Weekend Reads * Centrality in the DNS https://www.potaroo.net/ispcol/2026-05/dns-centrality.html * RPKI RP fuzzing analysis https://arxiv.org/abs/2605.26651 * Iran Internet partial restoration https://blog.cloudflare.com/iran-internet-partially-restored-may-2026/ * Enterprise security for the […]

The US OMB recently published a new logging reference architecture M-26-14 replacing 2021's M-21-31. I'm not familiar enough with CISA and the bureaucracy to confidently provide a useful analysis, but the two different memorandums are noticeably different that I'm sure someone with more […]

RE: https://mastodon.social/@botgov/116658532655427272 trumpira, no content, no comment

#hosting provider just.hosting (aka justhost.ru and baxnet #as26383) is abruptly shutting down 10 geographical diverse locations and moving customers to the next nearest location. Upstream connectivity in at least some locations was run through WorkTitans, maybe you've heard of them?

RE: https://infosec.exchange/@jtk/115619435589341395 I made a final update to the draft. Read the criticism section for more, but this should tell you all you really need to know: "The author(s) have decided to forgo further work on this document. The ideas expressed herein have been largely […]

Weekend Reads * Data centers in Utah https://ricci.pckt.blog/datacenters-in-utah-a-photo-essay-gehy55y * Encrypted DNS at OARC 46 https://www.potaroo.net/ispcol/2026-05/adox.html * The Internet runs on names https://arxiv.org/abs/2605.15646 * IP address geolocation accuracy analysis […]

RE: https://infosec.exchange/@greynoise/116619078076146418 The "strongest" list referred to in this article has been effectively unmaintained for about eight years. :-)

RE: https://hachyderm.io/@kernellogger/116617326334612301 This is kind of too bad. The natural decay of things in tech can take a very long time before we can say they are truly gone are free from us having to support them. Never underestimate the installed base.

"The company has less need for middle managers, operations jobs and other ‘measuring’ positions." - Matthew Prince, #cloudflare https://www.wsj.com/opinion/how-i-choose-which-cloudflare-employees-to-replace-with-ai-40a197e5?st=wfuf1k

I'll soon be publishing draft-kristoff-ipv8bis-00, I think a major improvement over draft-thain-ipv8-00 that is EVEN MORE backwards compatible with IPv4. TL;DR Rather than prepending the r.r.r.r bits in the source and destination address fields, I instead tunnel IPv4 in IPv4, which […]

Weekend Reads * Registrar domain name risks https://weis2026.econinfosec.org/wp-content/uploads/sites/13/2026/05/WEIS2026_paper_9.pdf * RIPE legacy address space analysis https://labs.ripe.net/author/qasim-lone/legacy-out-of-contract/ * IAB workshop report on network management […]

RE: https://mastodon.social/@botgov/116573597974685846 nco is an exec office name, specifically the Office of Science and Technology Policy. Unsure what nco stands for, no content on a web page as of now.

When Mastodon Collections are more widely rolled out I'll plan to make at least one. I had created a net/sec ops/rd list a few years ago. It is out of date. Obviously and sadly so when you see who was the first to add themself to the list after me. Feel free to add yourself to the original […]

Even critics of network infrastructure availability and services (connectivity, routing, naming, security extensions) must admit things could be a lot worse. They could look like this.

Every so often ideas come along that are sufficiently deserving of ridicule and derision, this is one of those times: https://www.gofundme.com/f/help-build-ipv8-the-next-generation-of-the-internet

RE: https://mastodon.social/@hughsie/116560947943486651 Linux firmware update manager (fwupd) developer/maintainer:

Instructure paid

Weekend Reads * Rolling the DNS root key https://www.potaroo.net/ispcol/2026-05/kskroll.html * Measuring Internet censorship https://ooni.org/post/2026-measuring-internet-censorship-trends-challenges-impact/ * How an HTTP header caused time.gov skew https://alexsci.com/blog/how-time-gov-works/ […]

Canvas by Instructure, used by so many edus: May 6: Confirmed Security Incident, Resolved. May 7: Canvas, Canvas Beta and Canvas Test are under maintenance. Uh huh. Meanwhile, I've seen more activity in edu-sec circles on this issue than any other security-related incident in quite some time […]

RE: https://mastodon.social/@botgov/116528299512372407 exec office passport(s) names, no content yet

BuyVM aka FranTech (#53667): "We've never raised prices in all the years we've operated, and have eaten every data-center & bandwidth provider increase. Most of these have been fairly small, usually pinned to inflation, but over the past 6 months we've been hit with >15% hikes from most of our […]

You were too slow. Registered 2026-05-02: kamikazedolphins.com

"In early May, a standard Overleaf AI allowance will be added to your plan at no extra cost." What bubble?

RE: https://mastodon.social/@botgov/116505650244828263 getactive is an exec human and health services name, no web content as of now

Weekend Reads * How crazy is .internal/DOT https://ant.isi.edu/~hardaker/papers/2026-04-27-analyzing-dot-internal-to-dot.pdf * RIPE NCC RPKI exploit chain https://mxsasha.eu/posts/ripe-ncc-rpki-exploit-chain/ * Bellovin book: Don't get hacked https://www.cs.columbia.edu/~smb/homesec/index.html […]

RE: https://mastodon.social/@botgov/116499987941794466 moms.gov, exec name in dept of human and health services. no content, unsure what specifically this is

New book, released under a Creative Commons BY-NC-ND license: "Don't Get Hacked! Protecting Yourself at Home": https://www.cs.columbia.edu/~smb/homesec/index.html Retoot for reach!

If you can conjure fond memories of Commander Keen, .arj files, nc (one of my favorite utils), shareware like SCAN108.ZIP (yea, probably in caps)... you probably spent a fair bit of time at the C:\> prompt when you weren't dialed into your favorite BBS. And like me, you're getting old :-) […]

RE: https://infosec.exchange/@mnordhoff/116490480726800594 This is kind of a big deal for DNSSEC, one of the lagging places of zone signing in the name space has been in the popular (i.e., high Tranco ranking) content providers.

The Internet Protocol Journal, Volume 29, Number 1, May 2026 https://ipj.dreamhosters.com/wp-content/uploads/2026/04/291-ipj.pdf

I was curious what the last 24-hour output of @newyorktimes and @WashPost was. I looked at a count of toots and the affiliated section (i.e., "Posted into ..."). It is not an apple-to-apples comparison, but I think I can get close enough to say something mildly useful. Note, some items may be […]

There was an incident at the WHite House Correspondents Dinner. Initial reports there was a shooter. Check your favorite, trusted news sources for more.

RE: https://mastodon.social/@botgov/116466014134838527 I had to check. And relieved to learn mma.gov is only the Marine Minerals Administration (dept of interior) which you may not like much but at least it's not that other thing.

RE: https://hachyderm.io/@kernellogger/116464202767045311 Old networking people will undoubtedly have some nostalgia for 3c509. It is hard to overstate how popular and prevalent these NICs were.

Weekend Reads * DDoS scrubbing in BGP https://labs.ripe.net/author/shyam-krishna-khadka/understanding-ddos-scrubbing-in-bgp-five-leading-scrubbers/ * Revocation of X.509 certs https://blog.apnic.net/2026/04/24/revocation-of-x-509-certificates/ * Mobile telecom surveillance actors […]

Small US-based dedicated server provider Reprise #hosting (#AS62838): "[...] we were informed by our datacenter that our rates will be increasing by nearly 8 percent. This massive, unexpected price hike comes directly on the heels of another major increase we weathered just one year ago […]

Pro hacker tip, if you really don't want bash to record your shell history, do a kill -9 $$ not this: # tail .bash_history echo "" > term.log cd .. ls cd ~ echo "" > .bash_history ls -flah clear ls -flah echo "" > .bash_history shutdown -h now Silly h4x0r

noc.social appears to be having some "issues" right now (login/access), admin contacted in and out-of-band. Hopefully a minor issue easily remedied.

Some #cloudflare status reporting appears to have gotten stuck in a loop last week. e.g., https://www.cloudflarestatus.com/incidents/rw60tbgxvl52 https://www.cloudflarestatus.com/incidents/dg6yztfhbkr9 https://www.cloudflarestatus.com/incidents/klkhz960llyf […]

RE: https://infosec.exchange/@jtk/115389755115510504 I forgot I made this poll almost exactly six months prior, and team v8 won, hah.

RE: https://infosec.exchange/@jtk/116421586624634345 Misinformation (along with disinfo and propaganda) exist not just in the geopolitical space. It crops up regularly in tech communities as well. Push back on it. If you are at all annoyed by yet another IP version me-me-me proposal, you can […]

Weekend Reads * Why is IPv6 so complicated? https://github.com/becarpenter/misc/blob/main/why6why.md * The historical mandate of RIRs https://circleid.com/posts/the-historical-mandate-of-the-rir-system * Email subscription bombing […]

RE: https://mastodon.social/@campuscodi/116416012453837399 *sad face*

Friends, I need to go out on a limb here, that IPv8 thing getting passed around way too much... this is not a design you should take seriously. I don't think it shouldn't take reading past the abstract to feel that way, but if you kept going to the part that says:: r.r.r.r -- 32-bit ASN […]

Van Jacobson, Multimedia Conferencing on the Internet, SIGCOMM '94 tutorial, London England I didn't attend and I don't remember where I got this. It is the ~75-page hard copy, spiral bound tutorial slide material. Contains quips, diagrams, formulas, and […] [Original post on infosec.exchange]

#bluesky right now "We are investigating an incident with service in one of our reginos" It's always regino

As part of my #networkscience work in my masters degree program, I have been thinking about how to do some analysis on Fediverse data. I was so impressed to see that there is a data set, #fedidata, with anonymised data from the Fediverse. https://dl.acm.org/doi/10.1145/3746252.3761634

RE: https://mastodon.social/@botgov/116409390962816405 nasaforce is an exec office name, nothing there yet, but maybe it will eventually be this: https://www.nasa.gov/careers/nasaforce/ ?

RE: https://mastodon.social/@botgov/116403728665224748 techprosperity is an initiative of the Peace Corps

Oneprovider (#136258), a Canadian-based #hosting provider is increasing dedicated server prices ordered before 2026-11-01 by 5%. "Ongoing increases in infrastructure costs, including hardware such as RAM and CPUs, as well as energy prices and data center capacity constraints, have significantly […]