Just a guy in Vermont trying to connect all the dots...
Dan York
Author's posts
Dec 29
ERNW Compares Penetration Testing Tools IPv6 Support
Which network security penetration testing tools support IPv6? What caveats should you know about the ones that do support IPv6?
Recently the team as security firm ERNW published their December 2014 newsletter with the headline “Penetration Testing Tools that (do not) Support IPv6” where they took a lengthy tour through a wide range of security tools to assess their IPv6 readiness. As they say in their introduction, their goals were to:
- Find out which of our favorite penetration testing tools can be used natively using IPv6 as an underlying layer-3 protocol.
- Find alternative solutions for the rest
They specifically only tested open source or free versions of commercial tools and did not test IPv6-specific tools. They were seeking to understand which of the commonly available current (IPv4) test tools also worked well with IPv6.
The bulk of the document (pages 9-51) consists of walk-throughs of exploration of each of the various tools in different categories. They examine the tool, provide screenshots in many cases and then state a conclusion about how well or not the tool supports IPv6.
What I personally found most useful was section 15, the Appendix, starting on page 56 that provided a table view with a list of all the tools tested and a quick summary of how well (or not) the tool supported IPv6.
If you are interested in security testing and specifically for IPv6 networks, this document is definitely worth a read!
And if you are new to IPv6 and want to learn more, please visit our Start Here page to find resources targeted at your role or type of organization.
Dec 28
Watching Live Curling At 65mph on I-91
Today was an amazing testament to the power of today's mobile Internet. We traveled to Connecticut today to visit some friends and family, but we also wanted to watch the live video stream of one of the youth in our Petersham Curling Club youth program playing in the national Playdowns up in Rochester, NY. So, while my wife drove I set up my iPhone as a personal hot spot and used my iPad to display the live video stream from the Playdowns.
It worked out great... and was just amazing to think about!
Some thoughts via audio:
https://soundcloud.com/danyork/tdyr-207-an-amazing-day-of-the
Dec 28
TDYR 207 – An Amazing Day of the Mobile Internet and Live Video Streams
TDYR 207 - An Amazing Day of the Mobile Internet and Live Video Streams by Dan York
Dec 28
Video – Making Sense Out Of An IPv6 Address
Looking to understand how IPv6 addresses are put together? Here’s a great video from Keith Barker that explains IPv6 addresses in a very easy-to-understand style:
And when you’re done watching, please head on over to our Start Here page to find resources about IPv6 tailored to your job role or type of company or organization…
Dec 28
Watching North Korea’s Internet Connectivity Go Up and Down Via Twitter (Featured Blog)
One thing I enjoy about following Dyn Research (formerly Renesys) on Twitter is that they provide quite interesting graphics and charts about Internet outages. They've been tracking North Korea's Internet access quite closely over the past week and their tweets have been quite enlightening. Back on December 22, for instance, DynResearch tweeted a chart showing a 9-hour, 31-minute outage... More...
Dec 27
Aswath Rao Says I’m Wrong About VoIP In India
India has NOT been a very friendly place for VoIP historically, and so we'll have to see what happens here...
In a series of tweets Aswath pointed out that the TRAI has in fact been very supportive of IP-to-IP VoIP services and has left them unregulated. The regulation has all been around VoIP services interconnecting to the Indian PSTN. Aswath's tweets: https://twitter.com/aswath/status/548681349344034818
You are mistaken when you say "India has NOT been a very friendly place for VoIP historically". And I have pted it out many times.https://twitter.com/aswath/status/548681697227980800
From the get go, TRAI has regulated only IP to Indian PSTN. IP/IP & IP to foreign PSTN have been unregulatedhttps://twitter.com/aswath/status/548687939862290432
My point is that TRAI has been very enlightened in its ruling. Even after 11/26 attack & pressure it has not reg IP/IP
Given that Aswath has been very involved in VoIP in India for many years, I'll defer to his opinion on this one.
Thanks, Aswath, for challenging me on this sentence.
If you found this post interesting or useful, please consider either:
- following me on Twitter;
- adding me to a circle on Google+;
- following me on Ello;
- following me on App.net;
- subscribing to my email newsletter; or
- subscribing to the RSS feed
Dec 27
TDYR 206 – I Threw Over 100 Rocks At Houses Today
TDYR 206 - I Threw Over 100 Rocks At Houses Today by Dan York
Dec 27
Looking For A Weekend Project? Check These Out… IPv6, DNSSEC, TLS, BGP and more…
Do you have some vacation time during Christmas and New Year’s Day? Are you looking for a weekend project to try out something new? Maybe improve your home network? Or learn a new skill for 2015? If so, why not check out our list of weekend projects at:
http://www.internetsociety.org/deploy360/blog/category/weekend-projects/
We’ve got all sorts of ideas related to IPv6, DNSSEC, TLS and much, much more…
There are all sorts of ways you can make your network work better, faster and be more secure – and ways to learn a great bit as well. Our Start Here page can help you get more information… and if you come up with a great weekend project idea, please do let us know! We’ll write about more in the future.
Enjoy your weekend! Make something happen!
Dec 26
To No Surprise, Indian Telcos Want to Block WhatsApp OTT VoIP
“Allowing the use of VoIP/ Internet telephony at such massive scale without licensing regime would lead to a significant disruption in the existing business of TSPs and can substantially derail their investment capability”
Gee... allowing a new innovative entrant into the market would lead to "significant disruption in the existing business" of the existing telcos.
Yes. Exactly.
And the representative further pointed out that this could lead to a "significant loss of revenues" for the government in the form of taxes.
Yes. Exactly.
This is the nature of Over-The-Top (OTT) applications and services. In providing better services for customers they very often DO cause "significant disruption" to existing businesses.
This is the nature of innovation.
This is the value of the "permissionless innovation" that has made the Internet the amazing tool for communication, collaboration and creation that it is today.
The folks at WhatsApp don't need to ask anyone to roll out VoIP, as articles seem to point to them being ready to do soon. (See also this AndroidWorld.nl article in Dutch.)
They just do it.
And... of course... the legacy telcos fight back using every tool in their formidable arsenal, which includes of course legislation and government lobbying such as that shown in this article.
India has NOT been a very friendly place for VoIP historically, and so we'll have to see what happens here...
[UPDATE: Aswath Rao says I'm wrong with this last sentence and that India has been friendly to pure IP-to-IP VoIP systems.]
... but while they can attempt to throw up as many roadblocks as they can... in the end my bet would be on the OTT services and applications to win.
They provide the services the customers want... and can probably do so at a much more reasonable cost... and in the user experience that the customers want.
A classic example of "disruptive telephony"...
If you found this post interesting or useful, please consider either:
- following me on Twitter;
- adding me to a circle on Google+;
- following me on Ello;
- following me on App.net;
- subscribing to my email newsletter; or
- subscribing to the RSS feed
