Kevin

#ipv6 and #cybersecurity nerd. Used to look at consoles and network dumps. Now mostly looks at PowerPoint. #StandWithUkraine

[Kevin @KevinRedDot]

@dinodaizovi @0xRajeev yea, to rpc.someshitd

Funny enough, I had exactly that Perl one liner in head when I was expanding the comments section

[Kevin @KevinRedDot]

@Laughing_Mantis @ebmmemes BTW, how much is the phish?

[Kevin @KevinRedDot]

@imrane @etihwdtrebor @matthew_d_green Yup

[Kevin @KevinRedDot]

@FernandoGont @Enno_Insinuator Jen long was an apologist of /64 per host for predictable addressing. I think I heard her talking about it at least 5 years ago.

[Kevin @KevinRedDot]

@UlfLundh @molislaegers @acjuelich @rucam365 Your Internet bandwidth, clients on LAN, LAN management plane.

[Kevin @KevinRedDot]

@UlfLundh @acjuelich @rucam365 Service to service authentication in a cloud, client to service authentication for ZTNA, client to network authentication in the office.

[Kevin @KevinRedDot]

@etihwdtrebor @matthew_d_green How does it makes sense against global flow observer?

[Kevin @KevinRedDot]

@nixcraft nginx

[Kevin @KevinRedDot]

@DevDminGod @big_red_s @geospacedman @nixcraft Except, c is for create and z is for gzip piping

[Kevin @KevinRedDot]

@Lisias @nixcraft This is easy to check: IETF discussions and mailing lists are public. Can you point to the evidence of this claim?

[Kevin @KevinRedDot]

@CubicleApril @okta Chrome?

[Kevin @KevinRedDot]

@colmmacc @robertgraham I do and I like it.

[Kevin @KevinRedDot]

@willnorris @jankatins @Tailscale Since you cannot do a reproducible build, partial source code availability might not be relevant from the trust perspective. Yes, Thompson’s seminal paper is a good illustration of the problem.

[Kevin @KevinRedDot]

@pudgenet @noIPv6 They do **rely** on IPv6 because they ran out of RFC1918 addresses.

[Kevin @KevinRedDot]

@pudgenet @hikhvar @TheSamBaldwin @noIPv6 Of course, you do.

[Kevin @KevinRedDot]

@noIPv6 Does “the Internet” “VPC” count?

[Kevin @KevinRedDot]

@timcappalli We have our own we built using https://t.co/3hBSPQZj6E

We can collect all kinds of logs on the backend

[Kevin @KevinRedDot]

Recent Chrome upgrade caused Chrome to lose platform FIDO authenticator on Windows (i.e., Windows Hello). They also changed terminology and now it's "passkeys enrollment".
On top of it, they thought nothing better than using QR codes to bind the authentication flow to Android

[Kevin @KevinRedDot]

@timcappalli If you have a hint what to look for in RP, I greatly appreciate that.

[Kevin @KevinRedDot]

@timcappalli Why did it work before?