Re: qwest outage no notice

[virendra rode <virendra.rode () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,



Martin Hannigan wrote:
> On Sat, Jan 9, 2010 at 9:37 AM, Paul Wall <pauldotwall () gmail com> wrote:
>
> > On Thu, Jan 7, 2010 at 5:04 AM, Mike <mike-nanog () tiedyenetworks com>
> > wrote:
> > > We just had a qwest outage of about 2 mins at 1:41am pst. When I called
> > to
> > > report it I was told it was a 200+ emergency software upgrade due to a
> > > security concern, and that we will get a notice later after the fact.
> > That's not a maintenance, that's an outage.
> >
> > I hope everybody impacted on this list is claiming SLA.
> >
> > Drive Slow, much like the M40,
> > Paul Wall
>
>
>
> SLA for what? < 2m of outage time related to an emergency maintenance event?
> I don't think so. Most agreement language covers this kind of event.
- ---------------------
I think it comes down to disclosure policy. I cannot imagine qwest was
the only provider who was hit by this emergency patch upgrade.

I don't think general public is really keen in knowing the exact details
of the vulnerabilities as much as getting some sort of heads up about
emergency maintenance window which IMHO should have been issued.

Given that I'm a staunch believer in openness when it comes down to
outages related to critical infrastructure :-)


regards,
/virendra

> You'll be lucky if you can badger your account team into a free dinner
> and/or some free beer for it.
>
>
> -M<
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFLSVTkpbZvCIJx1bcRAvX2AJsEmwKOBOs9Ynl8VaHTnS0SLP+SlACgykj3
nEmbjBDWmFj6XUI3k7Kv7fw=
=yGz+
-----END PGP SIGNATURE-----