JA4+ network fingerprinting
Guest Post: Powerful human and machine-readable network fingerprints for multiple protocols that improve threat-hunting and analysis.
Category:
Tech matters
BGPlay data misinterpretation led to a BGP false alarm call
Guest Post: BGP false alarm — what happened, and what can we learn from it?
IPv6, the DNS and Happy Eyeballs
Why mandating IPv6 DNS transport requires careful thinking in specifications.
Hazardous DNS echoes
Guest Post: Quantifying the problem of ‘echoing resolvers’ in the wild.
Security control changes due to TLS Encrypted Client Hello
Guest Post: How will the forthcoming TLS Encrypted Client Hello changes affect your current set of defences?
Don’t put all your Internet infrastructure in one basket
Guest Post: A fire in a Bangladesh tower disrupted Internet connectivity for around 40% of Internet users, highlighting the need for resiliency.
The game of Dominoes and TCP/IP
Guest Post: Using dominoes to understand the complexities of TCP/IP.
How to secure your online identity with security keys
Guest Post: First-hand experience implementing a hardware security key for the first time.
How we measure: RPKI ROA signing and Route Origination Validation
How APNIC Labs measures ROA production and ROV-invalid filtering.
[Podcast] Negative caching of DNS resolution failures
Duane Wessels discusses caching failure in the DNS.