Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Engineer distributes resume via IPv6 traceroute

cv6.poinsignon.org

Post reply on HN
Print view View original

101–110 of 162 posts

Re: Engineer distributes resume via IPv6 traceroute

#101

Post by contingencies »

An old hack.

For the history books, IIRC proff (Julian Assange) presented this hack in 1997, shortly after he wrote strobe.c (1995; AFAIK the first TCP half-open scanner). Here's a 1998 public posting of the code: https://packetstormsecurity.com/files/12995/fakeroute.c.html

At that time, the running joke was to provide inbound traceroutes spoofed next hops which implied you were working for a government agency (the Australian Federal Police, the Defence Signals Directorate (now Australian Signals Directorate) or the Defence Science and Technology Organisation (now the Defence Science and Technology Group)).

Free Julian.

Re: Engineer distributes resume via IPv6 traceroute

#102

Post by yyyk »

300bps wrote: post #16
jvdvegt wrote: post #3

I guess the site can only be reached over IPv6? It seems I only have IPv4 :(

I think it's reasonable to assume that this whole thing has been a marketing campaign to get people to finally have a reason to switch to IPv6. All kidding aside, IPv6 isn't even required for their website or this traceroute trick. He just set up an in-addr.arpa reverse DNS zone to reverse resolve particular IP addresses to specific values. If you had a block of 20 IPv4 addresses, I don't see anything stopping you fr…

>If you had a block of 20 IPv4 addresses, I don't see anything stopping you from doing the exact same thing.

A block isn't necessary at all, even on IPv4. Traceroute can easily show internal address or just be lied to. Just recently we've seen a different example of this on HN:

https://news.ycombinator.com/item?id=32566730

Re: Engineer distributes resume via IPv6 traceroute

#103

Post by mhh__ »

vlan0 wrote: post #45
yjftsjthsd-h wrote: post #12

Earlier quoted context omitted.

> Cloudflare.NetworkEngineer Ah, that explains a lot. Not that anyone else couldn't do such a thing, but I feel like even amongst more "hacker" types it takes a relatively specialized background to pull a trick like this (at least statistically; I'm sure there are outliers).

Feels like we’re a dying bread with everything cloud first and serverless.

There are always nerdy kids learning this stuff.

Especially when the breed has "died"

Re: Engineer distributes resume via IPv6 traceroute

#104

Post by chatmasta »

xhrpost wrote: post #94
chatmasta wrote: post #66

Earlier quoted context omitted.

It’s because practical experience with technologies like BGP is difficult to acquire without sufficient capital to run a network. You can of course purchase a /24 and dabble (search HN for blog posts describing exactly that). And you can experiment with large deployments in simulators. But network optimization is inherently more of a practical pursuit than a theoretical one, so most broad and consistent learning oppo…

> search HN for blog posts describing exactly that Know any offhand? Search is a bit tough for a common number like 24. The concept sounds interesting

Oh wow you’re right - and neither “autonomous system” nor “AS” are much better keywords! I think this post from 2017 [0] is the one I’m remembering, but I’m pretty sure I saw another one more recently and now I can’t find it (edit: skitter found it! see sibling comment)

“BGP” is a signal-yielding search [1]. And any post from benjojo’s blog [2] is always a must-read.

[0] https://news.ycombinator.com/item?id=15727115

[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

[2] https://news.ycombinator.com/from?site=benjojo.co.uk

Re: Engineer distributes resume via IPv6 traceroute

#105

Post by skitter »

xhrpost wrote: post #94
chatmasta wrote: post #66

Earlier quoted context omitted.

It’s because practical experience with technologies like BGP is difficult to acquire without sufficient capital to run a network. You can of course purchase a /24 and dabble (search HN for blog posts describing exactly that). And you can experiment with large deployments in simulators. But network optimization is inherently more of a practical pursuit than a theoretical one, so most broad and consistent learning oppo…

> search HN for blog posts describing exactly that Know any offhand? Search is a bit tough for a common number like 24. The concept sounds interesting

A quick search turned up https://news.ycombinator.com/item?id=30178655

Re: Engineer distributes resume via IPv6 traceroute

#106

Post by oars »

prvit wrote: post #60
yjftsjthsd-h wrote: post #12

Earlier quoted context omitted.

> Cloudflare.NetworkEngineer Ah, that explains a lot. Not that anyone else couldn't do such a thing, but I feel like even amongst more "hacker" types it takes a relatively specialized background to pull a trick like this (at least statistically; I'm sure there are outliers).

This is a very old and oft-repeated trick though. https://github.com/blechschmidt/fakeroute https://github.com/antifork/hopfake https://github.com/jprenken/rickroute https://github.com/sams-gleb/ipv4-traceroute-fake https://github.com/job/ipv6-traceroute-faker And so on… I remember being a 13yo kid sitting on IRC doing exactly this for fun years ago back when IP addresses were cheap and easy to come by. But spoofing…

Thanks for sharing these links.

Re: Engineer distributes resume via IPv6 traceroute

#107

Post by Aeolun »

jen729w wrote: post #83
billpg wrote: post #61

"That's very nice but can you email me a copy in Microsoft Word DOCX format please?"

I’m just about to live this hell. On advice from a friend, my response will be a simple one: no, because it doesn’t exist. It was written in Markdown [0]. Here’s a PDF. I’m expecting the usual pushback, and will reciprocate. I’ll let you know how it goes. [0]: https://github.com/johnnydecimal/resume/blob/main/resume.md (Yeah I shamelessly inserted my own résumé.)

I gave up, I now generate my CV in docx from JSON, and convert that to PDF.

Re: Engineer distributes resume via IPv6 traceroute

#108

Post by motohagiography »

prvit wrote: post #60
yjftsjthsd-h wrote: post #12

Earlier quoted context omitted.

> Cloudflare.NetworkEngineer Ah, that explains a lot. Not that anyone else couldn't do such a thing, but I feel like even amongst more "hacker" types it takes a relatively specialized background to pull a trick like this (at least statistically; I'm sure there are outliers).

This is a very old and oft-repeated trick though. https://github.com/blechschmidt/fakeroute https://github.com/antifork/hopfake https://github.com/jprenken/rickroute https://github.com/sams-gleb/ipv4-traceroute-fake https://github.com/job/ipv6-traceroute-faker And so on… I remember being a 13yo kid sitting on IRC doing exactly this for fun years ago back when IP addresses were cheap and easy to come by. But spoofing…

Fakeroute was the funniest thing in the world back then. Thank you.

Re: Engineer distributes resume via IPv6 traceroute

#109

Post by exikyut »

prvit wrote: post #60
yjftsjthsd-h wrote: post #12

Earlier quoted context omitted.

> Cloudflare.NetworkEngineer Ah, that explains a lot. Not that anyone else couldn't do such a thing, but I feel like even amongst more "hacker" types it takes a relatively specialized background to pull a trick like this (at least statistically; I'm sure there are outliers).

This is a very old and oft-repeated trick though. https://github.com/blechschmidt/fakeroute https://github.com/antifork/hopfake https://github.com/jprenken/rickroute https://github.com/sams-gleb/ipv4-traceroute-fake https://github.com/job/ipv6-traceroute-faker And so on… I remember being a 13yo kid sitting on IRC doing exactly this for fun years ago back when IP addresses were cheap and easy to come by. But spoofing…

How would you spoof arbitrary IPs? IIUC it's poked at as the next hop...?

(Mhm, embarrassingly out of the loop)

Re: Engineer distributes resume via IPv6 traceroute

#110

Post by exikyut »

vlan0 wrote: post #45
yjftsjthsd-h wrote: post #12

Earlier quoted context omitted.

> Cloudflare.NetworkEngineer Ah, that explains a lot. Not that anyone else couldn't do such a thing, but I feel like even amongst more "hacker" types it takes a relatively specialized background to pull a trick like this (at least statistically; I'm sure there are outliers).

Feels like we’re a dying bread with everything cloud first and serverless.

Ah so this is how "the next best thing since sliced bread"s die :'(
Post reply on HN