* Posts by Janir

4 publicly visible posts • joined 20 May 2014

IPv6 for Dummies: NSA pushes security manual on DoD admins

Janir

I hope that they are actually planning out their networking domains properly so that they can actually leverage IPv6 address space without managing addresses on the devices but use IPv6 properly so that the hardware ID is part of the address and you're only segmenting the networks in the network address portion of the IPv6 scheme. Seen several large companies (one a network telco) screw up their initial layouts and to move forward they just started assigning any IPv6 addresses as needed to various devices, taking away the flexibility of the self assignment based upon the network that it's residing on. Giving themselves all of the overhead of managing addressing and networks from IPv4 into IPv6.

Job 1: Get the boss on the network. Job 2: Figure out why Job 1 broke the network for everyone else

Janir

Re: What's the password?

Nah,it's quite possible. Especially when you outsourced the IT help. A proliferation of admin access to a level 1 admin pool of staff without any basic controls is a whole lot more common in larger companies than one would like to believe.

Facebook goes down, people dial 911

Janir

Re: Wait... what?

No.. its L.A.

US giant NBC 'leaks' PRIVATE Amazon keys in Github Glenn gaffe

Janir

Re: Umm (2)

I second that comment! What in God's Green EARTH were they thinking to put the AWS Access secrets and keys on Git Hub in the FIRST PLACE?!?! Make some local Github server local in your environment and keep them there. If someone else needs those keys then your not using AWS right. Set up some IAM credentials, make a few secondary keys that you can throw away, something other than storing and accessing your primary keys outside of your network domain.