Sign in

John Kristoff

@jtk.infosec.exchange.ap.brid.gy
60 followers 14 following 774 posts

UIC PhD candidate | Dataplane.org | Verisign #BGP #DNS #infosec and bit mechanic #Blues / #Chicago / #tfr / #fedi22 Views are my own 🌉 bridged from ⁂ infosec.exchange/@jtk, follow @ap.brid.gy to interact

PostsRepliesMedia
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 10/10/2026
sicenter and siexports are an exec office, international trade administration (department of commerce) name for an ill-named "super intelligence" project purportedly involving the import and export of some ai tech. The former goes to an auth page, the later to some minimal page describing the […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 09/10/2026
Weekend Reads * China building AI data centers giftarticle.ft.com/giftarticle/acti… * Inside ICANN and new TLDs www.wired.com/story/icann-top-level… * Multi-cloud net telescope in Asia-Pacific […]
infosec.exchange
Original post on infosec.exchange
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 09/10/2026
seafood is an exec dept of agriculture name, no content. swpc is an exec small business name for the Smaller War Plants Commission, which is a department of "war" thing
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 09/10/2026
Add fbi.gov to the list of sites that block magic IP addresses. "We're sorry... The request has been blocked." But Tor works. So absurd.
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 08/10/2026
[Politics] One does wonder if the U.S. exec office's promotion of super intelligence was an intentional g(r)ift to Meta's TLD application.
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 08/10/2026
No recent hijacks or misoriginations I'm aware of. Just thetans doing RPKI I guess. social.bgp.tools/@newaspa/statuses/…
social.bgp.tools
Post by New ASPA Signers, @newaspa@bgp.tools
AS25823 (CHURCH OF SCIENTOLOGY FLAG SERVICE ORGANIZATION, INC.) has signed ASPA objects for the first time! This means 3680 unique ASNs have signed ASPA objects at some point
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 07/10/2026
@jschauma asdf (easydns) superintelligence (by meta registry holdings), taylorswift, trump, etc
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 06/10/2026
wh28olympics, exec dhs name, no content. presumably something to do with the 2028 summer olympics task force
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 06/10/2026
Remember this AS (see quote)? The bot biz must be good. social.bgp.tools/@transfers/statuse…
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 05/10/2026
Pacific Islands ISOC chapter historical list archives orbit.apnic.net/hyperkitty/list/pac… cc: @IHI
orbit.apnic.net
PIGNET Mailing List archive 1998-2008 - PacNOG - Orbit
Where the APNIC community connect, discuss and share information
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 04/10/2026
@hrbrmstr Page 17 may be of interest dataplane.org/jtk/talks/tf-csirt-76…
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
RE: mastodon.social/@botgov/11737198375… si and whitehousefellows, two new exec names, no content as of now
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
Weekend Reads * BGP anomaly detection dl.acm.org/doi/abs/10.1145/3777912.… * ChatBGP dl.acm.org/doi/abs/10.1145/3777912.… * Computer Networks: A Systems Approach 7e.systemsapproach.org/index.html * False 5G base station risks […]
infosec.exchange
Original post on infosec.exchange
012
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
Oh, and this just happened to be published today: blog.arxiv.org/2026/10/01/updated-r…
blog.arxiv.org
ArXiv's Updated Rate Limit Policy
Comments
013
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
@patrickgilmore.bsky.social infosec.exchange/@jtk/1173664086087…
infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 02/10/2026
Golly gee, what could possibly explain the tremendous rise in re *ahem cough-cough*search papers submissions? arxiv.org/stats/monthly_submissions
arxiv.org
Monthly Submissions
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/09/2026
Add #GoDaddy to the list (joining notables such as cisa, fastly, reddit) of sites blocking magic source IP addrs/prefixes - even when there is no associated bad reputation for those addresses. Sad to see who uses Akamai's hammer to whack away legit users and customers.
210
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/09/2026
In case you may have been wondering why you haven't seen me highlight america.gov from @botgov, it is because that name has been around since at least 2007. It has historically been a resource associated with the Department of State. It is obviously something very different now […]
infosec.exchange
Original post on infosec.exchange
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 28/09/2026
This content is associated with an intro CS course by some renowed and well-known academics, but there is at least one kind of serious mistake therein, can you spot it? textbook.cs161.org/network/dnssec.h…
textbook.cs161.org
DNSSEC
Online textbook for CS 161: Computer Security at UC Berkeley.
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 28/09/2026
Beware of fake accounts following you, especially new accounts from mastodon.social. Anecdotally this seems to be increasingly frequent lately, perhaps coinciding with the upcoming U.S. elections. I've seen and reported at least a couple recently. Most recent is this one still active […]
infosec.exchange
Original post on infosec.exchange
011
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 27/09/2026
These infosec monitoring services may be of interest for those that don't know about them. The good people at utexas have been doing this awhile and I don't think it is widely known outside edu circles. It is open to others but they try to focus on non profits first […]
infosec.exchange
Original post on infosec.exchange
022
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 26/09/2026
Weekend Reads * File notification attacks inoti.fyi * IP geolocation at APNIC 62 blog.apnic.net/2026/09/24/ip-geoloc… * Russian MAX Messenger analysis interseclab.org/research/max * SubTel Forum Issue […]
infosec.exchange
Original post on infosec.exchange
020
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 26/09/2026
RE: infosec.exchange/@jtk/1173184901435… I was joking, or I meant it that way. I hope no one following me took that seriously and registered new .si names based on this absurd ai-rebranding.
infosec.exchange
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 24/09/2026
RE: mastodon.social/@botgov/11732274249… app.gov leads to a whitehouse page for a new whitehouse mobile app, looking forward to the sure to be forthcoming app analysis
mastodon.social
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 23/09/2026
@tychotithonus I'm not 100% positive there is any commercial derivation. Might be a question best put in the NANOG list. If you're not on it I can relay for you. Is the original software even deployed all that much now?
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 23/09/2026
This is the first time I'm aware of since Russia's invasion into Ukraine in 2022 that this data center was disrupted due to hostilities: "We are writing to inform you that our data center in Kyiv has been damaged in a drone attack. As a result, all cloud services hosted from this facility are […]
infosec.exchange
Original post on infosec.exchange
020
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 22/09/2026
#Jev limited access began one week ago. Days later an 11-page evaluation research paper is submitted to arxiv and appears today. Amazing! Oh wait... lead author has been involved in DOZENS of new papers appearing on arxiv this month alone. Haha *plonk* arxiv.org/abs/2609.23136
arxiv.org
Fast Intent-Driven Service Orchestration with Jev for 6G Edge Networks
Intent-driven services envisioned for sixth-generation (6G) edge networks must translate changing requirements into executable contracts while wireless requests continue to arrive. Interpretation consumes part of the same deadline budget as transmission, queueing, and execution. We evaluate Jev as a decision model for this stage, asking whether faster contract activation improves service timeliness while preserving interpretation quality. Contracts specify permitted execution locations, deadlines, and priorities; a numerical scheduler uses them to allocate edge work. The evaluation combines live Jev, DeepSeek, Gemini, and self-hosted Qwen responses with packet-level New Radio simulation, mobility events, shared edge queues, and a real image-reading service. Cached interpretation with numerical scheduling substantially improves completion over direct model-selected placement. With correct interpretation on all evaluated contracts, Jev reduces median decision latency by 22.4% against DeepSeek and 61.9% against Gemini; completion in the modeled update scenarios rises by 3.50 and 8.35 percentage points. A separate comparison with direct-attribute Qwen retains a 53.0% latency reduction and a 4.78-point completion gain. Exchanging recorded model and scheduling waits reproduces the comparator completion summaries for all 12 trajectories in each of two modeled comparisons. In the real image service, Jev retains faster decisions and completes 459 requests correctly and on time, compared with 463 for DeepSeek and 435 for Qwen out of 1,080 each. These findings connect fast intent decisions to timely edge service execution and support using Jev at contract activation, with numerical scheduling adapting placements to current network and computing state.
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 22/09/2026
@darkuncle A little later my colleagues in edu put the software on the PC build that went into dorms, vaulting them to rc5's rank #2 :-) cc: @kemp stats.distributed.net/participant/p…
stats.distributed.net
stats.distributed.net - RC5-64 Participant Listing by Overall Rank: 1 to 100
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 19/09/2026
@hrbrmstr This is not my area of expertise and I can't pretend to get excited about this stuff as many AI watchers seem to be all of a sudden, but this looks like a pretty good write up to understand #Jev and what is driving the hype. archerhume.com/posts/jevs-architect…
archerhume.com
Jev’s Architecture Unmasked — archerhume
I probed Jev with 10,000 API calls to work out roughly how it’s built, and why most of the grifter takes on X are completely wrong.
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 19/09/2026
he Internet Last Week * Central Asia regional connectivity labs.ripe.net/author/anastasiya-pak… * DNSSEC-anchored stateless encrypted auth DNS arxiv.org/abs/2609.14210 * Router compromise walk-through […]
infosec.exchange
Original post on infosec.exchange
020
Reposted by John Kristoff
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/09/2026
We have 28 positions open (most remote, some non-US|CA). Attached are the research & engineering positions open (since I don't think sales or marketing folks follow me here). Links to these and more @ censys.com/careers DM me for a Signal contact #FediHired
Senior Security Researcher
Remote
Systems Engineer
RemoteEngineering
Distributed Systems Engineer (Data Platform)
Remote (US/Canada)
Distributed Systems Engineer (Data Platform)
Remote (US/Canada)
Engineering Manager
Remote (US/Canada)
Senior AI/LLM Engineer
Remote (US/Canada)
Senior AI/LLM Engineer
Remote (US/Canada)
Senior Distributed Systems Engineer
Remote (US/Canada)
Senior Machine Learning Engineer
Remote (US/Canada)
Staff Backend Engineer, Exposure Management
Remote (US/Canada)
Staff Backend Engineer, SOC & Threat Hunting
Ann Arbor, MI
Staff Scanning Engineer
Remote (US)
015
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 18/09/2026
@renprovo this an imposter? mastodon.social/@Rn677
mastodon.social
Ren Provo (@Rn677@mastodon.social)
0 Posts, 275 Following, 10 Followers ·
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 17/09/2026
@tychotithonus I've forgotten most of what I did or knew about these things now. The had at least a 486 in later models and 64 MB sounds right. I think we maxed them out if we could. We ran NetWare or OS/2 on them. I remember I setup one with an optical jukebox. I think a 20 or 40-disc […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 17/09/2026
Ever see or hear of NetFRAME? They were a kind of elite and pricey PC server in the early/mid 1990s. They had a reputation for high availability and reliability in a market many mini/mainframe people considered replete with cheap junk (not entirely untrue). In a water-flooded data center event […]
infosec.exchange
Original post on infosec.exchange
101
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 12/09/2026
Weekend Reads * China-controlled US Internet threats chinaselectcommittee.house.gov/medi… * DNS hijack and cache poison via malicious apps arxiv.org/abs/2609.09345 * IPv6 Hitlist Service lessons […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 11/09/2026
@chris easyDNS is based in Canada
012
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 11/09/2026
In 2001 there were no iphones, email was the predominant form of all online communications, people were arguing about the utility of TCP MD5 auth on BGP sessions, and there was no such thing as passive DNS. I was a volunteer helping with the "shownet" at Networld+Interop in Atlanta on September […]
infosec.exchange
Original post on infosec.exchange
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 10/09/2026
Wicked helpful org names nsw.gov.au, haha. social.bgp.tools/@transfers/statuse…
social.bgp.tools
Post by IP/ASN Transfers, @transfers@bgp.tools
"DEPARTMENT OF FINANCE SERVICES AND INNOVATION" transferred AS45692 to "Department of Customer Service"
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 10/09/2026
@darkuncle My advice is don't feel guilty about being unable to pay for more than you want to spend or can afford. But if you can afford paying for sone quality journalism, please do. Many libraries provide free (digital) access. An aggregator like Apple News might be more cost effective if you […]
infosec.exchange
Original post on infosec.exchange
110
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 09/09/2026
@ericjgeller.com Anectdotal and imperfect measure... by my accounting an industry / government partnership community I won't provide any detail about has seen an "order of magnitude" drop in activity at this point in the current current administration compared to the prior one. The community's […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 09/09/2026
RE: flipboard.com/@notusreports/the-was… If you are or were a reader of The Washington Post, this may be of interest:
flipboard.com
122
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 07/09/2026
With apologies to Mutt... Social media still sucks, the fediverse just sucks less
021
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 06/09/2026
@adulau I recognize a few of them, many are pretty old. Some of the content may exist under new links. Presumably archive.org had most of them, but I know of at least one org that purposely opts out of archive.org crawling.
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 05/09/2026
Weekend Reads * Internet PMTU measurement analysis pure.mpg.de/rest/items/item_3728539… * Negative DNS answers ispcol.potaroo.net/2026-08/nxd.html * Telstra July 2026 outage report […]
infosec.exchange
Original post on infosec.exchange
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 04/09/2026
Good grief, #Fastly is now seemingly returning 403s from all their website properties if your origin IP4 address is not on an approved list of source prefixes for clients. At least access to them via Tor still works. The well-meaning intention to limit undesirable bots and scrapers is […]
infosec.exchange
Original post on infosec.exchange
022
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 03/09/2026
RE: mastodon.social/@botgov/11720808046… arcade(s), redirects to a whitehouse page, content looks like mindless dope fuel
mastodon.social
000
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 31/08/2026
news.ycombinator.com/item?id=494992… #IPv6
news.ycombinator.com
Tell HN: HN's IPv6 address is down | Hacker News
010
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/08/2026
Pacific Islands #IPv6 monitor pacific.ipv6forum.com
pacific.ipv6forum.com
Pacific Islands IPv6 Monitor
Pacific Islands IPv6 Monitor — IPv6 deployment estimates for Pacific economies from DNS, mail, and web checks plus APNIC Labs capability data.
030
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/08/2026
I don't suppose anyone within viewing distance has a way to inform news.ycombinator.com (aka Hacker News) that their associated #IPv6 AAAA DNS RR (2606:7100:1:67::26) appears to be unreachable?
111
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 29/08/2026
RE: mastodon.social/@botgov/11717946521… example an executive office name is associated with the "Council of Test Administration". Nothing there currently, but I could imagine there may be some name collisions if they actually put it to use.
mastodon.social
010