@pgl@infosec.exchange

Peter Lowe @pgl@infosec.exchange · 4d ago

Er, EXCUSE ME @BBCNews@flipboard.com but SPOILER!

0

Peter Lowe @pgl@infosec.exchange · 4d ago

I've seen so many "discovery" mechanisms proposed for DNS lately. In general I think these methods are great -- AI agent discovery (_agent), AI agent capabilities and trust (_atn), designated DNS resolver discovery (_dns), "for sale" (_for-sale) -- but it's getting pretty crowded in the underscore namespace! I'm genuinely tempted to write up a new draft for discovery of discovery records.

0

Peter Lowe @pgl@infosec.exchange · Aug 07, 2026

Weekly block list report: 3,539 entries; 3,517 valid / 22 invalid; 0 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport List URL: https://pgl.yoyo.org/as/serverlist.php

pgl.yoyo.org

Blocklist of hostnames and domains for blocking ads, trackers and others (format: hosts -- in hosts

3

0

1

0

Peter Lowe @pgl@infosec.exchange · Jul 31, 2026

Weekly block list report: 3,538 entries; 3,513 valid / 25 invalid; 4 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport

List URL: https://pgl.yoyo.org/as/serverlist.php

1

0

1

0

Peter Lowe @pgl@infosec.exchange · Jul 24, 2026

Weekly block list report: 3,540 entries; 3,512 valid / 28 invalid; 3 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport

List URL: https://pgl.yoyo.org/as/serverlist.php

2

0

1

0

Peter Lowe @pgl@infosec.exchange · Jul 17, 2026

Weekly block list report: 3,542 entries; 3,517 valid / 25 invalid; 3 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport List URL: https://pgl.yoyo.org/as/serverlist.php

1

0

Peter Lowe @pgl@infosec.exchange · Jul 16, 2026

The FIRST DNS Abuse SIG will soon be working on some tools for detecting DNS abuse, and we'll need some datasets to verify them. Do you have a dataset which we could use? Query logs, netflow data, attack signatures, anything that we'd be able to point a tool at, and it verify an abuse type - would be super useful. Get in touch if you think you might be able to help!

2

0

4

0

Peter Lowe @pgl@infosec.exchange · Jul 10, 2026

Weekly block list report: 3,536 entries; 3,518 valid / 18 invalid; 1 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport List URL: https://pgl.yoyo.org/as/serverlist.php

3

0

Peter Lowe @pgl@infosec.exchange · Jul 06, 2026

The @firstdotorg@infosec.exchange #DNS Abuse SIG needs YOU! Even if you're not a member of FIRST. We have members from all over the DNS industry, from all over the world, and we're looking for members of the DNS security community with an operational background to grow the group. For one reason or another meetings are sometimes a little light on attendees, which is a shame because we're doing some really interesting work. And there's the potential for doing even more cool stuff. We have biweekly meetings every other Thursday at 21:00 JST (12:00 BST, 07:00 ET) which are friendly, informal, comfortably unstructured Zoom calls where we discuss ongoing work and general DNS topics. There's also a mailing list (which is very low-traffic) and a Slack channel (where most communication happens). Currently we're working on adjustments to the DNS Abuse Techniques Matrix - changes to the work we've already done - and welcome insight from stakeholders on the topic of DNS abuse, its classification, and how it can be detected, mitigated, and prevented. We also cover adjacent topics, like tooling, use of AI for the website and data, and how best to make it all work. You don't have to know everything - it's fine if you know one thing that everyone else doesn't. Or can ask a question that nobody else thought of. To explain the process: applications from people outside of FIRST don't need sponsorship or anything, but they are sent to the group first. If there are no objections after a short time, then your application will be accepted. If not, then we'll explain why. And if you're already in FIRST, then your application is just a formality and we invite you straight away. "My DMs are open" - message me if you'd like any more info! It's slow season right now so a perfect time to get on board. Apply to join, and find out more, from our homepage on the FIRST website: https://www.first.org/global/sigs/dns/

7

1

10

0

Peter Lowe @pgl@infosec.exchange · Jul 03, 2026

Replying to @scottwilson@infosec.exchange

@scottwilson@infosec.exchange Thanks Scott!

1

0

Peter Lowe @pgl@infosec.exchange · Jul 03, 2026

Weekly block list report: 3,535 entries; 3,512 valid / 23 invalid; 2 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport List URL: https://pgl.yoyo.org/as/serverlist.php

2

0

Peter Lowe @pgl@infosec.exchange · Jun 29, 2026

On defining exactly what a "vulnerability" actually is: https://research.empiricalsecurity.com/research/the-vulnerability-identity-crisis Really interesting discussion and proposals on how to define a "vulnerability" by @jayjacobs@infosec.exchange

16

6

9

2

Peter Lowe @pgl@infosec.exchange · Jun 26, 2026

The gold standard of privacy in DNS

7

0

1

0

Peter Lowe @pgl@infosec.exchange · Jun 26, 2026

Weekly block list report: 3,527 entries; 3,505 valid / 22 invalid; 3 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport

List URL: https://pgl.yoyo.org/as/serverlist.php

1

0

2

0

Peter Lowe @pgl@infosec.exchange · Jun 20, 2026

Our Domain Intelligence threat feed now has over 70,000 domains in it, linked malware families, and can see how active each one is thanks to being a @quad9dns@mastodon.social threat data partner. It's come a long way in a few months! We've also signed up to the Global Signal Exchange and are pushing enriched data daily.

One of the neat things we've put together is a proper portal with your usual statistics. It's so cool to be able to see a malware family that's started to become active after being dormant for a while, or notice when a particular botnet has gone bonkers.

My benchmark has always been, would I have found value in this threat intelligence feed when I was evaluating them as a job, and the answer so far is: yes.

We've also set up an RPZ server, so let me know if you'd like to use it for personal purposes.

I really, really have to fix the website - but it's here for anyone curious: https://domainintelligence.uk/

20

0

3

0

Peter Lowe @pgl@infosec.exchange · Jun 20, 2026

RE: @firstdotorg@infosec.exchange

I wish I'd been there!

2

1

0

Peter Lowe @pgl@infosec.exchange · Apr 24, 2026

Weekly block list report: 3,544 entries; 3,504 valid / 40 invalid; 3 deleted #ads #adblocking #blocklist #trackers #pglblocklistreport

List URL: https://pgl.yoyo.org/as/serverlist.php

2

0

2

0

Peter Lowe @pgl@infosec.exchange · Feb 25, 2026

I've never been to Canada and don't own a car. There is absolutely no reason the Canadian Tire company should have any of my data. But I'm still part of their data breach.

This is such a good example of why privacy is important: because your data is sold, and resold, and resold, to third party companies that are all potential victims.

60

8

64

1

Peter Lowe

Posts

Blocklist of hostnames and domains for blocking ads, trackers and others (format: hosts -- in hosts

Remote instance

Media