Re: NIMDA Horror

[Randy Bush <randy at psg.com>]

> it's not that the attacks are timezone dependent, it's that the
> "mainstream" are dealing with these things either 2-8 hours ahead or
> behind of us here in Africa.

apologies, i was being too terse as usual.

a number of lists have geeks on them 7/24 in all time zones.  and a proper
subset of those lists seem to get attack incident news before any other
channels, certs included.  you can read them, which is what i am suggesting,
or hope someone takes a notice of them and posts it to your list.  your
choice.

this is not to discourage formation of a real local cert.  but that is not
how african operators in general will hear about incidents any more than the
cert here is how north american operators hear.  cert publishes well-
researched data a day or three later.

amidst the high noise level, the early reports, diagnoses, clues, and cures
for the current worm (and many previous incidents) were on the nanog mailing
list.  i suspect that, as more and more african operators feel comfortable
with this afnog list, a similar cycle will occur.

randy

-----
This is the afnog mailing list, managed by Majordomo 1.94.4

To send a message to this list, e-mail afnog at afnog.org
To send a request to majordomo, e-mail majordomo at afnog.org and put
your request in the body of the message (i.e use "help" for help)

This list is maintained by owner-afnog at afnog.org