Good morning, Brussels!
Second day of #FOSDEM https://fosdem.org/2026/
Good morning, Brussels!
Second day of #FOSDEM https://fosdem.org/2026/
For #DNSSEC, the domain crate can use different crypto backends such as the ring crate or the #OpenSSL bindings. (But there are more.)
There is now a common-line tool to query the DNS, dnsi. And a CLI tool to do misc. manipulations, dnst ("people are using the ldns library example programs in production"). And a key manager, keyset.
Now, no longer Rust, we switch to a real language, Erlang. The authoritative name server erldns at DNSimple.
A good mission statement for DNS Tapir "Breaking the bad, stopping the ugly"
DNS Tapir analyzes #DNS query data. Among the challenges, privacy, if you want to give access to these data.
Obviously, "anonymization" is a joke and so is pseudonymization. DNS Tapir aggregates instead.
Checking software updates with the #DNS https://mastodon.gougere.fr/@DNSresolver/115995030018880844
Go has a transparency log of its software, for supply-chains security https://www.gopherwatch.org/
@bortzmeyer v=UPDATES0;l=v0.0.15 ✅ [Authenticated by DNSSEC]
And this log can now be queried through #DNS https://mastodon.gougere.fr/@DNSresolver/115995045484678683
(and with #DNSSEC authentication)
Built with the excellent Go DNS library https://github.com/miekg/dns
@bortzmeyer v=v0.0.15 t=6802a84d ✅ [Authenticated by DNSSEC]
And then on top of that, you can implement automatic software updates. No more unpatched vulnerabilities.
With a real live demo, complete with an error message (No space left on device)
"#DNS, a love affair with lovecraftian horrors"
Nice horrible font on the titles at the slides.
@bortzmeyer Azathoth Yog-Sothoth Shub-Niggurath Nyarlathotep ✅ [Authenticated by DNSSEC]
Now, let's hack a Z80. The "Mail station" ("email without a PC").
"Internet appliances" were common at this time.
Software updates were done by email, carrying arbitrary Z80 code.
The only protection was... SimpleDES (10 bits key).
Since the original infrastructure for the machine no longer exists, hack is needed.
Digging into an old Belgian computer, MMIF (1952-1962).
Inaugurated by the king.
At the end, 13 meters, 5000 vacuum tubes, 25 kW of power.
Harvard architecture (code and data were completely separated).
Biquinary encoding. Unlike binary, there are more 0 and less 1 because 1 used more power (and 1 which were too close could interfere).
Now, creating an Internet access provider, with modems. Make 1990 great again.
Why doing it? Because it is fun but also because in some cases, it can circumvent censorship (Egypt, 2011).
On Linux, with ppp and mgetty (and systemd!).
#FOSDEM closing session, the statistics
138 proposals for devrooms, 65 happened.
1197 speakers
1079 sessions
66 BoF
Peak number of remote viewers 1000
All T-shirts sold.
Remember to send money: https://fosdem.org/support/donate