223.5.5.5 (AliDNS) seems to be one of the few big public #DNS resolvers without #DNSSEC validation. Anyone to talk to Xi Jiping about this issue?

Vigilant: All-in-One #WebMonitoring Tool

Vigilant allows you to monitor all aspects of your website including uptime, #DNS, #Lighthouse, and broken links

Comprehensive monitoring of website performance, uptime, and DNS configurations

#monitoring #DevOps #php #Laravel

#FastFlux is back again!

#DNS

https://www.bleepingcomputer.com/news/security/cisa-warns-of-fast-flux-dns-evasion-used-by-cybercrime-gangs/

#CISA warns of #FastFlux #DNS evasion used by #cybercrime gangs

https://www.bleepingcomputer.com/news/security/cisa-warns-of-fast-flux-dns-evasion-used-by-cybercrime-gangs/

Mit der Rückkehr von Donald #Trump ins Weiße Haus wird die Abhängigkeit von #US-#Cloud-Diensten zu einem wachsenden Problem.
Denn der
#CloudAct zwingt US-amerikanische Firmen Anweisungen von US-Behörden Folge zu leisten, ganz gleich wo deren #Server stehen.

Nicht nur Staaten und Unternehmen, sondern auch Privatpersonen sind betroffen.

Angefangen bei #Datenspeichern über #Online-#Office-Anwendungen bis zu grundlegenden Internetdiensten wie #DNS oder Zertifizierungsstellen.

Es betrifft selbst smarte Geräte wie #WLAN-Steckdosen, wenn deren zentralen Dienste auf einem #Hyperscaler wie #Amazon #AWS oder #Microsoft #Azure liegen.

Doch es gibt Möglichkeiten, den #Datenabfluss zu minimieren und #Alternativen zu nutzen.

Welche das sind, erläutert c’t Redakteur Peter Siering. Die Optionen reichen von #Suchmaschinen über europäische Cloud-Speicher und Open-Source-Projekte bis zu dezentralen, sichereren #Messengern.

https://www.youtube.com/watch?v=5i2eLjLKl2s

@switchingsoftware

@bfdi !!
@bsi !!

For those that run a homelab with DNS and DHCP, are you using IPv6? I'm running BIND and debating if I need to configure IPv6 just to future-proof myself. I'm not seeing any issues, at least any that I notice.

Also, I know little about IPv6, so I admit I need to do some learning.

In case you're not up-to-speed on what #FastFlux #DNS is, it's part of the arms race between attackers and defenders:

THREAT ACTOR: This is my C2 IP
BLUE TEAMER: Blocked at the firewall

TA: Ok, well then, here's my C2 domain. I've rented 50k botnet nodes to use as proxies to my real C2 infrastructure, and I'm going to keep changing the IP the domain points to basically forever. Good luck blocking that. [FAST FLUX]
BT: Blocked the domain's nameserver's IPs at the firewall

It is a feature to not use a two letter top level cc domain. You may stay under the radar.

Friendly reminder that you should be blocking all newly registered domains for your end users. Free lists like the NRD (https://github.com/xRuffKez/NRD) exist. Microsoft Defender for Endpoint also has a built in list you can enable via policy.

IMO everyone should do 365 days but even 30 or 90 will save you so much headache.
#DNS #ThreatIntel #FastFlux

Dive into the world of DNS with our latest video! Just released: "What are AAAA Records?" If you're looking to expand the connections your web service or app has with IPv6, this video will teach you how AAAA Records map your domain to IPv6 addresses so that you can take advantage of the emerging technology.
https://youtu.be/4SGgO5MSQLg

DDoS Attacks (HTTP/2, DNS, Hacktivist)
This is Real World Technical Analysis

YouTube video: https://youtu.be/t2jKcA1OyBE

#Sponsored #cybersecurity #ddos #dos #DNS #http #tls #hack #hacker #hacking #cyber #internet Radware

This week, we encountered a new phishing campaign utilizing the Tycoon 2FA Phishing-as-a-Service (PhaaS) to bypass multifactor authentication (MFA).

The RDGA domains have Russian TLDs but are hosted on CloudFlare infrastructure. We have been seeing them use shared infrastructure for a few months now, definitely trying to make detection more challenging. They continue to obfuscate every piece of code but have updated their verification page. Previously, we always saw their custom Cloudflare Turnstile page, but now they also use a new captcha challenge, as shown below.(You can also check it here https://urlscan.io/result/0195ed8b-7a48-7348-a814-0a058571b51e/ )

Their old Cloudflare Turnstile page seems to still be their favorite, even though they now change their message more frequently: "Checking response before request" or "Tracking security across platform" are some of the new messages they use.

Here is a sample of the hundreds of domains we are detecting:
womivor[.]ru
nthecatepi[.]ru
toimlqdo[.]ru
dantherevin[.]ru
xptdieemy[.]ru

It feels good in the curent situation to be fully free of any proprietary solution.

#Linux #Debian #FreeBSD on all systems only, own #public #DNS servers on own systems including management.

#Mastodon, #Matrix , #Bridges , #Email , #SOGo #Nextcloud #Owncloud #UnifiedPush #ntfy #HomeAssistant #WebSites mostly done with #Hugo, and far more all self hosted on own systems in the basement or in our housing rack.

Mobiles #GrapheneOS and #LineageOS

Whatever #Trump #Microsoft aso does i dont care

Tell #Congress : No to Internet #Blacklists

#FADPA , and other proposals in the works, would force internet service providers (ISPs) and domain name system ( #DNS ) providers to block sites, including U.S. sites, based on one-sided #copyright accusations, even when those sites also host lawful content.
#isp #privacy

https://act.eff.org/action/tell-congress-no-to-internet-blacklists

people in the #IT field should start referring to ICANN as "mother" same way people back in the day refereed to the Bell Telephone Company as "Ma Bell" back when they had a monopoly. ICANN is the modern equivalent as they hold a monopoly on the Internet's naming system.

Meine Datenschutz und Privatsphäre Übersicht 2025, für die Allgemeinheit

Teilen er­be­ten

als PDF:

https://cryptpad.digitalcourage.de/file/#/2/file/NdmBgSYkRCto8B+JmJkE9mQ4/

 #DSGVO #TDDDG ( #unplugtrump )
#Datenschutz #Privatsphäre #sicherheit #Verschlüsselung
#encryption #WEtell #SoloKey #NitroKey #Email #Cybersecurity #Pixelfed #Massenűberwachung
#Google #Metadaten #WhatsApp #Threema #Cryptpad #Signal
#Hateaid #Cyberstalking #Messenger #Browser #Youtube #NewPipe #Chatkontrolle #nichtszuverbergen #ÜberwachungsKapitalismus #Microsoft #Apple #Windows #Linux #Matrix #Mastodon #Friendica #Fediverse #Mastodir #Loops #2FA #Ransomware #Foss #VeraCrypt #HateAid #Coreboot #Volksverpetzer #Netzpolitik #Digitalisierung #FragdenStaat #Shiftphone  #OpenSource #GrapheneOS #CCC #Mail #Mullvad #PGP #GnuPG #DNS #Gaming #linuxgaming #Lutris #Protondb #eOS #Enshittification
#Bloatware #TPM #Murena  #LiberaPay #GnuTaler #Taler #PreppingforFuture
#FediLZ #BlueLZ #InstaLZ #ThreatModel
#FLOSS #UEFI #Medienkompetenz

Hey #DNS masters. Is it true that when you register a domain name as a Moral Person / Legal Entity, you can't have the personal details (address etc) hidden in the WHOIS database? To have those hidden, you would have to use a Physical Person / Individual account?