September 2015 - NZNOG - lists.nznog.org

Changes to the NZRS zone and web scan policy
by Sebastian Castro 17 Sep '15

17 Sep '15

Hello everyone: Following some useful feedback from an operator, we have made changes to the zone and web scan practice statement. Modifications are around three main areas - Provide a web page associated to the server where the scan comes from. Now http://zonescan.nzrs.net.nz will lead you to an information page that explains what is the scan about - Kind of data collected. - Reference to where aggregated data from the zone scan is published, using our new Internet Data Portal We are always open to receive feedback and improve our communication and processes. With the aggregated data available, your can find out the state of the .nz name space. The URL of the improved practice statement is https://nzrs.net.nz/dns/zone-and-web-scanning Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

TICSA Amendment Bill drawn from ballot
by Beau Murrah 16 Sep '15

16 Sep '15

Hello NZNOG, http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC… <http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC…> Clare Curran’s TICSA Amendment Bill has been drawn from the ballot. Ill be giving it a close read myself in the next day or two, would be interested in any comments/discussion off-list or on-list. A link to the Bill itself is here: http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a… <http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a…> My research & writing on TICSA is still ticking along- I am considering trying to submit a talk for Kiwicon but thats quite a high bar to aim for, but I plan to release the text regardless around the same time as the conference. As a brief repeat summary, the text focuses in-depth on the deeply untested/unprecedented legal concept of Good Faith which has been imported into this area. It is imperative to avoiding any liability under the Act and also crucial to any sort of pro-active action against the Agency. Kind regards, ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Can whois registrar info be wrong?
by Richard Hector 16 Sep '15

16 Sep '15

Hey all, Is it technically possible for the registrar details in whois (for a .com domain) be out of date, or is the whois the canonical source of the info? If it is possible, how would I go about finding out who's really in control? Does a registrar have an interface for that? Unfortunately I'm not sure how reliable my client's own records are on this ... Cheers, Richard

4 5

Phish? Re: .NZ would like 5 minutes of your time
by Richard Hector 16 Sep '15

16 Sep '15

It's an email apparently from one party (NZRS), apparently sent by a second party (my registrar), via a third party (mscv.net) with a link to a fourth party (surveymonkey.com), which seems classic phishing. On the other hand it "looks quite legit". If it is legit, am I right in thinking it's a bad way to go about it? Any comments from participants? Richard

2 2

Victoria University breakfast seminar for IT managers in Auckland 1st October 7am
by Ian Welch 14 Sep '15

14 Sep '15

Hi, My colleague at the School of Information Management has organised a seminar at the VUW campus in Auckland aimed at managers. They said that they are particularly interested in people working in networking so I thought I’d pass it on via the list. The main speakers are Ian Clarke (CEO of Fronde) and Prof Benoit Aubert (Information Systems at Victoria Business School). RSVP by 18th of September. Full details are here: http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ… <http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ…> Cheers, Ian — Ian Welch School of Engineering and Computer Science Victoria University of Wellington

1 0

KIWICON 9 CALL FOR (cyber) PAPERS
by Mike Forbes 14 Sep '15

14 Sep '15

---{ A WHIRRING TELETYPE CHIRPS, SPEWING FORMFEED INTO THE PILE }--- UNCLAS MSGID/SITREP/9TH CYB DIV// UNIT/KIWICON RESERVE REAR INTEL GRP// PERID/120915:0000Z/TO:111215:0000Z// HEADING/TITLE// AMPN/INTEL SITREP SUMMARY NEW ZEALAND CYBERWAR DAY 137// HEADING/GENERAL// AMPN/FORWARD EMPLACEMENTS REPORT CONTINUING ENGAGEMENT WITH ENEMY. 3 X SORTIES OF 8 X SU-25 FROGFOOT CONDUCTED GND ATTACKS WITH TCP SYN/FIN ON PORT 7199. JMX CONSOLE TOOK HEAVY CASUALTIES, ACTING CO RPTS OPERATIONAL READINESS AT 40%, LOAD AVG 18.7. WOUNDED EVACED TO DEV SHM, AWAITING ONWARD TRANSPORT. RECCE REPORTS ENEMY RESUPPLY CONVOY MAPREF PAPA-ZULU WITH BMP-24BIT MECH INF DIVISION STRENGTH, B-HAWK MANPAD UNITS, PDF MINELAYERS.// HEADING/COMMANDER EVALUATION// AMPN/ FURTHER ATTACKS ON DUG IN POSITIONS AT MAPREF XRAY-PAPA. SIGNIFICANT ESCALATION OF CYBERING EXPECTED. RECOMMEND IMMEDIATE REINFORCEMENT FROM CYBER RESERVE// ---------------------{ SOME TIME LATER ... }--------------------- KIWICON 2015 (HTTPS://WWW.KIWICON.ORG/CFP.HTML) SELECTIVE CYBER SERVICE | CALL FOR CYBER PAPERS We hereby notify you that by this notice published on the Internet pursuant to the some fictitious regulations, you have been called up for service with the Kiwicon Cyber Expeditionary Force, as a Reservist of the Ninth Division of the General Hacker Reserve, Kiwicon Cyber Corps. You are hereby and forthwith directed to present your response to the Kiwicon 9 CFP by filing your report on this page. Each talk and/or training submission should be made on a separate form. They must be filed individually, and upsetting the file clerks is never a good idea this early in campaign season. The first round of talks, correction: CYBER WARFIGHTER EDUCATIONAL MATERIALS will be announced on the 26th of October, NZDT, and will be complete by the 9th of November, NZDT. If the evaluation board passes you as fit for service, you will be required to present yourself to the St James Theatre of Cyberwar for the dissemination of the aforementioned material. You will be notified in due course by an authorized officer of the Crue regarding your particular time and place for reporting. Practical training will be held on the 9th of December, 2015, while presentations will be given on the 10th and 11th of December. Note: it is the responsibility of the instructor to ensure all material has been appropriately declassified. You are also hereby further notified that if you fail to obey this order you are liable to be considered sensible without further notice. God save the Mince Queen, Col. St. John Beauchamp-Beauclerk (Adjutant Crue) IMPORTANT NOTICES (read each paragraph carefully) If you report pursuant to this order please fill out our google form (triplicate copies not required at this time) at https://goo.gl/JnoCb3. Answer the questions to the best of your ability, and let us know if you have any special requirements (motorcycles, pyrotechnics, therapy animals, exorcisms). Should floods, illness, fires, and poorly scheduled wedding ceremonies unavoidably prevent you from reporting as ordered above, you must write immediately to the Adjutant Crue stating the circumstances which prevent you from reporting. As per special order, written notes from Lord Tuskington will also be accepted. If you are employed, you should inform your employer of this order and that the examination is merely to determine if you may be fit for service. If found suitable for induction, documentation will be provided by an authorized officer of the Crue for your employer as early as possible. Troop movements to the marshaling point are the fiduciary responsibility of the cyber warfighter and will not be reimbursed regardless of evaluation board determination. To re-familiarise yourself with your duties as Cyber Reserve, please review the Standard Operating Procedure with particular observation to the sections relevant to the ongoing conflict, viz; Cybering Computering Minced meats Cyber hacking Computer cyber hacking Hacking (cyber) Cyber hoodies, correct wear and maintenance of, Cyber warring Any further communications arising from this notice must be sent by to kiwicon(a)kiwicon.org. IRC communications cannot be accepted due to our ongoing lack of ability to remember to tell everyone else that they happened.

1 0

Vodafone / ihug DNS Servers - Reset of Zone File
by Justin Lewis - ResponseMedia 13 Sep '15

13 Sep '15

Hi All, Is anyone else seen ns1.ihug.net.nz and ns2.ihug.net.nz Reverting to older zone files since around lunch time today? Looking like the zone serial is back to "2015082705" should be at least "20150905XX" Have a customer who's entire zone file has been reverted to an old record that's is over 3 weeks old. Customer portal is showing the new zone file though. Regards, Justin Lewis ResponseMedia [https://newoldstamp.com/editor/profilePictures/profile-3c8f7090e76fa0afb6a3…] Mobile: 027 300 6242 Email: justin.lewis(a)responsemedia.co.nz<mailto:justin.lewis(a)responsemedia.co.nz> Address: Christchurch, NZ [https://editor.newoldstamp.com/images/f.jpg]<http://www.facebook.com/ResponseMedia.NZ> [https://editor.newoldstamp.com/images/tw.jpg] <http://www.twitter.com/ResponseMediaNZ> [https://editor.newoldstamp.com/images/instagram.jpg] <https://instagram.com/ResponseMediaNZ/> Dropbox Partner SMX Mail Partner

2 1

Any NOCs seeing alarms in the Tauranga Chorus exchange?
by Jesse Archer 12 Sep '15

12 Sep '15

We've lost power in the colo room, to both A + B feeds.

3 4

Can't see 117.121.247.0/24. Do we have a local looking glass
by Don Gould 10 Sep '15

10 Sep '15

Hi Sorry for an operation issue on list on a Friday ;) We just moved an IP range in us this morning and I can't see it via DTS currently. I've been asked to find a local looking glass. Can anyone assist? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.

2 2

APNIC 40 - Webcast Sessions taking place today
by Elly Tawhai 09 Sep '15

09 Sep '15

Hi NZNOG Community, You may be aware that APNIC 40 has started. You can participate remotely in discussions, ask the presenter questions, and voice your opinion. To watch live webcast go to: https://conference.apnic.net/40/program#webcasts Some topics under discussion include: * The Status of APNIC’s IPv4 Resources: Exhaustion & Transfers * IPv4: Mining Strategic Reserves * prop-114: Modification in the ASN eligibility criteria * prop-113: Modification in the IPv4 eligibility criteria * prop-115: Registration of detailed assignment information in Whois DB * APNIC Member Meeting See you online! Kind regards, Elly APNIC

1 0