pktgen

50 ms·

211.
by pktgen 13y ago
Correct. nLayer used to but stopped because Juniper's implementation is buggy.
212.
by pktgen 13y ago
That's how Black Lotus does business. It's like the time when they were caught spamming and were made to look like complete fools on WHT.
213.
by pktgen 13y ago
> A lot of DSL providers are starting to use this for less intrusive (?) goals like measuring noise and attenuation at the clients end once a day, so they can adjust the speed accordingly. Why can't this be done on the DSLAM?
214.
by pktgen 13y ago
True, I hadn't considered that. What I had in mind was no default risk (that probably would have been a better way to put it), even when the customer has the ability to pay over time and may be able to purchase things now that they wou
215.
by pktgen 13y ago
The 5% and higher rewards programs you mentioned may not even disappear. The CC companies are already losing money on them because the interchange fees are closer to 2% for Visa/MC and maybe 3% for Amex. The expectation, of course, is
216.
by pktgen 13y ago
Here's my ideal security policy: - Cross-site requests not allowed without whitelisting. This means some setup will be required at first (for example, for separate image domains used by Amazon, Google, Yahoo, etc.), but after a bit it
217.
by pktgen 13y ago
Same LOL
218.
by pktgen 13y ago
Solution: government runs the fiber to a cross-connect point, private companies offer services (anything, Internet, TV, phone, or something we haven't even thought of) over that fiber and pay a small fee for use of the line. Right of w
219.
by pktgen 13y ago
Heh. Is there such a thing as a consumer ISP-supplied router that isn't a total POS? Does BT not let you override their DNS servers? I don't know why ISPs seem to think DNS hijacking is such a good idea. I find it hard to believe
220.
by pktgen 13y ago
I question "doesn't use your bandwidth." BT is a DSL provider. Your circuit is provisioned for the speed you pay for, and the maximum attainable speed is limited based on distance from the DSLAM as well as other factors (copp
221.
by pktgen 13y ago
Reputable ones do check that (uRPF). Get Ecatel's upstreams to cut their ports and you'll get rid of 80% of it.
222.
by pktgen 13y ago
Hmm, it might make some difference on some of the Juniper lines (is the SRX line software-based?) but any of the high-end Juniper products are only using JunOS for the control plane. Only control traffic and certain exception cases (e.g. IC
223.
by pktgen 13y ago
If you have 40/20 (VDSL2, not ADSL) available from CenturyLink, you should be able to get 80/40 or 100/12 (don't ask me why) bonded. Pretty competitive with Comcast and more reliable in my experience. Their problem is th
224.
by pktgen 13y ago
Better yet, enact a policy that before a release goes online, all foreign offices have to audit every change, compile and verify the binary matches, then sign the binary. If a release goes online that isn't signed by all locations, it&
225.
by pktgen 13y ago
They only want people that pay extra for Z chipsets to be able to overclock. Pretty ballsy of them to release an update that disables functionality for no good reason. (Intel's bottom line isn't a good reason.)
226.
by pktgen 13y ago
Ah, I see. (I thought you were talking about something found in OS X, not Apple's PRISM involvement.) I'm not sure if I personally consider this a reason not to use OS X, but it is definitely a reason to not use iCloud.
227.
by pktgen 13y ago
Can you elaborate on the OS X issue (I think I've missed that disclosure)? Everything I can find, which admittedly is not anything authoritative (nothing from Apple directly), says that Apple hasn't shipped TPMs for a few years no
228.
by pktgen 13y ago
Can you disable ETag-based caching but allow If-Modified-Since? A quick check of a few popular sites shows that they're using If-Modified-Since instead of ETags, probably for this reason? While we're on the topic of browser caches
229.
by pktgen 13y ago
We don't know anything about the attack, but in general: 1. All of this requires that you have more bandwidth than the attacker. 2. ACL drop everything but the ports/protocols you use on your frontend IP. For github.com that would
230.
by pktgen 13y ago
It's much harder to delete things from backups though. Lavabit promised that when you deleted a message, it was actually deleted. Redundancy against hardware failure but not against user error, software error, etc. was probably part of
231.
by pktgen 13y ago
I don't know anything about the internals of 802.11, so these are just random thoughts: - Could the spec be modified (or maybe it already has such a mechanism?) to allow APs to broadcast themselves every 1-2 seconds, and remove this de
232.
by pktgen 13y ago
Sounds like they need to be talking to Prolexic...
233.
by pktgen 13y ago
I have a hard time blaming them for this. They're a budget provider, so any extra cost handling subpoenas and legal documents (which, let's not kid ourselves, is going to happen 100x more on a Tor node than on the majority of thei
234.
by pktgen 13y ago
That looks like a standard VDSL2 modem to me. If you do not want Huawei equipment, is there any reason you couldn't purchase your own VDSL2 modem from anywhere and use that?
235.
by pktgen 13y ago
In OVH's case, I suspect that has more to do with their cheap pricing. With regards to abuse I consider them to be a responsible provider: they run uRPF (don't allow spoofed traffic to exit their network), respond to abuse complai