Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Max Resing

@resingm.infosec.exchange.ap.brid.gy
11 followers 1 following 178 posts

Passionate about networking protocols, the Internet, how to measure it and big data. Overall a curious mind and problem solver. Interests & profession: #bigdata […] 🌉 bridged from ⁂ infosec.exchange/@resingm, follow @ap.brid.gy to interact

PostsRepliesMedia
Max Resing @resingm.infosec.exchange.ap.brid.gy · 12/10/2026
A domain name of mine failed in #DNSViz. The error message is as follows: org zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:500:c::1) I checked other `*.org.` domain names, and they all seem to error on the same cause. Following this rabbit […]
infosec.exchange
Original post on infosec.exchange
002 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 09/10/2026
#NETSCOUT's latest #DDoS Threat Intelligence Report went live recently with some novelties. Sadly, DDoS activity increased again, while attack duration compresses to more short-lived observations. High-impacting DDoS attacks grew by ~1200%. For the first time, we included a section from Arbor […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 05/08/2026
Today, I discovered by accident that my #ISP that is exclusively active in #Germany doesn't have a direct peering link to #DTAG. While #BGPTools aggregation graph can be trusted, I tracerouted a few connections to some known DTAG services. My packets always route over #Zayo. For me, it was a […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 29/07/2026
A discussion on Reddit revealed an interesting observation in the #DNS landscape: The #TLD of #Yemen is under the control of the #Houthis, instead of the official Yemeni government. According to the author, the fall of San'a in 2015 also put the registrar #YemenNet into the hands of the Houthis […]
infosec.exchange
Original post on infosec.exchange
003 3
Max Resing @resingm.infosec.exchange.ap.brid.gy · 27/07/2026
For those who are interested in the technical aspects of #censorship evasion: someone posted on r/selfhosted. The author talks about leveraging a "jumper" box that's within a domestic datacenter. That one has a tunnel to a foreign hosting service. It adds latency, but it's a reliable solution […]
infosec.exchange
Original post on infosec.exchange
002 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 16/07/2026
@jtk - Following your argument means that also the prefixes `1.1.1.0/24`, `8.8.8.0/24`, `9.9.9.0/24` and the likes are of no special value. The only benefit I can see is their memorability. Whether I would have to type `8.8.8.8` or any other IPv4 address into my DNS configs, wouldn't really […]
infosec.exchange
Original post on infosec.exchange
101 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 13/07/2026
Also good to know for those who are following the industry: Kentik is joining Infoblox. Kentik's blog post argues with network intelligence. A great term that becomes ever more important!
kentik.com
Kentik Is Joining Infoblox
Kentik is excited to announce that we’ve entered into a definitive agreement to be acquired by Infoblox, marking the next chapter in our mission to revolutionize how networks are run. Read on for what this means for our customers, partners, and team.
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 13/07/2026
RE: mastodon.social/@ooni/1168886369768… This is great, thanks @ooni !
mastodon.social
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 02/07/2026
#NVIDIA published a blog post where they present `GQE`, a GPU-based query engine. Querying data from databases with GPU accelleration is beyond cool, and will certainly optimize the storage requirements for #bigdata due to enabling for more efficient compression algorithms. Here is the blog post […]
infosec.exchange
Original post on infosec.exchange
001 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 23/06/2026
Is anyone aware of an alternative to crt.sh ? I really like the website, and it's simple visualization. No bloat around it, just the pure purpose of providing insights from CT logs. However, the website quite often returns server errors, and others. More often than it did in the past, a few […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 15/06/2026
Infoblox revealed in a blog post that by this year, they observed clients resolving #residentialproxy domain names in 65% of their customer networks. Around 60% of governmental and banking customers have observed these #RESIP domain name resolutions. That is seriously concerning, given the fact […]
infosec.exchange
Original post on infosec.exchange
001 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 05/06/2026
As a big fan of #Polars when doing #ETL pipelines, and processing #data, I am happy to see them having their distributed engine available for #Kubernetes deployments. Read the blog post here: pola.rs/posts/polars-distributed-av… #datascience #python #rust
pola.rs
Launching Polars Distributed on Kubernetes
We are launching our distributed engine on Kubernetes (e.g. on-prem, AKS & GKE). Try it for free. It also ships with advanced query profiling and OpenLineage support.
021 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 18/05/2026
It always amuses me to see #residential #proxy providers with service in certain regions. As an Internet infrastructure researcher, you folks have a hard time convincing me that you actually managed to leverage #IPv4 addresses linked to hosts residing in #NorthKorea. #residentialproxy
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 15/05/2026
Anyone open to share some good papers about #CGNAT infrastructure? I am trying to read more and more into this, and I am happy for anyone sharing resources and/or papers on it. #askfedi #askinfosec #internet
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 12/05/2026
@jtk - Ufff.
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/04/2026
#DN42 searches for someone with hardware, expertise, time and passion to host, run and further develop their registry. It's a project of enthusiasts to play around with BGP in a lab and playground environment. There are plenty of hobbyists who run their own #ASN within this #darknet […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 01/04/2026
Well, here's the first April's joke I found... punoqun.net/. Quite creative, well done! #DNS #Unbound #April1st #AprilFools
The unbound website, but all content is upside down. It matches the domain name `punoqun.net` which is also "unbound" but upside down.
000 0
Reposted by Max Resing
John Kristoff @jtk.infosec.exchange.ap.brid.gy · 30/03/2026
New from the FIRST.org NETSEC SIG: Characterizing Abusive IP Proxies www.first.org/global/sigs/netsec/NE…
021 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 26/03/2026
Fancy, the authoritative nameservers for the `xyz.` TLD are as follows: x.nic.xyz y.nic.xyz z.nic.xyz generationxyz.nic.xyz How fun. I never thought of the #TLD as being a pun to demographic cohorts. #DNS #ICANN #nameservers
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 26/03/2026
@jtk - Their prices are a bit heavy though: calculator.stackit.cloud/database
calculator.stackit.cloud
STACKIT Calculator – Cloud Pricing Calculator
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 26/03/2026
@jtk - Yeah, it's being frequently discussed on German news. It belongs to the Schwarz group, to which also Lidl and Kaufland, two German supersized supermarket chains. The vision is to deliver a German/European true cloud experience similar to the big players like IBM, AWS, Azure, GCP, Alibaba […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Another anecdote about their target selection was written up by my colleague and me on a #Blog post at $dayjob. Please check the section on "Intentional Targeting Automation Error?" www.netscout.com/blog/asert/italy-c…
netscout.com
Italy in the Crosshairs | NETSCOUT
Reports of cyberattacks against Italian organizations spiked on February 16th, lasting for two weeks before tapering off by March 3rd.
030 3
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Q10: Is there anything that you would like to bring directly to a global audience? "Join our DDoSia Project." Please don't, you will participate in cyber criminal activity. #Anonymous #LOIC #HOIC #DDoS #NoName #daily #darkweb #NoName057 #Russia #Ukraine
100 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Q9: Are your actions driven more by ideology, strategy, or opportunity? "We are driven by the ideology of justice." I'd argue that NoName is no different than many other threat actors, driven by opportunism. #Anonymous #LOIC #HOIC #DDoS #NoName #daily #darkweb #NoName057 #Russia #Ukraine
100 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Q6: How do you respond to allegations that your actions affect civilians or unrelated organizations? "We are fighting for truth and justice, and people understand this, no matter how much dirt they try to pour on us." Not sure how much a one-man regional janitor and craftsman services company […]
infosec.exchange
Original post on infosec.exchange
100 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Q5: What message are you trying to convey through your actions? "we are not servers or software code, we are an ideology carried and shared by living people. An idea cannot be killed." Sounds a lot like #Anonymous rhetoric again. #Anonymous #LOIC #HOIC #DDoS #NoName #daily #darkweb #NoName057 […]
infosec.exchange
Original post on infosec.exchange
100 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Q4: How do you distinguish your group from others working in the same field? "We are unique in that, for the first time on the Darknet, we have created a hacker crowdsourcing system, we have organized attacks in such a way that thousands of real people participate in them" Not true. #Anonymous […]
infosec.exchange
Original post on infosec.exchange
100 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Q3: How do you decide which organizations or sectors to focus on? "We devote a lot of time to analytics and goal intelligence." From an analytical point of view, this is partially true. Initially, the group was known for extensive reconnaissance. However, they reuse targets for years, even if […]
infosec.exchange
Original post on infosec.exchange
100 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 25/03/2026
Allegedly #NoName agreed to an interview with #daily #darkweb: NoName057(16) Exclusive Interview. While some questions bear some truth, I might give additional context to others. Check this short thread. 🧵 #NoName057 #DDoS #Russia #Ukraine
dailydarkweb.net
NoName057(16) Exclusive Interview: The Pro-Russian Hacker Group Behind 1,500+ DDoS Attacks Speaks Out - Daily Dark Web
NoName057(16) Exclusive Interview: The Pro-Russian Hacker Group Behind 1,500+ DDoS Attacks Speaks Out Discover the latest security threats and database leaks, including unauthorized VPN access and email breaches, in the cyber underground world.Stay informed about emerging cyber threats, such as unauthorized access to databases and sensitive information leaks, affecting global companies and organizations.Learn about the latest cyber incidents, including DDoS attacks and malware threats targeting cryptocurrency wallets and financial institutions.
111 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 23/03/2026
Found out about a project with millions of randomly generated links. The author explained how #Facebook's scraping bot hit it's page 38 million times. All while the company itself claims that their bot only crawls that are shared on their platforms. Why is there so much dishonesty in some huge […]
infosec.exchange
Original post on infosec.exchange
012 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 19/03/2026
Anyone else heard about the sourvereign, and alternative #DNS #TLD `chn.` ? There is a #Wikipedia article in Chinese. I am unsure if it is actually something actively pursued in #China to step up their #Internet #control game. Or if it was merely a financial asset to attract venture capital? […]
infosec.exchange
Original post on infosec.exchange
021 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 13/03/2026
Is there any reason, why `curl` lists an example in their `--header` section as follows: curl -H "User-Agent: yes-please/2000" example.com Is there someone a #Jazz fan, or is it some other kind of a pun? 🤔 #foss #OpenSource #curl #manpage #unix
022 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 12/03/2026
Oh, hey, #IANA assigned a new block of ASNs to #AFRINIC. A good sign that the #Internet #connectivity in #Africa is growing! Keep up the good work! Details here.... #ASN #BGP
iana.org
Autonomous System (AS) Numbers
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 04/03/2026
#HackLu has opened their #CfP. There is a vast list of topics of interest, thus opening the floor to researchers of various #cybersecurity, #threatintel and #internetmeasurement disciplines. Much of their work has a European, or even global impact. These folks are a bunch of great minds working […]
infosec.exchange
Original post on infosec.exchange
002 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 04/02/2026
At #ICANN, they currently discuss the rollover of a root KSK. They switch from an #RSA based key to an elliptic curve algorithm. From algorithm 8 to algorithm 13, a common observation in the past 2 or 3 years. There will be a multi-year (~3 years) transition period in which both algorithms run […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 02/02/2026
By the way: #Python is such a great tool for these quick endeavors: lines = res.content.decode("utf-8").split("\n") lines = filter(lambda e: len(e) and not e.startswith("#"), lines) addr = [ipaddress.IPv4Network(e) for e in lines] sum(map(lambda e: e.num_addresses, addr)) / […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 02/02/2026
Just had a discussion on routable #IPv4 address space. This lead me to check #Bogon IP address space. I briefly fetched a public bogon list of a large provider, parsed the CIDR blocks and calculated the number of IPv4 addresses. Dividing this by `0.0.0.0/0` eventually lead to the discovery that […]
infosec.exchange
Original post on infosec.exchange
100 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 30/01/2026
Anyone else noticed that #DNSOARC actually has their code repositories on #Codeberg? Interested folks can check their page here #DNS #FOSS #OpenSource
codeberg.org
DNS-OARC
The DNS Operations, Analysis, and Research Center (DNS-OARC) brings together key operators, implementors, and researchers on a trusted platform so they can coordinate responses to attacks and other concerns, share information and learn together.
011 1
Reposted by Max Resing
Jan Schaumann @jschauma.mstdn.social.ap.brid.gy · 22/01/2026
#IPv6 was defined in RFC1883 in December of 1995. That's right, IPv6 is now *30* frickin' years old. I've spent at least 25 of those yelling at people, companies, service providers, and many engineers who really should know better that they need to enable it. Doesn't look like 2026 is going to […]
mstdn.social
Original post on mstdn.social
207 7
Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/01/2026
From the depths of the Internet: "In January 2023, Bright Data was sued by Meta Platforms for harvesting and selling data scraped from Facebook and Instagram. Meta previously hired Bright Data to scrape data from other websites." * Wikipedia: Bright Data #brightdata #meta #facebook #ai […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/01/2026
Well, I set up a machine to test it. #Debian 13 with the `telnetd` daemon running on `inetd`. To me it looks like the vulnerability allows me to login without any password authentication. Initially, I believed a password authentication is still required. But this makes #CVE `GCVE-1-2026-0007` […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 21/01/2026
Whooops, a rather critical vulnerability found in GNU InetUtils' `telnetd` service. It is missing any input validation, allowing to remotely authenticate as the `root` user. Given the many IoT devices that still have telnet activated, it bears (in my opinion) a high risk of being exploited in […]
infosec.exchange
Original post on infosec.exchange
202 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 16/01/2026
Even if it's not seen that often here on Mastodon: I'd like to share some news on my carrier path: I am happy to announce that I was promoted to a Senior recently. What makes this milestone even more meaningful to me is achieving a promotion around a year after graduating, and transitioning to […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 15/01/2026
Just scraping the #IANA assigned TLDs and the corresponding documented #nameservers. What I don't get is, why so many companies apply for a #TLD. It's not particularly cheap to apply for one of those ngTLDs, yet compared to the company sizes, it's probably pennies. Is it a prestige investment? […]
infosec.exchange
Original post on infosec.exchange
200 2
Max Resing @resingm.infosec.exchange.ap.brid.gy · 14/01/2026
Looks like the #government of #Iran manages to enforce #censorship even beyond landlines and cell connectivity. They managed to render #Starlink terminals useless by jamming #GPS signals: restofworld.org/2026/iran-starlink-…
004 4
Max Resing @resingm.infosec.exchange.ap.brid.gy · 05/01/2026
Since so many of you are discussing message limits on #Mattermost, I was curious what else is the state-of-the-art self-hosted open messaging and collaboration platform. There is something called Mostlymatter. #FOSS #OpenSource #Messaging #SelfHosting
framagit.org
Framasoft / Framateam / Mostlymatter · GitLab
Mostlymatter is a fork of Mattermost without users limit. Download binaries on https://packages.framasoft.org/projects/mostlymatter/. Mattermost is an open source platform for...
010 1
Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025
My colleague @jtk and I worked on a small piece on insights by #Netscout on the DNS root server system. Despite all of the nuisance traffic reaching the root servers, our #DDoS telemetry does not yield terribly much. This is not a bad thing though, and can be explained through the ubiquity of […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025
@jtk - It feels like UUIDv7 comes close, but it still not matches all of it. `ULID` adds a shorter representation too, but that can come for free from UUIDs to, since it's a representation thing. Further, the GitHub repo has changes from 8 years ago, meaning that the modern standard of UUIDv7 […]
infosec.exchange
Original post on infosec.exchange
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025
@censys - Grand, the author is on Mastodon, too. @silas - tagging for visibility :) Great article by the way!
000 0
Max Resing @resingm.infosec.exchange.ap.brid.gy · 17/12/2025
@censys published a blog post on #NoName057(16) and their rotation through #DDoSia #C2 servers. I am a bit surprised that Censys did not join the party to track DDoSia until mid 2025, but I am glad they started to do so nonetheless. What I am missing is, what of the 3-layered architecture the […]
infosec.exchange
Original post on infosec.exchange
100 1