Date: Tue, 13 Oct 1998 21:19:52 -0700 From: bmah@ca.sandia.gov (Bruce A. Mah) To: security@FreeBSD.ORG Cc: bmah@ca.sandia.gov Subject: Re: Spoofed connections on port 13223?? Message-ID: <199810140419.VAA08258@stennis.ca.sandia.gov> In-Reply-To: Your message of "Tue, 13 Oct 1998 19:05:56 MDT." <4.1.19981013190522.00c4a200@mail.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] If memory serves me right, Brett Glass wrote: > At 10:58 AM 10/14/98 +1000, Nicholas Charles Brawn wrote: [snip] > >From my limited interactions > >with them, they explicitly state they will deal with situations of > >life-threatening importance first, and then work their way down. Your > >network may not have been high on their list. You cannot fault them for > >this. > > I asked about this. They did not indicate anything of the sort; just said > they got a lot of mail. My (also limited) experience with CERT was consistent with Nick's. They do read their email...I had the interesting experience of a CERT representative phone me after I reported several (unsuccessful) attacks. He wanted to clarify some information in my emails. Two interesting things that I remember from this conversation: 1. As Brett said, they get a lot of mail. They use it to spot out trends. In fact, John Howard, one of my colleagues, did an analysis of some of this data for his PhD dissertation. 2. It's helpful to them if you explicitly tell them what you want, if you need assistance. Usually, what I send to them are CCs of complaints I send to other people, with a notation at the top "CERT: FYI". (I know, this procedure doesn't use their form, which I found cumbersome, but it has all the useful information.) Cheers, Bruce. [-- Attachment #2 --] -----BEGIN PGP MESSAGE----- Version: 2.6.2 iQCVAwUBNiQmZ6jOOi0j7CY9AQGREgP+Pgyfa/SospV36NuKyIJWIOv28fd/RRDm g3GvOyj/H7uVeQBbsqNkzRHmcX67aey2I0eRkjTf68e1zh9xpeHWgCRp21DgW++5 8kZQBWvM8Fh0eAsrFzCrjahk4W/d1mTKZ1iKGfd1scbyJZ19HfcfUpQaKuw8ldNJ n3pTYRDcsig= =miHS -----END PGP MESSAGE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810140419.VAA08258>