Nostr notes by John Kristoff

#DNS root servers on an observed June 2026 traffic increase: ...

2026-07-27T19:48:31Z

#DNS root servers on an observed June 2026 traffic increase:

"[...] a representative from the AS responded on July 3rd. They confirmed that the traffic originated from their networks (i.e., was not spoofed) and was the unintentional result of recent recursive resolver software updates."

https://root-servers.org/media/news/2026-06-29-increase.pdf

Networking numerology ...

2026-07-15T15:58:10Z

Networking numerology

As far as I can tell, United Airlines doesn't have any public ...

2026-07-10T18:54:24Z

As far as I can tell, United Airlines doesn't have any public #IPv6 space.

https://aws.amazon.com/blogs/networking-and-content-delivery/how-united-airlines-solved-ip-exhaustion-with-private-nat-gateway/

"United Airlines’ existing infrastructure (AWS routing, monitoring, security policies) is built on IPv4 across hundreds of accounts. However, adopting IPv6 is an organization-wide decision at United Airlines."

Translation "We see nails, we love hammers"?

I'm told that name is retired, cve.org (which it does ...

2026-07-09T19:25:31Z

In reply to nevent1q…enxz
_________________________

I'm told that name is retired, cve.org (which it does redirect to) is the one to use instead.

#Hosting provider just.hosting (aka justhost.ru and baxnet ...

2026-05-27T17:52:30Z

#Hosting provider just.hosting (aka justhost.ru and baxnet #AS26383) is abruptly shutting down 10 geographical diverse locations and moving customers to the next nearest location. Upstream connectivity in at least some locations was run through WorkTitans, maybe you've heard of them?

My condolences. I wish I had the opportunity to have met him in ...

2026-05-17T15:34:12Z

In reply to nevent1q…58s4
_________________________

My condolences. I wish I had the opportunity to have met him in person, what an extraordinary life.

Lauren, as an outsider and only having observed from a distance, I had kind of assumed you might be the natural successor to take over the digest. No idea if that is practical, but your many valuable contributions to it have been noticed.

Reports in the last hour that logins were working again.

2026-05-08T03:17:20Z

In reply to nevent1q…g0sz
_________________________

Reports in the last hour that logins were working again.

This was the interesting bit: "My previous router had IPv6 ...

2026-04-25T11:04:27Z

In reply to nevent1q…g59j
_________________________

This was the interesting bit:

"My previous router had IPv6 disabled, and all my firewall rules were configured for IPv4. I switched to a new router, and it had IPv6 turned on by default."

You might not like this one, I believe this is an AI training org ...

2026-04-02T19:52:28Z

You might not like this one, I believe this is an AI training org and has been spreading IP4 prefixes around to be announced and originated by big broadband providers.

https://social.bgp.tools/@transfers/statuses/01KN7R98TTMGET2E47SCND67FJ

In case people block my recent boost, thought it worth repeating: ...

2026-03-23T21:30:39Z

In case people block my recent boost, thought it worth repeating:

An update to the FCC list of equipment and services that "pose an unacceptable risk to the national security" now includes:

"Routers produced in a foreign country, except routers which have been granted a Conditional Approval by DoW or DHS."

https://docs.fcc.gov/public/attachments/DA-26-278A1.pdf

New (very minimal) Internet-Draft submitted: ASN Prefix-based ...

2025-11-27T03:02:59Z

New (very minimal) Internet-Draft submitted: ASN Prefix-based Addressing for IPv6

"This document describes a method and policy for ASN prefix-based addressing for IPv6."

If this goes anywhere I expect it will change, and grow, markedly.

https://datatracker.ietf.org/doc/draft-kristoff-v6ops-asn-based-addressing/

#IPv6

There's another way. Upstreams and neighbors could depeer and ...

2025-11-08T01:51:00Z

In reply to nevent1q…jn9l
_________________________

There's another way. Upstreams and neighbors could depeer and refuse to accept BGP routes. Remember nets like McColo or InterCage didn't go away because of sanctions.

That .su was the #2 TLD between .com and .net last week tells you ...

2025-11-03T20:39:23Z

In reply to nevent1q…8l2r
_________________________

That .su was the #2 TLD between .com and .net last week tells you all you need to know.

https://radar.cloudflare.com/tlds?dateStart=2025-10-26&dateEnd=2025-11-01

Weekend Reads * Fingerprinting DPI devices ...

2025-09-12T13:13:04Z

Weekend Reads

* Fingerprinting DPI devices
https://arxiv.org/abs/2509.09081
* Exportation of China's GFW
https://interseclab.org/research/the-internet-coup/
* SSH client signature security
https://arxiv.org/abs/2509.09331
* IPv6 scanning and IoT reachability
https://arxiv.org/abs/2509.04792
* Measuring Explicit Congestion Notification
https://www.potaroo.net/ispcol/2025-09/ecn-measure.html

#Fingerprinting #China #SSH #IPv6 #ECN

Tom, are you aware of the new book "Other Networks: A Radical ...

2025-07-31T10:45:47Z

In reply to nevent1q…n6mh
_________________________

Tom, are you aware of the new book "Other Networks: A Radical Technology Sourcebook" by Lori Emerson (npub1w9z…8ple)? It is quite something I think you'd enjoy if you've not seen it.

There are not many actively using it as the Google plot supports, ...

2025-07-18T12:13:00Z

In reply to nevent1q…4caj
_________________________

There are not many actively using it as the Google plot supports, but anecdotally I hear about people using them regularly.

About 6 years ago HE.net told me the traffic levels on the 6to4 gateways were steady for the past 5 years, I can't imagine things have changed all that much.

There remains a sizeable number of 6to4 endpoints, ~750,000 by my estimation, that can potentially be abused as proxies and relays.

If only we could convince HE.net to finally stop announcing the ...

2025-07-14T12:47:30Z

In reply to nevent1q…ldzf
_________________________

If only we could convince HE.net to finally stop announcing the 6to4 relay prefixes. Maybe that would at least help encourage those power users to put pressure on their access nets for native v6.

I'd guess it isn't as high as some stats published by ...

2025-05-24T20:55:13Z

In reply to nevent1q…gzcw
_________________________

I'd guess it isn't as high as some stats published by Google, for example. Since Google probably includes a fair bit of mobile, whereas git users are more likely on corp or home broadband links where native v6 links are less common?

You can monitor new .gov names as they appear in the zone by ...

2025-04-30T13:54:05Z

In reply to nevent1q…sa3t
_________________________

You can monitor new .gov names as they appear in the zone by following Botgov (npub1p25…nr7a)

I usually highlight new ones specific to this administration in a quote toot as does the bot's author Waldo Jaquith (npub18fz…34vn)

I don't know of anyone in my tech/infosec circle that thinks ...

2025-04-02T02:20:24Z

In reply to nevent1q…lqw4
_________________________

I don't know of anyone in my tech/infosec circle that thinks this is no big deal. And if any do, they shouldn't say so. I won't be able to help losing a lot of respect for them if they do.

We participate in lots of secret handshake clubs, and while we occasionally screw up, the opsec failure here is so egregious and the lack of acknowledgment of it so glaringly disappointing, it would be career-altering.

In fact, a good question for future infosec interviews might be simply to ask "What did you think about the Houthi pc small group Signal chat story?" And if the answer is anything in the vicinity of "No big deal" then it will be "Thank you for your time, we'll be in touch." *plonk*

Thanks for doing it.

2025-01-14T23:16:32Z

In reply to nevent1q…xyl9
_________________________

Thanks for doing it.