amuck-landowner

Search results

  1. kaniini

    ServerCrate compromised

    Centarra itself is not involved.  I am personally involved as I was hired, independently, to do the audit. Centarra does not provide security services, but I would have figured you guys already knew that I do on the side.
  2. kaniini

    ServerCrate compromised

    I do not believe that is appropriate either until the audit is fully concluded.
  3. kaniini

    ServerCrate compromised

    It was not SolusVM.  I can't disclose at this time what it was though.
  4. kaniini

    VPS's .. The dangers of doing business with idiots

    Well, this is why I say using SSH for transport in control panels (in the way these control panels set it up, anyway) is a bad idea.  In many cases, the rootkit probably gets in through the SSH credentials in the panel, typically leaked through some sort of SQLi vulnerability. Instead...
  5. kaniini

    TLS 1.2: AES_128_GCM or AES_256_CBC for better security?

    The difficulty for encrypting and decrypting a 256-bit block is the same as a 128-bit block.  Considering properly-implemented TLS uses a ratchet to change the session key after each N records sent, a 128-bit block cipher is actually more secure for two reasons: 1. Ratcheting will occur more...
  6. kaniini

    ColoCrossing, Quick to Get Large IP Blocks Issued and Faster to Soil Them

    Well, people aren't required to use Spamhaus, so maybe you should complain to the people who do.  Publishing lists of IPs associated with possible spam operations is protected speech.
  7. kaniini

    TLS 1.2: AES_128_GCM or AES_256_CBC for better security?

    The reason why you don't see support for AES_256_GCM is because GCM operates on 128 bit blocks, with a 128 bit trailing MAC, yielding a 256 bit frame.  In effect, there is no 256-bit GCM mode (this would yield a 512 bit frame) so there can't be a AES_256_GCM. edit: thinko
  8. kaniini

    Mt.Gox shuts down, is insolvent

    Most places use Bitstamp now for a while, since MtGox was worthless for over a year anyway.
  9. kaniini

    Mt.Gox shuts down, is insolvent

    No.  If I did, I would be on the next plane to Japan to kick some ass, I assure you. I'll just leave that here.
  10. kaniini

    Mt.Gox shuts down, is insolvent

    Well, if you think about it, this makes sense... if they throw the bankruptcy word around, then people might make a run on the other exchanges, which would be a situation they want to avoid. I think I'll stick with using Ripple for my exchange needs.
  11. kaniini

    Mt.Gox shuts down, is insolvent

    Well, Mt. Gox is shut down now, the website is a blank page. A certain fish gave me this slideshow: http://www.scribd.com/doc/209050732/MtGox-Situation-Crisis-Strategy-Draft Looks like they were planning to pitch the company to another exchange and whitewash the stolen coins.  Honestly, it is...
  12. kaniini

    Portable Virtual Optical Drives

    agreed, usb sticks are the way to go here, i'd be worried about messing up that drive just transporting it around.
  13. kaniini

    Choopa sends out Vultr to drown in the DigitalOcean

    I'm not terribly worried about it.  Gimped APIs and being strongly in the DigitalOcean space means the type of customers I work with aren't going to be using it. that said: it is amusing that someone else is demonstrating there isn't anything at all magical about DigitalOcean's business model...
  14. kaniini

    Chris Fabozzi of ChicagoVPS wanted to start a data center with who?

    Fabozzi has nothing to do with us.  But yes, I can verify he did reach out to ChrisK back when Avante was a thing.
  15. kaniini

    Centarra - Premium Dallas Colo from $50 a Month [Native DDoS Protection] [A+B Power]

    We are more interested in APAC.  We will probably do EU after the world has transitioned more to IPv6.
  16. kaniini

    Centarra - Premium Dallas Colo from $50 a Month [Native DDoS Protection] [A+B Power]

    Abovenet is 1 AS hop away from most of the key eyeball networks in Dallas for the region... Cox, Suddenlink, AT&T and Verizon all peer with them.  nLayer/GTT has peering with them through TINET. If you want to take a look, we operate a looking glass on a VM at http://dal.speedtest.tortois.es/...
  17. kaniini

    Centarra - Premium Dallas Colo from $50 a Month [Native DDoS Protection] [A+B Power]

    Yes, we see a lot of colocation offers where you get a whole cab, and like a /27 or /28.  We found this to be strange, as at least, in my view, the ideal purpose for a full cab these days would be to run a virtualization cluster or something similar. So, instead of it being a hidden fee for the...
  18. kaniini

    ocz ssd 128gb + PrimoCache 4GB cache disk io

    They offered to sell me a P3 laptop as a dedicated server when I asked for something slower than the P4 they were offering (long story short, it is helpful to 'slow things down' when you are looking to optimize the fast path in an application). They never did give me a specific on pricing, I...
  19. kaniini

    Centarra - Premium Dallas Colo from $50 a Month [Native DDoS Protection] [A+B Power]

    Then you, as a customer, would raise this with us and we would handle this through our standard processes for handling network abuse (i.e. investigate and block the traffic, and possibly terminate the customer depending on the nature of the abuse). We are planning to add TeliaSonera in the next...
  20. kaniini

    HOWTO: Stop NTP amplification attacks from reaching your nodes!

    If you want the inverse of this (to filter the crap out that you're receiving), simply block UDP packets to port 123 which are 468 octets long. You can do this with a route-map on most routers or a policer.
Top
amuck-landowner