Conversation

Notices

1. Embed this notice
   Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:18:00 JST Fi, infosec-aspected 🏳️‍⚧️

   Be still my heart <3

   https://mastodon.gougere.fr/@bortzmeyer/113029803141602196

   • Embed this notice
     Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:17:57 JST Fi, infosec-aspected 🏳️‍⚧️

     in reply to

     .......honestly, you wouldn't need an extension to DNS to do a lot of the fun shit; you can instrument the.....

     .....hm.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:17:57 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @munin this seems to largely be about standardizing existing clever DNS shit like location based responses - making the location info explicit rather than relying on geoip provider data

     Altering responses based on QoS bits sounds entertaining.

   • Embed this notice
     Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:17:58 JST Fi, infosec-aspected 🏳️‍⚧️

     in reply to

     Oh hey, you could make anything headed for a specific set of domains pass through a monitoring proxy.

   • Embed this notice
     Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:17:59 JST Fi, infosec-aspected 🏳️‍⚧️

     in reply to

     I wonder which CDN is behind this proposal.

   • Embed this notice
     Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:17:59 JST Fi, infosec-aspected 🏳️‍⚧️

     in reply to

     Anyway imagine an adblocker that could tarpit adserver connections aggressively

   • Embed this notice
     Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:17:59 JST Fi, infosec-aspected 🏳️‍⚧️

     in reply to

     ...ooh, greylisting* potential phishing domains and automatically interdicting the AS for the whole network. That's a tasty one.

     * really ought to come up with an updated name for the technique. and something new with it; it's been a while.

   • Embed this notice
     Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:18:00 JST Fi, infosec-aspected 🏳️‍⚧️

     in reply to

     oh this is gonna make -so- many shenanigans possible holy shit

   • Embed this notice
     Fi, infosec-aspected 🏳️‍⚧️ (munin@infosec.exchange)'s status on Tuesday, 27-Aug-2024 17:18:00 JST Fi, infosec-aspected 🏳️‍⚧️

     in reply to

     Just imagine the attack surface of a -dns- problem getting propagated down into -routing- it's gonna be complete fucking chaos