Sign in

NON-TOXICNo ads · No shady algorithms

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Babak Farrokhi :dns:

@farrokhi.unix.family.ap.brid.gy
22 followers 2 following 114 posts

Internet Plumber - Doing DNS for fun and (non)profit. #BGP, #DNS, #C, #Golang, #SRE, #FreeBSD, #Unix, #Linux #内向 Medicore at all of the above, but gets the job done 🌉 bridged from ⁂ unix.family/@farrokhi, follow @ap.brid.gy to interact

PostsRepliesMedia
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 22/10/2026
`.vn` (VNNIC) had some mishap earlier today with their DNSSEC. Good that they've recovered so quickly. erpfit.com/en/blog/vn-dnssec-outage…
erpfit.com
The .vn DNSSEC outage of 22 October 2026: why it looked like 'only my site' was down — ERPFit
The vn. zone was re-signed without the KSK the root points at. Validating resolvers SERVFAIL .vn names while uptime monitors stay green. How to check it yourself, and what a domain holder can do.
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 21/10/2026
Spotted this elsewhere. /cc @ondrej
A cartoon shows a complex tower labeled “All modern PHP installs,” supported by a tiny pillar labeled “One guy called Ondřej.”
010 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 21/10/2026
I know this is a long shot, but I really hoped this would be the end of PHP and WordPress at the same time. World will be a better place without them.
000 0
Reposted by Babak Farrokhi :dns:
HD Moore @hdm.infosec.exchange.ap.brid.gy · 20/10/2026
arstechnica.com/security/2026/10/th… The private keys for these certs are literally the numbers 4, 56, 66, 115, 155, 156, 230, and 237 (life imitates XKCD, again).
034 4
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 20/10/2026
“ Writing is the process by which you realize that you do not understand what you are talking about. “ fs.blog/writing-to-think This is one fact I am reminded of every time I write something.
fs.blog
Writing to Think
Writing is the process by which you realize that you do not understand what you are talking about. It's also how you discover new ideas.
004 4
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 16/10/2026
DNSDiag 2.10.0 is out :dns: - Upgraded to dnspython 2.9 (fixes a CPU DoS via crafted responses) - Python 3.11+, tested up to 3.15 - DoH and DoQ fixed in binary packages - Improved error handling in `dnsping` - Docker image for amd64 and arm64, now ~31 MB Download […]
unix.family
Original post on unix.family
002 2
Reposted by Babak Farrokhi :dns:
daniel:// stenberg:// @bagder.mastodon.social.ap.brid.gy · 08/10/2026
"The people holding up the internet" A good-looking but somewhat depressing exposé about the people holding up current digital infrastructure as a hobby. sheets.works/data-viz/holding-up-th…
sheets.works
The people holding up the internet
Four billion phones ask one text file what time it is. One lecturer keeps it in his spare time. We counted the rest.
256178 178
Reposted by Babak Farrokhi :dns:
Tom Gauld @tomgauld.bsky.social · 24/09/2026
My latest @newscientist.com cartoon. many more here: www.newscientist.com/author/tom-gauld/
Image: A graph with lots of red dots clustered together in a curve. The are all looking upwards at a single red dot wearing sunglasses. 

Caption: Mike was an outlier and would probably be excluded from the study, but all the other data points secretly thought he was really cool.
322940744 2.9K
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 21/09/2026
My Oven just notified me that it has to install a critical security update and reboot. I suspect it is running NodeJS.
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 09/09/2026
RE: mastodon.social/@aka_pugs/117236312… This is not fair. And it was not even too long ago. I clearly remember where I was when this was announced, with its fancy smart card interface and all the Java Desktop hype.
mastodon.social
000 0
Reposted by Babak Farrokhi :dns:
Ted :flan_hacker: :antiverified: @shofutex.infosec.exchange.ap.brid.gy · 06/09/2026
🤣
A sticker of a duck holding a knife in front of a laptop with the phrase: I hope this email finds you before I do.
12165 65
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 08/09/2026
So you pay for a service to assist you with writing text and code, then you pay for another subscription service to detect whether others are doing the same thing as you? Brilliant!
000 0
Reposted by Babak Farrokhi :dns:
Mullvad VPN @mullvadnet.mastodon.online.ap.brid.gy · 07/09/2026
On November 2nd 2026 our public Encrypted DNS servers will be shut down. This does not impact customers of our VPN if DNS content blockers are used. Read more here: mullvad.net/blog/shutting-down-our-…
mullvad.net
Shutting down our public encrypted DNS servers and sponsoring Quad9 instead | Mullvad VPN
Mullvad has operated public encrypted DNS (DoH) servers since 2022. They are unnecessary when using Mullvad VPN — traffic is already encrypted and Mullvad VPN's internal DNS handles all queries.
303 3
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 07/09/2026
Now I have proof that too much @PowerDNS is not good for your health 😎
Pack of Pringles with PowerDNS branding on top
101 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 04/09/2026
I read and review more documents nowadays and they get lengthier by the day. I can with high precision tell which LLM tool was used to generate each document by the end of the first paragraph. And they all sound disgusting.
100 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 23/08/2026
I just made the most disgusting sentence in world history: """ What matters most is not the framing, but what is genuinely load bearing. An honest assessment can materially and significantly change the conclusion rather than materially change the narrative. That’s a meaningful distinction, and […]
unix.family
Original post on unix.family
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 12/08/2026
I am proud to announce I built a new product this morning! Please come see my shiny new black-and-purple website!
100 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 03/08/2026
"Vibe coding is a very interesting thing for who does not have technological abilities and wants anyway to have an impact on the construction of their own tools, and so forth: so, welcome, because it democratizes the possibilities. But it is not that." Being Linux Torvalds […]
unix.family
Original post on unix.family
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 02/08/2026
Do you also find it misleading (dishonest?) when “open source” projects publish binaries on GitHub that aren’t built from the code in the same repo, without mentioning it anywhere? It is unfortunately becoming a trend.
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 23/07/2026
A pull request I had opened on a GitHub project over 8 years ago was finally closed today with the comment saying “Thanks. Merged”, but without actual merging. But I guess it is good to have a closure.
100 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 21/07/2026
@DNSresolver a3k.d.xdp.cz A
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 17/07/2026
I’ve arrived in Vienna for #IETF126 and will be here all week. If you’re attending too, I’d be glad to meet up. Feel free to say hello!
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 16/07/2026
I made a small tool called `localzone-leaktest`. It checks which private and special-use namespace queries your DNS resolver may be leaking to the public Internet, whether you use a public service, your home router, or a resolver running in your own homelab. It is not a conventional DNS leak […]
unix.family
Original post on unix.family
001 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 15/07/2026
DNSDiag 2.9.4 is out :dns: A maintenance/bugfix release: • `dnsping`: validate the source IP against the -4/-6 flag • `dnsping`: fix a div-by-zero in stats and reuse TCP connections for fixed source ports • Cleanly reset shutdown state between runs • Bumped `cryptography` to pick up the […]
unix.family
Original post on unix.family
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 14/07/2026
Failures happen on the internet every day, and the internet is designed to survive them. What users rarely see is how much cooperation happens between operators behind the scenes when things break. The recent .AL DNSSEC incident produced something lasting from that cooperation: together with […]
unix.family
Original post on unix.family
010 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 09/07/2026
I feel both happy and nervous to see The Dutch Tax Authorities are also on Mastodon (and, yes, I follow them).
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 17/05/2026
That, right there, is what you are getting wrong. The number of CVEs should not be a metric. It encourages people to optimize for the wrong things instead of doing useful work. “The LLMs scanned over 130 Palo Alto Networks products and platforms platforms, and as noted above found 75 issues […]
unix.family
Original post on unix.family
000 0
Reposted by Babak Farrokhi :dns:
HD Moore @hdm.infosec.exchange.ap.brid.gy · 30/04/2026
RE: infosec.exchange/@runZeroInc/116493… Excited to share what we've been cooking for the last few months: Interactive attack graphs, with hop-by-hop planning, support for over 220 protocols, and no-auth backplane enumeration to identify non-IP systems unauth over the […]
infosec.exchange
Original post on infosec.exchange
003 3
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 23/02/2026
Story for MinIO is a cautionary tale, and by now we all know this is not the first nor the last time. But I also don’t agree with considering dependency on open source software as a risk. We should just be cautious about VC backed companies behind freemium software.
000 0
Reposted by Babak Farrokhi :dns:
Ivo 🇪🇺 @ivovanwilligen.mastodon.social.ap.brid.gy · 21/02/2026
I wanted the blue checkmark on LinkedIn. The one that says “this person is real.” In a sea of fake recruiters, bot accounts, and AI-generated headshots, it seemed like a smart thing to do. So I tapped “verify.” I scanned my passport. I took a selfie. Three minutes later — done. Badge acquired […]
mastodon.social
Original post on mastodon.social
49122 122
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 21/01/2026
Who was laughing at those who scan port TCP/23 again? www.openwall.com/lists/oss-security…
openwall.com
oss-security - GNU InetUtils Security Advisory: remote authentication by-pass in telnetd
002 2
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 08/01/2026
It might be comforting to fantasize that your company will sink after you leave, but let me tell you something: I’ve been in tech for the better part of three decades, and I’ve never seen or heard of a company sinking because its star engineer left. It’s like a ship: it won’t sink just because […]
unix.family
Original post on unix.family
000 0
Reposted by Babak Farrokhi :dns:
lj·rk @ljrk.todon.eu.ap.brid.gy · 06/01/2026
I do not hate k8s (just not my kink). But can we please take away this shotgun from absolutely incompetent IT teams? No, if you cannot administrate a server manually, adding k8s *won't make things easier* ffs.
102 2
Reposted by Babak Farrokhi :dns:
petersuber @petersuber.fediscience.org.ap.brid.gy · 20/12/2025
Kudos to the @ACM: "Beginning January 2026, all ACM publications and related artifacts in the ACM Digital Library will be made open access." dl.acm.org/openaccess #CS #ComputerScience #OpenAccess
dl.acm.org
自2026年1月起,ACM旗下所有出版物将全面开放获取。
Beginning January 2026, all ACM publications will be made open access (dl.acm.org) 12-18  ↑ 178 HN Points
3427 27
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 13/12/2025
RE: mastodon.social/@CuratedHackerNews/… 1. Use Kagi or anything other than Google. 2. Censorship is a global problem.
mastodon.social
010 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 02/12/2025
> Since the airline business is largely a credit-card-loyalty business, and since the credit-card-loyalty business is largely a lounge business, it’s only a minor stretch to think of Delta or United as lounge companies that also fly planes. This beautiful essay offers a glimpse into how our […]
unix.family
Original post on unix.family
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 29/11/2025
I bought two cheap (?) lighting accessories yesterday. One says it has a “Limited Lifetime Warranty for 2 years.” The other says “No charging cable included,” but it has two cables inside. I’m not sure what to make of it, but I suppose I got a good deal.
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 28/11/2025
RE: mastodon.social/@hynek/115620454186… I will call that “The Microsoft Effect”. Case in point: Azure web portal. It feels like it is falling apart every time you click on something.
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 21/11/2025
RE: mas.to/@PicardTips/1155884759216077… and your own mistakes
mas.to
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 19/11/2025
In the imminent tech bubble burst, is Figma going to be the first casualty?
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 18/11/2025
People argue that #Mozilla has forgotten that their remaining user base does not care about AI. They have not forgotten. They simply do not care. This is a calculated move (or a desperate attempt, if you will) to expand their user base and capture some market share. And we all know how it is […]
unix.family
Original post on unix.family
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 17/11/2025
I am seeing an increasing trend where developers of software I have purchased licenses for resurface after a long time, switch to a subscription model, release an update or two, and then disappear again. Dear developer: I am fine with subscription model when it makes sense, but if you know you […]
unix.family
Original post on unix.family
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 17/11/2025
RE: hachyderm.io/@robpike/1155620153769… Dear $SEARCH_ENGINE:
hachyderm.io
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 13/11/2025
Apple has just introduced a mankini for iPhone for 229$. And it does not even have a more expensive Pro model? Dang. How do I show off then?
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 08/11/2025
Updated my opinionated "Securing SSH Server Configuration" guide. There are some recommendation that you may find useful: farrokhi.net/posts/2025/11/securing…
farrokhi.net
Securing SSH Server Configuration in 2025
Updated guide for securing OpenSSH with modern cryptographic standards
000 0
Reposted by Babak Farrokhi :dns:
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 07/11/2025
Weekend Reads * EDNS client subnet in practice farrokhi.net/posts/2025/10/edns-cli… * BGP-based DDoS scrubbing services survey ris.utwente.nl/ws/portalfiles/porta… * Circuit […]
infosec.exchange
Original post on infosec.exchange
001 1
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 05/11/2025
If Apple were serious about QA and product quality, there would be many heads rolling in their hallways right now.
000 0
Babak Farrokhi :dns: @farrokhi.unix.family.ap.brid.gy · 03/11/2025
Something that started as a small curiosity and weekend project turned into a long article with several surprises for myself (including how bad I am at time estimates). I went down quite a few rabbit holes along the way. EDNS Client Subnet in Practice: Evaluating Public Resolver Behaviors […]
unix.family
Original post on unix.family
113 3