home.social

#ripe92 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #ripe92, aggregated by home.social.

  1. #Edinburgh mid July is considerably colder than it was during #RIPE92 but it’s exactly what I needed after these couple of heatwaves in the rest of the continent.

  2. #ipv6 #ipv4rip #ipv4 #clat #windows #464xlat #ipv6mostly #ipv6only #ripe92

    slide 13/14/15 by Wilhelm Boeddinghaus

    pretalx.ripe.net/media/ripe-92

    now corrected by Microsoft as promised two weeks ago

    It is still a experimental version, not released yet. (Build 29599.1000 )

    (now you can use several windows hosts in one network segment with clat)

  3. #ipv6 #ipv4rip #ipv4 #clat #windows #464xlat #ipv6mostly #ipv6only #ripe92

    slide 13/14/15 by Wilhelm Boeddinghaus

    pretalx.ripe.net/media/ripe-92

    now corrected by Microsoft as promised two weeks ago

    It is still a experimental version, not released yet. (Build 29599.1000 )

    (now you can use several windows hosts in one network segment with clat)

  4. Here's a photo of ISC's Petr Špaček giving his "Brace for Upgrades - Plural" talk at last week, as well as a slide from his presentation.

    The bottom line: streamline your deployment processes, because you're going to need to update often to keep up with the onslaught of AI-discovered vulnerabilities.

    (And if you're a researcher, please don't just submit slop reports! ISC and the other open source vendors are doing our best to triage everything, but we need your help.)

  5. Here's a photo of ISC's Petr Špaček giving his "Brace for Upgrades - Plural" talk at #RIPE92 last week, as well as a slide from his presentation.

    The bottom line: streamline your deployment processes, because you're going to need to update often to keep up with the onslaught of AI-discovered vulnerabilities.

    (And if you're a researcher, please don't just submit slop reports! ISC and the other open source vendors are doing our best to triage everything, but we need your help.)

  6. Enjoy a couple of pictures of Ondřej Surý speaking at ! Were you there for his talk? What did you think?

  7. Enjoy a couple of pictures of Ondřej Surý speaking at #RIPE92 ! Were you there for his talk? What did you think?

  8. ISC's Director of DNS Engineering, Ondřej Surý, spoke at last week's conference on "DNS, Transitive Trust and How Many is Many." It was an interactive presentation with lots of interesting insights and discussion.

    Watch the recording or read the transcript at ripe92.ripe.net/programme/meet

  9. ISC's Director of DNS Engineering, Ondřej Surý, spoke at last week's #RIPE92 conference on "DNS, Transitive Trust and How Many is Many." It was an interactive presentation with lots of interesting insights and discussion.

    Watch the recording or read the transcript at ripe92.ripe.net/programme/meet

  10. A RIPE Atlas probe could have been enough to hijack a RIPE NCC user's next login, giving full access to the member portal, including the RPKI dashboard and the RIPE Database.

    I discovered a session fixation vulnerability in RIPE NCC's single sign-on: the session token was not rotated on login. Two ways to exploit it: a new XSS in RIPEstat through DNS NS records, or a free Atlas probe. Anyone with a free RIPE NCC account can host a probe, approved automatically. Installing a web server and serving one HTML page was all it took.

    This builds on my earlier posts on the XSS+CSRF exploit chain and session token exposure through CAA misconfigurations: mxsasha.eu/posts/ripe-ncc-sess

    The vulnerability was fixed within 20 days. This all took place before my #RIPE92 talk from last week, only some of it made it into that talk. More structural fixes are pending.

  11. A RIPE Atlas probe could have been enough to hijack a RIPE NCC user's next login, giving full access to the member portal, including the RPKI dashboard and the RIPE Database.

    I discovered a session fixation vulnerability in RIPE NCC's single sign-on: the session token was not rotated on login. Two ways to exploit it: a new XSS in RIPEstat through DNS NS records, or a free Atlas probe. Anyone with a free RIPE NCC account can host a probe, approved automatically. Installing a web server and serving one HTML page was all it took.

    This builds on my earlier posts on the XSS+CSRF exploit chain and session token exposure through CAA misconfigurations: mxsasha.eu/posts/ripe-ncc-sess

    The vulnerability was fixed within 20 days. This all took place before my #RIPE92 talk from last week, only some of it made it into that talk. More structural fixes are pending.

  12. @9pfs we've been speaking about this with @equinox at #RIPE92 and both we and FRR just detect any RA.

    That's kinda against the RFCs, but considering that also Nokia apparently does it and who knows who other as well, there is not much we can do.

    Technically correct would be adding an option to _neighbor_ advertisement but that's a whole different beast because of Linux kernel taking care of that. Thus we'll probably end up adding this as an option to both, just to clean things up, and hope that nobody gets too picky about that at the IETF.
  13. @9pfs we've been speaking about this with @equinox at #RIPE92 and both we and FRR just detect any RA.

    That's kinda against the RFCs, but considering that also Nokia apparently does it and who knows who other as well, there is not much we can do.

    Technically correct would be adding an option to _neighbor_ advertisement but that's a whole different beast because of Linux kernel taking care of that. Thus we'll probably end up adding this as an option to both, just to clean things up, and hope that nobody gets too picky about that at the IETF.
  14. Thank you for joining #RIPE92! ❤️

    We hope you found the meeting valuable and had an unforgettable time with us in Edinburgh. 🥳

    Please take a few minutes to complete the RIPE 92 survey and share your thoughts on your experience. Your input helps us understand how we can make future meetings even better!

    🔗 Share your feedback:
    ripe-ncc.typeform.com/ripe-92

  15. Thank you for joining #RIPE92! ❤️

    We hope you found the meeting valuable and had an unforgettable time with us in Edinburgh. 🥳

    Please take a few minutes to complete the RIPE 92 survey and share your thoughts on your experience. Your input helps us understand how we can make future meetings even better!

    🔗 Share your feedback:
    ripe-ncc.typeform.com/ripe-92

  16. My favorite moment from last weeks #ripe92 in Edinburgh. My two colleagues and friends Peter ‚Pete‘ Eckel and @cstrotm having breakfast in the lovely apartment we had rented. Laptops in front of them and in the midst of a discussion on some DNS stuff. 🥰

    Later that day we presented the PoC we at @sys4 had prepared for our working group along with @iscdotorg , @nlnetlabs , @knotfeed, @PowerDNS and DeNIC.

  17. My favorite moment from last weeks #ripe92 in Edinburgh. My two colleagues and friends Peter ‚Pete‘ Eckel and @cstrotm having breakfast in the lovely apartment we had rented. Laptops in front of them and in the midst of a discussion on some DNS stuff. 🥰

    Later that day we presented the PoC we at @sys4 had prepared for our working group along with @iscdotorg , @nlnetlabs , @knotfeed, @PowerDNS and DeNIC.

  18. Nice ending of my #RIPE92 week: my luggage loved too much UK to come back to France with l
    Me 😭

  19. Total verdict of #RIPE92

    ~4000km of train travel in 34:31 hours (scheduled to take 33:14)

    The winner of Verspätungslotterie: Deutsche Bahn ICE 317 yesterday, arriving in Frankfurt at +48

    EDIT: Mis-calculated some ride lengths due to shoddy route maps, more like 4000km than 5300.

  20. Total verdict of #RIPE92

    5307km of train travel in 34:31 hours (scheduled to take 33:14)

    The winner of Verspätungslotterie: Deutsche Bahn ICE 317 yesterday, arriving in Frankfurt at +48

  21. Time to board to head home! thanks #RIPE92 for being a great event.

    (#selfie, eye contact)

  22. Time to board to head home! thanks #RIPE92 for being a great event.

    (#selfie, eye contact)

  23. That’s a wrap on #RIPE92!

    A huge thank you to all our hosts, sponsors, and attendees - both familiar faces and first-time newcomers - for making this meeting unforgettable. 💙

    Relive the highlights in our Daily Meeting Blog 👇
    labs.ripe.net/author/ripe-ncc-

  24. That’s a wrap on #RIPE92!

    A huge thank you to all our hosts, sponsors, and attendees - both familiar faces and first-time newcomers - for making this meeting unforgettable. 💙

    Relive the highlights in our Daily Meeting Blog 👇
    labs.ripe.net/author/ripe-ncc-

  25. Wie kann es sein, dass das Model B bei dem 75% sparen zum zweiten Mal keine Mehrheit bekommt? #ripe92

  26. @rvstaveren (vertical) distance to barista correlates with number of shots...
    & there was a venue coffee stand on the meeting floor which probably saw a lot more activity than usual... #RIPE92

  27. @rvstaveren (vertical) distance to barista correlates with number of shots...
    & there was a venue coffee stand on the meeting floor which probably saw a lot more activity than usual... #RIPE92

  28. Less than 35 votes could have made a big difference for all of us #RIPE92

  29. Less than 35 votes could have made a big difference for all of us #RIPE92

  30. I must say I was not expecting that !
    #RIPE92

    We still stay with option A, one LIR, one fee model...

  31. It's hard to believe #RIPE92 has nearly come to an end! 🥲

    Catch up with yesterday's highlights by reading our Daily Meeting Blog:

    labs.ripe.net/author/ripe-ncc-

  32. Some statements won't be true anymore within the next three weeks. 🤗

    pretalx.ripe.net/media/ripe-92

    Microsoft announced fixes for their #clat implementation 👍

    "We should have a build available to test within 2-3 weeks".

    #ipv6only #ipv6 #ripe92

  33. Some statements won't be true anymore within the next three weeks. 🤗

    pretalx.ripe.net/media/ripe-92

    Microsoft announced fixes for their #clat implementation 👍

    "We should have a build available to test within 2-3 weeks".

    #ipv6only #ipv6 #ripe92

  34. Kicking off RIPE92 Hub Jarosław 🚀
    Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
    A relaxed start before several intense days of networking, learning, and building connections across the Internet community.

    #RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS

  35. Kicking off RIPE92 Hub Jarosław 🚀
    Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
    A relaxed start before several intense days of networking, learning, and building connections across the Internet community.

  36. Kicking off RIPE92 Hub Jarosław 🚀
    Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
    A relaxed start before several intense days of networking, learning, and building connections across the Internet community.

    #RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS

  37. Kicking off RIPE92 Hub Jarosław 🚀
    Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
    A relaxed start before several intense days of networking, learning, and building connections across the Internet community.

    #RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS

  38. Kicking off RIPE92 Hub Jarosław 🚀
    Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
    A relaxed start before several intense days of networking, learning, and building connections across the Internet community.

    #RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS

  39. Applying #ButtsInSeats on my first leg to Edinburg for #RIPE92. See you in a couple hours!

    (CW: #selfie, eye contact)

  40. Applying #ButtsInSeats on my first leg to Edinburg for #RIPE92. See you in a couple hours!

    (CW: #selfie, eye contact)

  41. To the attendees of #RIPE92 : I suggest a discussion to switch the locations of RIPE93 and RIPE94. Then Sofia would have the unique opportunity to host a RIPESC in May 2027 😁

    #ripencc #escwinner #bulgaria

  42. To the attendees of #RIPE92 : I suggest a discussion to switch the locations of RIPE93 and RIPE94. Then Sofia would have the unique opportunity to host a RIPESC in May 2027 😁

    #ripencc #escwinner #bulgaria