IETF Logo Mail Archive

Re: Microsoft Hack

Behcet Sarikaya <sarikaya2012@gmail.com> Wed, 10 March 2021 15:52 UTC

Return-Path: <sarikaya2012@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D4E53A1227 for <ipv6@ietfa.amsl.com>; Wed, 10 Mar 2021 07:52:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.847
X-Spam-Level:
X-Spam-Status: No, score=-1.847 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ePhqCTwl5fk7 for <ipv6@ietfa.amsl.com>; Wed, 10 Mar 2021 07:52:29 -0800 (PST)
Received: from mail-yb1-xb2a.google.com (mail-yb1-xb2a.google.com [IPv6:2607:f8b0:4864:20::b2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D03E3A1220 for <ipv6@ietf.org>; Wed, 10 Mar 2021 07:52:29 -0800 (PST)
Received: by mail-yb1-xb2a.google.com with SMTP id p186so18356489ybg.2 for <ipv6@ietf.org>; Wed, 10 Mar 2021 07:52:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:reply-to:from:date:message-id :subject:to:cc; bh=TDoTsb0Ofrl6uMBuI16XZ34JN/tWL2kleJTXoXs8Vcw=; b=Yfx1vDVuFfBKw5dvfR12e6OT9/GCTnFeRG00IE03GCA2J6Nhkt5W0VGkrmznpfUUsi 600X/aidjS5ufLyIuX3koFfujHivtsPEa/i20e5h2rTqkXHVqal+oAMND2h+GAnDRyUL hwUNqnuLZAkJxxiVTkE4Ss2w5Qs+KBED2mGuqWtcjVtskW9dSU0Ym4TXT2sdv+z0rMmF aYUc4PkFYfTjupx0GJMmbMwqli5W4uiyUJfdvGChnE5K/L6cJ1riDp+A3Oiug+1zbwYN jkts4F/TK6eiqJTNiigJfbBCguwQ8LEA8IJIsmxhsO8OUe2ABDm2/ZtOHUEl05Yl8jBk 67QQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:reply-to :from:date:message-id:subject:to:cc; bh=TDoTsb0Ofrl6uMBuI16XZ34JN/tWL2kleJTXoXs8Vcw=; b=qvpti7Q+AQa1EGv+4mUYvGLiJAHw9cp8+SdzbElHpkZIKcD/EZpbruPwnb4waK1Uyb CpKm2tUWMnLHlHdkejD1n/J3y2VnrWx8TZt7p/CnHLfTh36mVBzWHr4CrpvCFfB001Nn lja7B1TWh+7gRpaDj2Gc+TRC3hDtNUVEnN2GCuz0kDdq3ygH7TsKjVoSvMRXGcs3pC+0 TZmrGz/LTYqnnsPqrzN3U4y4FJ1B5SLhksLnao5S02J+Ved9ZyY7wJ8OZQmgWUC7iZ97 rCQ8Z4ffY36peJIJQkMJhBp1H1GjAOkAIu13nJBAfKsv5kfbD90uGPPCnvN9aV/dj2aw t2Vg==
X-Gm-Message-State: AOAM531ZLGuu1TkphUEKKrjDs1Z7REYsyn5+MWbpDc3sq4bZfaiILkgn /mfJ1dffKm6cgVe7Sdat9qQgHul1i9yITOqPHYs=
X-Google-Smtp-Source: ABdhPJxjRSwjZ2/nxhrHSVBMiZlJslTXSgNbF9v/7/kx+uTUnEH3p+TkYxwztWbL1Y0cma1BfxoYzzqBpIZNMVcIpGM=
X-Received: by 2002:a25:4906:: with SMTP id w6mr4980635yba.324.1615391547580; Wed, 10 Mar 2021 07:52:27 -0800 (PST)
MIME-Version: 1.0
References: <CAC8QAccjKvSFk+P3S-oTL79OCFcgP3bRwAAQ4-9=my2hfCgXMg@mail.gmail.com> <7EFE82A7-728F-4B45-8FB0-A9F51C27574D@gmail.com> <CAC8QAccXD=VU1MMydBVy0CbWH7e58kKpbvzv9aDXrDCnb90EkA@mail.gmail.com> <69337ae7-68ab-88fd-04c0-235529bdc98d@gmail.com> <55e8f84d-3257-f60c-2c48-e688101aad41@gmail.com>
In-Reply-To: <55e8f84d-3257-f60c-2c48-e688101aad41@gmail.com>
Reply-To: sarikaya@ieee.org
From: Behcet Sarikaya <sarikaya2012@gmail.com>
Date: Wed, 10 Mar 2021 09:52:16 -0600
Message-ID: <CAC8QAce9ABpQ3VdxVUcEoGDaBcb-p6zpVZNNHcs+MVdzWTOFyA@mail.gmail.com>
Subject: Re: Microsoft Hack
To: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Cc: 6man WG <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000005de5cb05bd30a7ae"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/mww-vJfQlhqKLJUcJlcp3rCi-Ow>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Mar 2021 15:52:31 -0000

On Wed, Mar 10, 2021 at 7:49 AM Alexandre Petrescu <
alexandre.petrescu@gmail.com> wrote:

> Sorry, I hear now it is about some breakin in Microsoft software in
> Enterprise.
>
> This is what you meant, Behcet?
>
>

Yes. I think Bob knows.

 Behcet

> Alex
>
> Le 09/03/2021 à 21:38, Alexandre Petrescu a écrit :
> > I am not sure this is relevant to this discussion:
> >
> > There was some discussion on linkedin.  Someone (Fernando) posted info
> > about a blog post of Microsoft about several security issues, one of
> > them being the advisory to turn the IPv6 reassembly off.
> >
> >
> https://msrc-blog.microsoft.com/2021/02/09/multiple-security-updates-affecting-tcp-ip/
> >
> > then
> > https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24086
> > and then
> > Netsh int ipv6 set global reassemblylimit=0
> >
> > In that discussion I was saying that a real correction would have been
> > to correct the software (patch) such that it corrects the security
> > vulnerabilities, rather than disable the functionality altogether.
> >
> > I was saying that because I noticed this behaviour that is similar to
> > when somebody disables DHCPv6 port numbers and/or link-scoped multicast
> > because of security risks rather than making sure that the software
> > implementation is correct and tested.
> >
> > But I am not sure this is what the 'Microsoft Hack' topic request was
> > about?
> >
> > Alex
> >
> > Le 09/03/2021 à 20:58, Behcet Sarikaya a écrit :
> >> Hi Bob,
> >>
> >>
> >> On Tue, Mar 9, 2021 at 11:13 AM Bob Hinden <bob.hinden@gmail.com
> >> <mailto:bob.hinden@gmail.com>> wrote:
> >>
> >> Behcet,
> >>
> >> We have not been asked, will consider it if asked.
> >>
> >>
> >> Thanks. I saw some chat messages on it in today's 6man meeting that's
> >>  the reason I brought it up.
> >>
> >>
> >> Behcet
> >>
> >> Bob
> >>
> >>
> >>> On Mar 9, 2021, at 8:10 AM, Behcet Sarikaya
> >> <sarikaya2012@gmail.com <mailto:sarikaya2012@gmail.com>> wrote:
> >>>
> >>> Hello Ole, Bob, Folks,
> >>>
> >>> I suggest that the chairs get a presentation arranged at the next
> >> 6man on Thursday (I think Dave Thaler may be asked to do it?) on the
> >> Microsoft Hacking event that we hear on the news, in the press, etc.
> >> these days.
> >>>
> >>> Behcet
> >>> --------------------------------------------------------------------
> >>
> >>>
> >> IETF IPv6 working group mailing list
> >>> ipv6@ietf.org <mailto:ipv6@ietf.org> Administrative Requests:
> >> https://www.ietf.org/mailman/listinfo/ipv6
> >> <https://www.ietf.org/mailman/listinfo/ipv6>
> >>> --------------------------------------------------------------------
> >>
> >>>
> >>
> >> --------------------------------------------------------------------
> >> IETF IPv6 working group mailing list ipv6@ietf.org Administrative
> >> Requests: https://www.ietf.org/mailman/listinfo/ipv6
> >> --------------------------------------------------------------------
> >>
> >
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list
> > ipv6@ietf.org
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> > --------------------------------------------------------------------
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>

v2.29.0 | Report a Bug | By Email | System Status