There is no hyphen in expat. Sorry, pet peeve.

Explosive bolts for jettisoning failing drives.

Stand clear!

This takes away the fun I used to have with old failing hard drives: Install a webserver in a test rig with webcam pointed at the disk sitting out on a workbench, then remove the top cover and see how long it would live.

Just send the space shuttle up to fix it.

Oh wait...

I've seen specialized stuff in production on 2.6 as recently as a couple years ago.

FLET's is not filtered at NTT's level. It all gets passed off to the individual ISPs who have to handle transit and filtering themselves.

au Hikari is a different situation.

Disclaimer: I work for a japanese ISP.

During an earlier DNS amplification attack we actually identified over 1000 of our customers that had their CPE devices misconfigured to expose the onboard resolver to the internet at large.

After contacting them we had a less than 1% rectification rate.

There are some patches for bind that surfaced about 6 months ago during some previous large-scale DNS amplification attacks.

I'd check nanog or bind-users mailing list archives around that time.

And of course with this "feature" it will never support DNSSEC ever.

As often as not it is a judgement call of cost to fix vs. risk.

We have the situation where we have a pair of open resolvers whose addresses have been constant for the past 17 years. We have about a quarter million customers, some who have those addresses embedded into devices whose passwords have been long since forgotten.

The amount of support time needed to deal with these customers from putting in ACLs to the resolvers would run into the many many thousands of staff-hours.

As we were affected by a somewhat similar attack (a DNS amplification DDoS but with different mechanics, bouncing queries off of CPE with open forwarding resolvers) last year we drop TYPE=ANY queries (I've yet to see a legitimate production query of that type ever) and rate-limit queries but access lists on the servers would require such a huge expense that its not likely to happen any time soon.

USD 5 in 1979 works out to USD 16 today, give or take.

You can hack xbmc to make it use MX Player (which does do proper hardware accelleration on rk3066 sticks) do the heavy lifting.

Rockchip is one of the most (if not the most) source-release-hostile of all the chinese SoC makers.