Stéphane BortzmeyerGood morning, Brussels!
Second day of #FOSDEM https://fosdem.org/2026/
For #DNSSEC, the domain crate can use different crypto backends such as the ring crate or the #OpenSSL bindings. (But there are more.)
There is now a common-line tool to query the DNS, dnsi. And a CLI tool to do misc. manipulations, dnst ("people are using the ldns library example programs in production"). And a key manager, keyset.
Now, no longer Rust, we switch to a real language, Erlang. The authoritative name server erldns at DNSimple.
A good mission statement for DNS Tapir "Breaking the bad, stopping the ugly"
DNS Tapir analyzes #DNS query data. Among the challenges, privacy, if you want to give access to these data.
Obviously, "anonymization" is a joke and so is pseudonymization. DNS Tapir aggregates instead.
Checking software updates with the #DNS https://mastodon.gougere.fr/@DNSresolver/115995030018880844
Go has a transparency log of its software, for supply-chains security https://www.gopherwatch.org/
DNS resolver bot (@[email protected])
@bortzmeyer v=UPDATES0;l=v0.0.15 ✅ [Authenticated by DNSSEC]
And this log can now be queried through #DNS https://mastodon.gougere.fr/@DNSresolver/115995045484678683
(and with #DNSSEC authentication)
Built with the excellent Go DNS library https://github.com/miekg/dns
DNS resolver bot (@[email protected])
@bortzmeyer v=v0.0.15 t=6802a84d ✅ [Authenticated by DNSSEC]
And then on top of that, you can implement automatic software updates. No more unpatched vulnerabilities.
With a real live demo, complete with an error message (No space left on device)
"#DNS, a love affair with lovecraftian horrors"
Nice horrible font on the titles at the slides.
DNS resolver bot (@[email protected])
@bortzmeyer Azathoth Yog-Sothoth Shub-Niggurath Nyarlathotep ✅ [Authenticated by DNSSEC]
Did anyone measure the environment issue with the two wasted bytes of the #DNS class?
Now, let's hack a Z80. The "Mail station" ("email without a PC").
"Internet appliances" were common at this time.
Software updates were done by email, carrying arbitrary Z80 code.
The only protection was... SimpleDES (10 bits key).
Since the original infrastructure for the machine no longer exists, hack is needed.
Digging into an old Belgian computer, MMIF (1952-1962).
Inaugurated by the king.
At the end, 13 meters, 5000 vacuum tubes, 25 kW of power.
Harvard architecture (code and data were completely separated).
Biquinary encoding. Unlike binary, there are more 0 and less 1 because 1 used more power (and 1 which were too close could interfere).
Now, creating an Internet access provider, with modems. Make 1990 great again.
Why doing it? Because it is fun but also because in some cases, it can circumvent censorship (Egypt, 2011).
On Linux, with ppp and mgetty (and systemd!).
#FOSDEM closing session, the statistics
138 proposals for devrooms, 65 happened.
1197 speakers
1079 sessions
66 BoF
Peak number of remote viewers 1000
All T-shirts sold.
Remember to send money: https://fosdem.org/support/donate
jean-mi@bortzmeyer oh I remember, fdn did it.
Godefroy_B@bortzmeyer so you are running a digitally-encoded « pseudo-analog » signal, over optic fiber acting as if it were copperwire? What a weird looping are we in!
@Godefroy_B Indeed, one of the problems is that, even if you find an old land line, sooner or later, your "phone" call wll go over VoIP and strange things will happen.
I wonder if it would work ove 5G with an acoustic coupler?
Maya Saura 
@bortzmeyer il y a de la place un peu dans la salle ou c’est mort pour rentrer ?
@mayasynth
Faut patienter
Faut patienter
Foudreclair@bortzmeyer c’est la plus fun