Leonidas Poulopoulos

[Barack Obama @BarackObama]

Congratulations to new Nobel Peace Prize laureate María Corina Machado for her courageous struggle to bring democracy to Venezuela. It should inspire those engaged in similar struggles around the world - and remind those of us lucky enough to live in America that we have a solemn responsibility to constantly preserve and defend our own hard-won democratic traditions.

[Yannis Mitsos @ymitsos]

Fixing vJunos Boot Issues on Proxmox with AMD Processors https://t.co/4leL5LWdMv

[VERISIGN @VERISIGN]

Join Verisign Fellow Duane Wessels at #OARC43 where he’ll review recent & long-term changes in query names received by root name servers. Leakage & name collision problems may persist in the #DNS, but remediation is possible. Register now: https://t.co/KQZemSijf4 @PacketPusher

[APNIC @apnic]

Securing routing by adopting RPKI is now an essential practice in the modern Internet — here are three of the best #RPKI stories from 2023. https://t.co/1GjQAZK2cj

[Fontas @fontasnet]

🌞 Summer internships at ThousandEyes offices in Crete! 🌞

Are you a PhD or MSc student doing research on Internet measurements?  🎓
Do you want your research to impact thousands of Cisco ThousandEyes customers worldwide? 🌍

If yes, apply now: https://t.co/n6bfboMBbb

[APNIC @apnic]

@JobSnijders delivers a trick to help reduce bandwidth & CPU cycles for both RPKI Publication Point servers & #RPKI validators when switching between RRDP and RSYNC transports. https://t.co/kucLrtGSf6

[Hurricane Electric @henet]

https://t.co/9TbvyO0W5w has a new feature: Super Traceroute! This lets you use thousands of aggregated network probes to perform traceroutes for the purpose of diagnosing network connectivity issues and learning the preferred routing of other networks. https://t.co/z71y7m3AaE

[BGPKIT @bgpkit]

As #NANOG89 talks on RPKI and ASPA starts, here is a blog post from @heymingwei explaining ASPA, RFC9234 and RPKI. https://t.co/e9jJbfKCsA

[Massimo Candela @webrobotics]

The Internet Measurement Working Group (IMWG) session will take place next Friday (6 Oct.) at 11:30BRT (UTC-3). Rich agenda https://t.co/3QhTlBVZCM & special guest Prof. Fabian Bustamante @bustamantefe presenting "Weighting the criticality of the submarine cable network" @lacnic

[Routinator 3000 🚀 @routinator3000]

They crew is pleased to announce the latest release of our #RPKI validator Routinator, version 0.13.0 ‘Should Have Started This in a Screen.’ It features lots of smaller changes and updated #ASPA support. https://t.co/eZEHru7hO1

[RIPE Labs @ripelabs]

Interested in monitoring #Internet #outages in real time? In this new article on RIPE Labs, Mohamed Awnallah presents his Google Summer of Code project that correlates and aggregates alarm data to detect real-world Internet outages: https://t.co/iYuK5F1uvf

[VERISIGN @VERISIGN]

#DidYouKnow #DNSSEC adoption is on the rise? To help it continue to grow, Verisign’s TLDs will soon undergo an important security enhancement. Check out Fellow Duane Wessels’ blog to learn more: https://t.co/s9sSctsiIN @packetpusher #cryptography

[OpenBSD @openbsd]

rpki-client 8.5 has been released. This release adds support for HTTP gzip Content-Encoding, seamless RRDP-to-RSYNC failover, improved X.509 cryptographic path validation performance, improved RRDP desynchronisation detection, and more. https://t.co/pw8zeglktw

[VERISIGN @VERISIGN]

Verisign Fellow Duane Wessels is back on the @APNIC PING podcast, this time discussing the introduction of a new record type in the root zone: ZONEMD. Check out the episode to learn more about what ZONEMD does & how it works: https://t.co/R73ufKnRQ0 @PacketPusher #cryptography

[APNIC @apnic]

#ZONEMD will improve the #security, stability, and resiliency of the global #DNS. @VERISIGN Fellow Duane Wessels (@PacketPusher) details the new record type on the blog today: https://t.co/cFzfD1dbQM

[Leonidas Poulopoulos @leopoul]

@August8964 This is an excellent example of how RPKI can protect from origin AS incidents and how the combo of prefix signing and ROV make the mechanism effective. Thank you again for sharing your story and for giving food for thought!

[Leonidas Poulopoulos @leopoul]

@August8964 Thank you for the details! The pillars of RPKI are prefix signing and ROV. Apparently whoever doesn't do ROV accepts invalids. This is visible in the RIPE BGPlay where ASes who don't validate accepted. Once you signed with AS7018 it was also accepted by ones who do ROV eg AS174.

[Leonidas Poulopoulos @leopoul]

@August8964 The weird is that according to https://t.co/reCzkaoSAp and a recent dump from https://t.co/tlFN0VRups the prefix becomes valid with AS7018 only after 2023-06-24T00:16:41 UTC. Curious to see what happened during this 57s gap. Was there another ROA which was removed and replaced?

[Leonidas Poulopoulos @leopoul]

@August8964 https://t.co/VYyh39L2Bk shows that at 00:15:44 AS174 who does ROV accepts the announcement (2/3).