3 ms·

Being from Germany I never heard about government based security checks. IT-wise our government doesn't make a very competent impression. Do you have any backgr

by aagd 7y ago

Being from Germany I never heard about government based security checks. IT-wise our government doesn't make a very competent impression. Do you have any background info on this?

phit_ 7y ago
https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/CERT-Bund/CERT-Reports/reports_node.html https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/CERT-... https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Situation-Centre/itsituationcentre_node.html https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Si... https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Crisis-Reaction-Centre/itcrisisreactioncentre_node.html https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Cr...
aurelian15 7y ago
I remember receiving an email from the BSI ("Bundesamt für Sicherheit in der Informationstechnik"; engl. "Federal Office for Security of Information Technology") regarding a misconfigured NTP server that could be abused for NTP reflection attacks. The functions of the BSI are explained in English here [1] based on the following law [2]. I guess initiatives such as informing about the NTP problem fall into what is listed under §3.2. [1] https://www.bsi.bund.de/EN/TheBSI/Functions/functions_node.html https://www.bsi.bund.de/EN/TheBSI/Functions/functions_node.h... [2] https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/BSI/bsiges2009_pdf.pdf?__blob=publicationFile&v=1 https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/BSI/bsig...
KenanSulayman 7y ago
They pretty quickly send you emails once your email comes up in the whois of a domain that’s pointing to an IP in the allocation space of German companies. Example: hetzner.
StudentStuff 7y ago
The German government has contributed the base layer to OpenStreetMaps, and uses it for their official parcel/lot line maps. It is much better than the janky pile of crap Esri dumps on most counties in the USA.

by aagd 7y ago

Being from Germany I never heard about government based security checks. IT-wise our government doesn't make a very competent impression. Do you have any background info on this?

phit_ 7y ago

https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/CERT-Bund/CERT-Reports/reports_node.html https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/CERT-... https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Situation-Centre/itsituationcentre_node.html https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Si... https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Crisis-Reaction-Centre/itcrisisreactioncentre_node.html https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/IT-Cr...

aurelian15 7y ago

I remember receiving an email from the BSI ("Bundesamt für Sicherheit in der Informationstechnik"; engl. "Federal Office for Security of Information Technology") regarding a misconfigured NTP server that could be abused for NTP reflection attacks. The functions of the BSI are explained in English here [1] based on the following law [2]. I guess initiatives such as informing about the NTP problem fall into what is listed under §3.2. [1] https://www.bsi.bund.de/EN/TheBSI/Functions/functions_node.html https://www.bsi.bund.de/EN/TheBSI/Functions/functions_node.h... [2] https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/BSI/bsiges2009_pdf.pdf?__blob=publicationFile&v=1 https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/BSI/bsig...

KenanSulayman 7y ago

They pretty quickly send you emails once your email comes up in the whois of a domain that’s pointing to an IP in the allocation space of German companies. Example: hetzner.

StudentStuff 7y ago

The German government has contributed the base layer to OpenStreetMaps, and uses it for their official parcel/lot line maps. It is much better than the janky pile of crap Esri dumps on most counties in the USA.