#arpnetworks 2015-06-30,Tue

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)
WhoWhatWhen
***easymac has joined #arpnetworks
easymac has quit IRC (Changing host)
easymac has joined #arpnetworks 		[04:26]
............................................... (idle for 3h54mn)
djkrikke-2 has quit IRC (Ping timeout: 250 seconds) [08:20]
djkrikke-2 has joined #arpnetworks [08:28]
m0undshttps://blogs.aws.amazon.com/security/post/TxCKZM94ST1S6Y/Introducing-s2n-a [08:33]
brycectl;dr[becauseimlazy]? [08:37]
m0undss2n isn’t intended as a replacement for OpenSSL, which we remain committed to supporting through our involvement in the Linux Foundation’s Core Infrastructure Initiative. OpenSSL provides two main libraries: “libssl”, which implements TLS, and “libcrypto,” which is a general-purpose cryptography library. Think of s2n as an analogue of “libssl,” but not “libcrypto.”
there you go
and the github for the project: https://github.com/awslabs/s2n
and s2n is a nod to signal to noise, hiding stuff as "noise" via the magic of encryption 		[08:37]
brycecThanks :D
I prefer libtls anyways :P 		[08:39]
...... (idle for 26mn)
mkbI like OpenBSD's approach of re-factoring instead of throwing everything out and starting over [09:05]
....... (idle for 31mn)
mike-burnslibtls is rather pleasant to use, too. [09:36]
brycecIt certainly is from what I've gathered watching its inclusion in the OpenBSD tree. Things like syslogd *poof* have TLS [09:38]
mike-burnshttps://github.com/meritz-burns/erltls - my girlfriend and I have been working on porting it to Erlang. [09:39]
brycecThat sounds like a fun couples activity :D
That's some pair-programming I can get behind
(okay, I'm done) 		[09:39]
mkbIsn't syslogd UDP? TLS works over UDP? [09:42]
brycecIt has tcp support too
"syslog" is UDP, sure. But syslogd(8) supports all sorts of stuff 		[09:42]
.... (idle for 16mn)
m0undshttps://blog.opendns.com/2015/06/30/cisco-announces-intent-to-acquire-opendns/ yuck [09:59]
brycecheh, always loved that wording "intent to acquire" Basically "We want you, and we're going to have you. It's basically rape." [10:05]
m0undsyeah
davidu's had bad luck w/stuff he helmed being acquired and wrecked
most recent example being everydns acquired by dyn
dyn just sought to eliminate a free competitor w/a better svc level than their paid plans, promised to grandfather people on those plans then decided they'd rather make money and told them to pony up or gtfo
oh well
lol: https://honestnetworker.wordpress.com/2015/06/28/when-your-favorite-startup-is-acquired-by-cisco/
[10:06]
............................... (idle for 2h30mn)
***easymac has quit IRC (Ping timeout: 276 seconds) [12:44]
easymac has joined #arpnetworks [12:49]
.......................... (idle for 2h7mn)
kellytk has left "WeeChat 1.0.1" [14:56]
.... (idle for 16mn)
brycecmike-burns: Thank you for the obligatory (but put very cordially) "patch up or shutup" response http://marc.info/?l=openbsd-tech&m=143552675031461&w=2 [15:12]
BryceBotopenbsd-tech: "Re: [Patch] New item to the "Migrating to OpenBSD" guide" from Mike Burns <mike+openbsd () mike-burns ! com> @ 2015-06-28 21:24:56 [15:12]
brycecbrycec hates when misc@ leaks [15:12]
mike-burnsbrycec: thank you for noticing! [15:13]
brycecI don't follow tech@ (or any of the lists really) very closely, but the mess was brought to my attention and I recognized your name :) [15:13]
mike-burnsOh no; this thread is making the rounds? [15:13]
brycecOver in #devious [15:13]
mike-burnsOK whew. At least it's not trending on Twitter. [15:14]
brycecI could make that happen with @twitter ;P
@twitter -i BryceBot0101 		[15:14]
BryceBotBryceBot (900 N Alameda, Los Angeles, CA) Member since: Mon Aug 22 16:35:56 +0000 2011
Followers: 18 | Following: 34 | Tweets: 4696 | Description: I'm an IRC bot acting as a conduit for an IRC channel on FreeNode. I post whatever They tell me to. 		[15:14]
brycecand its massive 18 followers [15:14]
mike-burnsWowie. [15:15]
brycecOh good, more fodder for BryceBot's tdr quotes
@tdr 		[15:16]
BryceBotTheo de Raadt says: i ojbect two yoru splelng of achlhlocis. [15:16]
mercutio@tdr [15:22]
BryceBotTheo de Raadt says: Yes, but the ports people are into S&M. [15:22]
............. (idle for 1h2mn)
m0undshaha [16:24]
mercutiowoot, i can see. [16:24]
m0undsthe bot in a channel i frequent has triggers to quote jeffk
dated, but still funny
hahaha 		[16:24]
mercutioi'm surprised online glasses came already. i thought they'd take ages. [16:24]
m0undsnice [16:24]
mercutiojust didn't want to pay 5x as much locally
for estimated times of longer than it took hah 		[16:24]
m0undsi bought some prescription safety glasses for shooting and they got here from china in like 8 days or so [16:25]
brycecI was unfamiliar with jeffk.... not sure if I should thank m0unds or smack him [16:25]
mercutiothis was friday 4 pm local time [16:25]
m0undsbrycec: lol [16:25]
mercutioto wednesday morning delivery local time [16:25]
m0undswow, nice [16:25]
mercutioso what's that, .. just under 5 days
from new york..
i don't like them though, but i ordered from somewhere else too :)
in the hope that one would be quick.
because my old ones were really scratched suddenly 		[16:25]
brycectwss [16:26]
BryceBotOkay! twss! 'because my old ones were really scratched suddenly' [16:26]
brycecBryceBot: no [16:26]
BryceBotOh, okay... I'm sorry. 'because my old ones were really scratched suddenly' [16:26]
brycecdarn, too slow [16:26]
mercutiohahha
in the hope that one would be quick. 		[16:27]
brycectwss'
fuck
i'm done 		[16:27]
mercutiohaha [16:28]
bryceclater
today has been 		[16:28]
mercutioi gave you another chance [16:28]
brycecway too long
twss 		[16:28]
BryceBotOkay! twss! 'way too long' [16:28]
mercutioi know that feeling [16:28]
BryceBotThat's what she said!! [16:28]
bryceci can't take any more
twss 		[16:28]
BryceBotOkay! twss! 'i can't take any more' [16:28]
mercutioi'm hoping scratched glasses are making me tired, as i've been tired more than usual. [16:28]
m0undsthey can contribute to eyestrain [16:28]
brycecCould by Lyme disease. I hear it's always Lyme Disease... that's what I learned on TV anyways. [16:28]
m0undswhich can make you feel fatigued [16:28]
mercutioyeh i'm hoping so
brycec: you mean lupus? 		[16:29]
brycecI was thinking of https://www.youtube.com/watch?v=ZDkrNKMVXHc [16:32]
BryceBotYouTube video: "Ralph Lyme disease" by Jason Abe [16:32]
mercutioahh hadn't seen that
i got kind of sick of simpsons, too many episodes! 		[16:33]
brycecSupposedly, https://www.simpsonsworld.com/video/302395459825/episode/288011331912 is the episode [16:33]
mercutiowhat year is that
https://www.youtube.com/watch?v=ZDkrNKMVXHc 		[16:33]
BryceBotYouTube video: "Ralph Lyme disease" by Jason Abe [16:34]
mercutiooops
tried to resize putty :/ 		[16:34]
brycec(or at least 90 seconds of it) [16:34]
BryceBotThat's what she said!! [16:34]
brycecmercutio: 1991 [16:34]
mercutionot available in my region
oh wow, that's early. 		[16:34]
brycecSeason 2 yup [16:34]
mercutioback then we got episodes delayed a long time
now days we get stuff so much quicker. :) 		[16:34]
............. (idle for 1h2mn)
does anyone happen to know what the best vpn's (openvpn, l2tp/ipsec etc) are for china? [17:37]
jlgaddisjlgaddis looks around [17:39]
staticsafeits all good
Y2K is past us
Clock: inserting leap second 23:59:60 UTC 		[17:40]
jlgaddistime.tritn.com didn't get the memo
nor did mail.wtfismyip.com 		[17:42]
mercutiohas leap second hit us already? [17:45]
staticsafeyeah [17:45]
mercutioi didn't notice anything [17:46]
staticsafethat is a good thing :) [17:47]
***kellytk has joined #arpnetworks [17:56]
mjp_at 10:04 (im in +10GMT) i got alerts for all of our ntp services (Infoblox) reset/got out of sync, but came good about 10 minutes later [18:00]
kellytkWho do you use for alerting mjp_? [18:08]
mjp_what do you mean?
we use nagios for monitoring... the guy sitting a few cubes over let me know that all our infoblox appliancs lit up 		[18:08]
kellytkOh [18:09]
jlgaddisjlgaddis mutters something about 33.5 hours notice for a planned outage [18:13]
....... (idle for 34mn)
mercutiojlg: on arp? outage shouldn't be very long at least. [18:47]
........... (idle for 50mn)
apparently a lot of fibre links went down with the clock thing
by apparently i mean one person posted on a mailing list saying such 		[19:37]
brycecThat would surprise me as most most links (t1, ethernet, etc) use crystals but not RTC for sync. An extra second on the wall clock would be invisible. [19:40]
mercutioyou'd think
apparently there was some cisco fix necessary, which didn't fix 		[19:41]
brycecAlways blame Cisco [19:41]
mercutioi'm going to check nanog :/
i can't see anything on there
oh 		[19:41]
brycecI can see how routers with those interfaces might hiccup because they might not have read the performance counters for >1s [19:42]
mercutiois the leap second gmt?
or local time zone? 		[19:42]
brycecIt happened 2.40 ago, UTC [19:42]
mercutioahh ok
so yeh gmt 		[19:42]
brycecEverybody at once [19:42]
mercutionothing on nanog
there was a route leak last night of ntt -> he.net 		[19:42]
brycec(horlogical pedantics would like you to know that GMT and UTC are not the same thing, technically) [19:42]
mercutioerr ntt readvertising he.net routes
then he.net did a route leak
and the he.net guy was saying about how they didn't leak routes when the ntt one happened hah 		[19:43]
staticsafeinternets..how does it even work [19:44]
brycecWith lots and lots of luck. [19:44]
staticsafethere was another route leak originating in Bangladesh
that actually triggred RPKI validation failure alerts for me
was wondering why I woke up to a bunch of those 		[19:44]
mercutioyeh that was the ntt leaking he.net one
that was the first, there was a second after that
yeh i'm actually surprised about the stability of the internet
it works much better than i'd guess ..
you're doing rpki validation static? 		[19:45]
staticsafemy prefixes are signed, I get alerts from BGPMon [19:46]
mercutiobut you're not validating? [19:47]
staticsafenope, I don't really need to [19:47]
mercutiorpki validation hasn't really taken off
yeh actually it'd help you not at all
it's really your upstreams that need to 		[19:47]
staticsafeindeed [19:47]
mercutiowell for it to be of any benefit [19:47]
***mnathani_ has joined #arpnetworks [19:59]
......... (idle for 44mn)
toeshred has quit IRC (Ping timeout: 250 seconds) [20:43]
........................ (idle for 1h56mn)
toeshred has joined #arpnetworks [22:39]
↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)