[nsp-sec] Changes Coming

[Dave Monnier]

Team,

Bottom line up front, Daily Reports will go away on March 20, 2013.  It
will be replaced by another service.  Read on if you are a subscriber.

One of the services we've offered to the NSP-Sec community over the
years in our Daily Reports service.  List subscribers have been able to
retrieve daily infection reports for their ASN using their list
credentials at no cost or obligation.  This service has run for years
without much trouble and has hopefully been a great asset to the community.

The large majority of the data provided via these reports has been
generated by Team Cymru or via data relationships we've established
outside of NSP-Sec.  This same data has gone on to feed one of our other
community projects, TC Console. TC Console is a very similar concept to
the Daily Reports. The system provides daily infection information for
ASN or prefixes and is available for download and parsing by IR teams.
In addition to this report capability, TC Console also shows a graphical
representation of the data allowing teams to track remediation over
time, etc.  The console also allows individual subscribers to report
incidents to one another allowing for collaboration, etc.

Maintaining these two, yet very similar, systems at no-cost for the
community has grown to be a bit of a burden for us.  For this reason
we've decided to make available to all NSP-Sec members an account on our
TC Console system. TC Console is considerably more modern and capable
and is a large upgrade compared to the standard Daily Reports system.

Normally TC Console requires community contribution from its members.
For NSP-Sec subscribers we've waived this requirement.  While we
certainly welcome contributions, the long history of action from this
community is enough of a contribution in our eyes.

We do have a few members of the NSP-Sec community who share data into
the daily reports system as "NSP-Sec only" for distribution.
Unfortunately we're not presently able to accommodate just sharing the
data with TC Console members who are also list members.  This means that
for now that data will not be able to make its way into the reports.  If
you are a source of data with this restriction and are willing to open
the scope of the recipients, please let me know.

The migration to TC Console will be simple.  Users need only sign-up at
the console site and request an account. We'll get people signed up as
quickly as we can. A URL is at the end of this
message[1].

A few details however.

1. You MUST sign-up using the mail account used to subscribe to the list.

2. You must have verifiable authority for the ASN or prefixes you're
requesting.  If you've been pulling data fro networks that are not your
responsibility as a favor, etc, our apologies. We would welcome these
parties to the new system as well.

3. The FORMAT OF THE FEEDS WILL CHANGE.  Daily reports was pipe
delimited. The TC Console system uses a tab delimiter. This is why we're
giving a long runway to get started.

If you have any questions at all, please let me know directly, or reach
out to us at outreach at cymru.com

On behalf of Team Cymru,
-Dave

1. https://www.tcconsole.com/signup.html

-- 
Dave Monnier
Team Cymru
https://www.team-cymru.org/
PGP: https://www.cymru.com/dmonnier/0x7C1AAE55_pub.asc


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 203 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20130214/d4f595a0/attachment-0001.sig>