See also: traceroute -m 60 bad.horse
No post body was provided.
Engineer distributes resume via IPv6 traceroute
31–40 of 162 posts
Re: Engineer distributes resume via IPv6 traceroute
#32Earlier quoted context omitted.
So is that mail.jobs@ or mail+jobs@... or jobs@ A total flop on the last line
My interpretation was mail: jobs@poinsignon.org
My interpretation would be mail+jobs@example.com, given that it's become the de facto standard, and mail@example.com looks like his main one.
Re: Engineer distributes resume via IPv6 traceroute
#33Here's what it looks like: $ traceroute cv6.poinsignon.org traceroute to cv6.poinsignon.org (2001:bc8:3eff:c0::ff), 30 hops max, 80 byte packets 1 gateway 0.795 ms 0.789 ms [...] 8 hello (2001:bc8:3eff:c0::1) 1.431 ms 1.202 ms 9 My.name.is.Louis.Poinsignon (2001:bc8:3eff:c0::2) 1.649 ms 1.274 ms 10 I.am.a.network.and.systems.Engineer (2001:bc8:3eff:c0::3) 1.695 ms 2.090 ms 11 This.is.my.resume.over.traceroute (2001:b…
So is that mail.jobs@ or mail+jobs@... or jobs@ A total flop on the last line
I bet if he can do this trace route thing, he can get all those emails going to his own domain regardless of who they are addressed to
Re: Engineer distributes resume via IPv6 traceroute
#34Funnily enough he didn't bother to put something in his default htdocs directory : https://poinsignon.org/
Re: Engineer distributes resume via IPv6 traceroute
#35Great, but not Bad Horse great.
Re: Engineer distributes resume via IPv6 traceroute
#36Thought it was a dead link since it didn't work on my mobile data or home internet, turns out it's just a v6 only DNS record.
Re: Engineer distributes resume via IPv6 traceroute
#37I’d like to imagine one of the troubleshooting steps for Cloudflare’s help desk when they see an uptick in customer service disruption complaints is to hit up Louis to ask if he’s updating his resume again.
Re: Engineer distributes resume via IPv6 traceroute
#38I guess the site can only be reached over IPv6? It seems I only have IPv4 :(
That could be a feature if he didn't want to work at companies that don't have a IPv6 network :)
Re: Engineer distributes resume via IPv6 traceroute
#39Earlier quoted context omitted.
> Cloudflare.NetworkEngineer Ah, that explains a lot. Not that anyone else couldn't do such a thing, but I feel like even amongst more "hacker" types it takes a relatively specialized background to pull a trick like this (at least statistically; I'm sure there are outliers).
Not sure how he did it, but my first guess would be just a bunch of virtual interfaces on a linux box with a->b->c->d->e->etc routing, and something like the tc command[1] to add enough latency to each one that traceroute sees them all. If he's scripted it to do all the virtual nic creation and dns ptr entries, it would be interesting to see. [1] https://bencane.com/2012/07/16/tc-adding-simulated-network-l...
Virtual interfaces aren't necessary, and would be overkill. All he needs on his server is to listen on a raw network socket, read the incoming packet's IP TTL value, then forge and send an ICMP "time exceeded" response with the source IP address set to a value that depends on the TTL. The entire thing could be done in 20-30 lines of Python.
Next to that he set up a DNS server configured with PTR records that map these forged IP addresses to arbitrary hostnames of his choices.
Re: Engineer distributes resume via IPv6 traceroute
#40That's how it's done probably https://github.com/blechschmidt/fakeroute