#ripe92 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #ripe92, aggregated by home.social.
-
#Edinburgh mid July is considerably colder than it was during #RIPE92 but it’s exactly what I needed after these couple of heatwaves in the rest of the continent.
-
#ipv6 #ipv4rip #ipv4 #clat #windows #464xlat #ipv6mostly #ipv6only #ripe92
slide 13/14/15 by Wilhelm Boeddinghaus
https://pretalx.ripe.net/media/ripe-92/submissions/XJWGCT/resources/RIPE92-May-2026-IPv6_MmzPXy4.pdfnow corrected by Microsoft as promised two weeks ago
It is still a experimental version, not released yet. (Build 29599.1000 )
(now you can use several windows hosts in one network segment with clat)
-
#ipv6 #ipv4rip #ipv4 #clat #windows #464xlat #ipv6mostly #ipv6only #ripe92
slide 13/14/15 by Wilhelm Boeddinghaus
https://pretalx.ripe.net/media/ripe-92/submissions/XJWGCT/resources/RIPE92-May-2026-IPv6_MmzPXy4.pdfnow corrected by Microsoft as promised two weeks ago
It is still a experimental version, not released yet. (Build 29599.1000 )
(now you can use several windows hosts in one network segment with clat)
-
Here's a photo of ISC's Petr Špaček giving his "Brace for Upgrades - Plural" talk at #RIPE92 last week, as well as a slide from his presentation.
The bottom line: streamline your deployment processes, because you're going to need to update often to keep up with the onslaught of AI-discovered vulnerabilities.
(And if you're a researcher, please don't just submit slop reports! ISC and the other open source vendors are doing our best to triage everything, but we need your help.)
-
Here's a photo of ISC's Petr Špaček giving his "Brace for Upgrades - Plural" talk at #RIPE92 last week, as well as a slide from his presentation.
The bottom line: streamline your deployment processes, because you're going to need to update often to keep up with the onslaught of AI-discovered vulnerabilities.
(And if you're a researcher, please don't just submit slop reports! ISC and the other open source vendors are doing our best to triage everything, but we need your help.)
-
Enjoy a couple of pictures of Ondřej Surý speaking at #RIPE92 ! Were you there for his talk? What did you think?
-
ISC's Director of DNS Engineering, Ondřej Surý, spoke at last week's #RIPE92 conference on "DNS, Transitive Trust and How Many is Many." It was an interactive presentation with lots of interesting insights and discussion.
Watch the recording or read the transcript at https://ripe92.ripe.net/programme/meeting-plan/sessions/98/ATVK7Z/#video
-
ISC's Director of DNS Engineering, Ondřej Surý, spoke at last week's #RIPE92 conference on "DNS, Transitive Trust and How Many is Many." It was an interactive presentation with lots of interesting insights and discussion.
Watch the recording or read the transcript at https://ripe92.ripe.net/programme/meeting-plan/sessions/98/ATVK7Z/#video
-
-
A RIPE Atlas probe could have been enough to hijack a RIPE NCC user's next login, giving full access to the member portal, including the RPKI dashboard and the RIPE Database.
I discovered a session fixation vulnerability in RIPE NCC's single sign-on: the session token was not rotated on login. Two ways to exploit it: a new XSS in RIPEstat through DNS NS records, or a free Atlas probe. Anyone with a free RIPE NCC account can host a probe, approved automatically. Installing a web server and serving one HTML page was all it took.
This builds on my earlier posts on the XSS+CSRF exploit chain and session token exposure through CAA misconfigurations: https://mxsasha.eu/posts/ripe-ncc-session-fixation/
The vulnerability was fixed within 20 days. This all took place before my #RIPE92 talk from last week, only some of it made it into that talk. More structural fixes are pending.
-
A RIPE Atlas probe could have been enough to hijack a RIPE NCC user's next login, giving full access to the member portal, including the RPKI dashboard and the RIPE Database.
I discovered a session fixation vulnerability in RIPE NCC's single sign-on: the session token was not rotated on login. Two ways to exploit it: a new XSS in RIPEstat through DNS NS records, or a free Atlas probe. Anyone with a free RIPE NCC account can host a probe, approved automatically. Installing a web server and serving one HTML page was all it took.
This builds on my earlier posts on the XSS+CSRF exploit chain and session token exposure through CAA misconfigurations: https://mxsasha.eu/posts/ripe-ncc-session-fixation/
The vulnerability was fixed within 20 days. This all took place before my #RIPE92 talk from last week, only some of it made it into that talk. More structural fixes are pending.
-
@9pfs we've been speaking about this with @equinox at #RIPE92 and both we and FRR just detect any RA.
That's kinda against the RFCs, but considering that also Nokia apparently does it and who knows who other as well, there is not much we can do.
Technically correct would be adding an option to _neighbor_ advertisement but that's a whole different beast because of Linux kernel taking care of that. Thus we'll probably end up adding this as an option to both, just to clean things up, and hope that nobody gets too picky about that at the IETF. -
@9pfs we've been speaking about this with @equinox at #RIPE92 and both we and FRR just detect any RA.
That's kinda against the RFCs, but considering that also Nokia apparently does it and who knows who other as well, there is not much we can do.
Technically correct would be adding an option to _neighbor_ advertisement but that's a whole different beast because of Linux kernel taking care of that. Thus we'll probably end up adding this as an option to both, just to clean things up, and hope that nobody gets too picky about that at the IETF. -
Thank you for joining #RIPE92! ❤️
We hope you found the meeting valuable and had an unforgettable time with us in Edinburgh. 🥳
Please take a few minutes to complete the RIPE 92 survey and share your thoughts on your experience. Your input helps us understand how we can make future meetings even better!
🔗 Share your feedback:
https://ripe-ncc.typeform.com/ripe-92 -
Thank you for joining #RIPE92! ❤️
We hope you found the meeting valuable and had an unforgettable time with us in Edinburgh. 🥳
Please take a few minutes to complete the RIPE 92 survey and share your thoughts on your experience. Your input helps us understand how we can make future meetings even better!
🔗 Share your feedback:
https://ripe-ncc.typeform.com/ripe-92 -
My favorite moment from last weeks #ripe92 in Edinburgh. My two colleagues and friends Peter ‚Pete‘ Eckel and @cstrotm having breakfast in the lovely apartment we had rented. Laptops in front of them and in the midst of a discussion on some DNS stuff. 🥰
Later that day we presented the PoC we at @sys4 had prepared for our working group along with @iscdotorg , @nlnetlabs , @knotfeed, @PowerDNS and DeNIC.
-
My favorite moment from last weeks #ripe92 in Edinburgh. My two colleagues and friends Peter ‚Pete‘ Eckel and @cstrotm having breakfast in the lovely apartment we had rented. Laptops in front of them and in the midst of a discussion on some DNS stuff. 🥰
Later that day we presented the PoC we at @sys4 had prepared for our working group along with @iscdotorg , @nlnetlabs , @knotfeed, @PowerDNS and DeNIC.
-
The Internet Last Week
* OARC 46
https://indico.dns-oarc.net/event/56/
* RIPE 92
https://ripe92.ripe.net/
* LACNIC 45
https://lacnic45.lacnic.net/
* Cybercriminal VPN service takedown
https://www.europol.europa.eu/media-press/newsroom/news/cybercriminal-vpn-used-ransomware-actors-dismantled-in-global-crackdown
https://www.ic3.gov/CSA/2026/260521.pdf
* Interpol disrupts cybercrime operations in Middle East North Africa
https://www.interpol.int/News-and-Events/News/2026/201-arrests-in-first-of-its-kind-cybercrime-operation-in-MENA-region -
The Internet Last Week
* OARC 46
https://indico.dns-oarc.net/event/56/
* RIPE 92
https://ripe92.ripe.net/
* LACNIC 45
https://lacnic45.lacnic.net/
* Cybercriminal VPN service takedown
https://www.europol.europa.eu/media-press/newsroom/news/cybercriminal-vpn-used-ransomware-actors-dismantled-in-global-crackdown
https://www.ic3.gov/CSA/2026/260521.pdf
* Interpol disrupts cybercrime operations in Middle East North Africa
https://www.interpol.int/News-and-Events/News/2026/201-arrests-in-first-of-its-kind-cybercrime-operation-in-MENA-region -
Nice ending of my #RIPE92 week: my luggage loved too much UK to come back to France with l
Me 😭 -
Total verdict of #RIPE92
~4000km of train travel in 34:31 hours (scheduled to take 33:14)
The winner of Verspätungslotterie: Deutsche Bahn ICE 317 yesterday, arriving in Frankfurt at +48
EDIT: Mis-calculated some ride lengths due to shoddy route maps, more like 4000km than 5300.
-
Total verdict of #RIPE92
5307km of train travel in 34:31 hours (scheduled to take 33:14)
The winner of Verspätungslotterie: Deutsche Bahn ICE 317 yesterday, arriving in Frankfurt at +48
-
-
-
-
That’s a wrap on #RIPE92!
A huge thank you to all our hosts, sponsors, and attendees - both familiar faces and first-time newcomers - for making this meeting unforgettable. 💙
Relive the highlights in our Daily Meeting Blog 👇
https://labs.ripe.net/author/ripe-ncc-commsies/ripe-92-daily-meeting-blog -
That’s a wrap on #RIPE92!
A huge thank you to all our hosts, sponsors, and attendees - both familiar faces and first-time newcomers - for making this meeting unforgettable. 💙
Relive the highlights in our Daily Meeting Blog 👇
https://labs.ripe.net/author/ripe-ncc-commsies/ripe-92-daily-meeting-blog -
Wie kann es sein, dass das Model B bei dem 75% sparen zum zweiten Mal keine Mehrheit bekommt? #ripe92
-
-
-
@rvstaveren (vertical) distance to barista correlates with number of shots...
& there was a venue coffee stand on the meeting floor which probably saw a lot more activity than usual... #RIPE92 -
@rvstaveren (vertical) distance to barista correlates with number of shots...
& there was a venue coffee stand on the meeting floor which probably saw a lot more activity than usual... #RIPE92 -
Less than 35 votes could have made a big difference for all of us #RIPE92
-
Less than 35 votes could have made a big difference for all of us #RIPE92
-
I must say I was not expecting that !
#RIPE92We still stay with option A, one LIR, one fee model...
-
It's hard to believe #RIPE92 has nearly come to an end! 🥲
Catch up with yesterday's highlights by reading our Daily Meeting Blog:
https://labs.ripe.net/author/ripe-ncc-commsies/ripe-92-daily-meeting-blog/
-
Some statements won't be true anymore within the next three weeks. 🤗
https://pretalx.ripe.net/media/ripe-92/submissions/XJWGCT/resources/RIPE92-May-2026-IPv6_KbCCKtH.pdf
Microsoft announced fixes for their #clat implementation 👍
"We should have a build available to test within 2-3 weeks".
-
Some statements won't be true anymore within the next three weeks. 🤗
https://pretalx.ripe.net/media/ripe-92/submissions/XJWGCT/resources/RIPE92-May-2026-IPv6_KbCCKtH.pdf
Microsoft announced fixes for their #clat implementation 👍
"We should have a build available to test within 2-3 weeks".
-
Kicking off RIPE92 Hub Jarosław 🚀
Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
A relaxed start before several intense days of networking, learning, and building connections across the Internet community.#RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS
-
Kicking off RIPE92 Hub Jarosław 🚀
Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
A relaxed start before several intense days of networking, learning, and building connections across the Internet community.#RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS
-
Kicking off RIPE92 Hub Jarosław 🚀
Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
A relaxed start before several intense days of networking, learning, and building connections across the Internet community.#RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS
-
Kicking off RIPE92 Hub Jarosław 🚀
Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
A relaxed start before several intense days of networking, learning, and building connections across the Internet community.#RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS
-
Kicking off RIPE92 Hub Jarosław 🚀
Before the main conference action begins, we’re spending today with students in our chill room, preparing everything for tomorrow’s guests. 🎓☕
A relaxed start before several intense days of networking, learning, and building connections across the Internet community.#RIPE92 #Networking #InternetCommunity #Jaroslaw #Erasmus #PANS
-
I occupied *the* windows #CLAT address.
-
I occupied *the* windows #CLAT address.
-
Applying #ButtsInSeats on my first leg to Edinburg for #RIPE92. See you in a couple hours!
(CW: #selfie, eye contact)
-
Applying #ButtsInSeats on my first leg to Edinburg for #RIPE92. See you in a couple hours!
(CW: #selfie, eye contact)
-
To the attendees of #RIPE92 : I suggest a discussion to switch the locations of RIPE93 and RIPE94. Then Sofia would have the unique opportunity to host a RIPESC in May 2027 😁
-
To the attendees of #RIPE92 : I suggest a discussion to switch the locations of RIPE93 and RIPE94. Then Sofia would have the unique opportunity to host a RIPESC in May 2027 😁