mastodontech.de ist einer von vielen unabhängigen Mastodon-Servern, mit dem du dich im Fediverse beteiligen kannst.
Offen für alle (über 16) und bereitgestellt von Markus'Blog

Serverstatistik:

1,5 Tsd.
aktive Profile

#networksecurity

4 Beiträge4 Beteiligte0 Beiträge heute
Antwortete im Thread

@VXShare @StarkRG @jay @vildis @vxunderground OFC, if their corporate firewall didn't blocklist your domain, most #MITM-based "#NetworkSecurity" solutions and "#EndpointProtection" will checksum files and instantly yeet them into the shadow realm.

  • Researchers should OFC only run those said malware only for research purposes and on #airgapped, sanctioned systems but they need to get their hands on them in the first place.

And lets be honest: Like with chemistry and medicine, one wants to have a supplier that isn't shady af but actually transparent.

  • The "alternative" would be to go into some "dark corners" and risk getting something else entirely.

Over the past few days I've installed some blocklists into the PowerDNS Recursor instances on our home network. This is similar to what a Pi-Hole does, but without needing a second hop for all the DNS queries to pass through.

Today, with some guidance from the lovely community in the PowerDNS IRC channel, I set up logging so I'll be able to see which queries were blocked (the requesting address and the QNAME). I've been watching it a bit for about an hour, and it's rather shocking. Opening the Slack app on my phone, which does not display any advertisements, triggered a flurry of DNS queries for various ad-related services.

It will be interesting watching this over the next week or two, partially to see if anything we regularly use is actually broken or even changed at all, and to see what the volume is.