Ask TOMBOT

Yea, the advisory I read made it sound like you could get a server to have a bunch of identical requests open with different transaction ids to increase the chances to match a transaction id (16 bit). Maybe I glanced at the wrong thing.

"cache poisoning is old hat" is some dumb shit to be throwing out there kiddo, if phishermen and storm worm types could reliably poison DNS they'd be doing it every hour of every day. What do you do then? Turn off the internet?

Isn't this mostly because people don't route spoofed packets that couldn't have originated on the route they're arriving on?

you have a gross overestimation of the quality of the world's ACLs there

most people out there still don't even implement the bogon list afaik

So I guess 16 bits are enough ;)

Meanwhile our upstream is hammering our office's router with arp traffic and filling up its arp table (sysadmins not really clear on this -- thought the *IP* router would only need to know the MACs of adjacent routers).

lol 30,000 foot view

somebody else besides jw ask me some questions
I don't want to be at work today

If you were in a film would Owen Wilson still play you?

really I don't think so. He's kind of noticeably older than I am now I think, and I have yet to do anything biopic worthy, so we'll see. There's probably some 15 year old kid out there who has two paths in life available to him, whether he winds up playing me in an oscar winner or being the next Dell Dude, who knows. Life is crazy.

El Tomboto,

I don't know if you know anything about it, but masters in operations research: possibly interesting and worthwhile or a waste of time and brain cells that erases the last vestiges of one's humanity?

circles

The coolest parts of my MS were the engineering economics and process engineering/decision-making bits, IMO, so it seems really interesting to me, but I doubt I'd ever get good enough at the math enough to do a whole MS in that particular arena

That's cool. The math does seem pretty scary and probably above my head.

Daer Tombot:
Bachelor of Arts in Interdisciplinary Studies - more or less bullshit-sounding than your average BA in history/English/etc.?

Most people stop listening after you say "Arts" so I wouldn't worry about it. "I graduated from a college" the end

Haha, Tom.

http://www.murdoconline.net/2008/protesting_zombies.jpg

That's not even a question!

All right, are you as good at Whack-A-Mole in real life as you are on here?

I am not the only moderator.

e.g. if you let me play whack-a-mole with a team of five other dudes who each have their own mallet then yeah, I fucking rule

I'm not being snarky. Seeing a thread that ends with a fuck you and then watching it disappear into smoke legitimately makes me laugh on a boring Friday afternoon.

if you let me play whack-a-mole with a team of five other dudes who each have their own mallet

I had no idea you knew LJ IRL.

: - o

;-D

http://blog.terrises.com/wp-includes/images/smilies/jerkoff.gif

that threw me off for a second before I realized that I wasn't looking at the banjo thread.

http://www.doxpara.com/?p=1176

http://blogs.zdnet.com/security/?p=1520

oh teh lol

SQL injection - lol or :-( ?

kind of lol but mostly sad

TOMBOT - Terry Childs, evil villain or misunderstood hero?

p.s. this is a do my homework for me question

ALBERTO TOMBOT,

Would you accept FACEBOOK friend invite from http://profile.ak.facebook.com/v230/1384/59/s1245246539_7707.jpg?

Love,

Shasta

Byron,

Neither.
Arrogant prick.

Steve,

I don't do facebook, so no.

ps to bnw, if I had to expound, I would say "evil villain" gives way too much credit to his actions, which were basically expensive vandalism, and "misunderstood hero" gives way too much credit to his superiors, who themselves got nothing on the folks at NASA/Morton Thiokol who sent the Challenger up

yeah I don't buy the network savior crap either, it'd be like a doctor stashing a patient's charts because only he could care for him properly.

one of my friend's had his main network admin go similarly wacko post quitting where he kept emailing the company saying that their website (which he set up) wasn't secure and that he wouldn't be held responsible if it was hacked.

that sounds like nobody we know

You are probably more aware of your options than I am so I'm just going to tell you that you're probably being risk averse or avoiding a difficult decision. My best decisions, in hindsight, have all been made during times of high stress and tension in my life, because those are the times when you realize making a strong commitment is the only way to save you from yourself. No reward without risk.

This is actually pretty good. Well done.

I'm really tempted to post about a developer going nuts, but I guess I should honor my NDA.

yeah don't be Ptacek. did you read the comments on the matasano post?

http://www.matasano.com/log/1105/regarding-the-post-on-chargen-earlier-today/

Botman - do you think cloud-computing is the end of most internal IT? (more lol homework)

much like e-mail eradicated piles of paper lying everywhere all over the office, yes

1. the government and the military cannot do software-as-a-service/cloud model
2. big publicly-owned corporations also for the most part cannot do it either
3. schools, maybe, and smaller private businesses, sure, but that's like saying "In 2003, eBay and Yahoo! stores effectively ended the need for windshield repairmen, boat engine refurbishers and luxury pet goods dealers all over the world to pay for their own webhosting"

yeah, at first I thought it meant office drones on virtual desktops connected to servers in some bunker in India. Our prof seems very keen on the idea that companies sharing clouds can share data and all benefit. seems to me like companies had maybe lesser and slower means of sharing data before clouds and weren't really doing so...

wikipedia page on cloud computing has the best informational graphic ever

omg <3

There's some article somewhere about the Canadian gov policy mandating no hosted IT services located in the United States because of all the post-911 abuses of government power.

http://socialvpn.wordpress.com/

does this make you reconsider facebook? y/n

catsup dude,

that is the stupidest idea I have ever seen in my entire life.
I would think that the person who came up with it must be schizotypal.

tombot, would you ban someone who calls a mentally ill ILXor a "fucking insane homeless bonkers bag lady archetype"?

curtis,

is that the best you can come up with?

Tom, how will you take advantage of the congressional recess?

tom,

I'm not interested in zinging you, I just think you're a little trigger happy w/the ban button when someone ticks you off. even though what cankles said on that thread was shitty it's not worth permabanning him over - he has not been a perpetual nuisance, and other people have said worse stuff on that thread and on ILX in general.

I mean maybe I'm making too big a deal out of this, I don't get to see the ILXor-analysis that takes place on the Moderator Discussion Forum