pigggg · HackerTrans

2개월 전discuss

Can confirm they've null routed various cloud providers IPs - with no notification and when folks reached out to the telecoms it took them 2 weeks of impact before they responded (even when provided with sufficient data of specific IPs getting dropped in their network).

pigggg

3개월 전discuss

It's literally a known thing at telcos in various roles they find people looking up folks dox regularly. If someone registers a complaint that someone access their data they'll look it up and deal with them.

I once asked someone on the security /investigations side if you are logging what everyone is doing can't you easily find when folks are looking up stuff unrelated to their job? Their answer: we'd have to fire over half the people here - everyone is constantly looking up people's PII - celebrities, friends, enemies, etc. it's almost considered a unofficial perk of the job. This was from one of the largest US Telco carriers circa 2010. Maybe things have changed, hopefully.

pigggg

3개월 전discuss

It's just a mental compartmentalization thing for me. When I want to get into slack/signal chatting mode or read messages I load such an app and look/interact. When I'm not doing that I don't want to be bothered with messages. I'm already sacrificing a portion of my life to work related tasks and being in front of a computer at many hours, when I'm not in that mode I don't want to be interrupted - people who need to reach me in an emergency have other ways to get ahold of me.

pigggg

3개월 전discuss

Yes Google constantly asks me to backup my pictures to their platform No, I don't want this. But regularly when I go to my photos it'll pop up with a box asking and the default option is yes please back up. Sad.

pigggg

3개월 전discuss

Is there some "no means no" additional setting that could be added where someone has to go into settings that would prevent that?

I fear that with the notifications pop up asking me this I might hit the wrong button and woops turn it on.

pigggg

3개월 전discuss

Just curious, how come at least once a month signal bugs me to turn on notifications? I said no for a reason, every single time - why does it keep asking?

Not implying anything evil but it feels a bit weird esp after this.

pigggg

3개월 전discuss

I gotta say some of the proposed use cases are things no one is looking/asking for. One I recall was having a network decide to reach another network by avoiding countries that aren't carbon neutral (which could take longer hops and use more infra / more energy...) feels like they're trying to say they're the green/environmental friendly protocol.

pigggg

3개월 전discuss

I don't think the swiss banking network is really the right thing to point to. Folks measure networks in bps/pps, not financial transactions - nevermind the actual control plane bits (num of prefixes, as paths, etc.). Plus it's all within one country where you have the luxury of being able to directly influence and steer those companies into adopting this.

As for BT - they're just one broadband ISP operating primarily in a single country. I don't see that moving the needle - you're missing CDNs, traditional large scale "tier 1s" and cloud or large hosting networks.

RPKI got to where it is today through community engagement by folks like Job S. and others - hitting the conferences, direct engagement with operators and raising the bar from a software quality and standards perspective - which still continues today. That's how you get the internet to adopt something that is considered the new normal.

As for your ISP list - I know there are networks listed there that aren't running scion in a production capacity (perhaps you can run scion in a virtualized environment on top of them which is different than those companies running it on their production network).

As for the block chain - it was all the Sui stuff.

pigggg

3개월 전discuss

SCION is generally considered snake oil within the network operator community. Its weird single vendor for profit company that ships it's software, the fact that no router hw asic fwding supports what they want to do and then the general scummy inclusion of block chain / crypto as well as some "green washing" for PR hype.

Sure the swiss have their toy but no one is taking it seriously.

pigggg

4개월 전discuss

Don't forget some BRE and TW2002

pigggg

4개월 전discuss

There are "live" residential proxy IP lists you can purchase today from a variety of companies. Various companies defending use them as an additional data point when making a call to throw a captcha or block.

ISPs have been fairly silent on the topic (it is a hot topic for many of them due to the kimwolf botnet leveraging resiproxies to function and launching attacks). In many cases, being a resiproxy is a violation of the TOS - but they struggle with enforcement and how to do customer engagement given that most resiproxies are loaded without the end user knowing. So you have an educational problem - how does an end user figure out how to remove it.

Some ISPs could null the resiproxy c2 infra - and a few have played in that space.

Home router vendors could play their part and notify users exactly which device is connecting out and give them an option to isolate, etc.

pigggg

4개월 전discuss

My biggest issue with IP brokers is how they'll avoid taking any responsibility for their customers action. A fair amount of bullet proof hosters (and we're talking malware distribution, botnet c2s, ransomware c2s, proxy/scanning) get their space from brokers. When you engage with the brokers they say go talk to the transit providers - and because the bullet proof guys can switch off to another transit provider easily they maintain connectivity/continue to operate. Super common in Europe where most of this goes on and they have a super plentiful transit market - but they are still rolling with the same set of IPs they get from these brokers (and one in particular).

pigggg

4개월 전discuss

Renting /24s by the hour is like a motel room rented by the hour. You know some shit is going on in there.

pigggg

5개월 전discuss

AI companies are _already_ funding and using residential proxies. Guess how much of those proxies are acquired through being compromised or tricking people into installing apps?

pigggg

5개월 전discuss

I constantly get tik tok style everything everywhere all at once fever dream headache rapid edited clips. There's a difference between to the point and just being brain rot delivered with no background. Reminds me of happy hardcore techno - you can't really feel the bass because it's not getting enough time to reverberate.

pigggg

5개월 전discuss

More likely a specific botnet had it's c2 or telnet scanning report endpoint go down / get nulled on Jan 14th.

pigggg

5개월 전discuss

This. The lawful intercept infrastructure is one facet of their network. The rest of their infra is also a deep concern: call records, SS7 signaling, the IP network, mobile infra and it's back end (sim swapping).

pigggg

5개월 전discuss

Post 9/11 you could get a waiver from the ticket counter to escort someone thru security all the way to the gate. Dunno if that's a thing anymore, but I had them print out a paper and showed it at security several times in the mid 2000s.

pigggg

6개월 전discuss

I recall during the 90s spending a bunch of time on SF2 and Mortal Kombat in arcades: shopping malls, bowling alleys, even some restaurant/bars that had a small arcade. One of the fun experiences was one arcade that Saturday mornings they had a "Freeplay" time for a few hours where everyone paid like $5 and every game was in Freeplay mode. It always amazes me how we all learned the special moves and fatalities word of mouth and eventually they'd get published in gaming magazines. The whole winner stays, loser pays - folks setting their quarter on the arcade to reserve their next spot. Many years later a coworker and I bought a very well used (cigarette smell and burns) MK2 machine for the office break area that took me back. Comically we found at least $10 worth of quarters inside the enclosure. Good times.

pigggg

6개월 전discuss

IETF has a history of being hostile to network operators. I mean actual network operators - not the people who show up at conferences or work the mailing list who just happen to get a paycheck from a company that runs a network (and have zero production access / not on call / not directly involved in running shit). It's gotten better in the last few years in certain areas (and credit to the people who have been willing to fight the good fight). But it's very much a painful experience where you see good ideas shot down and tons of people who want to put their fingerprint on drafts/proposals - it's still a very vendor heavy environment.

comments