Discontinuing Support for ISC Alert Task Bar Icon

Published: 2014-05-22
Last Updated: 2014-05-22 13:20:49 UTC
by Johannes Ullrich (Version: 1)
10 comment(s)

Many years ago, when the internet was still a different place before Twitter, RSS and browser notifications, Tom Liston was kind enough to write a very compact task bar application displaying the current "Incocon". The application, also known as "blinky globe thing", was mostly known for its impeccable implementation of the color orange. 

However, the application uses a non-standard RSS feed, and does not speak SSL. We recently changed our site to SSL only, breaking the current "blinky globe" to only show blue. Also, there are now a number of other more standard ways to receive notifications about infocon changes. As a result, I decided to stop supporting "ISCAlert". If you still use it, please uninstall it. 

For alternatives, please see our notification system: https://isc.sans.edu/notify.html . We currently offer "SMS compatible" e-mail notifications and will soon have browser notifications (part of this is already live). We do also have a number of RSS feeds, simple text feeds (e.g.. https://isc.sans.edu/infocon.txt ) and Twitter to notify you of impeding doom.

For more about the Infocon, see https://isc.sans.edu/infocon.html

Johannes B. Ullrich, Ph.D.
SANS Technology Institute

Keywords: infocon iscalert
10 comment(s)


How come a friend of mine has got the ISCAlert app and it's still working then?
If twitter has really obsoleted real-time monitoring dashboards.... then perhaps it is time to just go ahead and retire InfoCon as a 'single' alert level completely?

Replace some magnitude counters on a scale to 1 to 10 of the severity of current outbreaks or extraordinary threats in the most important categories, such as

Scanning activity, Phishing, Spamming, DDoS
Thinking about a numerical indicator of "badness". The Infocon hasn't really been much of a "state of the internet" indicator, but more of a "call to action" if there is current change.

We still offer various forms of the Infocon for dashboards.
and if it still works: no need to turn it off :) We will just no longer "fix" things if it breaks. Most notably the https only requirement.
he broke my mood globe. RIP Infocon Task Bar Icon With condolences from Root Boy Slim
Strangeness. I subscribed to headlines and infocon. On clicking the confirmation links, the former reports failure and the latter, success. Thoughts?
Man...I guess this is just another piece of technological history to show I'm getting older. I have the infocon status on my website, but on my Windows VM, I always loved ISCAlert. I guess it's time to say, "goodbye." May I have a few minutes before unlinking the exe?
It is still green! So I guess we can leave it on? This doesn't cause unwanted traffic does it? I would imagine it will break the next time Infocon changes?
Once again, something is obsolete. I like I have time to check RSS feeds. All I had to do was look at the globe, and, when time permitted, I checked the ISC main page. Of course, I always checked it when it went yellow.

In the name of security, we lose something to make things more secure disappear.

At least we have a few other options for Infocon monitoring remaining, for instance the Infocon Watcher Firefox add-on I wrote (yes, that is shameless self-promotion :-P). See https://isc.sans.edu/infocon.html#apps_and_widgets

Diary Archives