John Kristoff
jtk@infosec.exchange
<p>UIC PhD candidate | Dataplane.org | Verisign<br /><a href="https://infosec.exchange/tags/BGP" class="mention hashtag" rel="tag">#<span>BGP</span></a> <a href="https://infosec.exchange/tags/DNS" class="mention hashtag" rel="tag">#<span>DNS</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="tag">#<span>infosec</span></a> and bit mechanic<br /><a href="https://infosec.exchange/tags/Blues" class="mention hashtag" rel="tag">#<span>Blues</span></a> / <a href="https://infosec.exchange/tags/Chicago" class="mention hashtag" rel="tag">#<span>Chicago</span></a> / <a href="https://infosec.exchange/tags/tfr" class="mention hashtag" rel="tag">#<span>tfr</span></a> / <a href="https://infosec.exchange/tags/fedi22" class="mention hashtag" rel="tag">#<span>fedi22</spa
Posts
-
View post
This content is associated with an intro CS course by some renowed and well-known academics, but there is at least one kind of serious mistake therein, can you spot it? https://textbook.cs161.org/network/dnssec.html
-
View post
Weekend Reads * File notification attacks https://inoti.fyi * IP geolocation at APNIC 62 https://blog.apnic.net/2026/09/24/ip-geolocation-at-apnic-62-challenges-geofeeds-and-data-quality-perspectives/ * Russian MAX Messenger analysis https://interseclab.org/research/max/ * SubTel Forum Issue #150 https://issuu.com/subtelforum/docs/subtel_forum_issue_150_-_offshore_energy * What it's like to work in data centers https://www.wsj.com/business/what-its-like-to-work-in-one-of...
-
View post
RE: https://mastodon.social/@botgov/117322742497839711 app.gov leads to a whitehouse page for a new whitehouse mobile app, looking forward to the sure to be forthcoming app analysis
-
View post
This is the first time I'm aware of since Russia's invasion into Ukraine in 2022 that this data center was disrupted due to hostilities: "We are writing to inform you that our data center in Kyiv has been damaged in a drone attack. As a result, all cloud services hosted from this facility are currently unreachable." - oneprovider
-
View post
The Internet Last Week * Central Asia regional connectivity https://labs.ripe.net/author/anastasiya-pak/capif-5-regional-interconnectivity-in-central-asia/ * DNSSEC-anchored stateless encrypted auth DNS https://arxiv.org/abs/2609.14210 * Router compromise walk-through https://blog.j2sw.com/netops/mikrotik-router-compromise-forensic-walkthrough/ * Russia changed domain name registration rules https://riposte.levelflow.org/2026/09/rururu/ * Weaponizing digital choke points htt...
-
View post
I don't suppose anyone within viewing distance has a way to inform news.ycombinator.com (aka Hacker News) that their associated #IPv6 AAAA DNS RR (2606:7100:1:67::26) appears to be unreachable?
-
View post
Ignoring everything else, seems hard to ignore the latency cost introduced here: "The data center then beams AI results generated by the GPUs to satellites and sends them back to land." https://www.theinformation.com/articles/ocean-powered-data-center-startup-set-double-valuation-2-billion?rc=9btsxw&shared=eacd621056a6e353
-
View post
Probably not for $50,000 (US) https://social.bgp.tools/@transfers/statuses/01KYQ8MMCKXRES2A6D4DQTXRE8
-
View post
Gemini is hungry? https://social.bgp.tools/@transfers/statuses/01KYTRDS8BV3ERJN1X4T2FZ1RB
-
View post
RE: https://mastodon.social/@botgov/117020920510869661 visas is a state dept name, http-only but no content at the moment
-
View post
https://social.bgp.tools/@transfers/statuses/01KZ0QK6GDMX5QNZSP5QV036FX Nothing to do with actual birds, not the router software, not even Larry Legend. This of course: &quot;Communications infrastructure your AI agents operate&quot;
-
View post
jackceoai on the latest IP prefix transfer
-
View post
Received email spam from newly registered socialdb [dot] xyz. Some kind of escrow racket for wannabe influencers. Looks like if they find an email associated with your Mastodon account you'lll get subscribed to their mailing list. Platform allows you to create an account using an email without verification and set 2fa via Tor. Just saying.
-
View post
ObThought: We could use the equivalent of a doi.org for news articles that could help arbitrate / aggregate access with stable links and if necessary payment to sources. A large proportion of articles people link to I try to read are often inaccessible for various reasons such as: * Subscription required * Client access IPaddr is blocked * Any ad-blocking fu
-
View post
#DNS root servers on an observed June 2026 traffic increase: "[...] a representative from the AS responded on July 3rd. They confirmed that the traffic originated from their networks (i.e., was not spoofed) and was the uninten4onal result of recent recursive resolver software updates." https://root-servers.org/media/news/2026-06-29-increase.pdf
-
View post
RE: https://infosec.exchange/@dannyjpalmer/116975079605921576 "Disabling web proxy auto-discovery (WPAD) where not required" Why is wpad even still supported by browsers?!? A 30-year-old mechanism, expired I-D almost as old, and the upward namespace traversal nonsense that might be one of the worst uses of the DNS ever devised.
-
View post
Weekend Reads * Inside an Internet shutdown https://labs.ripe.net/author/mdkamruzzaman-khan-2/inside-a-shutdown-bgp-evidence-from-an-operator-who-was-there/ * Inferring shared IP addresses https://burdantes.github.io/assets/pdf/multi_user_ip-sigcomm.pdf * BGP origin attribute manipulation https://blog.cloudflare.com/bgp-origin-attribute/ * IP reassembly congestion DoS attacks https://cispa.saarland/group/rossow/papers/FragJam-usenix2026.pdf * Operators on academic BGP security solutions...
-
View post
Any #PortlandME fedi people involved with #DNS, #BGP, #infosec, or #blues?
-
View post
Weekend Reads * PQC for the RPKI https://labs.ripe.net/author/dirk/pqc-for-the-rpki/ * Big tech in Taiwan https://cset.georgetown.edu/publication/big-tech-in-taiwan/ * China's Internet Control https://locknet.chinafile.com/the-locknet/intro/ * Smartwatch security and privacy https://arxiv.org/abs/2507.07210 * App-layer desync attack TLS attack https://opossum-attack.com #RPKI #Taiwan #China #AppleWatch #TLS
-
View post
Networking numerology
-
View post
IPv4.Global is having an auction for #AS8100, which was used by the now defunct hosting provider QuadraNet. Starting bid $50,000 (US). Some, but very very few ASNs should have a greater than standard RIR fee value for vanity reasons or maybe because of who had it (and you expect to get some value out of that historical reputation). 8100 has no special value imo. I'd also go as far to say, anyone bidding in this auction and ultimately paying a premium for this ASN is a fool.
-
View post
As far as I can tell, United Airlines doesn&#39;t have any public #IPv6 space. https://aws.amazon.com/blogs/networking-and-content-delivery/how-united-airlines-solved-ip-exhaustion-with-private-nat-gateway/ &quot;United Airlines’ existing infrastructure (AWS routing, monitoring, security policies) is built on IPv4 across hundreds of accounts. However, adopting IPv6 is an organization-wide decision at United Airlines.&quot; Translation &quot;We see nails, we love hammers&qu...
-
View post
Weekend Reads * ICMP tunnel bypass in LTE nets https://arxiv.org/abs/2607.04783 * Abuse in the standards process https://sphericalcowconsulting.com/2026/07/07/when-process-stops-protecting-the-work/ * Monitoring DNS registry mutations https://www.sidnlabs.nl/nieuws-en-blogs/thesis-monitoring-dns-registry-mutations-with-an-ensemble-anomaly-detection-framework * Why orbital data centers are hard https://spectrum.ieee.org/orbital-data-centers-heat * OONI&#39;s approach to bad measureme...
-
View post
Shares of #IBM have dropped about 25% today. Biggest single day drop ever. A generation ago this would be huge news, but we don't talk or think about IBM like we used to in the tech industry.
-
View post
whois t.me | grep Status | head -5 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited Domain Status: serverHold https://icann.org/epp#serverHold Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
-
View post
I've noticed access to fsf.org and gnu.org through Tor (e.g., torify, onion browser) is unreliable. As in the connection is often refused. I'm not sure if this is a recent change at the content end, perhaps due to this: https://www.fsf.org/blogs/community/blocking-botnets-with-reaction The number of sites and content nets that are becoming inaccessible via Tor and what I've used as "jump" hosts (i.e., my personal proxies) seems to only be increasing. Unless someone beat...
-
View post
An edu block to lambda.ai https://social.bgp.tools/@transfers/statuses/01KX52W18SZR1PRDXAPYJANK57
-
View post
Small Minneapolis-based #hosting provider MadGenius (#AS55154) is shutting down at the end of July. "[...] we no longer find our hosting services viable to maintain."
-
View post
@campuscodi Huh, none of them realized that C2 is used to refer to botnet command and control in the infosec community?
-
View post
&quot;The company has less need for middle managers, operations jobs and other ‘measuring’ positions.&quot; - Matthew Prince, #Cloudflare https://www.wsj.com/opinion/how-i-choose-which-cloudflare-employees-to-replace-with-ai-40a197e5?st=wfuf1k