- NZNOG - lists.nznog.org

[Fwd: CCIP ALERT: Microsoft unpatched vulnerability is being actively exploited in the wild]
by Paul McKitrick 07 Jul '09

07 Jul '09

Good Morning, CCIP did not initially post this alert to the NZNOG list yesterday as it was felt that members might not deem this type of posting appropriate for the NZNOG list. However there have been a number of requests from NZNOG members requesting for this to be posted here, who had received it from yesterday CCIP's mailing lists. CCIP would be interested in feedback about the applicability of CCIP's Alerts on the NZNOG list. Currently CCIP's threshold for issuing these types of alerts is when there is active exploitation of a new or unpatched vulnerability in the wild. Regards, Paul. -- Paul McKitrick Head of Stakeholder Engagement Centre for Critical Infrastructure Protection D: (+64) 4 498 7645 P: (+64) 4 498 7654 F: (+64) 4 498 7655 E: paul.mckitrick(a)ccip.govt.nz W: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. --- -------- Original Message -------- Subject: CCIP ALERT: Microsoft unpatched vulnerability is being actively exploited in the wild Date: Tue, 07 Jul 2009 13:38:28 +1200 From: CCIP Info <info(a)ccip.govt.nz> To: CCIP <info(a)ccip.govt.nz> CC: incidents(a)ccip.govt.nz Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the the Microsoft Security Advisory 972890 that was released today: http://www.microsoft.com/technet/security/advisory/972890.mspx Microsoft have announced a vulnerability in Microsoft Video ActiveX Control that allows remote code execution. This is reported to affect versions of Windows XP and Window Server 2003. CCIP is bringing this to your attention as this vulnerability has been reported as being actively exploited in the wild. MITIGATION Administrators are advised to take the following mitigation steps immediately. There is currently no patch to correct this issue. However you can set the kill-bit to mitigate this vulnerability. Microsoft have provided a way to automatically implement the workaround by following the instructions under "Fix It For Me" in the following Knowledge Base article: http://support.microsoft.com/kb/972890 Alternatively the following quoted text can be included in a .REG file and imported into your registry. ---BEGIN QUOTE--- Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0955AC62-BF2E-4CBA-A2B9-A63F772D46CF}] "Compatibility Flags"=dword:00000400 ---END QUOTE--- Please note that in addition to the class identifier listed in the above example there is a full list of class identifiers in the Suggested Actions-->Workarounds section of the Microsoft Advisory: http://www.microsoft.com/technet/security/advisory/972890.mspx It is recommended that all of them are implemented. There is also a writeup on Microsoft's Security Response Centre Blog: http://blogs.technet.com/msrc/archive/2009/07/06/microsoft-security-advisor… Regards, The CCIP Team --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

4 3

NZ Contacts for Integration/Network Work
by Skeeve Stevens 06 Jul '09

06 Jul '09

Hey all, I met a lot of you awesome guys at the last NZNOG and there is a pile of you that I would love to work with more, but in that wide jigsaw piece country of yours, I have no idea where you all are. We've got a lot of proposed projects on at the moment and NZ is featuring heavily in most of them, so I want to get a bunch of people on a list who we can use in different cities for different kinds of work. Work can involve site visits to install DSL services, onsite basic Cisco work, IPv6 work, general IT (fix server, pc, etc), and some consulting perhaps. We're dealing with a lot of large retail, and hotel chains which have networks throughout NZ as well, which is where some of the above work types slot into. I am not fabulous with NZ geography, so I would need someone to help with a list of the key cities, regional cities that might have those massive malls that always seem to have most of the 'common' chains. I prefer small businesses who are reliable, can be well presented, professional and know their towns well, as I will also need local advice on connectivity solutions - fibre, MetroE, wireless and so on in your particular area. There may be possible emergency work for problems, so I need to know your availability, and also your rates. I am looking at implementing a solution (which I've talked about before), where we have DSL handed off for the entire country (if possible) to a LNS in Auckland, so I will start talking to providers soon (don't all start emailing/calling me like last time!) ;-) So if you can send me an email directly on skeeve(a)eintellego.co.nz<mailto:skeeve(a)eintellego.co.nz> ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

2 2

Ops Manager Required at Araneo
by Jonathan Brewer 06 Jul '09

06 Jul '09

Hi Folks, We're looking for someone up to the challenge of running our network. I kind of figured that this would be on topic for NZNOG. :-) The Trademe Jobs advert is here: http://www.trademe.co.nz/Trade-me-jobs/IT/Management/auction-228577017.htm All CVs through the Trademe process, please. I will not be involved in screening the apps, but if you're interested in the job and can remind me of the last time we had a beer at Curry or NZNOG I will ensure your CV gets a thorough read by the team. Regards, Jon

1 0

802.11 Wireless plotting per AP
by Barry Murphy 05 Jul '09

05 Jul '09

Hey Guys, I know this may be a little off topic, however I know there are many wireless operators on list. I'm wondering what you use to track wireless signal from a base station to see what the footprint is. I.e. I would like to drive around down all the streets where this hotspot is located to plot a map of what signal strength is like in this location for a specific AP, I will circle the streets around the AP until I've lost all signal and hope to have some sort of map to work with :) Any help offlist would be appreciated. Thanks Barry Murphy

10 11

OFF-TOPIC - Samoa Vacancy - Chief Technologist - ISP
by Keith Davidson 02 Jul '09

02 Jul '09

All, Please pardon the slightly off topic nature of this post, but given the wintertime blues currently affecting NZ, perhaps just dreaming about a geek position in paradise and perpetual sunshine will bring about cheer and warmth to some. Cheers Keith ___________________ Subject: Vacant Position Chief Technologist - ISP Computer Services Limited is Samoa's oldest and largest IT company and operates Samoa's largest ISP. We are seeking an individual with flair and passion to help take our ISP business to the next level. We need an experienced IT guru wishing to relocate to Samoa to head up our internet Services development and support team. Ideally this person will come from a practical, hands-on environment in the same or a related industry. The chosen person will head up a team of local IT specialists and would have the ability to manage, mentor and develop this team to their full potential. We would like our preferred candidate to have practical knowledge in many of the following skills... * 5+ years of experience in the support and development in an internet services provider or related industry * Advanced programming knowledge of REDHAT or similar OS * Competency on Email server systems - SendMAIL, Mailwasher, SPAM Assassin or similar * Competency in support of MySQL and/or MS'SQL based Applications * General skills in one or more of PERL, JAVA, Flash, MS'Access, ODBC, CGI, PHP, Coldfusion, AJAX. * Familiarity with SQL in billing databases * Familiarity with a RADIUS server solution e.g RADIATOR * General skills in WEB Server maintenance - Microsoft and/or Apache * Ability to develop Caching technology - SQUID, Cisco WCCP or similar * Familiarity with Cisco router Advanced IOS and command structure * Familiarity with network technologies - VLAN, VPN * Familiarity with TCP/IP, BGP, AS, delegation and route assignments * Familiarity with WiFi technologies and hotspot services e.g ChilliSpot etc What we offer is a fun filled company in the warmest , safest and friendliest nation in the Galaxy. Outside of work Samoa has a very relaxed and social lifestyle with the opportunity for you to enjoy our beautiful nation and our strong Faa'Samoa culture... white sand beaches with warm water all year round, ideal for swimming, snorkeling ,diving, fishing, golf, tennis, squash, rugby, reading , running, mountain climbing and socializing. The position would be for a negotiable term of up to three years and includes relocation expenses to Samoa, family accommodation, educational expenses and a generous salary package with bonus. Our desire is for someone to fill this position immediately although we would make exceptions for our ideal candidate. If you feel this is you and your interested in experiencing our Faa'Samoa, please make contact including a copy of your CV with references to Technologist Position C/- CSL Private Bag Apia, Samoa dave(a)csl.ws or tevi(a)csl.ws Dave Main Business Development Manager Computer Services Ltd Apia, SAMOA Ph +685 20926 Fax +685 20932 Cell +685 7771301 dave(a)csl.ws

1 0

IPv6 in NZ - Computerworld article
by Dean Pemberton 29 Jun '09

29 Jun '09

ComputerWorld has today published a lengthy feature article on IPv6 in New Zealand. See the link below: http://computerworld.co.nz/news.nsf/netw/832D6FEFFCA92DB3CC2575E4007362D9

6 5

Fwd: [lca-announce] linux.conf.au Call for Papers are now open!
by Joel Wiramu Pauling 28 Jun '09

28 Jun '09

---------- Forwarded message ---------- From: linux.conf.au Announcements <lca-announce(a)lists.linux.org.au> Date: 2009/6/29 Subject: [lca-announce] linux.conf.au Call for Papers are now open! To: lca-announce(a)lists.linux.org.au === linux.conf.au Call For Papers === linux.conf.au ( http://www.lca2010.org.nz ) is pleased to announce the opening of its Call for Papers for the coming linux.conf.au, LCA2010! LCA2010 will be held from Monday 18 January 2010 to Saturday 23 January 2010 in Wellington, New Zealand. linux.conf.au isn't just a Linux conference. It is a technical conference about Free and Open Source Software, held annually in Australasia since 2001 - covering everything from the Linux Kernel and the BSDs to OpenOffice.org, from networking to audio-visual magic, from hardware hacks to Creative Commons. === Important Dates === Call for Papers opens: Monday 29 June 2009 Call for Papers closes: Friday 24 July 2009 Email Notifications from Papers Committee: Early September 2009 Registrations open: Mid September 2009 Conference Dates: Monday 18 January to Saturday 23 January 2001 === Information on Papers === The LCA2010 Papers Committee is looking for a broad range of papers spanning everything from programming and software to desktop and userspace to community, government and education but there is one essential: The core of your paper must relate to open source in some way, i.e., if it's a paper about software then the software has to be licensed under an Open Source license. The LCA2010 Papers Committee welcome proposals for Papers on the following topics: * Kernel and system topics such as filesystems and embedded devices * Networking topics such as peer to peer networking, or tuning a TCP/IP stack * Desktop topics such as office and productivity applications, mobile devices, peripherals, crypto & security and viruses and other malware * Server topics such as clusters and other supercomputers, databases and grid computing * Systems administration topics such as maintaining large numbers of machines and disaster recovery * Programming topics such as software engineering practices and test driven development * Free Software and Free Culture topics, including licencing and Free and Open approaches outside software * Free Software usage topics, including home, IT, education, manufacturing, research and government usage. Most presentations and tutorials will be technical in nature, but proposals for presentations on other aspects of Free Software and Free Culture, such as educational and cultural aspects are welcome. LCA2010 is pleased to invite proposals for three types of papers: * Presentation - 45 minutes * Tutorials - 1 hour and 45 minutes (short) * Tutorials - 3 hours and 30 minutes (long) Presentations are 45 minute slots (including questions) that are typically a one-way lecture from you to the audience - the typical conference presentation. These form the bulk of the available conference slots. Tutorials are either 1 hour and 45 minutes, or 3 hours and 30 minutes in length, and work best when they are interactive or hands-on in nature. Tutorials are expected to have a specific learning outcome for attendees. To increase the number of people that can view your talk, LCA2010 may video the talks and make them publicly available after LCA2010. When submitting your proposal you will be asked whether materials relating to your paper can be released under a Creative Commons ShareALike License. For more information, see: http://www.lca2010.org.nz/programme/papers_info === About linux.conf.au === linux.conf.au is one of the world's best conferences for free and open source software! The coming linux.conf.au, LCA2010, will be held at the Wellington Convention Centre in Wellington, New Zealand from Monday 18 January to Saturday 23 January 2010. LCA2010 is fun, informal and seriously technical, bringing together Free and Open Source developers, users and community champions from around the world. LCA2010 is the second time linux.conf.au has been held in New Zealand, with the first being Dunedin in 2006. For more information see: http://www.lca2010.org.nz/ === About Linux Australia === Linux Australia is the peak body for Linux User Groups around Australia, and as such represents approximately 5000 Australian Linux users and developers. Linux Australia facilitates the organisation of this international Free Software conference in a different Australasian city each year. For more information see: http://www.linux.org.au/ === Emperor Penguin Sponsors === LCA2010 is proud to acknowledge the support of our Emperor Penguin Sponsor, InternetNZ. For more information see: http://www.internetnz.org.nz/ === Papers Enquiries === LCA2010 Papers Committee Email: papers(a)lca2010.org.nz -- Andrew Ruthven LCA2010 - Director PO Box 11-682 | linux.conf.au 2010 Manners St | Follow the signs. Visit Wellington! Wellington 6142 | http://www.lca2010.org.nz NEW ZEALAND | _______________________________________________ lca-announce mailing list lca-announce(a)lists.linux.org.au http://lists.linux.org.au/listinfo/lca-announce

1 0

S92A copyright notifications
by Thomas Layzell 28 Jun '09

28 Jun '09

Hi, I've got a request from TUANZ regarding who (if anyone) receives 'Education notices' for their networks. If anyone is able to answer the following questions off list it would be appreciated: - Does your system administrator currently receive regular notices form rights holders alleging breach of copyright? - If so, are you able to estimate how many? - What do you currently do with them - determine and follow up with the staff member apparently implicated, or bin them? - If the Act results in a major increase in the number of such notices (say tenfold) and you are required to pass them through and disconnect after 3 allegations, how big an imposition and cost is this? - Do you anticipate difficulties arising with your staff/users as a result? Thanks in advance, nil returns are of interest. Thomas Layzell. THOMAS LAYZELL | NETWORK MANAGER - INFORMATION & COMMUNICATIONS TECHNOLOGY The New Zealand Automobile Association Incorporated Level 16, 99 Albert Street, Auckland | PO Box 5, Shortland Street, Auckland 1140 DDI. +64 9 966 8712 M. +64 21 434363 F. +64 9 966 8759 E. tlayzell(a)aa.co.nz W. www.aa.co.nz Over one million New Zealanders belong to the AA - Join us now! This email may contain information which is confidential. If you are not the intended recipient you must not use or disseminate this email or its attachments. If you have received this in error, please notify us immediately and delete this email. Please think before you print out this email.

1 0

McDonald's Phish
by Drew Broadley 28 Jun '09

28 Jun '09

http://ntcgroupinc.com/mcdonalds.co.nz-customer-satisfaction-survey/ Interesting one, where it gets you to fill in a survey then offers $50 in return for your time. Enter your credit card details (on an insecure page), vio la! (Just a heads up, Welcome to Monday)

3 2

Temperature Check: How's the Internet goin' in NZ?
by jamie baddeley 25 Jun '09

25 Jun '09

nznog has been quiet recently. <operational content> Beer. </operational content> Networks running OK? Cheers Jamie

10 9