iiinova — where your digital self keeps evolving

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/08/2026

My otherwise forgettable toot has triggered something in bluesky ai-loving bot accounts I guess.

A nonsense reply from a bluesky bot to one of my toots that happened to mention ai.

010 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/08/2026

jackceoai on the latest IP prefix transfer

jackceoai account on Bluesky replied to my toot about an IP prefix transfer. The reply is nonsense.

210 2

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 13/05/2026

Even critics of network infrastructure availability and services (connectivity, routing, naming, security extensions) must admit things could be a lot worse. They could look like this.

Recent graph and statistics of Claude AI services availability. Over 90 days, claude.ai = 98.66% uptime, Claude Console (platform.claude.com) = 99.1% uptime, Claude API (api.anthropic.com) = 99.0% uptime, Claude Cowork = 99.39% uptime, and Claude for Government = 99.87% uptime.

010 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 16/04/2026

Van Jacobson, Multimedia Conferencing on the Internet, SIGCOMM '94 tutorial, London England I didn't attend and I don't remember where I got this. It is the ~75-page hard copy, spiral bound tutorial slide material. Contains quips, diagrams, formulas, and […] [Original post on infosec.exchange]

Covert of spiral-bound material for a SIGCOMM '94 Tutorial, title is Multimedia Conferencing on the Internet, Van Jacobson, Lawrence Berkeley Laboratory, Berkeley, CA 94720.

011 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 06/03/2026

Bar plots like these may raise more questions than answers. Without any y-axis label what are we to make of this? We don't really have a sense of scale. Are two months on the x-axis long enough to show correlation or just coincidence? They show graphs […] [Original post on infosec.exchange]

https://research.checkpoint.com/2026/interplay-between-iranian-targeting-of-ip-cameras-and-physical-warfare-in-the-middle-east/

010 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 12/01/2026

Yeeha! This would be one heck of a route leak: ... but presumably just some local CIDR Report breakage. :-) Reaching out to Geoff.

Screen capture of plot and table from CIDR-report.org of IP4 BGP routes for the past week. Hovering just over 1 million routes until 2026-01-11 when the count explodes to about 1.65 billion.

010 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 08/01/2026

#ThrowbackThursday An old screen cap from ~2006-2007. If I recall, Snatch-2 was a toolkit that included a #DDoS component kind of like BlackEnergy maybe? popular in Russian underground forums at the time Some remnants of the home page URL are available in the Wayback Machine.

Snatch-2 login panel with Russian language labels dated 2006.

000 0

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 20/12/2025

When you're trying to get #Google to help them fix a problem they have in relaying an email to a list (they are forwarding as if it they are originating your non-GMail email, thus incurring an SPF failure) their helpful support team to the rescue (see image […] [Original post on infosec.exchange]

Thank you for reaching out to Google Workspace Support. This is Jolina, and | hope this message finds you well

Thank you for your patience as we look into the issues you've been experiencing with your email integration.

To help our technical team pinpoint exactly why the connection is failing, we need a bit more visibility into how your third-party application is communicating with our servers. Could you please provide the following two items?

A Screen Recording: Please record your screen while you reproduce the issue. This helps us see the exact steps taken, the specific error messages that appear, and the behavior of the application during the send process.

020 2

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 21/11/2025

This might win the the most unusual #BGP image in a paper award.

Hard to annotate this image that won't just confuse further. Maybe try yourself? https://arxiv.org/abs/2511.14467

000 0

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 18/11/2025

On 2025-11-05 CAMTEL (#AS15964) began announcing 4.0.0.0/8 and 8.0.0.0/8. Others announce more specific prefixes within them, but as the plot shows CAMTEL is now receiving an elevated amount of traffic to the corresponding, unannounced address space in these […] [Original post on infosec.exchange]

Plot shows longitudinal plot of ingress/egress traffic for CAMTEL. A clear rise in ingress traffic, approximately 2x to 3x more than typical can be seen on ingress traffic since 2025-11-05.

001 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/10/2025

I used Markdown encoding, which won't work for everyone. So here is an a image of the output if that helps anyone.

dig @1.1.1.1 foobar.gov +norecurse +nocmd +noquestion +noauthority +nostats
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1808
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232

010 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 27/10/2025

+1 geek points if you spot the problem with this form

Web form with two fields. First first is labeled "EMAIL ADDRESS", second field is labeled "CONFIRM EMAIL ADDRESS". Both fields have example text of: email@website.com

020 2

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 18/09/2025

Seen on the NordVPN Linux page. All links but one work. "How to disable IPv6 on Linux" is 404. Couldn't have said it better myself. #IPv6

Screenshot of a NordVPN Linux client page. Text links include:

Learn more about Linux security and configurations
How to secure a Linux server or personal device
NordVPN Linux release notes
The most common types of Linux malware
How to connect to NordVPN with IKEv2/IPSec on Linux
Best Linux distributions for privacy and security
How to connect to your dedicated IP on Linux
How to disable IPv6 on Linux
How to configure Linux Ubuntu setup
How to get connection logs on Linux
How to reset your application preferences on Linux

000 0

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 04/08/2025

#IPv6 bizarro world, courtesy of whmyip [dot] com. Just me or IPv6=IPv4 for everyone.

Screen capture from a web site that claims to tell you what your IP address is. For the IPv4 address it shows an IPv6 address, partially redacted. For the IPv6 address it says Unable to detect IPv6.

011 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/08/2025

In case this week's news was too upbeat for you, radioactive wasps now. orpspublic.doe.gov/orps/reports/dis…

110 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/07/2025

This was "packet rat". +2 points to id what pack is sitting on, +10 if you know the specific phone device to the rear.

Purple stuff rat sitting atop an old net chassis device, in the background is a rare ip phone. Specific product details in a follow up.

100 1

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 24/04/2025

Picture of a credit card skimmer and website where you could purportedly get them ~2007. I couldn't find an archive of the site. I'm not sure if it was legit or not, but I remember seeing a few different pics advertising for it back then. This is just one of […] [Original post on infosec.exchange]

Picture of a credit card skimmer with the URL overlaid (http://skimmers.us)

000 0

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 13/03/2025

#ThursdayThrowback Here is a ~20 year old plot showing the frequency distribution of client source port usage at an edu #DNS resolver. Notice how the most common ports started at around 1024? That was Microsoft Windows. This picture should look a lot different if I were redraw this today.

000 0

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 13/11/2024

How has this not been repeatedly showing up in my timeline?

000 0