pjf

6 ms·

1.
Atoonk/packetio: high-performance packet I/O library for Go(github.com)
1 points by pjf 9d ago|0 comments
2.
Russia starts blocking DoH and DoT(risky.biz)
6 points by pjf 22d ago|0 comments
3.
by pjf 3mo ago
I'm pushing the https://bgpipe.org/ project, bringing one of the first BGP ASPA route path validators to the open source world - see: - https://bgpipe.org/stages/aspa/ - https://ww
4.
Audit: Vuln-discovery agent reimplementing the Cloudflare Project Glasswing(github.com)
1 points by pjf 4mo ago|0 comments
5.
CPanel and WHM Authentication Bypass Affecting 70M Domains(labs.watchtowr.com)
6 points by pjf 5mo ago|0 comments
6.
by pjf 5mo ago
There are situations [1] where you could reliably BGP-hijack the IP prefix of the target domain authoritative nameserver, and obtain your own domain-validated cert for the target (by effectively controlling the zone file contents). And yeah
7.
by pjf 5mo ago
On the other front (Chrome), their crlset-tools [1] just fetched me 64k (~1.1MiB) of revoked certs just fine, contrary to the article (quote: "After retrieving and running this tool, I was surprised to see a total of 1,081 revoked cert
8.
by pjf 5mo ago
Good that at least BGP is secure.
9.
by pjf 5mo ago
NB: this is not "IPv6 traffic crosses the 50% mark" but "availability of IPv6 connectivity among Google users", which is a very important difference. This means roughly half of Google users have IPv6 capability , which
10.
Golang Constmap by Daniel Lemire(twitter.com)
4 points by pjf 6mo ago|1 comments
11.
by pjf 6mo ago
great post! key points for me: 1. 100 IXes alone would get 56% IPv4 and 61% IPv6 prefixes, but ~14% reachability 2. little uniqueness between exchanges: not many new prefixes after the top 5 3. for outbound-heavy networks IXes are great, bu
12.
Coursera prompt injection on copy and paste(twitter.com)
4 points by pjf 7mo ago|1 comments
13.
by pjf 7mo ago
Kind of "funny" affected service is BGP RouteViews CLI access, still running over telnet: https://archive.routeviews.org/ (scroll to bottom of the page) Isn't this one of the remaining, "legit" uses
14.
The Day the Telnet Died(labs.greynoise.io)
499 points by pjf 7mo ago|385 comments
15.
Show HN: Bgpipe – pipe live BGP sessions through Python, add RPKI, etc.(bgpipe.org)
2 points by pjf 7mo ago|0 comments
16.
by pjf 8mo ago
One reason is there already was exabgp, written in Python, which in my experience is slow and resource hungry. Golang is much faster, easily portable, and produces static binaries (easy to deploy). Another thing is bgpipe speaks JSON to bac
17.
by pjf 8mo ago
I'd advise to first compare with: - https://bgp.tools/ - https://bgproutes.io/ - https://bgp.he.net/ - https://radar.qrator.net/ - https://github.com/n
18.
by pjf 10mo ago
https://bgpipe.org/ I'm working on a man in the middle proxy for BGP, which can fix and inspect routing sessions on the fly. Like a firewall for the BGP control plane.
19.
SpyVPN: The Google-Featured VPN That Captures Your Screen (FreeVPN.One)(koi.security)
4 points by pjf 1y ago|0 comments
20.
by pjf 1y ago
...prepare your pagers for an April 1st "experiment"
21.
Google 8.8.8.8 is getting 27M ping requests per second(lists.nanog.org)
8 points by pjf 1y ago|2 comments
22.
The Flash Fill Feature in Excel (2021)(blog.sigplan.org)
1 points by pjf 1y ago|0 comments
23.
MinLZ Compression Algorithm(blog.min.io)
1 points by pjf 2y ago|0 comments
24.
Zstandard v1.5.7 brings performance enhancements(github.com)
4 points by pjf 2y ago|1 comments
25.
Vultr Secures $3.5B Valuation in Financing from LuminArx and AMD Ventures(blogs.vultr.com)
2 points by pjf 2y ago|0 comments
26.
Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability(blog.coffinsec.com)
259 points by pjf 2y ago|103 comments
27.
Apple Prototypes and Corporate Secrets Are for Sale Online(wired.com)
3 points by pjf 2y ago|1 comments
28.
Too big to care? Our disappointment with Cloudflare anti-abuse posture(spamhaus.org)
45 points by pjf 2y ago|7 comments
29.
Air-Bus Hijacking: Silently Taking over Avionics Systems(dl.acm.org)
63 points by pjf 2y ago|62 comments
30.
Gymnastics is the Turing test of video generation models(twitter.com)
3 points by pjf 2y ago|0 comments

More ›