iiinova — where your digital self keeps evolving

Max Resing

@resingm.infosec.exchange.ap.brid.gy

11 followers 1 following 178 posts

Passionate about networking protocols, the Internet, how to measure it and big data. Overall a curious mind and problem solver. Interests & profession: #bigdata […] 🌉 bridged from ⁂ infosec.exchange/@resingm, follow @ap.brid.gy to interact

Posts Replies Media

Max Resing @resingm.infosec.exchange.ap.brid.gy · 12/10/2026

A domain name of mine failed in #DNSViz. The error message is as follows: org zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:500:c::1) I checked other `*.org.` domain names, and they all seem to error on the same cause. Following this rabbit […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 09/10/2026

#NETSCOUT's latest #DDoS Threat Intelligence Report went live recently with some novelties. Sadly, DDoS activity increased again, while attack duration compresses to more short-lived observations. High-impacting DDoS attacks grew by ~1200%. For the first time, we included a section from Arbor […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 05/08/2026

Today, I discovered by accident that my #ISP that is exclusively active in #Germany doesn't have a direct peering link to #DTAG. While #BGPTools aggregation graph can be trusted, I tracerouted a few connections to some known DTAG services. My packets always route over #Zayo. For me, it was a […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 29/07/2026

A discussion on Reddit revealed an interesting observation in the #DNS landscape: The #TLD of #Yemen is under the control of the #Houthis, instead of the official Yemeni government. According to the author, the fall of San'a in 2015 also put the registrar #YemenNet into the hands of the Houthis […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 27/07/2026

For those who are interested in the technical aspects of #censorship evasion: someone posted on r/selfhosted. The author talks about leveraging a "jumper" box that's within a domestic datacenter. That one has a tunnel to a foreign hosting service. It adds latency, but it's a reliable solution […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 13/07/2026

Also good to know for those who are following the industry: Kentik is joining Infoblox. Kentik's blog post argues with network intelligence. A great term that becomes ever more important!

Kentik Is Joining Infoblox

Kentik is excited to announce that we’ve entered into a definitive agreement to be acquired by Infoblox, marking the next chapter in our mission to revolutionize how networks are run. Read on for what this means for our customers, partners, and team.

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 13/07/2026

RE: mastodon.social/@ooni/1168886369768… This is great, thanks @ooni !

mastodon.social

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 02/07/2026

#NVIDIA published a blog post where they present `GQE`, a GPU-based query engine. Querying data from databases with GPU accelleration is beyond cool, and will certainly optimize the storage requirements for #bigdata due to enabling for more efficient compression algorithms. Here is the blog post […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 23/06/2026

Is anyone aware of an alternative to crt.sh ? I really like the website, and it's simple visualization. No bloat around it, just the pure purpose of providing insights from CT logs. However, the website quite often returns server errors, and others. More often than it did in the past, a few […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 15/06/2026

Infoblox revealed in a blog post that by this year, they observed clients resolving #residentialproxy domain names in 65% of their customer networks. Around 60% of governmental and banking customers have observed these #RESIP domain name resolutions. That is seriously concerning, given the fact […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 05/06/2026

As a big fan of #Polars when doing #ETL pipelines, and processing #data, I am happy to see them having their distributed engine available for #Kubernetes deployments. Read the blog post here: pola.rs/posts/polars-distributed-av… #datascience #python #rust

Launching Polars Distributed on Kubernetes

We are launching our distributed engine on Kubernetes (e.g. on-prem, AKS & GKE). Try it for free. It also ships with advanced query profiling and OpenLineage support.

Max Resing @resingm.infosec.exchange.ap.brid.gy · 18/05/2026

It always amuses me to see #residential #proxy providers with service in certain regions. As an Internet infrastructure researcher, you folks have a hard time convincing me that you actually managed to leverage #IPv4 addresses linked to hosts residing in #NorthKorea. #residentialproxy

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 15/05/2026

Anyone open to share some good papers about #CGNAT infrastructure? I am trying to read more and more into this, and I am happy for anyone sharing resources and/or papers on it. #askfedi #askinfosec #internet

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/04/2026

#DN42 searches for someone with hardware, expertise, time and passion to host, run and further develop their registry. It's a project of enthusiasts to play around with BGP in a lab and playground environment. There are plenty of hobbyists who run their own #ASN within this #darknet […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 01/04/2026

Well, here's the first April's joke I found... punoqun.net/. Quite creative, well done! #DNS #Unbound #April1st #AprilFools

The unbound website, but all content is upside down. It matches the domain name `punoqun.net` which is also "unbound" but upside down.

000

Reposted by Max Resing

John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/03/2026

New from the FIRST.org NETSEC SIG: Characterizing Abusive IP Proxies www.first.org/global/sigs/netsec/NE…

Max Resing @resingm.infosec.exchange.ap.brid.gy · 26/03/2026

Fancy, the authoritative nameservers for the `xyz.` TLD are as follows: x.nic.xyz y.nic.xyz z.nic.xyz generationxyz.nic.xyz How fun. I never thought of the #TLD as being a pun to demographic cohorts. #DNS #ICANN #nameservers

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026

Allegedly #NoName agreed to an interview with #daily #darkweb: NoName057(16) Exclusive Interview. While some questions bear some truth, I might give additional context to others. Check this short thread. 🧵 #NoName057 #DDoS #Russia #Ukraine

dailydarkweb.net

NoName057(16) Exclusive Interview: The Pro-Russian Hacker Group Behind 1,500+ DDoS Attacks Speaks Out - Daily Dark Web

NoName057(16) Exclusive Interview: The Pro-Russian Hacker Group Behind 1,500+ DDoS Attacks Speaks Out Discover the latest security threats and database leaks, including unauthorized VPN access and email breaches, in the cyber underground world.Stay informed about emerging cyber threats, such as unauthorized access to databases and sensitive information leaks, affecting global companies and organizations.Learn about the latest cyber incidents, including DDoS attacks and malware threats targeting cryptocurrency wallets and financial institutions.

Max Resing @resingm.infosec.exchange.ap.brid.gy · 23/03/2026

Found out about a project with millions of randomly generated links. The author explained how #Facebook's scraping bot hit it's page 38 million times. All while the company itself claims that their bot only crawls that are shared on their platforms. Why is there so much dishonesty in some huge […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 19/03/2026

Anyone else heard about the sourvereign, and alternative #DNS #TLD `chn.` ? There is a #Wikipedia article in Chinese. I am unsure if it is actually something actively pursued in #China to step up their #Internet #control game. Or if it was merely a financial asset to attract venture capital? […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 13/03/2026

Is there any reason, why `curl` lists an example in their `--header` section as follows: curl -H "User-Agent: yes-please/2000" example.com Is there someone a #Jazz fan, or is it some other kind of a pun? 🤔 #foss #OpenSource #curl #manpage #unix

Max Resing @resingm.infosec.exchange.ap.brid.gy · 12/03/2026

Oh, hey, #IANA assigned a new block of ASNs to #AFRINIC. A good sign that the #Internet #connectivity in #Africa is growing! Keep up the good work! Details here.... #ASN #BGP

Autonomous System (AS) Numbers

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 04/03/2026

#HackLu has opened their #CfP. There is a vast list of topics of interest, thus opening the floor to researchers of various #cybersecurity, #threatintel and #internetmeasurement disciplines. Much of their work has a European, or even global impact. These folks are a bunch of great minds working […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 04/02/2026

At #ICANN, they currently discuss the rollover of a root KSK. They switch from an #RSA based key to an elliptic curve algorithm. From algorithm 8 to algorithm 13, a common observation in the past 2 or 3 years. There will be a multi-year (~3 years) transition period in which both algorithms run […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 02/02/2026

Just had a discussion on routable #IPv4 address space. This lead me to check #Bogon IP address space. I briefly fetched a public bogon list of a large provider, parsed the CIDR blocks and calculated the number of IPv4 addresses. Dividing this by `0.0.0.0/0` eventually lead to the discovery that […]

infosec.exchange

Original post on infosec.exchange

100

Max Resing @resingm.infosec.exchange.ap.brid.gy · 30/01/2026

Anyone else noticed that #DNSOARC actually has their code repositories on #Codeberg? Interested folks can check their page here #DNS #FOSS #OpenSource

The DNS Operations, Analysis, and Research Center (DNS-OARC) brings together key operators, implementors, and researchers on a trusted platform so they can coordinate responses to attacks and other concerns, share information and learn together.

Reposted by Max Resing

Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 22/01/2026

#IPv6 was defined in RFC1883 in December of 1995. That's right, IPv6 is now *30* frickin' years old. I've spent at least 25 of those yelling at people, companies, service providers, and many engineers who really should know better that they need to enable it. Doesn't look like 2026 is going to […]

Original post on mstdn.social

Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/01/2026

From the depths of the Internet: "In January 2023, Bright Data was sued by Meta Platforms for harvesting and selling data scraped from Facebook and Instagram. Meta previously hired Bright Data to scrape data from other websites." * Wikipedia: Bright Data #brightdata #meta #facebook #ai […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/01/2026

Whooops, a rather critical vulnerability found in GNU InetUtils' `telnetd` service. It is missing any input validation, allowing to remotely authenticate as the `root` user. Given the many IoT devices that still have telnet activated, it bears (in my opinion) a high risk of being exploited in […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 16/01/2026

Even if it's not seen that often here on Mastodon: I'd like to share some news on my carrier path: I am happy to announce that I was promoted to a Senior recently. What makes this milestone even more meaningful to me is achieving a promotion around a year after graduating, and transitioning to […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 15/01/2026

Just scraping the #IANA assigned TLDs and the corresponding documented #nameservers. What I don't get is, why so many companies apply for a #TLD. It's not particularly cheap to apply for one of those ngTLDs, yet compared to the company sizes, it's probably pennies. Is it a prestige investment? […]

infosec.exchange

Original post on infosec.exchange

200

Max Resing @resingm.infosec.exchange.ap.brid.gy · 14/01/2026

Looks like the #government of #Iran manages to enforce #censorship even beyond landlines and cell connectivity. They managed to render #Starlink terminals useless by jamming #GPS signals: restofworld.org/2026/iran-starlink-…

Max Resing @resingm.infosec.exchange.ap.brid.gy · 05/01/2026

Since so many of you are discussing message limits on #Mattermost, I was curious what else is the state-of-the-art self-hosted open messaging and collaboration platform. There is something called Mostlymatter. #FOSS #OpenSource #Messaging #SelfHosting

Framasoft / Framateam / Mostlymatter · GitLab

Mostlymatter is a fork of Mattermost without users limit. Download binaries on https://packages.framasoft.org/projects/mostlymatter/. Mattermost is an open source platform for...

Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025

My colleague @jtk and I worked on a small piece on insights by #Netscout on the DNS root server system. Despite all of the nuisance traffic reaching the root servers, our #DDoS telemetry does not yield terribly much. This is not a bad thing though, and can be explained through the ubiquity of […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025

@censys published a blog post on #NoName057(16) and their rotation through #DDoSia #C2 servers. I am a bit surprised that Censys did not join the party to track DDoSia until mid 2025, but I am glad they started to do so nonetheless. What I am missing is, what of the 3-layered architecture the […]

infosec.exchange

Original post on infosec.exchange

100

Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025

May I present to you a lexicographically sortable #UUID alternative? A simple and intuitive design is presented in ULID. It embeds a timestamp in the first 48 bits, followed by a random suffix of 80 bits. #bigdata #databases

GitHub - ulid/spec: The canonical spec for ulid

The canonical spec for ulid. Contribute to ulid/spec development by creating an account on GitHub.

Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025

"Kimwolf was so crazy that it really shot the entire Internet." A #DDoS #botnet that launched 1.7 billion DDoS attacks in just 72 hours: Kimwolf Botnet #Infosec #botnet #android #malware #mirai

blog.xlab.qianxin.com

史上最疯：独家揭秘感染全球180万Android设备的巨型僵尸网络Kimwolf

背景介绍 2025年10月24日，安全社区的信任伙伴给我们提供了一个全新的僵尸网络样本，该样本最特别的地方是它的C2域名14emeliaterracewestroxburyma02132[.]su彼时在Cloudflare 域名流行度排名中位列第2，一周之后甚至超越Google，问鼎Cloudflare 域名流行度排名全球第一。毫无疑问这是一个超级大规模的僵尸网络，基于样本运行时输出的信息以及使用wolfssl库，我们将它命名为Kimwolf. Kimwolf 是一个使用 NDK 编译的僵尸网络，除具备典型的 DDoS 攻击能力外，还集成了代理转发、反向 Shell 和文件管理等功能。从整体架构来看，其功能设计并不复杂，但其中仍有一些值得关注的亮点：例如，该样本采用了简单而有效的栈异或（Stack XOR）操作对敏感数据进行加密；同时利用 DNS over TLS（DoT）协议封装 DNS 请求，以规避传统安全检测。此外，其 C2 身份认证采用基于椭圆曲线的数字签名保护机制，Bot 端会在验签通过后才接受通信指令。近期更引入EtherHiding技术以区块链域名对抗处置，

Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025

Third tool announced by #Astral. This time it's a type checker and language server: ty. This is it. I will now integrate `uv`, `ruff` and `ty` in my workflow. These folks produce such high quality #software. It's amazing! #Python #ruff #uv #ty #foss #opensource

Max Resing @resingm.infosec.exchange.ap.brid.gy · 11/12/2025

Wow. I just had a popup on #Claude in which it allowed me to iopt-in on storing historical chats for context. I thought, for my enterprise account that cannot hurt. So, I opted in. That very moment, Claude started a new conversation with "Hi Claude, what were some highlights from our recent […]

infosec.exchange

Original post on infosec.exchange

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 10/12/2025

#Telegeography blogged about the expansion of #Starlink and how it conquers markets where conventional cabling fall short. On the one hand, it's great to see increased connectivity in those areas, on the other hand, I am a bit concerned that a single legal entity has so much power about so many […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 10/12/2025

It appears the Constitutional Court of #Germany stopped widespread surveillance through monitoring #DNS requests. Read more here. I saw the necessity of #DoT, but I have to admit, I never convinced myself to go that router, other than just small test-runs. Maybe, I should setup DNS over #TLS […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 08/12/2025

A couple of weeks ago, a new domain name made it's appearance on the domain name ranking of #Cloudflare. Shortly later, the company redacted the name, to avoid promoting a #botnet. Recently, the domain name disappeared from Cloudflare's #Radar. A brief check […] [Original post on infosec.exchange]

A screenshot of Cloudflare Radar's top 100 domain names does not show a "redacted" domain name anymore. The domain name of a botnet disappeared.

100

Max Resing @resingm.infosec.exchange.ap.brid.gy · 04/12/2025

No big deal, but the #Wikipedia page of `.ng`, the #TLD of #Nigeria has a link embedded to #NIRA. The link is plain #HTTP. When opening the page, the #web server does not forward to #HTTPS. That actually makes me think about a new feature proposal for the #Wikimedia foundation: Why don't you […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 02/12/2025

Spot the problem. user@host ~$ dig +short AAAA amazon.com user@host ~$ dig +short A amazon.com 98.87.170.71 98.82.161.185 98.87.170.74 #IPv4

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 01/12/2025

Your daily #BGP fact: #TeamCymru's #Bogon list has a total of 596,655,424 #IPv4 addresses in their list. (Just a quick sum. Prefixes are not deduplicated in case of more specific prefixes).

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 01/12/2025

Hmmm, #NANOG discusses #IPv4 pricing falling below $20. There is also a claim that North-American ISPs sell much of their IPv4 space. Why is that happening? Is it, because #IPv6 is now the preferred method? #routing #bgp #netops

Max Resing @resingm.infosec.exchange.ap.brid.gy · 01/12/2025

No idea, that the #Wikimedia foundation operates their own public resolver. They stick to #DoT and #DoH only. Their claim is that #DNS encryption is a must to avoid #censorship and #surveillance. I am probably not planning to use it, but for those who want to play around with it, here is a link […]

infosec.exchange

Original post on infosec.exchange

Max Resing @resingm.infosec.exchange.ap.brid.gy · 28/11/2025

Just discovered a mathematics library for #Rust and #Python: Symbolica. It is #opensource, but has a very narrow license to protect their intellectual property. For those who require more advanced #mathematics, this might be a good library to work with. #math #algebra #science #academia

Symbolica 1.0: Symbolic mathematics in Rust + two new open-source crates – Symbolica | Modern Computer Algebra

Symbolica is a blazing fast and easy-to-use computer algebra library for Python and Rust.

Max Resing @resingm.infosec.exchange.ap.brid.gy · 26/11/2025

The #NANOG mailing list discussed an outage of #Cogent in #Texas. The company's update: "This is being caused by multiple fiber cuts". Must be lots of stuff going on, if multiple fiber cuts appeared at the same time. Anyone ideas what could have caused it? #outage #networking #bgp

ecogent.cogentco.com

000

Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/11/2025

This is fine ... #Python #PythonDocs #Downtime #FOSS

A screenshot of a browser accessing `docs.python.org`, and the response is a "503 Service Unavailable" HTTP response.