Archive for RB

Facebook Adds IPv6

Facebook Adds IPv6NetworkWold is reporting that Facebook began offering “experimental, non-production” support for IPv6 on June 10,2010. With more than 350 million active users. 65 million of them accessing the site through mobile devices, Facebook is planning its deployment of native IPv6 to its network backbone. The social network says it wants to support both IPv4 and IPv6-aware clients. In a presentation at the Google IPv6 Implementors Conference, Facebook’s network engineers said it was “easy to make [the] site available on v6.”

FacebookFacebook said it deployed dual-stack IPv4 and IPv6 support on its routers, and that it made no changes to its hosts to support IPv6. FB also said it was supporting an emerging encapsulation mechanism known as Locator/ID Separation Protocol (LISP), which separates Internet addresses from endpoint identifiers to improve the scalability of IPv6 deployments. “Facebook was the first major Web site on LISP (v4 and v6),” Facebook engineers said during their presentation. They also said that using LISP allowed them to deploy IPv6 services quickly with no extra cost. Facebook’s IPv6 services are available at www.v6.facebook.com, m.v6.facebook.com, www.lisp6.facebook.com, and m.lisp6.facebook.com.

John Curran, president, and CEO of the American Registry for Internet Numbers (ARIN) has been urging Web site operators to deploy IPv6. Curran set a deadline of Jan. 1, 2012, when all public-facing Web sites must support IPv6 or risk providing visitors with lower-grade connectivity. The remaining pool of unallocated IPv4 addresses could be depleted as early as December due to unprecedented levels of broadband and wireless adoption in the Asia-Pacific region, experts say.

ARIN logoRichard Jimmerson, CIO at the American Registry for Internet Numbers (ARIN), told NetworkWorld, “It’s moving so fast now that it’s hard for us to be current on it any longer,” ARIN provides IPv4 addresses to carriers in North America. “We’ve gone through 10 /8s since the beginning of this year,” Jimmerson says. “To put that in perspective, in all of 2009, we only went through eight /8s. It’s very possible that the IANA free pool will deplete in December or January at the earliest.”

The article reports that demand for IPv4 addresses remains flat in North America, there has been a huge surge in the Asia-Pacific region this year that is likely to stay strong. “The Asia-Pacific region has very large economies that are underserved by IP addresses such as India, China, and other places,” Jimmerson told NetworkWorld. “They are really seeing a big surge in broadband deployment and wireless data handset deployment, and that translates into having to have unique IP address space. That trend is likely to continue.”

rb-

Just last week, I was speaking with a potential client about getting ready for IPv6 on their network. They had not even talked yet with their ISP about getting IPv6 traffic to them, let alone how they were going to deal with IPv6 in and out of the network.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Supremes Rule on Sexting Case

Supremes Rule on Sexting CaseOn Thursday (June 17, 2010) the U.S. Supreme Court ruled on the City of Ontario, California v. Quon case. I wrote about this sexring case earlier and its implications for corporate technology acceptable use policies (AUP).  The case involved the use of text pagers issued to officers by the city police department. The city issued the pagers for City use, under a general acceptable use policy. The officer in question consistently went over the allotted limit on messages which caused his supervisors to get stored text messages from the service provider. The City discovered that many of the messages were not work-related but were “sexting” or sexually explicit personal text messages. The officer claimed that the search violated the Fourth Amendment.

The Supreme Court ruled unanimously that the police department’s actions were reasonable, and thus did not violate the constitutional rights of the police officer. Justice Kennedy’s opinion ruled narrowly, to avoid a final definition of electronic privacy.

Prudence counsels caution before the facts, in this case, are used to establish far-reaching premises that define the existence, and extent, of privacy expectations of employees using employer-provided communication devices. Rapid changes in the dynamics of communication and information transmission are evident not just in the technology itself but in what society accepts as proper behavior. At present, it is uncertain how workplace norms, and the law’s treatment of them, will evolve.

According to the Center for Democracy & Technology (CDT), the Supreme Court faced an opportunity to curtail workplace privacy (or electronic privacy generally) in this case. However, the Court applied the O’Connor v. Ortega (1987) precedent, that government employees generally retain their Fourth Amendment privacy rights, and it assumed that government employees may have a reasonable expectation of privacy even in communications they send during work hours on employer-issued devices.

The CDT says the message to government employers is that the courts will continue to scrutinize employers’ actions for reasonableness, so supervisors have to be careful. Unless a “no privacy” policy is clear and consistently applied, an employer should assume that employees have a reasonable expectation of privacy and should proceed carefully, with a good reason and a narrow search, before examining employee emails, texts, or Internet usage.

rb-
As we always try to tell our clients, make sure that there is a clear statement of no privacy in all policies and policy enforcement actions and as part of their policies, companies should discourage employees from using personal accounts to conduct company business.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Full AV Needed for MacOS

The Mac antivirus vendor Intego has identified a new malware threat for MacOS. On the Mac Security Blog, the firm calls the threat, OSX/OpinionSpy, a “high risk.” According to their blog, the main distribution channel for the malware through screen saver programs downloadable from reputable download sites including MacUpdate, VersionTracker, and Softpedia. The malicious code does the typical malware things like scan files, record user activity, create a backdoor, and send stolen data to remote servers.

SeacrchSecurity quotes security expert and SANS Institute instructor, Rob VandenBrink, writing on the SANS Internet Storm Center Diary, who said the malware is a simple bolt-on to other freely downloadable applications. “The neat thing about this malware is that it passes most static scan tests – the downloaded software itself is clean, the malware is downloaded as part of the installation process,” VandenBrink wrote. “This highlights the requirement for an on-access virus scanner for your OSX computers.”

rb-

Many people have long-held that macOS is more secure than Windows. macOS and its underlying *NIX OS have their own issues. The recent announcement by Google to increase its use of non-Windows OS’s (here and here) has made macOS security thru obscurity mute. Mickey Boodaei, CEO of security vendor Trusteer, told SC Magazine, “Mac and Linux are not more secure than Windows. They’re less targeted. There is a big difference.”

This announcement weakens the theory that using MacOS computers is the best way to secure online financial transactions. For the time being, a * NIX-based live CD is probably the safest bet to secure your online financial transactions.

macOS users should get a real anti-malware package that includes an on-access scanner.

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

The Physics of the BP Oil Spill

MSNBC has an excellent interactive chart that explains what will happen over next the decades to the 210,000,000 U.S. gallons of oil that British Petroleum (BP) spilled into the Gulf of Mexico during 2010.

 

Physics of BP oil spill

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Copper Sexy Again

Copper Sexy AgainThanks to the FCC‘s 100 squared plan for 100 million U.S. homes to have affordable access to download speeds of at least 100 Mbps and real upload speeds of at least 50 Mbps there, seems to be some renewed interest in copper. Both Bell Lab and AT&T have announced experiments to extend the useful life of copper infrastructure.

DSL linesAccording to Broadband Reports, Bell Labs, Alcatel-Lucent’s research arm has achieved speeds of 800 Mbps using a pair of traditional DSL lines. Reuters says that AT&T is going to trial 80 Mbps DSL this month. Broadband Reports says that Alcatel-Lucent (ALU) achieved the speeds during lab tests by combining three technologies.

First, AlcaLu uses a phantom circuit–a technique developed in 1886 to create virtual analog phone lines. The firm uses a second, supplementary pair of wires to create a third “phantom” channel to supplement the two physical wires common with DSL.

Alcatel-Lucent logoIn “phantom mode,” a digital signal is normally transmitted through two wires twisted together–one positive and the other negative. John J. Carty electrical engineer, telephony pioneer, and future president of ATT realized that it is possible to send a third signal on top of four wires separated into two twisted pairs. The negative half of this “phantom” connection is sent down one twisted pair (which is already carrying a conventional signal), and the positive half down is sent down another twisted pair. At the destination, analog processors are used to extract all three signals–two real and one “phantom”–from the two pairs.

The second component is bonding which treats multiple lines as if they were a single cable to increase the speed of DSL broadband connections by a multiple almost equal to the number of cables involved.  Finally vectoring is used on the third channel for error correction to cancel noise or “crosstalk” between adjacent copper wire pairs.

Stefaan Vanhastel, Director Product Marketing, Alcatel-Lucent Wireline Networks told Broadband Reports that “by using vectoring, which is a noise-canceling technology to eliminate noise” they can improve the performance of the copper lines. The lab tests showed that the technology is capable of offering 100 Mbps over 1,000 meters (3,820 feet). Alcatel-Lucent doesn’t believe it will roll out the combination technology until after 2011.

ATT logoDespite the focus on wireless broadband over at AT&T (T) they are trying to push the boundaries of its existing wireline copper plant to deliver broadband services. According to Reuters, beginning this month, AT&T is going to trial 80 Mbps DSL. This will surpass its top 24 Mbps speed. AT&T’s Seth Bloom told Broadband Reports the trial will look at “pair bonding, vectoring, (and) spectrum management,” which “can be done very inexpensively and on a per-user basis.” AT&T’s experiment will be limited by the quality of existing copper facilities and the distance the end-user is from either the CO or the remote terminal (RT) cabinet The U-verse end-user won’t get all that bandwidth because it also has to carry bandwidth-hungry HDTV signals.

An interesting wrinkle in AT&T’s 80 Mbps test is that Alcatel-Lucent, which is demonstrating 300 Mbps supplies the VDSL2 access gear to AT&T but hasn’t yet shipped access gear that can bond VDSL2 because CPE vendors haven’t done so, an official said. “We will have VDSL2 bonding-ready equipment going into production soon, and we will add the bonding software to the equipment once the CPE for VDSL2 bonding is available.” according to ConnectedPlanet.

rb-

Clearly, the incumbent telcos are feeling the pressure from the cablecos DOCSIS 3.0 rollouts. The Alcatel-Lucent 300 Mbps VDSL2  technology should be scooped up by incumbent telcos who need to squeeze a couple more years out of their thousands of miles of copper wireline last mile and keep a hand in the FCC’s 100 Mbps broadband plan.

In the enterprise space, the improved DSL technology may cut into the optical cable business by reducing the long-term cost-effective argument for private fiber. That is of course if you can get the service. All of the “improved DSL” services need more copper pairs, which may not be available. This of course has to be balanced against increasing your exposure to AT&T.

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.