Viewing profile — blechschmidt

This provider has been almost fully vibe-coded with Claude. I basically told Claude how the data model should look like and let it verify its assumptions on a real YubiHSM device. …

AFAIK, there are even companies that own hundreds of registrars to just do that [1]. Just scroll through [2]. [1]: https://domainnamewire.com/2015/10/09/wow-dropcatch-adds-300... […

Blocking a /64 is not even enough in many cases. I know a couple of server providers handing out a /48 per server. If routing is done the right way, you can pretty easily randomize…

In my opinion, it is dangerous to draw conclusions about responsibility from phone usage only. Even if the conclusions may be correct in 95% of all cases, what about the other five…

I find the title confusing. At first I thought the post was about DNS hijacking or something similar. However, the phishing attack does not make use of identical domains but homogr…

You could use libnetfilter_queue and some DNS library like ldns to parse the packets and drop them if the DNS question contains "xn--".

A possibility to break these might consist in using Google's image reverse search and check whether the word which you are supposed to identify images for appears on the result pag…

This might already filter out legitimate users. dig MX io. Also, you don't know what new TLDs ICANN might come up with at some point. I am pretty sure there are service providers t…

This is probably a better approach if your domain provider supports wildcard DNS records. My old provider did not and I am very glad I switched.

I do not use Gmail but a self-hosted Postfix instance. I have configured an alias for tagged use only and configured Postfix to reject all emails to this alias without a tag. This …

Yes, the + is incredibly useful for tagging emails. When I register new web accounts, I always specify a new unique tag so that I can track down the source in case I receive spam. …

Ah, that would mean that I would have the libraries handle the resolving. I was currently only thinking about keeping the single socket which is used in order to only use the parsi…

A look at https://archive.is/https://petition.parliament.uk/petitions/... supports the claim. Although, of course, one cannot really tell how many fraudulent signatures have remain…

I have not yet managed to setup a single local recursor, such as PowerDNS recursor, to deliver the same performance as the list consisting of multiple open resolvers, although band…

Not yet. I have had a quick look at ldns ( https://www.nlnetlabs.nl/projects/ldns/ ) which supports parsing DNS packets from wire . I will probably replace the DNS implementation w…

You are correct. Has been fixed.

This is the line of code that pre-checks whether an incoming packet should be parsed at all. If it is not a response packet or if the number of questions is not one, it should not …

I have not heard about tindydns before but it seems to be a DNS server, not a client. The tool has mainly been tested on a Hetzner EX41 server. (Ubuntu, Intel® Core™ i7-6700, 32 GB…

For DNS cache snooping the usage would of course be different. You would supply the tool with one resolver which does not reject non-recursive queries. Theoretically, one could eve…