Amy Renee reposted
Amy Renee
Amy Renee
@amyengineer.bsky.social
All things networking & security. Sharer of knowledge, purveyor of puns, curator of amusement. Wielder of snark & sparkly bats. @amyengineer@infosec.exchange @amyengineer on the Twitters
4.6K followers1.5K following372 posts
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Nine lines of YAML turned into three FRR routers running OSPF, every address assigned and every adjacency full, before I'd have finished wiring the first link by hand. Part 1 of Labs as Code covers the netlab install and that first lab. routerjockey.com/labs-as-code...
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
David Huberman from ICANN shared at #ABQNOG that the DNS root KSK rollover is October 11. Running a DNSSEC-validating resolver? Confirm KSK-2024 (key tag 38696) is in your trust anchors if not, every query SERVFAILs. Not the DNS gal or guy? Pass this along! www.icann.org/resources/pa...
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Total blast to join @scottrobohn.bsky.social! Give it a listen.
@bitsinflight.com, 34 DSLAMs, a script, and #TNOOPS on #TNOps 🤓 packetpushers.net/podcasts/tot...
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Great example of a targeted attack using a BGP hijack to obtain a valid TLS certificate. Also shows how limited RPKI is against a determined attacker. They simply spoofed the AS path so the hijack looked RPKI-valid. Nice write-up by @eldomador.bsky.social www.kentik.com/blog/latest-...
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Amy Renee reposted
Outstanding blog by Cloudflare (co-written by the excellent Bryton Herdes) on how BGP prefixes can be hijacked using peers that don't check that the first AS is also the AS advertising the prefix to that peer. The internet was architected in a more trusting era! blog.cloudflare.com/enforce-firs...
Amy Renee reposted
Amy Renee reposted
Great write up of a 2025 RFC that totally deprecates the BGP AS_SET path segment type. Explains what it is, why it causes security problems, and the ways that its removal enables RPKI on the entire AS_PATH. Interesting stuff. www.noction.com/blog/depreca...
Amy Renee reposted