Sign in

John Kristoff

@jtk.infosec.exchange.ap.brid.gy
60 followers 14 following 764 posts

UIC PhD candidate | Dataplane.org | Verisign #BGP #DNS #infosec and bit mechanic #Blues / #Chicago / #tfr / #fedi22 Views are my own 🌉 bridged from ⁂ infosec.exchange/@jtk, follow @ap.brid.gy to interact

PostsRepliesMedia
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
RE: mastodon.social/@botgov/11737198375… si and whitehousefellows, two new exec names, no content as of now
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
Weekend Reads * BGP anomaly detection dl.acm.org/doi/abs/10.1145/3777912.… * ChatBGP dl.acm.org/doi/abs/10.1145/3777912.… * Computer Networks: A Systems Approach 7e.systemsapproach.org/index.html * False 5G base station risks […]
infosec.exchange
Original post on infosec.exchange
012
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
Golly gee, what could possibly explain the tremendous rise in re *ahem cough-cough*search papers submissions? arxiv.org/stats/monthly_submissions
arxiv.org
Monthly Submissions
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/09/2026
Add #GoDaddy to the list (joining notables such as cisa, fastly, reddit) of sites blocking magic source IP addrs/prefixes - even when there is no associated bad reputation for those addresses. Sad to see who uses Akamai's hammer to whack away legit users and customers.
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/09/2026
In case you may have been wondering why you haven't seen me highlight america.gov from @botgov, it is because that name has been around since at least 2007. It has historically been a resource associated with the Department of State. It is obviously something very different now […]
infosec.exchange
Original post on infosec.exchange
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 28/09/2026
This content is associated with an intro CS course by some renowed and well-known academics, but there is at least one kind of serious mistake therein, can you spot it? textbook.cs161.org/network/dnssec.h…
textbook.cs161.org
DNSSEC
Online textbook for CS 161: Computer Security at UC Berkeley.
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 28/09/2026
Beware of fake accounts following you, especially new accounts from mastodon.social. Anecdotally this seems to be increasingly frequent lately, perhaps coinciding with the upcoming U.S. elections. I've seen and reported at least a couple recently. Most recent is this one still active […]
infosec.exchange
Original post on infosec.exchange
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 27/09/2026
These infosec monitoring services may be of interest for those that don't know about them. The good people at utexas have been doing this awhile and I don't think it is widely known outside edu circles. It is open to others but they try to focus on non profits first […]
infosec.exchange
Original post on infosec.exchange
022
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 26/09/2026
Weekend Reads * File notification attacks inoti.fyi * IP geolocation at APNIC 62 blog.apnic.net/2026/09/24/ip-geoloc… * Russian MAX Messenger analysis interseclab.org/research/max * SubTel Forum Issue […]
infosec.exchange
Original post on infosec.exchange
020
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 26/09/2026
RE: infosec.exchange/@jtk/1173184901435… I was joking, or I meant it that way. I hope no one following me took that seriously and registered new .si names based on this absurd ai-rebranding.
infosec.exchange
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 24/09/2026
RE: mastodon.social/@botgov/11732274249… app.gov leads to a whitehouse page for a new whitehouse mobile app, looking forward to the sure to be forthcoming app analysis
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 23/09/2026
This is the first time I'm aware of since Russia's invasion into Ukraine in 2022 that this data center was disrupted due to hostilities: "We are writing to inform you that our data center in Kyiv has been damaged in a drone attack. As a result, all cloud services hosted from this facility are […]
infosec.exchange
Original post on infosec.exchange
020
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 22/09/2026
#Jev limited access began one week ago. Days later an 11-page evaluation research paper is submitted to arxiv and appears today. Amazing! Oh wait... lead author has been involved in DOZENS of new papers appearing on arxiv this month alone. Haha *plonk* arxiv.org/abs/2609.23136
arxiv.org
Fast Intent-Driven Service Orchestration with Jev for 6G Edge Networks
Intent-driven services envisioned for sixth-generation (6G) edge networks must translate changing requirements into executable contracts while wireless requests continue to arrive. Interpretation consumes part of the same deadline budget as transmission, queueing, and execution. We evaluate Jev as a decision model for this stage, asking whether faster contract activation improves service timeliness while preserving interpretation quality. Contracts specify permitted execution locations, deadlines, and priorities; a numerical scheduler uses them to allocate edge work. The evaluation combines live Jev, DeepSeek, Gemini, and self-hosted Qwen responses with packet-level New Radio simulation, mobility events, shared edge queues, and a real image-reading service. Cached interpretation with numerical scheduling substantially improves completion over direct model-selected placement. With correct interpretation on all evaluated contracts, Jev reduces median decision latency by 22.4% against DeepSeek and 61.9% against Gemini; completion in the modeled update scenarios rises by 3.50 and 8.35 percentage points. A separate comparison with direct-attribute Qwen retains a 53.0% latency reduction and a 4.78-point completion gain. Exchanging recorded model and scheduling waits reproduces the comparator completion summaries for all 12 trajectories in each of two modeled comparisons. In the real image service, Jev retains faster decisions and completes 459 requests correctly and on time, compared with 463 for DeepSeek and 435 for Qwen out of 1,080 each. These findings connect fast intent decisions to timely edge service execution and support using Jev at contract activation, with numerical scheduling adapting placements to current network and computing state.
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 19/09/2026
he Internet Last Week * Central Asia regional connectivity labs.ripe.net/author/anastasiya-pak… * DNSSEC-anchored stateless encrypted auth DNS arxiv.org/abs/2609.14210 * Router compromise walk-through […]
infosec.exchange
Original post on infosec.exchange
020
Reposted by John Kristoff
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/09/2026
We have 28 positions open (most remote, some non-US|CA). Attached are the research & engineering positions open (since I don't think sales or marketing folks follow me here). Links to these and more @ censys.com/careers DM me for a Signal contact #FediHired
Senior Security Researcher
Remote
Systems Engineer
RemoteEngineering
Distributed Systems Engineer (Data Platform)
Remote (US/Canada)
Distributed Systems Engineer (Data Platform)
Remote (US/Canada)
Engineering Manager
Remote (US/Canada)
Senior AI/LLM Engineer
Remote (US/Canada)
Senior AI/LLM Engineer
Remote (US/Canada)
Senior Distributed Systems Engineer
Remote (US/Canada)
Senior Machine Learning Engineer
Remote (US/Canada)
Staff Backend Engineer, Exposure Management
Remote (US/Canada)
Staff Backend Engineer, SOC & Threat Hunting
Ann Arbor, MI
Staff Scanning Engineer
Remote (US)
015
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 18/09/2026
@renprovo this an imposter? mastodon.social/@Rn677
mastodon.social
Ren Provo (@Rn677@mastodon.social)
0 Posts, 275 Following, 10 Followers ·
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 17/09/2026
Ever see or hear of NetFRAME? They were a kind of elite and pricey PC server in the early/mid 1990s. They had a reputation for high availability and reliability in a market many mini/mainframe people considered replete with cheap junk (not entirely untrue). In a water-flooded data center event […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 12/09/2026
Weekend Reads * China-controlled US Internet threats chinaselectcommittee.house.gov/medi… * DNS hijack and cache poison via malicious apps arxiv.org/abs/2609.09345 * IPv6 Hitlist Service lessons […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 11/09/2026
In 2001 there were no iphones, email was the predominant form of all online communications, people were arguing about the utility of TCP MD5 auth on BGP sessions, and there was no such thing as passive DNS. I was a volunteer helping with the "shownet" at Networld+Interop in Atlanta on September […]
infosec.exchange
Original post on infosec.exchange
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 10/09/2026
Wicked helpful org names nsw.gov.au, haha. social.bgp.tools/@transfers/statuse…
social.bgp.tools
Post by IP/ASN Transfers, @transfers@bgp.tools
"DEPARTMENT OF FINANCE SERVICES AND INNOVATION" transferred AS45692 to "Department of Customer Service"
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 09/09/2026
RE: flipboard.com/@notusreports/the-was… If you are or were a reader of The Washington Post, this may be of interest:
flipboard.com
122
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 07/09/2026
With apologies to Mutt... Social media still sucks, the fediverse just sucks less
021
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 05/09/2026
Weekend Reads * Internet PMTU measurement analysis pure.mpg.de/rest/items/item_3728539… * Negative DNS answers ispcol.potaroo.net/2026-08/nxd.html * Telstra July 2026 outage report […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 04/09/2026
Good grief, #Fastly is now seemingly returning 403s from all their website properties if your origin IP4 address is not on an approved list of source prefixes for clients. At least access to them via Tor still works. The well-meaning intention to limit undesirable bots and scrapers is […]
infosec.exchange
Original post on infosec.exchange
022
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 03/09/2026
RE: mastodon.social/@botgov/11720808046… arcade(s), redirects to a whitehouse page, content looks like mindless dope fuel
mastodon.social
000
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/08/2026
Pacific Islands #IPv6 monitor pacific.ipv6forum.com
pacific.ipv6forum.com
Pacific Islands IPv6 Monitor
Pacific Islands IPv6 Monitor — IPv6 deployment estimates for Pacific economies from DNS, mail, and web checks plus APNIC Labs capability data.
030
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/08/2026
I don't suppose anyone within viewing distance has a way to inform news.ycombinator.com (aka Hacker News) that their associated #IPv6 AAAA DNS RR (2606:7100:1:67::26) appears to be unreachable?
111
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 29/08/2026
RE: mastodon.social/@botgov/11717946521… example an executive office name is associated with the "Council of Test Administration". Nothing there currently, but I could imagine there may be some name collisions if they actually put it to use.
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 27/08/2026
Approximately 3.5% of ASNs seen making #BGP announcements have created RPKI #ASPA objects. This is a decent ramp up before the spec is even out of draft and the big iron from commercial router vendors have production code deployed for validating these (ASPA) paths from the #RPKI […]
infosec.exchange
Original post on infosec.exchange
011
Reposted by John Kristoff
Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 23/08/2026
I just released `ptrclassify` is a small, dependency-free Python library and CLI that infers likely IP usage from reverse-DNS PTR hostnames. It is intentionally heuristic and multi-label. PTR naming is operator-controlled and is not authoritative evidence of how an address is actually used. The […]
infosec.exchange
Original post on infosec.exchange
025
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 21/08/2026
Haha, c'mon shifty shiftsters, you're not even trying. social.bgp.tools/@transfers/statuse…
social.bgp.tools
Post by IP/ASN Transfers, @transfers@bgp.tools
"IPCrash LLC" transferred: 2607:/32, AS401591, 155.103.96.0/22, 23.132.84.0/24 to "Xproxies" (Estimated Market Value: $25.34 K)
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 19/08/2026
ASN 8100 sold on the open market for $50,000. Looks like the winning sucker, erm bidder, was splice.au. social.bgp.tools/@transfers/statuse…
social.bgp.tools
Post by IP/ASN Transfers, @transfers@bgp.tools
"QuadraNet Enterprises LLC" (ARIN) transferred AS8100 to "Splice Internet Pty Ltd" (APNIC)
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 17/08/2026
Some have been giving oxygen to an absurd Internet draft again. Gentle reminder: Every so often ideas come along that are sufficiently deserving of ridicule and derision. Probably anything you're seeing about #IPv8 lately is one of those times. Read and absorb this instead […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 08/08/2026
Ignoring everything else, seems hard to ignore the latency cost introduced here: "The data center then beams AI results generated by the GPUs to satellites and sends them back to land." […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/08/2026
jackceoai on the latest IP prefix transfer
jackceoai account on Bluesky replied to my toot about an IP prefix transfer. The reply is nonsense.
210
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/08/2026
social.bgp.tools/@transfers/statuse… Nothing to do with actual birds, not the router software, not even Larry the Legend. This of course: "Communications infrastructure your AI agents operate"
social.bgp.tools
Post by IP/ASN Transfers, @transfers@bgp.tools
"BLST Holding Company LLC" transferred 151.210.64.0/19 (Taken from 151.210.0.0 - 151.210.95.255) to "Bird.com Inc." (Estimated Market Value: $114.69 K)
130
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 01/08/2026
RE: mastodon.social/@botgov/11702092051… visas is a state dept name, http-only but no content at the moment
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 31/07/2026
Received email spam from newly registered socialdb [dot] xyz. Some kind of escrow racket for wannabe influencers. Looks like if they find an email associated with your Mastodon account you'lll get subscribed to their mailing list. Platform allows you to create an account using an email without […]
infosec.exchange
Original post on infosec.exchange
112
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 31/07/2026
Gemini is hungry? social.bgp.tools/@transfers/statuse…
social.bgp.tools
Post by IP/ASN Transfers, @transfers@bgp.tools
"Globenet Cabos Submarinos America Inc." transferred: 191.40.128.0/17, 152.238.0.0/16, 189.48.0.0/16, 189.24.128.0/17, 201.94.0.0/17, 187.126.128.0/17, 187.79.0.0/17, 187.78.0.0/17, 186.245.0.0/16, 186.242.0.0/17, 179.199.0.0/17, 201.4.128.0/17, 191.220.0.0/15, 191.0.128.0/17, 189.106.0.0/15...
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 29/07/2026
ObThought: We could use the equivalent of a doi.org for news articles that could help arbitrate / aggregate access with stable links and if necessary payment to sources. A large proportion of articles people link to I try to read are often inaccessible for various reasons such as: * […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 29/07/2026
Probably not for $50,000 (US) social.bgp.tools/@transfers/statuse…
social.bgp.tools
Post by IP/ASN Transfers, @transfers@bgp.tools
"QuadraNet Enterprises LLC" (ARIN) transferred AS22298 to "Jan Vaclav" (RIPE)
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 27/07/2026
#DNS root servers on an observed June 2026 traffic increase: "[...] a representative from the AS responded on July 3rd. They confirmed that the traffic originated from their networks (i.e., was not spoofed) and was the uninten4onal result of recent recursive resolver software updates." […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 27/07/2026
#Apple account services may be having some problems.
020
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 25/07/2026
RE: infosec.exchange/@dannyjpalmer/1169… "Disabling web proxy auto-discovery (WPAD) where not required" Why is wpad even still supported by browsers?!? A 30-year-old mechanism, expired I-D almost as old, and the upward namespace traversal nonsense that might be one of the […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 25/07/2026
Weekend Reads * Inside an Internet shutdown labs.ripe.net/author/mdkamruzzaman-… * Inferring shared IP addresses burdantes.github.io/assets/pdf/mult… * BGP origin attribute manipulation […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 23/07/2026
Any #PortlandME fedi people involved with #DNS, #BGP, #infosec, or #blues?
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 17/07/2026
Weekend Reads * Who carries Tor traffic? www.petsymposium.org/foci/2026/foci… * Internet shutdown measurement gaps www.petsymposium.org/foci/2026/foci… * .CZ domain registration seasonality bit.fsv.cvut.cz/doi/bit.2026.01.05.… * Verizon 2007 […]
infosec.exchange
Original post on infosec.exchange
020
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 15/07/2026
Networking numerology
Screen capture of current IPv4.Global ASN auctions. Highest starting bid for a 3-digit ASN is $69,000 (US).  Lowest auction price shown is $10,000 (US) for a 5-digit ASN.
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 15/07/2026
IPv4.Global is having an auction for #AS8100, which was used by the now defunct hosting provider QuadraNet. Starting bid $50,000 (US). Some, but very very few ASNs should have a greater than standard RIR fee value for vanity reasons or maybe because of who had it (and you expect to get some […]
infosec.exchange
Original post on infosec.exchange
320
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 14/07/2026
Shares of #IBM have dropped about 25% today. Biggest single day drop ever. A generation ago this would be huge news, but we don't talk or think about IBM like we used to in the tech industry.
010