Search This Blog

Sunday, January 16, 2011

firewall-wizards Digest, Vol 55, Issue 8

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."


Today's Topics:

1. Re: IPv6 (Dave Piscitello)
2. Final Penultimate last Call for Papers for CanSecWest 2011
(deadline Jan. 17th, conf March 9-11) (Dragos Ruiu)
3. Re: IPv6 (Morrow Long)


----------------------------------------------------------------------

Message: 1
Date: Wed, 12 Jan 2011 16:15:31 -0500
From: Dave Piscitello <dave@corecom.com>
Subject: Re: [fw-wiz] IPv6
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID: <4D2E19F3.8050705@corecom.com>
Content-Type: text/plain; charset="iso-8859-1"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Brad, hello,

Can you point me to the requirements document that DoD is referencing in
their RFPs? Time frame?

On 1/11/2011 2:19 PM, Brad Van Orden wrote:
> Unfortunately the powers that be in the DoD have heard the words that
> IPv6 is more secure and have declared that all networks in the DoD will
> switch to it. It's slow going, but I think eventually we won't be able
> to resist. :(
>
> Brad Van Orden
>
> On 1/11/2011 1:37 AM, Marcus J. Ranum wrote:
>> Dave Piscitello wrote:
>>> I suppose if you force vendors in 2011 by regulatory caveat you can
>>> force businesses in 2012. Sad...
>>
>> Dave, you've got to *seriously* ask yourself "what good is this
>> standard?" if you've got to think of ways to *FORCE* people to
>> adopt it. I mean, really. Doesn't that say everything that
>> needs to be said?
>>
>> mjr.
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@listserv.icsalabs.com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJNLhnyAAoJEDa3DI8IpP3/SfwIALh0LtmFM5S3JgnsrOeywBLM
XqHohSTaLimNyjYwrjLoKYY13ARLt7Jg4XYPDAO+tKVHmOrGbERO68VGi9373QRX
SY4nfiZl0DXhUuWtR0boHYvEJGHYQwaRyhXIz5nv5h5FJnDjqcq9PND9Xs1juBHR
1AQZzQn6SDZn6lj4SLNyoWxzSZ/nzTdG14zCnRIV6FFC8pYuhn5lEAuN5jef10eH
LxQMBDnw6xWMwQmVUuK09FCUppp77PwEYQnv2A0tR/52uHs2l2wzSt1SxWRh9v9e
ZUutDRCVZ5aIT//1AGqY5K37zqE0FqEodg43YMAe4XiJI079RlgRmfGK4IK6AqY=
=uq8b
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dave.vcf
Type: text/x-vcard
Size: 220 bytes
Desc: not available
URL: <https://listserv.icsalabs.com/pipermail/firewall-wizards/attachments/20110112/b23a5be7/attachment-0001.bin>

------------------------------

Message: 2
Date: Thu, 13 Jan 2011 03:28:30 -0800
From: Dragos Ruiu <dr@kyx.net>
Subject: [fw-wiz] Final Penultimate last Call for Papers for
CanSecWest 2011 (deadline Jan. 17th, conf March 9-11)
To: firewall-wizards@honor.icsalabs.com
Message-ID: <201101130328.30680.dr@kyx.net>
Content-Type: text/plain; charset="iso-8859-1"

"First they ignore you, then they ridicule you,
then they fight you, then you win." -- Mahatma Ghandi.

Well if Fox's new comedy show "Breaking In" is any
indication, infosec has now entered Ghandi's second
stage. http://goo.gl/ZpLDp [youtube] (hat tip to Adam
O'Donnell for this humorous find, and Sam Bowne for
the quote/quip)

But on a slightly more serious note.

CanSecWest is nearing in the second week of March, and
this year I've waited on sending out the CFP note/reminder.
It's been up on the site for a while with a Dec 29 deadline,
but this is the real last call for submissions. If you don't get
them in by this weekend they won't make the selections
review process next week. We'll try to announce the
selections the week following. After 11 years, most
of you should know the drill, but for those who haven't
submitted or attended before, the fine print and usual
further information is attached below.

Other info:

We are doing more dojo training courses ?than ever this
year (17!) and they will be up for registration next week.
I've also confirmed with Aaron/TippingPoint/HP that we
will again be holding PWN2OWN with both browser and
mobile targets, so stand by for some announcements
there. There will also be some other new experiments
and conference goings on, some fascinating keynotes
that have been invited, as well as some interesting new
sponsors exhibiting new security wares that you'll see
announced on the conference site in the coming weeks,
but for now, get your talk proposals in so that our grumpy,
cynical, and battle-scarred reviewers can complain about
them, err, I mean provide informative feedback.;-)

cheers,
--dr (@dragosr)

The usual CFP boilerplate info:

Call For Papers

? ?The CanSecWest 2011 CFP is now open.

? ?Deadline is January 17th, 2011.

CanSecWest CALL FOR PAPERS

? ?VANCOUVER, Canada -- The twelfth annual CanSecWest applied technical
? ?security conference - where the eminent figures in the international
? ?security industry will get together share best practices and
? ?technology - will be held in downtown Vancouver at the the Sheraton
? ?Wall Centre on March 9-11, 2011. The most significant new discoveries
? ?about computer network hack attacks and defenses, commercial security
? ?solutions, and pragmatic real world security experience will be
? ?presented in a series of informative tutorials.

? ?The CanSecWest meeting provides international researchers a relaxed,
? ?comfortable environment to learn from informative tutorials on key
? ?developments in security technology, and to collaborate and socialize
? ?with their peers in one of the world's most scenic cities - a short
? ?drive away from one of North America's top skiing areas.

? ?The CanSecWest conference will also feature the availability of the
? ?Security Masters Dojo expert network security sensei instructors, and
? ?their advanced, and intermediate, hands-on training courses -
? ?featuring small class sizes and practical application exercises to
? ?maximize information transfer.

? ?We would like to announce the opportunity to submit papers, and/or
? ?lightning talk proposals for selection by the CanSecWest technical
? ?review committee. This year we will be doing one hour talks, and some
? ?shorter talk sessions.

? ?Please make your paper proposal submissions before January 17th,
? ?2011.

? ?Some invited papers have been confirmed, but a limited number of
? ?speaking slots are still available. The conference is responsible for
? ?travel and accommodations for the speakers. If you have a proposal for
? ?a tutorial session then please make your submission ?by emailing a
? ?synopsis of the material and your biography, papers and, speaking
? ?background to secwest11@cansecwest.com . Only slides will be needed
? ?for the March paper deadline, full text does not have to be submitted - but
? ?will be accepted if available. This year we will be opening ?CanSecWest
? ?presentation guidelines to include talks not in English (particularly
? ?Chinese and Korean) which we will offer to translate for the speaker
? ?if you are not a native English speaker.
?
? ?The CanSecWest 2011 conference consists of tutorials on technical
? ?details about current issues, innovative techniques and best practices
? ?in the information security realm. The audiences are a multi-national
? ?mix of professionals involved on a daily basis with security work:
? ?security product vendors, programmers, security officers, and network
? ?administrators. We give preference to technical details and new
? ?education for a technical audience.

? ?The conference itself is a single track series of presentations in a
? ?lecture theater environment. The presentations offer speakers the
? ?opportunity to showcase on-going research and collaborate with peers
? ?while educating and highlighting advancements in security products and
? ?techniques. The focus is on innovation, tutorials, and education
? ?instead of product pitches. Some commercial content is tolerated, but
? ?it needs to be backed up by a technical presenter - either giving a
? ?valuable tutorial and best practices instruction or detailing
? ?significant new technology in the products.

? ?Paper proposals should consist of the following information:
? ? 1. Presenter, and geographical location (country of origin/passport)
? ? ? ?and contact info (e-mail, postal address, phone, fax).
? ? 2. Employer and/or affiliations.
? ? 3. Brief biography, list of publications and papers.
? ? 4. Any significant presentation and educational
? ? ? ?experience/background.
? ? 5. Topic synopsis, Proposed paper title, and a one paragraph
? ? ? ?description.
? ? 6. Reason why this material is innovative or significant or an
? ? ? ?important tutorial.
? ? 7. Optionally, any samples of prepared material or outlines ready.
? ? 8. Will you have full text available or only slides?
? ? 9. Language of preference for submission.
? ?10. Please list any other publications or conferences where this
? ? ? ?material has been or will be published/submitted.

? ?Please include the plain text version of this information in your
? ?email as well as any file, pdf, sxw, ppt, or html attachments.

? ?Please forward the above information to secwest11@cansecwest.com
? ?to be considered for placement on the speaker roster, or have your
? ?lightning talk scheduled. If you contact anyone else at our
? ?organization please ensure you also cc the submission address with
? ?your proposal or else it may be omitted from the review process.

--
World Security Pros. Cutting Edge Training, Tools, and Techniques
Vancouver, Canada, March 9-11 2011 http://cansecwest.com
pgpkey http://dragos.com/ kyxpgp


------------------------------

Message: 3
Date: Wed, 12 Jan 2011 20:02:38 -0500
From: Morrow Long <morrow.long@yale.edu>
Subject: Re: [fw-wiz] IPv6
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.cybertrust.com>
Message-ID: <44C2D520-FE54-4229-8E1A-E312CC3889D8@yale.edu>
Content-Type: text/plain; charset=us-ascii

On June 8, 2011 Facebook, Google (including YouTube), Yahoo, Akamai, Limelight Networks and others will be holding a 24 hour trial/test of IPV6 services during World IPV6 day.
If you are interested in joining them see: http://isoc.org/wp/worldipv6day/

You can go to the following website today to test whether or not your current computer and Internet connection is IPV6 ready:

http://test-ipv6.com/

More info:

Facebook, Google, Yahoo commit to 'World IPv6 Day' trial
Internet Society attracts key sites to 24-hour test of next-gen Internet services
By Carolyn Duffy Marsan, Network World January 12, 2011 09:02 AM ET
http://www.networkworld.com/news/2011/011211-world-ipv6-day.html?source=NWWNLE_nlt_daily_pm_2011-01-12

Internet Society
http://isoc.org/wp/newsletter/?p=2902

On 1/11/2011 7:41 AM, Kerry Milestone wrote:
<snip>
> I do fear a
> bit however that there will be a 'Premium' internet where
> institutions like FaceBook have their traffic on a much higher
> priority route to clients (you have a subscription to the 'network')
> so people will simply stop using 'out-site' systems and their users
> internet will be contained within the ecosystem - just see the amount
> of companies with the 'join us on facebook' running competitions etc
> tv ads.


- Morrow


------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


End of firewall-wizards Digest, Vol 55, Issue 8
***********************************************

No comments: