[03:14] good morning [03:17] QA: seen maaz? [03:17] Private_User: maaz was last seen 2 months, 22 days, 10 hours, 10 minutes and 9 seconds ago in #ubuntu-za on freenode [2013-12-03 17:07:24 UTC], and has been offline on freenode since 2013-12-03 16:44:55 UTC [03:18] QA: who is online? [03:18] Private_User: I'm afraid I have no idea [03:20] sorry people was just a little bored :D [03:20] hehe [03:20] QA Thank You [03:20] sure thing, Private_User [05:14] QA coffee on [05:14] * QA puts the kettle on [05:15] morning nlsthzn and all others that are awake [05:18] Coffee's ready for Kilos! [05:18] QA thanks love [05:18] sure thing, Kilos [05:23] hallo oom Kilos [05:23] o/ morning Private_User [05:23] er, I got a tail [05:23] more nuvolari_ [05:24] er ja [05:24] stertjie van agter en 'n stertjie van voor === nuvolari_ is now known as nuvolari [05:25] Good morning everyone [05:25] hi bduk1 [05:25] hello bduk1 [05:27] oh dear [05:27] oops? [05:27] what? [05:27] het oom Kilos 'n lekker naweek gehad? [05:27] 07:26:58 <-- | bduk1 (~Thunderbi@196-210-137-164.dynamic.isadsl.co.za) has quit (Remote host closed the connection) [05:28] oh ya freenode is still sick [05:28] was a bad weekend for them [05:28] maazstill ofline and meeting tomorrow night [05:37] :O [05:37] I must remember [05:37] thanks for the reminder oom Kilos [05:37] np [05:37] you need to tell the monkey, i dunno where he is [05:38] hasnt been online for a long time [06:05] morning nuvolari and Kilos [06:05] hi Private_User [06:07] yeah me also last time I forgot about the meeting [06:07] what time is it? [06:07] 20.30 [06:07] cool thanks [06:07] np [06:12] morning [06:12] morning ThatGraemeGuy [06:37] hi hekkwan [06:38] hi Guest23692 where is tinuva [06:39] morning superfly [06:42] morning Kilos, ThatGraemeGuy, Private_User, nuvolari [06:43] and bduk [06:44] morning :-) [06:54] morning superfly [07:05] hello's superfly [07:15] o/ hi Vince-0 [07:15] Hi! [07:15] surp? [07:15] hi Vince-0 [07:16] Hi! [07:16] Lekka Maanharedag [07:16] lol [07:18] I believe there's a meeting tonight === Guest23692 is now known as Tinuva [07:18] tomorrow night Vince-0 [07:18] wb Tinuva [07:21] ow [07:21] k [07:38] inetpro more, gaan jy die hoe vonk probeer kry by die vergadering more aand? [07:38] hoee [07:38] ai! [07:38] high [08:08] ai! === Kilos- is now known as Kilos === nlsthzn_ is now known as netsplit [08:14] hehe [08:14] those okes caused bad probs the weekend seems like [08:15] yup [08:16] hope its fixed before tomorrow nights meeting [08:16] and maaz too [08:16] hi tumbleweed do you know how to restart maaz? [08:17] and dont forget our meet tomorrow night hey [08:22] Kilos: sorry, I don't have access to the machine it runs on [08:29] ah ok ty tumbleweed [08:30] we need to contact the crashkid somehow then [08:33] good mornings [08:33] lo inetpro [08:34] Kilos: hoeë vonk? [08:34] highvoltage? [08:34] yeah [08:34] kan seker probeer, wat het jy op die agenda? [08:35] daai registered nicks only [08:35] hy moet dit doen ne [08:36] wel hy hoef seker nie op die vergadering te wees nie [08:36] kan net na die tyd sê hy moet dit doen, as hy die enigste ene is wat dit kan doen [08:36] ja man betrek hom weer by ons [08:39] * Kilos dont like losing the old big names we had [08:42] Kilos: I sent him a message, up to him to see whether he can make it or not [08:42] ty [08:42] and the crash kid too [08:42] the bot not here [08:43] told him [08:43] ty [08:44] yw [08:45] nuvolari: please ensure that you have a plan B in case we fail to revive Maaz [08:46] *in time [08:46] QA is here inetpro but i dont know what she needs doing [08:46] you can take her over [08:46] Kilos: ideally Maaz should be alive for the logs in the usual place [08:47] yes i know [08:47] but we can talk tonight if necessary [08:47] methinks we must ask the crash kid to give you full rights there [08:57] hmm... [08:57] it's is personal server man [08:58] ya but he trusts you and we only want maaz going [08:58] ai! [08:58] you not gonna fiddle more there [08:58] * inetpro can't be trusted just like anyone else :-) [08:58] ai! [08:59] but I can try to be like an angel, will speak to him when I have a chance [09:00] good man [09:00] dont try just do it [09:01] i will watch you [09:01] hehe [09:03] like i dont fiddle on that linode server, just look after QA === netsplit is now known as not_found [09:55] ai! [10:03] hi magespawn [10:03] hey Kilos [10:14] what is up today? [10:19] the sun... mostly [10:19] how are you magespawn? [10:20] hey not_found, good and you? [10:20] haha we hoping freenode and maaz are fixed for tomorrow nights meeting magespawn [10:20] always good thanks [10:20] it is a good thing for the sun to be up [10:21] does anyone know what has been happening lately? [10:21] ddos [10:21] i have been running into all sorts of problems all over the net [10:21] since saterday avy i think [10:23] seems to have caused a bit of a knock on effect [10:29] was bad i had no connection to freenode for most of sunday and all saterday night [10:29] and still today there are the odd netsplits [10:38] machine acting up, gonna have to reboot. [10:38] Be Back Later [10:39] ai! [11:01] ai! [11:21] internet very sicker [11:21] hi theblazehen [11:21] hey Kilos- [11:22] Kilos-, freenode problems? [11:22] ai! [11:22] i dunno [11:23] Vince-0 has left this server (Excess Flood). [11:23] like that kinda probs [11:23] yeah [11:23] and 2 of them at same time [11:23] DDOS by NTP reflection [11:23] 400gb/s [11:24] they gotta fix it before tomorrow night or we gonna have a messed up meeting [11:24] yeah, well they can't do much [11:25] people must stop attacking them [11:25] they must trace them and have them locked up [11:25] Can't do anything against UDP flood [11:25] or shot [11:26] not that simple. It will show as coming from a time server [11:26] oi [11:26] Attacker sends MONLIST command to NTP server, with a spoofed source IP pointing to freenode [11:26] then NTP server gives large reply message [11:28] so then its in the servers that tracebacks gotta be done [11:28] there must be some record somewhere of the person/s starting it [11:28] nope [11:29] UDP isn't TCP like that [11:29] So unless we get the help of the NSA, no chance [11:29] and it's probably a botnet sending NTP requests to the NTP servers [11:29] why dont they attack the nsa instead of freenode [11:30] surely the server has records of where them commands are coming from [11:30] Script kiddies, man... [11:30] NTP server does have records. But records say it comes from freenode [11:30] It works like this: [11:31] Normally you contact NTP server and ask for the time, and but your IP address in the source so that you can get the time [11:31] And server log will say you asked for the time [11:32] But attacker pretends to be freenode, and asks for the time. Server then tells freenode the time because it thinks freenode asked for the time [11:32] eeek [11:33] so you spend little data asking for time, and time data is large [11:33] then freenode gotta only allow registered ip's [11:33] so they can see who did what [11:34] But it's not the IRC server that is attacked [11:34] And you cant stop it [11:34] eish [11:35] like me shoving some trash in your hands [11:35] You cant just not have it, you will need to throw it away. [11:35] no man not same i would hit you [11:35] hehe [11:35] And with people shoving trash in your hands, people can't give you eg. food because your hands are full [11:35] lol [11:36] and there is too many people giving too much trash to throw it away fast enough to get all the food [11:36] i see the principle [11:36] but still think there must be a way to trace the bad peeps [11:37] or block them out because of not being registered [11:37] Not unless you have access to logs of everything on every router on the internet, you cant [11:37] not even NSA can do it all [11:37] whew [11:38] yeah :( [11:38] too much for my head to fathom [11:40] Kilos-, http://blog.cloudflare.com/understanding-and-mitigating-ntp-based-ddos-attacks might explain better [11:43] wb Vince-0 [11:43] goddamn DDOS.. [11:46] sjoe, that's my DSL being maxed by these noobs in the office [11:46] Vince-0, you can't low them dows? [11:46] down* [11:50] sure, just not my network [11:50] I just work here [12:00] Kilos-: for the record, NTP has very little to do with freenode and being registered [12:00] NTP = Network Time Protocol [12:01] unfortunately everyone including freenode depends on time being accurate [12:01] good afternoon [12:01] hi charl_ [12:01] maaz still dead ? [12:01] hi inetpro [12:02] no coffee for charl_ today [12:02] :( [12:03] at least freenode seems somewhat more stable today [12:05] i dont understand all that stuff [12:05] inetpro: how's it going? you've been silent [12:05] why is a time thing messing up freenode [12:06] this was quite funny https://gist.github.com/bortzmeyer/8782108 [12:06] trying to get users to ddos themselves by pointing them back at localhost [12:06] QA coffee on [12:06] * QA washes some mugs [12:06] Kilos-: coffee please [12:06] charl_: all good thanks, weekend was just busy [12:06] bah [12:06] QA: coffee please [12:06] charl_: Yessir [12:06] Kilos-: i mean, hi :) [12:06] lol [12:07] Kilos-: the NTP thing affects not only freenode [12:07] it has a massive impact on a big part of the interwebs [12:08] inetpro: do you know of any technical details posted? was it in fact a ntp amplification attack? [12:08] but freenode could also be a specific target [12:09] charl_: am not sure, just noticed ThatGraemeGuy and Kilos- talking about it [12:09] oops, not ThatGraemeGuy but theblazehen [12:09] ah, missed part of the convo [12:10] Coffee's ready for Kilos- and charl_! [12:10] QA danke [12:10] Bitteschön [12:10] inetpro, what it sounded like on /r/sysadmin [12:11] hi Xethron [12:11] theblazehen: /r/sysadmin? === Kilos- is now known as Kilos [12:12] theblazehen: reddit? [12:12] inetpro, yeah [12:12] ok [12:12] Just got my GPU :D [12:12] Morning Kilos [12:14] sad that sysadmins haven't sorted their servers [12:16] their NTP servers* [12:17] inetpro, yeah.. [13:54] such *.net [13:54] much *.split [14:18] later all === Arcanum_za is now known as Trixar_za [16:27] hmm... [17:50] looks like them swines did some serious damage the weekend [18:31] good evening [18:31] meeting tomorrow evening? [18:31] good, thought i almost missed it [18:33] haha what do you want to change [18:33] who, me? [18:34] ya [18:34] i forgot to find out how to change the social channel name [18:35] but i think that will need to be done by the channel owner to make it official off topic [18:35] are you guys going to get maaz up before tomorrow evening [18:35] otherwise there is noone to do the minutes etc [18:35] we hope so [18:36] isn't cocooncrash the one running it? [18:36] ya an all ibids can do it [18:36] he's working at feestbook now right? [18:36] ya maaz is on his server but there aint been a reply from him yet [18:36] ? [18:36] in the usa is all i know [18:41] inetpro feedback? [19:03] Kilos: none yet [19:03] ai! [19:04] Kilos: but I think he's only like waking up now [19:04] if he's on the west coast he'll be like 12 hours off indeed [19:04] its about lunch time there already [19:04] or was that 10 hours [19:04] oh not 9 [19:05] wait hold on [19:05] what city? [19:05] ask the bot [19:05] 11:05 AM [19:05] 11:05 Maandag (PST) - Tijd in San Francisco, Californië, Verenigde Staten [19:05] yes indeed [19:05] that is too early for anyone on a Monday morning :-) [19:05] QA time in san francico [19:05] Kilos: That didn't seem to agree with me [19:06] ai! [19:06] QA stupid cow [19:06] Oh well, we can't all be perfect all the time. [19:06] QA: googld time in san francisco [19:06] charl_: Huh? [19:06] QA: google time in san francisco [19:06] charl_: "Current time in San Francisco - World Time Clock & Map" http://24timezones.com/world_directory/current_san_francisco_time.php :: "Current local time in U.S.A. – California – San Francisco" http://www.timeanddate.com/worldclock/city.html?n=224 :: "San Francisco Commuters Missed a Murder By Staring ... - US - Time" http://nation.time.com/2013/10/09/san-francisco-commuters-missed-a-murder-by-staring-at-their-phones/ :: "San Francisco, C… [19:06] oh it doesn't have those "hints" that google has at the top, only the actual results [19:09] ok, I got hold of him and he'll have a look when his hands are free [19:09] cool [19:19] night all. sleep tight [20:11] Maaz_: ping [20:11] cocooncrash: pong === Maaz_ is now known as Maaz [20:23] thanks cocooncrash [20:24] Maaz: wb [20:24] Thank you so much inetpro my good good friend [20:35] cocooncrash: hey dad, congrats! [20:35] superfly: Thanks :) [20:43] oh wow cocooncrash, you have a newborn? [20:45] Congrats, I'm sure he will bring you many hours of blessings and joy! [20:49] * inetpro switches off the lights [20:49] good night [21:02] inetpro: Yup, ~3 weeks ago === spin123456 is now known as spinza