pigggg

Eh a month or two before the October 2023 Israel conflict - there were many reports of GPS jamming in the middle east impacting air transport aircraft. To the point where it basically caused various failure modes that shouldn't have happened with avionics (think the things you'd expect in a fuzzing scenario). It was pretty eye opening example of just how poor modern avionics are (and their integrations) when they get unpredictable inputs & the dependant downrange systems that rely upon that data.

If you go to any large DC construction site the lot will be filled with out of state plates - and not just adjacent states, but folks from across the country.

Millions of Superboxes and various digital picture frames say different.

https://synthient.com/blog/a-broken-system-fueling-botnets

Isn't this because of the kimwolf (and now 6+ other botnets) that are taking advantage of people running residential proxyware unknowingly on the device which permits outbound connections to 127.0.0.1 on tcp/5555 to auth in and exec wgets or drops a loader that grabs the ddos malware APKs and install it?

Can confirm they've null routed various cloud providers IPs - with no notification and when folks reached out to the telecoms it took them 2 weeks of impact before they responded (even when provided with sufficient data of specific IPs getting dropped in their network).

It's literally a known thing at telcos in various roles they find people looking up folks dox regularly. If someone registers a complaint that someone access their data they'll look it up and deal with them.

I once asked someone on the security /investigations side if you are logging what everyone is doing can't you easily find when folks are looking up stuff unrelated to their job? Their answer: we'd have to fire over half the people here - everyone is constantly looking up people's PII - celebrities, friends, enemies, etc. it's almost considered a unofficial perk of the job. This was from one of the largest US Telco carriers circa 2010. Maybe things have changed, hopefully.

It's just a mental compartmentalization thing for me. When I want to get into slack/signal chatting mode or read messages I load such an app and look/interact. When I'm not doing that I don't want to be bothered with messages. I'm already sacrificing a portion of my life to work related tasks and being in front of a computer at many hours, when I'm not in that mode I don't want to be interrupted - people who need to reach me in an emergency have other ways to get ahold of me.

Yes Google constantly asks me to backup my pictures to their platform No, I don't want this. But regularly when I go to my photos it'll pop up with a box asking and the default option is yes please back up. Sad.

Is there some "no means no" additional setting that could be added where someone has to go into settings that would prevent that?

I fear that with the notifications pop up asking me this I might hit the wrong button and woops turn it on.

Just curious, how come at least once a month signal bugs me to turn on notifications? I said no for a reason, every single time - why does it keep asking?

Not implying anything evil but it feels a bit weird esp after this.

I gotta say some of the proposed use cases are things no one is looking/asking for. One I recall was having a network decide to reach another network by avoiding countries that aren't carbon neutral (which could take longer hops and use more infra / more energy...) feels like they're trying to say they're the green/environmental friendly protocol.

I don't think the swiss banking network is really the right thing to point to. Folks measure networks in bps/pps, not financial transactions - nevermind the actual control plane bits (num of prefixes, as paths, etc.). Plus it's all within one country where you have the luxury of being able to directly influence and steer those companies into adopting this.

As for BT - they're just one broadband ISP operating primarily in a single country. I don't see that moving the needle - you're missing CDNs, traditional large scale "tier 1s" and cloud or large hosting networks.

RPKI got to where it is today through community engagement by folks like Job S. and others - hitting the conferences, direct engagement with operators and raising the bar from a software quality and standards perspective - which still continues today. That's how you get the internet to adopt something that is considered the new normal.

As for your ISP list - I know there are networks listed there that aren't running scion in a production capacity (perhaps you can run scion in a virtualized environment on top of them which is different than those companies running it on their production network).

As for the block chain - it was all the Sui stuff.

SCION is generally considered snake oil within the network operator community. Its weird single vendor for profit company that ships it's software, the fact that no router hw asic fwding supports what they want to do and then the general scummy inclusion of block chain / crypto as well as some "green washing" for PR hype.

Sure the swiss have their toy but no one is taking it seriously.

Don't forget some BRE and TW2002

There are "live" residential proxy IP lists you can purchase today from a variety of companies. Various companies defending use them as an additional data point when making a call to throw a captcha or block.

ISPs have been fairly silent on the topic (it is a hot topic for many of them due to the kimwolf botnet leveraging resiproxies to function and launching attacks). In many cases, being a resiproxy is a violation of the TOS - but they struggle with enforcement and how to do customer engagement given that most resiproxies are loaded without the end user knowing. So you have an educational problem - how does an end user figure out how to remove it.

Some ISPs could null the resiproxy c2 infra - and a few have played in that space.

Home router vendors could play their part and notify users exactly which device is connecting out and give them an option to isolate, etc.

My biggest issue with IP brokers is how they'll avoid taking any responsibility for their customers action. A fair amount of bullet proof hosters (and we're talking malware distribution, botnet c2s, ransomware c2s, proxy/scanning) get their space from brokers. When you engage with the brokers they say go talk to the transit providers - and because the bullet proof guys can switch off to another transit provider easily they maintain connectivity/continue to operate. Super common in Europe where most of this goes on and they have a super plentiful transit market - but they are still rolling with the same set of IPs they get from these brokers (and one in particular).

Renting /24s by the hour is like a motel room rented by the hour. You know some shit is going on in there.

AI companies are _already_ funding and using residential proxies. Guess how much of those proxies are acquired through being compromised or tricking people into installing apps?

I constantly get tik tok style everything everywhere all at once fever dream headache rapid edited clips. There's a difference between to the point and just being brain rot delivered with no background. Reminds me of happy hardcore techno - you can't really feel the bass because it's not getting enough time to reverberate.

More likely a specific botnet had it's c2 or telnet scanning report endpoint go down / get nulled on Jan 14th.

This. The lawful intercept infrastructure is one facet of their network. The rest of their infra is also a deep concern: call records, SS7 signaling, the IP network, mobile infra and it's back end (sim swapping).

Post 9/11 you could get a waiver from the ticket counter to escort someone thru security all the way to the gate. Dunno if that's a thing anymore, but I had them print out a paper and showed it at security several times in the mid 2000s.

I recall during the 90s spending a bunch of time on SF2 and Mortal Kombat in arcades: shopping malls, bowling alleys, even some restaurant/bars that had a small arcade. One of the fun experiences was one arcade that Saturday mornings they had a "Freeplay" time for a few hours where everyone paid like $5 and every game was in Freeplay mode. It always amazes me how we all learned the special moves and fatalities word of mouth and eventually they'd get published in gaming magazines. The whole winner stays, loser pays - folks setting their quarter on the arcade to reserve their next spot. Many years later a coworker and I bought a very well used (cigarette smell and burns) MK2 machine for the office break area that took me back. Comically we found at least $10 worth of quarters inside the enclosure. Good times.

IETF has a history of being hostile to network operators. I mean actual network operators - not the people who show up at conferences or work the mailing list who just happen to get a paycheck from a company that runs a network (and have zero production access / not on call / not directly involved in running shit). It's gotten better in the last few years in certain areas (and credit to the people who have been willing to fight the good fight). But it's very much a painful experience where you see good ideas shot down and tons of people who want to put their fingerprint on drafts/proposals - it's still a very vendor heavy environment.

Folks using nyanpass setup for first hop into a near China hosting provider, then it's usually two additional hops within Asia and then the internet. There's a whole industry / ecosystem of folks who sell this - and set rate limit controls based upon how much you pay etc.

They're both very expensive and the carriers primarily care about cost and features. And huawei will take a dozen devs, give them a one way ticket and put them in a hotel room near a customer to grind our whatever feature needed to seal the deal.

I remember years ago talking to some EU telecom VP who was on the engineering side that said "id buy from North Korea if the price was right".

We live in new times anyways - most of the carriers have outsourced a lot of the tech stuff to the vendors anyways.

Most of the ddos as a service booter/stresser websites and front doors are on cloudflare.