mastodon 4.8.0-alpha.3+glitchPassionate about networking protocols, the Internet, how to measure it and big data. Overall a curious mind and problem solver.
Interests & profession: #bigdata #dns #bgp #ddos #dataengineering #infosec #threatintel
Today, I discovered by accident that my #ISP that is exclusively active in #Germany doesn't have a direct peering link to #DTAG. While #BGPTools aggregation graph can be trusted, I tracerouted a few connections to some known DTAG services. My packets always route over #Zayo.
For me, it was a surprise to discover that my ISP with over 300 /24 IPv4 networks, doesn't have a direct peering agreement with the largest German network.
Found out about a project with millions of randomly generated links. The author explained how #Facebook's scraping bot hit it's page 38 million times. All while the company itself claims that their bot only crawls pages that are shared on their platforms.
Why is there so much dishonesty in some hyperscaling tech companies?
Other crawlers are also listed in a short write-up by the author.
A discussion on Reddit revealed an interesting observation in the #DNS landscape: The #TLD of #Yemen is under the control of the #Houthis, instead of the official Yemeni government.
According to the author, the fall of San'a in 2015 also put the registrar #YemenNet into the hands of the Houthis.
Comments mention how the government fails to get the control over it back, and that they registered various "alternative" domain names for their official representations. More input in the comment section
As a big fan of #Polars when doing #ETL pipelines, and processing #data, I am happy to see them having their distributed engine available for #Kubernetes deployments.
Read the blog post here:
https://pola.rs/posts/polars-distributed-available-on-kubernetes/
This is great, thanks @ooni@mastodon.social !
From The Twelve Networking Truths, RFC1925, 2.3: "With sufficient thrust, pigs fly just fine."
Is anyone aware of an alternative to crt.sh ? I really like the website, and it's simple visualization. No bloat around it, just the pure purpose of providing insights from CT logs.
However, the website quite often returns server errors, and others. More often than it did in the past, a few years ago. My hope is, to find a similarly informative tool that is however a bit more reliable.
I dislike it if I have to put down a note to re-check a domain's certificate history and to remember just because the service was down by the time I was interested in the information.
#certificates #tls #ssl #certificatetransparency #logs #bigdata #https
Is there any reason, why curl lists an example in their --header section as follows:
curl -H "User-Agent: yes-please/2000" https://example.com
Is there someone a #Jazz fan, or is it some other kind of a pun? 🤔
Fancy, the authoritative nameservers for the xyz. TLD are as follows:
x.nic.xyz
y.nic.xyz
z.nic.xyz
generationxyz.nic.xyz
How fun. I never thought of the #TLD as being a pun to demographic cohorts.
It always amuses me to see #residential #proxy providers with service in certain regions. As an Internet infrastructure researcher, you folks have a hard time convincing me that you actually managed to leverage #IPv4 addresses linked to hosts residing in #NorthKorea.
#HackLu has opened their #CfP. There is a vast list of topics of interest, thus opening the floor to researchers of various #cybersecurity, #threatintel and #internetmeasurement disciplines. Much of their work has a European, or even global impact. These folks are a bunch of great minds working passionately for the better good of the #Internet.
Find the announcement here :)
Cheers!
Allegedly #NoName agreed to an interview with #daily #darkweb: NoName057(16) Exclusive Interview.
While some questions bear some truth, I might give additional context to others. Check this short thread. 🧵
Anyone else heard about the sourvereign, and alternative #DNS #TLD chn. ? There is a #Wikipedia article in Chinese. I am unsure if it is actually something actively pursued in #China to step up their #Internet #control game. Or if it was merely a financial asset to attract venture capital?
Would love some insights from more knowledable people.
Oh, hey, #IANA assigned a new block of ASNs to #AFRINIC. A good sign that the #Internet #connectivity in #Africa is growing! Keep up the good work! Details here....
Also good to know for those who are following the industry:
Kentik is joining Infoblox. Kentik's blog post argues with network intelligence. A great term that becomes ever more important!
Infoblox revealed in a blog post that by this year, they observed clients resolving #residentialproxy domain names in 65% of their customer networks.
Around 60% of governmental and banking customers have observed these #RESIP domain name resolutions. That is seriously concerning, given the fact that proxies enabled access to local network resources.
What I am missing most, is some kind of an indication of a country-level statistics. Which regions are most affected? Especially, when it comes to critical infrastructure such as #banking and #government ?
Anyone open to share some good papers about #CGNAT infrastructure? I am trying to read more and more into this, and I am happy for anyone sharing resources and/or papers on it.
