I am seeing an increasing trend where developers of software I have purchased licenses for resurface after a long time, switch to a subscription model, release an update or two, and then disappear again. Dear developer: I am fine with subscription model when it makes sense, but if you know you […]

RE: https://hachyderm.io/@robpike/115562015376977157 Dear $SEARCH_ENGINE:

Apple has just introduced a mankini for iPhone for 229$. And it does not even have a more expensive Pro model? Dang. How do I show off then?

Scientists have discovered that it is possible to just do something, without making a podcast about it

Updated my opinionated "Securing SSH Server Configuration" guide. There are some recommendation that you may find useful: https://farrokhi.net/posts/2025/11/securing-ssh-server-configuration-in-2025/

Weekend Reads * EDNS client subnet in practice https://farrokhi.net/posts/2025/10/edns-client-subnet-in-practice-evaluating-public-resolver-behaviors/ * BGP-based DDoS scrubbing services survey https://ris.utwente.nl/ws/portalfiles/portal/507287576/BGP_based_scrubbing_services.pdf * Circuit […]

If Apple were serious about QA and product quality, there would be many heads rolling in their hallways right now.

Something that started as a small curiosity and weekend project turned into a long article with several surprises for myself (including how bad I am at time estimates). I went down quite a few rabbit holes along the way. EDNS Client Subnet in Practice: Evaluating Public Resolver Behaviors […]

Which cloud service is down _today_? My washing machine stopped working this morning 😎

Pleasant surprise to see Niall O’Reilly (@niallor) here on Mastodon. Many of you from the RIPE and Internet ops community will certainly know him already. Welcome aboard! I’m sure you’ll have plenty of followers in no time!

Funny story: I built a Dockerfile and image for dnsdiag years ago, as a joke. Turns out people actually use it (why??), so now it’s part of the release workflow. https://hub.docker.com/r/farrokhi/dnsdiag

Released dnsdiag v2.9.0 :dns: New in this release: • `dnstraceroute`: NSID support for tracing anycast DNS instances • `dnseval`: DNS over QUIC (DoQ) and HTTP/3 (DoH3) • Improved error handling and validation • Modern packaging with PEP 639 compliance • Tons of Quality of Life improvement […]

After a month of traveling, events, and catching up with friends and colleagues, I finally made it home. The only progress I can report is that my unread emails and backlog have multiplied.

I smell circular dependency... https://mastodon.rfc1925.org/@ondrej/115406008529572272

Have you noticed that when the blame #dns meme starts flying the root is perfectly operational, there is rarely a mention of the big registry operators, BIND, Unbound, Knot, and PowerDNS are absent the conversation, and many who can craft a reasonable dig query are getting responses from local […]

Hello, Bucharest! ​🇷🇴 #ripe91

Returning home (🇸🇪 → 🇳🇱) after DNS-OARC 45 and the Netnod Tech Meeting with two more conference badges and t-shirts, wonderful memories, and stronger friendships. Grateful for everyone’s friendship, knowledge sharing, and openness. Until next time! #oarc45 #lovedns

DNSDiag 2.8.1 is now available with DNS Cookie support, EDNS Client Subnet testing, automatic Extended DNS Error display, and DNS over QUIC/HTTP3 tracing. This was also the perfect opportunity to fix the known bugs and make some quality of life improvements […]

Heading to OARC in a few weeks? Join one of the table topics! I’ll be moderating an ADoT/ADoQ Adoption discussion among several other interesting choices. https://mastodns.net/@dnsoarc/115264999087793934 #dns #lovedns

Running some experiments on public DNS resolvers to see how they handle ECS. Surprise: resolvers aren’t all created equal! I will share my findings soon.

🚀 DNSDiag 2.7.0 is out! ✅ Support for DNS over HTTP/3 (DoH3) ✅ Improved support for DoQ ✅ Improved DoQ & DoH3 error handling ✅ Cleaner display of RTT, flags & EDE info 🔗 Release notes: https://github.com/farrokhi/dnsdiag/releases/tag/v2.7.0

DNS-OARC 45 in Stockholm is just a few weeks away! 🇸🇪 Looking forward to seeing many of you there — let’s catch up and hang out! https://indico.dns-oarc.net/event/55/ #dns #lovedns #oarc45

What is the idea behind research papers not having a date stamp? Is it because publication date is irrelevant? Asking because I check for the date very often and it is usually not easy to find it anywhere.

Alibaba Cloud reveals some details on how they use eBPF, shared SmartNICs, and smart scheduling to improved reliability and cut costs https://www.theregister.com/2025/09/02/alibaba_cloud_reveals_its_uptime/

GitHub CEO says "Embrace AI or leave the profession", just a week before he left the profession? https://www.businessinsider.com/github-ceo-developers-embrace-ai-or-get-out-2025-8?international=true&r=US&IR=T

Internet was built to be decentralized. Instead, we handed CDNs, DNS, Email, Search, Package Management, and Code Repos to a few giants. And turns out most people are fine with it. This isn’t an accident. It’s supply and demand. https://me.dm/@anildash/115011879301970616

Asked ChatGPT about GPT-5 earlier today, and this is what I've got:

One person almost single handedly is trying to make internet a better place. https://mastodon.social/@mjtsai/114983397834787020

If you were wondering why VMware Workstation/Fusion stopped automatic updates, you have to jump through many hoops to get the update (logging in to the portal, clicking on many links, accepting nonsense TOC, swearing, clicking on more things, etc.) - I have an answer for you, and the answer is […]

@DNSresolver softwareupdate.broadcom.com

Let’s Encrypt to issue short lived certificates for IP addresses later this year: https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/

Just registered for IETF 123 in Madrid. I will be participating remotely this time.

I use mu4e/emacs (https://www.djcbsoftware.nl/code/mu/mu4e.html) as my primary email client and Mailmate as my secondary, when I need a GUI client. However, I recently decided to drop Mailmate. It's a fantastic software, and I don't mind paying for the recently introduced subscription model […]

I stopped using em-dash a while back when I realized it makes my writings look like LLM generated. https://godforsaken.website/@hazel/114771774866635191

Seems like ChatGPU is down. So people will write high quality code today.

Pocket was the last reason I needed to drop Firefox. I never liked the forceful nature of its presence in Firefox. Mozilla re-enabled it with every single update, like they did with their Telemetry. Well, they got rid of it anyway, but it will not help with building trust with their remaining […]

This is why Engineers should not be Designers too. Let’s keep these roles separate. https://vmst.io/@jalefkowit/114597177875431505

People are usually very surprised when I tell them how much of the world runs on Linux kernel, cURL and tmux.

Encrypted DNS (well, DoT) as part of RHEL and Fedora. They chose #unbound as the layer between stub and upstream resolver to encrypt DNS traffic, including very early stages of boot as well as initial installation. https://lwn.net/Articles/1021357/

A memory safe implementation of Unix `yes` command in Rust. Only ~1300 lines of code (vs 50 line of C). You are welcome. https://github.com/jedisct1/yes-rs

Is Your Linux Version Hiding Interrupt CPU Usage From You? https://tanelpoder.com/posts/linux-hiding-interrupt-cpu-usage/ And you should really care about this, especially when running high-throughput / low-latency applications on baremetal.

I am back online after 23 days. Self-hosting is hard. My personal server was down for 23 days (double disk failure is a hot data center), and it took me a very long time to recover it whenever I had time after $JOB and between travels. I lost some data and a lot of time. But IT IS WORTH IT! I […]

First, they shoot themselves in the foot, and then a few months later, they do damage control. Something tells me this is too late, and if people have switched to the alternatives, it is unlikely that they will return. But we will see. https://fedi.lwn.net/@lwn/114433830266671114

A while back, I asked a friend why he didn't use a Protective #dns resolver to block some cyber threats on the DNS level. He said he did not need protection because he "ran Linux on his laptop." And this comes from a reasonably smart and experienced person, so I decided not to challenge him […]

I have a UniFi gateway at home with Ad Blocking via DNS blocklists enabled. And it sends my DNS queries to a Pi-hole (an extra layer of protection never hurts). Now my top blocked names in Pi-Hole are UniFi built-in trackers :dns:

I just realized why I don't get along with Fedora Linux: I cannot type `dnf`. I mean, I can, but after typing `dns` and correct it a couple of times. Annoying.

Apple usually releases updates on Monday for good reasons. It is unusual to release a patch on Wednesday, before holidays, so this should be an important one.

OTD 1989: #sunmicrosystems announces the SPARCstation 1. Datasheet: https://www.1000bit.it/js/web/viewer.html?file=%2Fad%2Fbro%2Fsun%2Fsparc%2Fsparcstation1%2Epdf#zoom=page-fit Purple feet!

You think it is just a meme, until the day you realize it’s you! 😂 https://fosstodon.org/@binaryphile/114201614793326151

Turns out that our strategy of building armies of AWS/GCP/Azure Engineers (YAML Engineers) and eliminating real engineers who understood what is going on under all those abstraction layers has backfired badly. Who would have seen that coming?