* Posts by Mikerahl

13 publicly visible posts • joined 2 Oct 2014

Cisco's critical zero-day bug gets even worse – 'thousands' of IOS XE devices pwned

Mikerahl

One problem I did find with Cisco lately is they've paired their IOS XE switch with a wireless controller that has a web interface, and clients want to be able to use said web interface. I think it's the 9500 series switch. Mind you, there is no justification for a wireless controller to be internet facing in the first place; if you're going to buy a $20k+ switch and add that controller, you should be securing it behind a proper firewall. And lock down the management access via ACLs.

Mikerahl

Disabling the http server on IOS devices has been about the first thing we've done on any Cisco device we stage,for the last several decades. The feature has never been particularly useful; it is really easy to build a simple config template and install it via CLI

California governor vetoes bill requiring human drivers in robo trucks

Mikerahl

It'll be interesting to see how much enthusiasm there is for robotaxis if a hacker group finds a way to take control of a batch of the taxis and run them down sidewalks in a major city. No matter how good the security, someone can always break it

Network died, hard, during company Christmas party, leaving lone techie to fix it

Mikerahl

My fun nightmare involved an OS upgrade, Cisco Nexus 7710 and the "alpha version" (they didn't call it but I sure as heck did) of Overlay Transport Virtualization. Combined with relatively new Cisco firewalls on a newer OS (read bugs not yet known) in cluster mode which was known to have "interesting problems". Said firewalls and switches ran their traffic over PIM between 2 data centers in 2 geographic locations. OTV allowed the customer to span layer 2 over layer 3 so they wouldn't have to readdress servers if they moved between data centers. Great idea in theory. Main issues came up when, for example, the "bit flipped" on the firewall without warning so that the firewall on the other data center suddenly became the master and voice traffic went from a 2 hop journey to the voice servers, to 30 hops. Surprisingly, voice doesn't work well when you suddenly introduce 28 extra hops and 150-200ms of additional latency without warning and the client had many other time sensitive applications. It took us a year to stabilize the environment after Cisco finally released a patch. Then we needed to do a code update to patch vulnerabilities on the nexus switches. The code upgrade took 4 hours and took 30 extra hours to find out why one of the VDCs was reporting that traffic was flowing through assigned interfaces but, in fact, traffic was not (sniffers proved that which were loads of fun to connect, given all the ports were fiber modules). Overall, my 70 hour software upgrade weekend, coupled with the often 90 hour weeks for a year for each person on the team, correcting all the problems, was such a fun experience.

Bosses face losing 'key' workers after forcing a return to office

Mikerahl

Re: For a contrarian take

I would be curious to see if this survey was performed while schools were shut down, parents had to manage their kids and zoom classes at the same time, and everyone was living in fear of dying of a dangerous virus. Take those out of the equation and survey people post-pandemic where fear is less and schools are open, and then let's see whether productivity declines or improves.

Russia says Starlink satellites could become military targets

Mikerahl

Re: If an asset is used to support either side of a war effort, …

If a country engages in war, proxy or otherwise, everything it owns is a legitimate target. Meaning all civilian and military infrastructure. The only way to avoid that is to not engage in the conflict. So yes, since the US and Europe have chosen to arm Ukraine, train their soldiers and get involved in the conflict (beyond humanitarian aid), all their civilian infrastructure is a perfectly reasonable target for the Russian military. As it would be equally valid for NATO, should it decide to, to completely flatten Moscow, civilian and military assets alike. The concept of "war crimes" is absurd. Civilian infrastructure is used to fund and provide resources for the military effort, it absolutely should be targeted and destroyed completely. Terror is a perfectly reasonable approach to war.

Oracle files $7m copyright claim against NEC's US limb over 'unreported royalties' from database distribution

Mikerahl

I think they'll tack on legal fees later on (asking for "costs")

Auf wiedersehen, pet: UK Deutsche Bank contractors plan to leave rather than take 25% pay cut for IR35 – report

Mikerahl

Re: Alternatively

There's an argument to be made that, if you want to leave the country that paid for all your education, you should have to repay all the costs of that education (which, if you stayed for at least a few years, paying your taxes, would be done over that time frame).

Apple hauled into US Supreme Court over, no, not ebooks, patents, staff wages, keyboards... but its App Store

Mikerahl

Re: That's not how apple store works...

The issue is that Apple specifically prevents alternate software sales options on their platform. Given how much of the tablet market and phone market (and how much of the profitable ends of those markets) Apple controls, it could easily be viewed as antitrust. If Apple wants to make sure it doesn't get harmed by this, it has only to allow any and all other app stores anyone might want to open.

European court: Let's not kid ourselves, Uber. You're a transport firm, not a 'digital service'

Mikerahl

Re: So...

I think common sense would be more if the entire concept of the "taxi license" was eliminated and replaced by a simple driver's license in the same model as a truck driver license, which would be provided at cost to those who pass the requisite exams (same as a trucker, bus driver, etc.). Take the entire management of such licenses away from the cities (they don't get to manage trucks either). If someone wants to drive a taxi, they can drive a taxi. No limits, no "cartels", just get your license and you can drive.

After AT&T's crushing blow, FTC tells Senate it wants its balls back

Mikerahl

Re: So, business as usual?

Here's a thought. How about removing all regulation from telecommunications? Including all limitations placed on radio waves (possibly exempting a few frequencies reserved for police and the military), and any right of way to use people's backyards (forcing telcos to pay for everyone's land they want to use, individually), requiring them to pay for any use of public land, municipality by municipality, Perhaps when their networks cease to function, they'll see a value to regulation?

Satya Nadella's $84.3m pay packet: Did he use the 'female superpower' to get it?

Mikerahl

Re: Average?

And the solution any government (outside of North America) would be equally appropriate, simply advise the company that they are welcome to sell their products somewhere else. No significant numbers of employees locally should automatically mean a complete ban on all sales of all products by that company. And that means employees right up the chain. They want to move their production to Asia? No problem, please feel free to stop selling anything made there here.

Apple bats away yet another WiLAN patent sueball

Mikerahl

One option that might help in such cases is to adopt rules like in Quebec, where each side must pay their full legal costs regardless of who wins (i.e., the court cannot award costs of lawyers). Also in Quebec, taking contingency is generally not permitted. Mind you in the States, I doubt this would ever happen, and it has its own flaws, but at a minimum, requiring that each side pay for their lawyers (no contingency) for any patent case might be appropriate