- NZNOG - lists.nznog.org

KFC shows that once again New Zealand needs a CSIRT. Well here's a start.
by Dean Pemberton 20 Oct '15

20 Oct '15

Hi All, The recent KFC incident has highlighted a lack of awareness of where to effectively report online security issues. A point made worse by New Zealand not having a CSIRT. At the NZITF we're working to create New Zealand’s first public facing Computer Security Incident Response Team (or CSIRT). Essentially, we have decided it's time to stop talking about creating a CSIRT and instead partner with like-minded companies to fund and incubate a small, agile team to prove the value that a public-facing CSIRT can bring to New Zealand. We have produced a short 1-pager about why the NZITF are setting up CSIRTnz and what we hope to achieve. http://nzitf.org.nz/pdf/NZITF-CSIRT-ValProp.pdf Feel free to get in touch (info(a)nzitf.org.nz) if you, or your organisation wants to know more about the initiative. In the mean time, while we get this all setup, any incidents sent to info(a)nzitf.org.nz will receive attention, and we'll look to provide co-ordination, albeit on a best efforts basis. Regards, Dean

1 0

Spark / GG & ICMP
by Jonathan Brewer 19 Oct '15

19 Oct '15

Hi Folks, Anyone know of NZ-based Global Gateway or Spark infrastructure that responds to ICMP ping requests globally? On or off-list reply fine. I've found hosts in AS4648 that respond to ping selectively - from some, but not all of the servers I'm using to collect data for my project on peering in the Pacific http://pacpeer.org/ Bizarre & frustrating things going on with this network. Same for AS4771. Failing that happy to take suggestions for Auckland based single-homed customers on AS4648 or AS4771 that are fibre connected with 1-2ms latency from provider core - and don't mind the occasional ping. I've got Atlas probes I can ping, but they're on the end of consumer tails & that mucks up the stats. Thanks, Jon

2 2

kfcdelivery.co.nz ongoing scam
by Nathan Ward 19 Oct '15

19 Oct '15

All, You might’ve seen ‘kfcdelivery.co <http://kfcdelivery.co/>.nz’ pop up on social media today. It’s a scam. If you have the ability to block this website so your users cannot reach it, please do so. If you have stuck your CC details in there, cancel your card. It is hosted through CloudFlare, don’t block the IPs, but perhaps you can filter on your DNS or something. I have reached out to the registrar for the domain to get it blocked (discount domains). If anyone has a contact there other than support@ to get it pulled ASAP, please use it - I don’t know anyone there. The logic of the site is roughly: <snip> # Validate input and set error if validation fails if(error){ "You must fill in the red fields" }else{ "Our servers are down due to heavy traffic, please try again later" } # send data to servers anyway </snip> -- Nathan Ward

8 13

Stats NZ ISP survey
by Jay Daley 15 Oct '15

15 Oct '15

Those of you that use the ISP survey from Stats NZ might like to know that the’ve reissued it, silently, following discovery of discrepancies between this release and previous releases for historical data. Basically they re-ran the random rounding for historical data and got different random values from before. This is now fixed and the latest spreadsheet is consistent with previous ones. http://www.stats.govt.nz/~/media/Statistics/Browse%20for%20stats/ISPSurvey/… Jay -- Jay Daley Chief Executive NZRS Ltd desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley

6 9

Fixing home router firmware
by Dave Taht 14 Oct '15

14 Oct '15

I think those here that would like to have better home gateway firmware might like the proposals vint cerf, I, and 260 other notables (incl linus torvalds, dave reed, jim gettys, etc, etc)... have just circulated throughout Washington, DC. http://www.businesswire.com/news/home/20151014005564/en/Global-Internet-Exp… reshare and enjoy. -- Dave Täht Do you want faster, better, wifi? https://www.patreon.com/dtaht

1 0

Re: [nznog] Large increase of Data on AKL-IX
by Pete Mundy 13 Oct '15

13 Oct '15

On 14/10/2015, at 10:47 AM, Craig Whitmore <lennon(a)orcon.net.nz> wrote: > Does anyone know what got added/what changed at AKL-IX which suddenly doubled the amount of traffic from AKL-IX this morning? > > http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=1… If you look at the graphs for individual peers you can see pretty easily the ASes (AS'?) most of it is coming from. Not sure where it's all going though! http://monitor.akl-ix.nz/cacti/graph.php?action=view&local_graph_id=93&rra_… Pete

12 14

Large increase of Data on AKL-IX
by Craig Whitmore 13 Oct '15

13 Oct '15

Does anyone know what got added/what changed at AKL-IX which suddenly doubled the amount of traffic from AKL-IX this morning? http://monitor.akl-ix.nz/cacti/graph_image.php?action=view <http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=1 4&rra_id=2> &local_graph_id=14&rra_id=2 Thanks Craig

4 3

CFP - Sysadmin Miniconf - Linux.conf.au 2016
by Simon Lyall 12 Oct '15

12 Oct '15

Call for Presentations Linux.conf.au 2016 Systems Administration Miniconf There will be a one day mini conference on Linux Systems Administration at linux.conf.au 2016 . LCA2016 will be held in Geelong, Australia on 1 - 5 February 2016 The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear from at this Miniconf This is our 10th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website http://sysadmin.miniconf.org/. Presentation Topics =================== We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments. Topics for presentations could include (but are not limited to): * Systems Administration Best Practice * Containers and orchestration * TLS everywhere * Monitoring and metrics. Collection, storage and presentation * Infrastructure/Platform/Software as a Service (IAAS) * Virtualisation and Cloud Computing * IPv6 * Software Defined Networking (SDN) * DevOps * Configuration Management * Bootstrapping systems, Lifecycle Management * Dealing with BYOD * Backups in a virtual/distributed world * Troubleshooting techniques * Buying Decisions * Web and Email management * Keeping legacy systems functioning * War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 45 minute double-length presentations 15-20 minute full presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA keynote before morning tea), we expect the majority of available timeslots to be 20 minutes or less. We have a general policy of accepting a high proportion of proposals but handing out relativly short timeslots. Please see previous years Miniconf schedules for examples. Submitting talks ================ Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. Submissions should be made via: http://sysadmin.miniconf.org/proposal16.html Questions should be sent to: lca2016 @ sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions priority (both of inclusion and scheduling) will be given to presentations submitted before the 8th of November 2015. Please indicate if you need an early confirmation to aid you in arranging time off work or travel. 2015-10-31 - Deadline for early submissions 2015-11-08 - Early submissions confirmation 2015-12-12 - Deadline for submissions 2015-12-19 - Confirmation of all presentations 2016-02-02 - Sysadmin Miniconf held. Contact and Questions ===================== Please see our website at http://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2016 @ sysadmin.miniconf.org

1 0

your private ASs are showing
by Geoff Huston 09 Oct '15

09 Oct '15

Maybe this is not what they wanted to propagate:…. can anyone help SNAP? thanks Geoff www.cidr-report.org AS4200000005 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000052 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000055 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000290 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ (see the cidr report at the verybottom)

1 0

Call for APRICOT 2016 PC volunteers
by Dean Pemberton 06 Oct '15

06 Oct '15

Hi everyone, The APRICOT 2016 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the APRICOT 2016 conference (http://2016.apricot.net/) The APIA Board selects a new Programme Committee each year and is now seeking nominations from the community. Eligible PC candidates are those who have attended APRICOT conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of APRICOT conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to each event. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "apiasec at apia.org". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members who are active and contribute to regular meetings and submit reviews receive complimentary registration for APRICOT 2016. The APIA Board will accept nominations received by the end of Friday 23 October, 2015, and will announce the new PC shortly thereafter. Many thanks! Mike Jager & Dean Pemberton (APRICOT 2016 PC Chairs)

1 0

Cable cut/damaged?
by Juha Saarinen 01 Oct '15

01 Oct '15

Hi NZNOG, Not sure if this qualifies as operational, but Telstra tweeted there’s a cable cut somewhere: https://twitter.com/Telstra/status/649565187687628800 Would anyone happen to know which cable it is and where it’s been cut - if that’s the case? Am told it’s causing slowdowns with Akamai, making Apple users unhappy. Thanks — Juha

4 5

Anyone else seeing Akamai issues this morning
by Jesse Archer 30 Sep '15

30 Sep '15

Coinciding with this? http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=7… *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

7 8

Re: [nznog] NZNOG Digest, Vol 153, Issue 20
by Murray King 25 Sep '15

25 Sep '15

Hi Nathan, Happy to talk you through your application and help you out on this. I'm the Spirent distributor for NZ. Murray King Sales Engineer Nichecom Delivery Address: 1 Lincoln Avenue, Tawa,Wellington Postal Address: P.O. Box 56-045, Wellington New Zealand Phone: 64 4 2323233 Facsimile: 64 4 2323230 Mobile: 64 (0)21 379 192 murray(a)nichecom.co.nz www.nichecom.co.nz -----Original Message----- From: nznog-request(a)list.waikato.ac.nz To: nznog(a)list.waikato.ac.nz Date: Sat, 26 Sep 2015 12:00:03 +1200 Subject: NZNOG Digest, Vol 153, Issue 20 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. Router testers (Nathan Ward) ---------------------------------------------------------------------- Message: 1 Date: Fri, 25 Sep 2015 14:37:09 +1200 From: Nathan Ward <nznog(a)daork.net> To: nznog <NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Router testers Message-ID: <8E1B60F1-712F-40E1-8BCE-E088051ACEFB(a)daork.net> Content-Type: text/plain; charset=utf-8 Hi, Does anyone have a line on router testers that are available for lease in NZ (or Aus, I guess)? Either from a proper leasing company, or if you?ve got one kicking around you don?t need for a few weeks.. Something that does PPPoE, IPoE, maybe MPLS and BGP would be nice. Ixia or Spirent or something. -- Nathan Ward ------------------------------ _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog End of NZNOG Digest, Vol 153, Issue 20 **************************************

1 0

Router testers
by Nathan Ward 24 Sep '15

24 Sep '15

Hi, Does anyone have a line on router testers that are available for lease in NZ (or Aus, I guess)? Either from a proper leasing company, or if you’ve got one kicking around you don’t need for a few weeks.. Something that does PPPoE, IPoE, maybe MPLS and BGP would be nice. Ixia or Spirent or something. -- Nathan Ward

1 0

Ideas pls for keynote speaker - APRICOT 2016
by Jordan Carter 21 Sep '15

21 Sep '15

Hi all We're hosting APRICOT 2016 - an Internet technical community conference - in Auckland in February. (Details at https://2016.apricot.net) NZNOG is a key supporter of the event so thank you for that, I am hoping this request is (beer) sufficiently on topic for the list.... One of the things a local host gets to do is to propose a local/national Keynote speaker for the event. Do you have suggested speakers we could put into the mix? One name that popped into my head is Steve Cotter who is shortly off to head the European research network, after running REANNZ for a few years. But this is an event aimed squarely at people like you, and so your ideas would be incredibly helpful. Grateful for your suggestions, ideally by the end of the week... thanks! Jordan -- Jordan Carter Chief Executive *InternetNZ* +64-495-2118 (office) | +64-21-442-649 (mob) Email: jordan(a)internetnz.net.nz Skype: jordancarter Web: www.internetnz.nz *A better world through a better Internet *

1 0

Re: [nznog] nz ip range
by Kerry Milestone 21 Sep '15

21 Sep '15

{from those archives} 10 years...??? blimey. http://list.waikato.ac.nz/pipermail/nznog/2005-June/010239.html Perhaps the way to go about it will end up being to legislate, that you'll end up having to register your "NZ" IP address allocation with the Intellectual Property Office - because they like the acronym IP too. But, this of course will still ensure there is much humour to be had. https://www.fyi.org.nz/request/1830-ip-address-range On 20/09/15 01:00, nznog-request(a)list.waikato.ac.nz wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. nz ip range (bigalownz) > 2. Re: nz ip range (Jethro Carr) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 19 Sep 2015 23:35:28 +1200 > From: "bigalownz" <bigalownz(a)gmail.com> > To: <nznog(a)list.waikato.ac.nz> > Subject: [nznog] nz ip range > Message-ID: <D7FB71253CD54F99B15C3EAE3FE397AD(a)SEANPC> > Content-Type: text/plain; format=flowed; charset="iso-8859-1"; > reply-type=original > > im doing a little project and im looking for a script to get nz ip ranges > > i did a Google search and found this, but as you can see it was from 2005 > and out dated, the url doesn't work etc > i need some help to update it > thanks > > #!/usr/local/bin/php > <?php > > $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; > // $in_file = "country-ipv4.lst"; > $out_file = "nzipranges.txt"; > > $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); > > $handle_output = fopen($out_file, "w"); > > $now = date ("r"); > > fwrite ($handle_output,"# Generated: $now\n\n"); > > while (!feof($handle_input)) { > $buffer = fgets($handle_input); > if ( ereg ( "nz", $buffer) ) { > // echo $buffer; > $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : > [\d\.]+(\/\d+) .+#","$1$2", $buffer )); > fwrite ($handle_output,"\n" . $this_range); > } > } > fclose($handle_input); > > fwrite ($handle_output,"\n"); > fclose($handle_output); > > > ?> > > > > ------------------------------ > > Message: 2 > Date: Sat, 19 Sep 2015 23:49:35 +1200 > From: Jethro Carr <jethro.carr(a)jethrocarr.com> > To: bigalownz <bigalownz(a)gmail.com>, nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] nz ip range > Message-ID: <etPan.55fd4bcf.3d8a9f57.27d(a)kobol.local> > Content-Type: text/plain; charset="utf-8" > > Hi bigalownz, > > I wrote a Puppet module that you can use to pull IP address lists from various registries. If you?re using Puppet, it means you can get an array of all the IPs for a specific region (such as NZ) for use in configuration files or resources. > > https://github.com/jethrocarr/puppet-rirs > > If you?re not using Puppet, the good news is that it?s almost entirely Ruby, so you could take a look at the function and adapt it very quickly to be a standalone script. > > https://github.com/jethrocarr/puppet-rirs/blob/master/lib/puppet/parser/fun… > > regards, > Jethro > > > -- > Jethro Carr > www.jethrocarr.com > > On 19 September 2015 at 23:34:33, bigalownz (bigalownz(a)gmail.com) wrote: >> im doing a little project and im looking for a script to get nz ip ranges >> >> i did a Google search and found this, but as you can see it was from 2005 >> and out dated, the url doesn't work etc >> i need some help to update it >> thanks >> >> #!/usr/local/bin/php >>> >> $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; >> // $in_file = "country-ipv4.lst"; >> $out_file = "nzipranges.txt"; >> >> $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); >> >> $handle_output = fopen($out_file, "w"); >> >> $now = date ("r"); >> >> fwrite ($handle_output,"# Generated: $now\n\n"); >> >> while (!feof($handle_input)) { >> $buffer = fgets($handle_input); >> if ( ereg ( "nz", $buffer) ) { >> // echo $buffer; >> $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : >> [\d\.]+(\/\d+) .+#","$1$2", $buffer )); >> fwrite ($handle_output,"\n" . $this_range); >> } >> } >> fclose($handle_input); >> >> fwrite ($handle_output,"\n"); >> fclose($handle_output); >> >> >> ?> >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> > > > ------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > End of NZNOG Digest, Vol 153, Issue 16 > **************************************

2 1

nz ip range
by bigalownz 20 Sep '15

20 Sep '15

im doing a little project and im looking for a script to get nz ip ranges i did a Google search and found this, but as you can see it was from 2005 and out dated, the url doesn't work etc i need some help to update it thanks #!/usr/local/bin/php <?php $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; // $in_file = "country-ipv4.lst"; $out_file = "nzipranges.txt"; $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); $handle_output = fopen($out_file, "w"); $now = date ("r"); fwrite ($handle_output,"# Generated: $now\n\n"); while (!feof($handle_input)) { $buffer = fgets($handle_input); if ( ereg ( "nz", $buffer) ) { // echo $buffer; $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : [\d\.]+(\/\d+) .+#","$1$2", $buffer )); fwrite ($handle_output,"\n" . $this_range); } } fclose($handle_input); fwrite ($handle_output,"\n"); fclose($handle_output); ?>

8 7

TICSA Amendment Bill - Long commentary is long
by Beau Murrah 17 Sep '15

17 Sep '15

Hello- A long post follows that is adapted from some questions I received yesterday. These are some of my legal academic thoughts and not legal advice. My overall assessment of this very short one page TICSA Amendment Bill is that community must put energy into this process even if the Bill itself is insufficient and likely to be voted down. If it makes it past the first step there is a chance for proposing additions and changes in the form of Supplementary Order Papers and this is something to be optimistic about and contact your MP’s about. Even if the Bill fails at the first stage, there is the risk though that unless there is obvious energy put into it the whole issue reaches a state of entropy until some unforeseeable reactive event occurs where the law will finally get replaced or repealed. The Government will likely claim a lack of energy put into the Bill as evidence the status quo is acceptable, and who knows how many years it might be till the issue comes again on the Parliamentary floor for any kind of substantive change. Is this toothless? Yes, the Bill has no legal teeth in its own right in terms of statutory offences. On a personal level I must say I also think it is weak. There is no legal duty for the Minister/Director to follow the recommendations. For this could be dismissed as ineffectual. However, the Bill would creates added statutory powers and responsibilities that creative avenues legal challenge such as a judicial review of an Agency decision. Even if such a judicial review is never actualised it can start to carry weight “in the shadow of the law”. It means the Agency can be pressed to its statutory responsibilities by some entity pointing to a legal basis for their claims. I also think there is potential for the Bill to widen existing judicial review avenues elsewhere in the legislation that were very limited, given the interaction of the TAB and the Minister/Director’s duties. Consider Clause 2 of the Bill “Any matter to be referred to the Minister requesting the Minister to exercise his or her discretion or recommend the prescribing of an additional area of specified security interest must first be referred to the Technical Advisory Board for analysis and recommendations. “ If a Minister fails to refer the matter to the TAB first with enough time and detail so the TAB can give actual considered analysis and recommendations, on its face there would be breach of the Minister’s statutory responsibilities. This would tap into well established legal common law norms about the duty of consult and what that means in practice by Ministers, and open the case to judicial review in a Court. If the issue was intrusive enough on network operators this could potentially receive remedy’s in the form of injunctions on the matter at hand and form precedent for the future. I am trying to think of an example where this would be worth it economically, or in defence of rights of a NetOp or their subscribers, its not unforeseeable. A judicial review action could potentially be taken to seek an injunction on a area of security being decided while the TAB fully considers the issue. This could enforce a lag-time for compliance to allow network operators to react and plan ahead for impending decisions by the Minister. Take for example s50 of the Act: http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html <http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html> This section is closely related to the process of the Director in identifying network security risks which is relevant to the Bill. s50 also gives a list of things the Director must consider. Failing to give consideration to a mandatory consideration is a well recognised ground of judicial review of exercises of statutory power. As you can gather from the list above in the Section, its typically aimed at an enumerated list of more or less specific items. On its own an action by an individual against a public figure for merely failing to consider mandatory considerations has only a formal/technical remedy and it would be an expensive and lengthy procedure for all involved. The Agency would then, usually, only have to correct the error in some token way - such as issuing a report saying “we have consider all the relevant matters, our opinion is unchanged” - and move forward. However, the existence of this action combined with a technical advisory board gives potential for a legal entity that can bring to light a bigger picture of systemic and formal breaches that would make great copy in the newspaper or an Ombudsman-like governmental complaint if not a court judgment. Whichever of you may decide to sit on the Board (to be honest, not an entirely desirable role) would have the ability to oversee that mandatory consideration has been given on all of the ground under S50s. The Board could start issuing recommendations that align with the statutory duties and language, and force more compliance by the Agency, if it starts pointing out where this consideration hasn’t been given. This is at least one way a TAB could be applied to put the Agency on their toes like a real watchdog is supposed to. Isn’t all this going to play out in secret anyways because NatSec? If the Agency doesn’t follow any recommendations this would be secret? One issue I am interested in is use of the term “Security Interest” in the Bill and considering how much it maps onto the definition of “Security Risk” currently in the TICSA legislation, and whether this should change. The definition of security risk in the TICSA legislation is inclusive of the concept of national security but the term national security itself is not defined. This question about whether all of the risks and all of the Agencies TICSA decisions/activities are to be legally treated as national security concerns is ultimately going to decide whether TICSA plays out before and in an open civil court as the norm or whether it will go into classified operations only where sufficient evidence is provided to the Courts to justify otherwise. I am strongly of the view this is a piece of regulation which only narrowly intersects with national security. Cloaking the daily and annual grind of bureaucracy and notification schemes and compliance in national security is a wrong approach and arguably just a very easy lawyerly way of keeping the Agency out of Court. I will be writing more on this topic and releasing it in a proper text form, and am definitely planning on submitting something TICSA-related to Kiwicon. Kind regards ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Changes to the NZRS zone and web scan policy
by Sebastian Castro 17 Sep '15

17 Sep '15

Hello everyone: Following some useful feedback from an operator, we have made changes to the zone and web scan practice statement. Modifications are around three main areas - Provide a web page associated to the server where the scan comes from. Now http://zonescan.nzrs.net.nz will lead you to an information page that explains what is the scan about - Kind of data collected. - Reference to where aggregated data from the zone scan is published, using our new Internet Data Portal We are always open to receive feedback and improve our communication and processes. With the aggregated data available, your can find out the state of the .nz name space. The URL of the improved practice statement is https://nzrs.net.nz/dns/zone-and-web-scanning Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

TICSA Amendment Bill drawn from ballot
by Beau Murrah 16 Sep '15

16 Sep '15

Hello NZNOG, http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC… <http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC…> Clare Curran’s TICSA Amendment Bill has been drawn from the ballot. Ill be giving it a close read myself in the next day or two, would be interested in any comments/discussion off-list or on-list. A link to the Bill itself is here: http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a… <http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a…> My research & writing on TICSA is still ticking along- I am considering trying to submit a talk for Kiwicon but thats quite a high bar to aim for, but I plan to release the text regardless around the same time as the conference. As a brief repeat summary, the text focuses in-depth on the deeply untested/unprecedented legal concept of Good Faith which has been imported into this area. It is imperative to avoiding any liability under the Act and also crucial to any sort of pro-active action against the Agency. Kind regards, ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Can whois registrar info be wrong?
by Richard Hector 16 Sep '15

16 Sep '15

Hey all, Is it technically possible for the registrar details in whois (for a .com domain) be out of date, or is the whois the canonical source of the info? If it is possible, how would I go about finding out who's really in control? Does a registrar have an interface for that? Unfortunately I'm not sure how reliable my client's own records are on this ... Cheers, Richard

4 5

Phish? Re: .NZ would like 5 minutes of your time
by Richard Hector 16 Sep '15

16 Sep '15

It's an email apparently from one party (NZRS), apparently sent by a second party (my registrar), via a third party (mscv.net) with a link to a fourth party (surveymonkey.com) which seems classic phishing. On the other hand it "looks quite legit". If it is legit, am I right in thinking it's a bad way to go about it? Any comments from participants? Richard

2 2

Victoria University breakfast seminar for IT managers in Auckland 1st October 7am
by Ian Welch 14 Sep '15

14 Sep '15

Hi, My colleague at the School of Information Management has organised a seminar at the VUW campus in Auckland aimed at managers. They said that they are particularly interested in people working in networking so I thought I’d pass it on via the list. The main speakers are Ian Clarke (CEO of Fronde) and Prof Benoit Aubert (Information Systems at Victoria Business School). RSVP by 18th of September. Full details are here: http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ… <http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ…> Cheers, Ian — Ian Welch School of Engineering and Computer Science Victoria University of Wellington

1 0

KIWICON 9 CALL FOR (cyber) PAPERS
by Mike Forbes 14 Sep '15

14 Sep '15

---{ A WHIRRING TELETYPE CHIRPS, SPEWING FORMFEED INTO THE PILE }--- UNCLAS MSGID/SITREP/9TH CYB DIV// UNIT/KIWICON RESERVE REAR INTEL GRP// PERID/120915:0000Z/TO:111215:0000Z// HEADING/TITLE// AMPN/INTEL SITREP SUMMARY NEW ZEALAND CYBERWAR DAY 137// HEADING/GENERAL// AMPN/FORWARD EMPLACEMENTS REPORT CONTINUING ENGAGEMENT WITH ENEMY. 3 X SORTIES OF 8 X SU-25 FROGFOOT CONDUCTED GND ATTACKS WITH TCP SYN/FIN ON PORT 7199. JMX CONSOLE TOOK HEAVY CASUALTIES, ACTING CO RPTS OPERATIONAL READINESS AT 40%, LOAD AVG 18.7. WOUNDED EVACED TO DEV SHM, AWAITING ONWARD TRANSPORT. RECCE REPORTS ENEMY RESUPPLY CONVOY MAPREF PAPA-ZULU WITH BMP-24BIT MECH INF DIVISION STRENGTH, B-HAWK MANPAD UNITS, PDF MINELAYERS.// HEADING/COMMANDER EVALUATION// AMPN/ FURTHER ATTACKS ON DUG IN POSITIONS AT MAPREF XRAY-PAPA. SIGNIFICANT ESCALATION OF CYBERING EXPECTED. RECOMMEND IMMEDIATE REINFORCEMENT FROM CYBER RESERVE// ---------------------{ SOME TIME LATER ... }--------------------- KIWICON 2015 (HTTPS://WWW.KIWICON.ORG/CFP.HTML) SELECTIVE CYBER SERVICE | CALL FOR CYBER PAPERS We hereby notify you that by this notice published on the Internet pursuant to the some fictitious regulations, you have been called up for service with the Kiwicon Cyber Expeditionary Force, as a Reservist of the Ninth Division of the General Hacker Reserve, Kiwicon Cyber Corps. You are hereby and forthwith directed to present your response to the Kiwicon 9 CFP by filing your report on this page. Each talk and/or training submission should be made on a separate form. They must be filed individually, and upsetting the file clerks is never a good idea this early in campaign season. The first round of talks, correction: CYBER WARFIGHTER EDUCATIONAL MATERIALS will be announced on the 26th of October, NZDT, and will be complete by the 9th of November, NZDT. If the evaluation board passes you as fit for service, you will be required to present yourself to the St James Theatre of Cyberwar for the dissemination of the aforementioned material. You will be notified in due course by an authorized officer of the Crue regarding your particular time and place for reporting. Practical training will be held on the 9th of December, 2015, while presentations will be given on the 10th and 11th of December. Note: it is the responsibility of the instructor to ensure all material has been appropriately declassified. You are also hereby further notified that if you fail to obey this order you are liable to be considered sensible without further notice. God save the Mince Queen, Col. St. John Beauchamp-Beauclerk (Adjutant Crue) IMPORTANT NOTICES (read each paragraph carefully) If you report pursuant to this order please fill out our google form (triplicate copies not required at this time) at https://goo.gl/JnoCb3. Answer the questions to the best of your ability, and let us know if you have any special requirements (motorcycles, pyrotechnics, therapy animals, exorcisms). Should floods, illness, fires, and poorly scheduled wedding ceremonies unavoidably prevent you from reporting as ordered above, you must write immediately to the Adjutant Crue stating the circumstances which prevent you from reporting. As per special order, written notes from Lord Tuskington will also be accepted. If you are employed, you should inform your employer of this order and that the examination is merely to determine if you may be fit for service. If found suitable for induction, documentation will be provided by an authorized officer of the Crue for your employer as early as possible. Troop movements to the marshaling point are the fiduciary responsibility of the cyber warfighter and will not be reimbursed regardless of evaluation board determination. To re-familiarise yourself with your duties as Cyber Reserve, please review the Standard Operating Procedure with particular observation to the sections relevant to the ongoing conflict, viz; Cybering Computering Minced meats Cyber hacking Computer cyber hacking Hacking (cyber) Cyber hoodies, correct wear and maintenance of, Cyber warring Any further communications arising from this notice must be sent by to kiwicon(a)kiwicon.org. IRC communications cannot be accepted due to our ongoing lack of ability to remember to tell everyone else that they happened.

1 0

Vodafone / ihug DNS Servers - Reset of Zone File
by Justin Lewis - ResponseMedia 14 Sep '15

14 Sep '15

Hi All, Is anyone else seen ns1.ihug.net.nz and ns2.ihug.net.nz Reverting to older zone files since around lunch time today? Looking like the zone serial is back to "2015082705" should be at least "20150905XX" Have a customer who's entire zone file has been reverted to an old record that's is over 3 weeks old. Customer portal is showing the new zone file though. Regards, Justin Lewis ResponseMedia [https://newoldstamp.com/editor/profilePictures/profile-3c8f7090e76fa0afb6a3…] Mobile: 027 300 6242 Email: justin.lewis(a)responsemedia.co.nz<mailto:justin.lewis(a)responsemedia.co.nz> Address: Christchurch, NZ [https://editor.newoldstamp.com/images/f.jpg]<http://www.facebook.com/ResponseMedia.NZ> [https://editor.newoldstamp.com/images/tw.jpg] <http://www.twitter.com/ResponseMediaNZ> [https://editor.newoldstamp.com/images/instagram.jpg] <https://instagram.com/ResponseMediaNZ/> Dropbox Partner SMX Mail Partner

2 1