Elektrine lite

← Feed

John Kristoff

jtk@infosec.exchange

<p>UIC PhD candidate | Dataplane.org | Bit mechanic<br /><a href="https://infosec.exchange/tags/BGP" class="mention hashtag" rel="tag">#<span>BGP</span></a> <a href="https://infosec.exchange/tags/DNS" class="mention hashtag" rel="tag">#<span>DNS</span></a> and <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="tag">#<span>infosec</span></a><br /><a href="https://infosec.exchange/tags/Blues" class="mention hashtag" rel="tag">#<span>Blues</span></a> / <a href="https://infosec.exchange/tags/Chicago" class="mention hashtag" rel="tag">#<span>Chicago</span></a> / <a href="https://infosec.exchange/tags/tfr" class="mention hashtag" rel="tag">#<span>tfr</span></a> / <a href="https://infosec.exchange/tags/fedi22" class="mention hashtag" rel="tag">#<span>fedi22</span></a><br

Posts

  • Post #4450117

    Ignoring everything else, seems hard to ignore the latency cost introduced here: &quot;The data center then beams AI results generated by the GPUs to satellites and sends them back to land.&quot; https://www.theinformation.com/articles/ocean-powered-data-center-startup-set-double-valuation-2-billion?rc=9btsxw&amp;shared=eacd621056a6e353

  • Post #4348225

    Probably not for $50,000 (US) https://social.bgp.tools/@transfers/statuses/01KYQ8MMCKXRES2A6D4DQTXRE8

  • Post #4348224

    Gemini is hungry? https://social.bgp.tools/@transfers/statuses/01KYTRDS8BV3ERJN1X4T2FZ1RB

  • Post #4348223

    RE: https://mastodon.social/@botgov/117020920510869661 visas is a state dept name, http-only but no content at the moment

  • Post #4348222

    https://social.bgp.tools/@transfers/statuses/01KZ0QK6GDMX5QNZSP5QV036FX Nothing to do with actual birds, not the router software, not even Larry Legend. This of course: &amp;quot;Communications infrastructure your AI agents operate&amp;quot;

  • Post #4348221

    jackceoai on the latest IP prefix transfer

  • Post #4266382

    Received email spam from newly registered socialdb [dot] xyz. Some kind of escrow racket for wannabe influencers. Looks like if they find an email associated with your Mastodon account you&#39;lll get subscribed to their mailing list. Platform allows you to create an account using an email without verification and set 2fa via Tor. Just saying.

  • Post #4212742

    ObThought: We could use the equivalent of a doi.org for news articles that could help arbitrate / aggregate access with stable links and if necessary payment to sources. A large proportion of articles people link to I try to read are often inaccessible for various reasons such as: * Subscription required * Client access IPaddr is blocked * Any ad-blocking fu

  • Post #4145375

    #DNS root servers on an observed June 2026 traffic increase: &quot;[...] a representative from the AS responded on July 3rd. They confirmed that the traffic originated from their networks (i.e., was not spoofed) and was the uninten4onal result of recent recursive resolver software updates.&quot; https://root-servers.org/media/news/2026-06-29-increase.pdf

  • Post #4075128

    RE: https://infosec.exchange/@dannyjpalmer/116975079605921576 &quot;Disabling web proxy auto-discovery (WPAD) where not required&quot; Why is wpad even still supported by browsers?!? A 30-year-old mechanism, expired I-D almost as old, and the upward namespace traversal nonsense that might be one of the worst uses of the DNS ever devised.

  • Post #4074814

    Weekend Reads * Inside an Internet shutdown https://labs.ripe.net/author/mdkamruzzaman-khan-2/inside-a-shutdown-bgp-evidence-from-an-operator-who-was-there/ * Inferring shared IP addresses https://burdantes.github.io/assets/pdf/multi_user_ip-sigcomm.pdf * BGP origin attribute manipulation https://blog.cloudflare.com/bgp-origin-attribute/ * IP reassembly congestion DoS attacks https://cispa.saarland/group/rossow/papers/FragJam-usenix2026.pdf * Operators on academic BGP security solutions...

  • Post #4046751

    Any #PortlandME fedi people involved with #DNS, #BGP, #infosec, or #blues?

  • Post #3869593

    Weekend Reads * PQC for the RPKI https://labs.ripe.net/author/dirk/pqc-for-the-rpki/ * Big tech in Taiwan https://cset.georgetown.edu/publication/big-tech-in-taiwan/ * China&#39;s Internet Control https://locknet.chinafile.com/the-locknet/intro/ * Smartwatch security and privacy https://arxiv.org/abs/2507.07210 * App-layer desync attack TLS attack https://opossum-attack.com #RPKI #Taiwan #China #AppleWatch #TLS

  • Post #3836012

    Networking numerology

  • Post #3835757

    IPv4.Global is having an auction for #AS8100, which was used by the now defunct hosting provider QuadraNet. Starting bid $50,000 (US). Some, but very very few ASNs should have a greater than standard RIR fee value for vanity reasons or maybe because of who had it (and you expect to get some value out of that historical reputation). 8100 has no special value imo. I&#39;d also go as far to say, anyone bidding in this auction and ultimately paying a premium for this ASN is a fool.

  • Post #3831941

    As far as I can tell, United Airlines doesn&amp;#39;t have any public #IPv6 space. https://aws.amazon.com/blogs/networking-and-content-delivery/how-united-airlines-solved-ip-exhaustion-with-private-nat-gateway/ &amp;quot;United Airlines’ existing infrastructure (AWS routing, monitoring, security policies) is built on IPv4 across hundreds of accounts. However, adopting IPv6 is an organization-wide decision at United Airlines.&amp;quot; Translation &amp;quot;We see nails, we love hammers&amp;qu...

  • Post #3831940

    Weekend Reads * ICMP tunnel bypass in LTE nets https://arxiv.org/abs/2607.04783 * Abuse in the standards process https://sphericalcowconsulting.com/2026/07/07/when-process-stops-protecting-the-work/ * Monitoring DNS registry mutations https://www.sidnlabs.nl/nieuws-en-blogs/thesis-monitoring-dns-registry-mutations-with-an-ensemble-anomaly-detection-framework * Why orbital data centers are hard https://spectrum.ieee.org/orbital-data-centers-heat * OONI&amp;#39;s approach to bad measureme...

  • Post #3812611

    Shares of #IBM have dropped about 25% today. Biggest single day drop ever. A generation ago this would be huge news, but we don&#39;t talk or think about IBM like we used to in the tech industry.

  • Post #3793739

    whois t.me | grep Status | head -5 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited Domain Status: serverHold https://icann.org/epp#serverHold Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

  • Post #3721901

    I&#39;ve noticed access to fsf.org and gnu.org through Tor (e.g., torify, onion browser) is unreliable. As in the connection is often refused. I&#39;m not sure if this is a recent change at the content end, perhaps due to this: https://www.fsf.org/blogs/community/blocking-botnets-with-reaction The number of sites and content nets that are becoming inaccessible via Tor and what I&#39;ve used as &quot;jump&quot; hosts (i.e., my personal proxies) seems to only be increasing. Unless someone beat...

  • Post #3708510

    An edu block to lambda.ai https://social.bgp.tools/@transfers/statuses/01KX52W18SZR1PRDXAPYJANK57

  • Post #3476302

    Small Minneapolis-based #hosting provider MadGenius (#AS55154) is shutting down at the end of July. &quot;[...] we no longer find our hosting services viable to maintain.&quot;

  • Post #2887592

    @campuscodi Huh, none of them realized that C2 is used to refer to botnet command and control in the infosec community?

  • Post #2887591

    &amp;quot;The company has less need for middle managers, operations jobs and other ‘measuring’ positions.&amp;quot; - Matthew Prince, #Cloudflare https://www.wsj.com/opinion/how-i-choose-which-cloudflare-employees-to-replace-with-ai-40a197e5?st=wfuf1k

  • Post #2887590

    RE: https://hachyderm.io/@kernellogger/116617326334612301 This is kind of too bad. The natural decay of things in tech can take a very long time before we can say they are truly gone and are free from us having to support them. Never underestimate the installed base.

  • Post #2887589

    RE: https://infosec.exchange/@greynoise/116619078076146418 The &amp;quot;strongest&amp;quot; list referred to in this article has been effectively unmaintained for about eight years. :-)

  • Post #2887588

    Weekend Reads * Data centers in Utah https://ricci.pckt.blog/datacenters-in-utah-a-photo-essay-gehy55y * Encrypted DNS at OARC 46 https://www.potaroo.net/ispcol/2026-05/adox.html * The Internet runs on names https://arxiv.org/abs/2605.15646 * IP address geolocation accuracy analysis https://arxiv.org/abs/2605.21937 * IETF RFC 9969 - IAB AI-CONTROL workshop report https://www.rfc-editor.org/info/rfc9969/ #DataCenters #Utah #DNS #Geolocation #AI

  • Post #2887587

    RE: https://infosec.exchange/@jtk/115619435589341395 I made a final update to the draft. Read the criticism section for more, but this should tell you all you really need to know: &amp;quot;The author(s) have decided to forgo further work on this document. The ideas expressed herein have been largely deemed unnecessary, redundant, impractical, or undesirable. A Criticism section details this reasoning for posterity&amp;quot; and &amp;quot;The following individuals provided an array of feedba...

  • Post #2157427

    You were too slow. Registered 2026-05-02: kamikazedolphins.com

  • Post #2157426

    BuyVM aka FranTech (#AS53667): &amp;quot;We&amp;#39;ve never raised prices in all the years we&amp;#39;ve operated, and have eaten every data-center &amp;amp; bandwidth provider increase. Most of these have been fairly small, usually pinned to inflation, but over the past 6 months we&amp;#39;ve been hit with &amp;gt;15% hikes from most of our facilities.&amp;quot; Increases vary. On the low end percentage increases are around 25%-50% respectively, and on the higher end in the range of 10%-25%