#itisalwaysdns — Public Fediverse posts

In today's episode of "Can It Run Doom": DNS fucking TXT records.

Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: https://blog.rice.is/post/doom-over-dns/

repo: https://github.com/resumex/doom-over-dns

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns

Orrr. Irgendwas stinkt hier.
Komme auf einen Server nicht mehr rauf. Und ich weiß schon #itIsAlwaysDNS 🤨🙄

Aber: #erstmalKaffee

why yes i do know the number of seconds in a day without working it out ;) I blame DNS. #ItIsAlwaysDNS

I made my #AdGuardHome configuration public.

This is my solution to both store #adguard conf in code and continuously deploy it on many nodes. I also proposed some solutions to easily gather metrics and switch off/on ad protection. Everything is written in README.

https://codeberg.org/cichy1173/adguard-home-cm-repository

#opentofu #terraform #iaac #iac #devops #adblocking #adprotection #dns #ItIsAlwaysDNS

I made my #AdGuardHome configuration public.

This is my solution to both store #adguard conf in code and continuously deploy it on many nodes. I also proposed some solutions to easily gather metrics and switch off/on ad protection. Everything is written in README.

https://codeberg.org/cichy1173/adguard-home-cm-repository

#opentofu #terraform #iaac #iac #devops #adblocking #adprotection #dns #ItIsAlwaysDNS

I made my #AdGuardHome configuration public.

This is my solution to both store #adguard conf in code and continuously deploy it on many nodes. I also proposed some solutions to easily gather metrics and switch off/on ad protection. Everything is written in README.

https://codeberg.org/cichy1173/adguard-home-cm-repository

#opentofu #terraform #iaac #iac #devops #adblocking #adprotection #dns #ItIsAlwaysDNS

I made my #AdGuardHome configuration public.

This is my solution to both store #adguard conf in code and continuously deploy it on many nodes. I also proposed some solutions to easily gather metrics and switch off/on ad protection. Everything is written in README.

https://codeberg.org/cichy1173/adguard-home-cm-repository

#opentofu #terraform #iaac #iac #devops #adblocking #adprotection #dns #ItIsAlwaysDNS

I made my #AdGuardHome configuration public.

This is my solution to both store #adguard conf in code and continuously deploy it on many nodes. I also proposed some solutions to easily gather metrics and switch off/on ad protection. Everything is written in README.

https://codeberg.org/cichy1173/adguard-home-cm-repository

#opentofu #terraform #iaac #iac #devops #adblocking #adprotection #dns #ItIsAlwaysDNS

@pseudonym Feckin' DNS, and Certificates, but mostly DNS.

And mine *IS* Automated, still breaks, because ... DNS.

#ItIsAlwaysDNS #SysAdmin

Now, #DNS devroom at #FOSDEM. Only DNS this afternoon.

#itIsAlwaysDNS

The source of every single problem in IT was published 40 years ago.


#ItIsAlwaysDNS

RE: https://infosec.exchange/users/pgl/statuses/111332374298255851

@OptiplexPrime

#ItIsAlwaysDNS ;)

@benjaminhollon

Don't blame it on the DHCP
Don't blame it on the BGP
Don't blame it on the OSPF
Blame it on the DNS

#GeekAPlaylist #HashtagGames #SysAdmin #Tech #IT #InfoSec #Technology #DNS #ItsAlwaysDNS #ItIsAlwaysDNS

🎶 Don't blame it on the DHCP 🎶
🎶 Don't blame it on the BGP 🎶
🎶 Don't blame it on the OSPF 🎶
🎶 Blame it on the DNS 🎶

#SysAdmin #Tech #IT #InfoSec #Technology #DNS #ItsAlwaysDNS #ItIsAlwaysDNS

WHEN will I learn? Friday night and DNS do not mix.
#DNS #FuckDNS #ItIsAlwaysDNS

Will AI put SysOps out of work?
No, of course not.

At some point the SysOpsAI will hose the DNS server and then it's game over for it.

#ItIsAlwaysDNS

One of my websites just went down. Appeared that DNS entry was lost suddenly. Checking at my DNS provider is migrating to a new tool. Something must have gone wrong there. Website is not an important one, so will just wait it out.

#itisalwaysdns