Amy Renee

Amy Renee

@amyengineer.bsky.social

All things networking & security. Sharer of knowledge, purveyor of puns, curator of amusement. Wielder of snark & sparkly bats. @amyengineer@infosec.exchange @amyengineer on the Twitters

4.6K followers1.5K following372 posts

Amy Renee reposted

Nine lines of YAML turned into three FRR routers running OSPF, every address assigned and every adjacency full, before I'd have finished wiring the first link by hand. Part 1 of Labs as Code covers the netlab install and that first lab. routerjockey.com/labs-as-code...

routerjockey.comLabs as Code, Part 1: Install netlab, Build a Lab in Five Minutesnetlab turns nine lines of YAML into a running, converged lab. Install it, build your first FRR topology, and stop hand wiring labs.

Amy Renee reposted

David Huberman from ICANN shared at #ABQNOG that the DNS root KSK rollover is October 11. Running a DNSSEC-validating resolver? Confirm KSK-2024 (key tag 38696) is in your trust anchors if not, every query SERVFAILs. Not the DNS gal or guy? Pass this along! www.icann.org/resources/pa...

Amy Renee reposted

Amy Renee reposted

Purple , the black cat, to me : <yells> Me, to the black cat: “Purple, I’m not the arbiter of your happiness, I am merely the dispenser of your food.”

Amy Renee reposted

Great example of a targeted attack using a BGP hijack to obtain a valid TLS certificate. Also shows how limited RPKI is against a determined attacker. They simply spoofed the AS path so the hijack looked RPKI-valid. Nice write-up by @eldomador.bsky.social www.kentik.com/blog/latest-...

kentik.comLatest BGP Hijack Targets Hosting Software VendorThis post analyzes the technical details of the BGP hijack against Softaculous Ltd, the company behind the Softaculous auto-installer and the Virtualizor VM management platform. The hijack enabled an ...

Amy Renee reposted

I wonder if the second book in the series was called “Foreman Farley Causes an Internet Outage”

ISBN Book Bot 🤖@bot.isbn.nu

📖 Foreman Farley Has a Backhoe (Penguin Core Concepts) by Jenny Goebel, Sebastiaan Van Doninck https://isbn.nu/9780448463988

Amy Renee reposted

As part of an effort to block Telegram, AS18101 of India hijacked BGP routes of the messaging service — with limited propagation due to route filtering. The red sliver in the dotted box represents the propagation of AS18101's hijack — not nothing but RPKI ROV helped to limit the impact.

Amy Renee reposted

Outstanding blog by Cloudflare (co-written by the excellent Bryton Herdes) on how BGP prefixes can be hijacked using peers that don't check that the first AS is also the AS advertising the prefix to that peer. The internet was architected in a more trusting era! blog.cloudflare.com/enforce-firs...

blog.cloudflare.comEnforcing the First AS in BGP AS PATHsBGP is vulnerable to routing hijacks and path leaks that negatively impact traffic on the Internet. RPKI helps solve some of these problems, but for some forged paths, we need to rely on a simpler mec...

Amy Renee reposted

Great write up of a 2025 RFC that totally deprecates the BGP AS_SET path segment type. Explains what it is, why it causes security problems, and the ways that its removal enables RPKI on the entire AS_PATH. Interesting stuff. www.noction.com/blog/depreca...

noction.comDeprecated AS_SET: Why the IETF changed the rules of BGP aggregation.RFC 9774 prohibits AS_SET in BGP. Learn why AS_SET was deprecated, its impact on RPKI and routing security, and how to migrate to compliant aggregation.

Amy Renee reposted

A thousand times this

KJ Charles@kjcharleswriter.com

I am once again begging, praying, weeping for lists of written instructions rather than videos. I do not want to watch your two minute video in the hope of catching the two seconds where you whizz past what goddamn menu the thing is under. Write. It. Down.