The #OARC40 Workshop Report has been published. Come read about some of the highlights from OARC 40 and get information on upcoming events.
https://dnsoarc.medium.com/oarc-40-workshop-report-9cc2e10e777e
#LoveDNS ^RP
The Internet Last Week
* Microsoft patch Tuesday
https://msrc.microsoft.com/update-guide/releaseNote/2023-Feb
https://www.akamai.com/blog/security-research/akamai-perspective-patch-tuesday-february-2023
* US T-Mobile outage
https://www.reuters.com/business/media-telecom/t-mobile-down-thousands-users-us-downdetector-2023-02-14/
https://puck.nether.net/pipermail/outages/2023-February/014641.html
* NANOG 87 / OARC 40
https://www.nanog.org/events/nanog-87/
https://indico.dns-oarc.net/event/46/
* Superbowl traffic trends
https://blog.cloudflare.com/super-bowl-lvii/
#Microsoft #TMobile #NANOG87 #OARC40 #Superbowl
#microsoft #tmobile #nanog87 #oarc40 #superbowl
I know I had a few drinks at the social last night, but did this really happen?? #OARCKaraoke https://drive.google.com/file/d/1dvRbDlR-iUtpoTwNR9e3Tr0bsCi5pA0b/view?usp=sharing #OARC40 #LoveDNS
I know I had a few drinks at the social last night, but did this really happen?? #OARCKaraoke #https://drive.google.com/file/d/1dvRbDlR-iUtpoTwNR9e3Tr0bsCi5pA0b/view?usp=sharing #OARC40 #LoveDNS
#https #oarc40 #lovedns #oarckaraoke
It created a huge discussion, both on Zoom and on Mattermost. People love RFC and care about them, so it is always passionate. There are even people who criticize the fact that some people comment on RFC.
"Measuring TTL Violation of DNS Resolvers at scale" by Tijay Chung
Measuring is not obvious (there is more than one resolver between the Web browser and the authoritative server.)
Almost 10 % of the resolvers increase the very short TTLs (one minute).
"Guaranteeing the integrity of DNS records using PKIX Certificates" by Hyeonmin Lee
Still less than 1 % SLD signed.
Solution : use PKIK certificates because everyone has one.
Preparing to speak remotely at #OARC40.
On Ubuntu, screen sharing in Zoom does not work with the default Wayland, but works with Xorg. But it is the opposite for virtual background :-)
"DareShark: Detecting and Measuring Security Risks of Hosting-Based Dangling Domains" by Xiang Li, at #OARC40.
It's about domain name hijacking (I like his "use-after-free", it's basically the "subdomain attack").