffers can do that?"
Most of the people posting here have no idea what volume of traffic you are looking at. Even more alarming is that you think your servers aren't worth more than 100$ of protection, you need to get a better perspective on the big picture.
I hate working with colleges, it is the worst environment technically and politically you can imagine. I really don't envy you on this one!
You should probably also look at the new Enterprise QoS guidelines in the SRND at http://www.cisco.com/go/srnd/ for information on scavenger class starvation of less than best effort traffic.
Yes sir, we would love to sign the contract. Please give us your birth name and the address of where you would like us to send the agents, oh did I say agents, I meant contract....
AWESOME idea! If you make their new place of work on the moon and they don't show up you can cut them loose without having to pay unemployment/severance/whaterver!
Slashdot Mirror
MRTG has always done the job for me but I have been looking more and more at cacti, it's worth a look over here http://www.cacti.net/
What I was trying to say is that it would be VERY difficult for a scammer to hijack a banks actual 800 number, so if you call the 800 on your card or statement it is very safe.
I called the 800 on the back of the card, only to find out that it really was the credit card company's IVR that called and there really was a fraud block being put on my card awaiting some verification info.
I suggest you ignore the initial call, but actively call the bank back since they won't be able to steal the actual 800 number even if they can display it in your caller ID.
I think I see a /. poll coming...
I am running FreeBSD 6.0 on a P200 sony with fluxbox and a light load of standard apps. My only complaint is Firefox load time, all other apps load and run great.
Yeah I am just a network guy but I bet I know more about this than the "expert" "predicting" gas prices on CNN.
This is for their website only. This includes people who work for Cisco as well as anyone who ever bought a Cisco device.
No, I am not the reason that you can't use PMTU discovery but I am flattered that you think I am so important.
I do think you are right about the dumbing down, and BTW, thank you for your contribution.
If that is a Cisco router running IP/IPX/DECnet try to enter this "sho decnet traffic" and check the input output counts.
Regardless I see greater challenges for ICMP with much more complicated answers needed. Until then I still see old school acl's as the best prevention, I will have to owe everyone some change on those two cents.
Help me out here, I seriously want to understand you comment. How can ICMP outlined in RFC792 http://www.ietf.org/rfc/rfc0792.txt?number=792/ allow for a sequence number when it is designed as an unreliable protocol without a port number or sequence number in the header? I mean unless we rewrite ICMP as a layer four protocol I don't see how we can prevent this?
Just a little more seriously; compared to the asinine comment I was responding to, you may as well put my words in stone because I, P, and Z are here to stay. Blade servers are changing the way we build and run data centers, they are incredibly efficient and resilient. Personally I can't believe more of my clients haven't already started converting to them, but IBM is not going to put their big servers out to pasture because blade servers are sending them the way of the dinosaur.
IBM dropped thinkpads (intel based) due to too much competition.
How long will it be before they drop the X series (intel based) since everyone can beat them on price there too? Lets face it the only people who pay extra for an X are people who already have a huge investment in IBM, probably a mid-range or mainframe.
Now look at blades: anyone with an x86 anything is jumping on blades even if they really suck at it like Dell or HP. Dell, as much as they really do suck at blade servers, cost half as much. How long will IBM keep pursuing the Blade Center (intel based) market if they can't make a good profit?
They will never give up mainframes and the printers and storage solutions that equate to huge add on sales for them. It really makes no sense for them since they have no competition in the proprietary space and they can hold that high margin business without having to bid against other competitors. Business is good right now for I, P, and Z series. Business don't look so good for blade with all the competition catching up...
Once I flipped my sniffer to look at more than just TCP/IP I found both IPX and DECnet running hard, doing full file system backups, copying gig's of old logs, etc. Their network "admins" valuable input was limited to: "sniffers can do that?"
Anyway, not completely dead...
Most of the people posting here have no idea what volume of traffic you are looking at. Even more alarming is that you think your servers aren't worth more than 100$ of protection, you need to get a better perspective on the big picture.
I hate working with colleges, it is the worst environment technically and politically you can imagine. I really don't envy you on this one!
You should probably also look at the new Enterprise QoS guidelines in the SRND at http://www.cisco.com/go/srnd/ for information on scavenger class starvation of less than best effort traffic.
I am going to file that with: "640K ought to be enough for anybody." and "I think there is a world market for maybe five computers."
I think this is a dead end street, outside the US they might maintain pressence but it will never happen here.
This happened in Perth to boot, insulting.
Yes sir, we would love to sign the contract. Please give us your birth name and the address of where you would like us to send the agents, oh did I say agents, I meant contract....
Glad I am running Mepis!
In all seriousness 40:1 doesn't sound too far off to me.
Brilliant, have a Guiness!
Sorry, was that too close to home?