Richard "mtfnpy" Harman (he/him)Feb 19

RE: https://infosec.exchange/@xabean/116099818582303720

DNS: make absolutely no assumptions because you are wrong.

Yep, that's a fucking comma in a PTR record. Guess what broke a CSV parser!

Show threadBrialaFeb 19
@xabean Are commas even legal in a PTR record?
Show threadRichard "mtfnpy" Harman (he/him)Feb 19
@static make no assumptions! because you're wrong!
JPFeb 20
Show threadJP

@xabean @static a fun game I like to introduce people to: make a blind guess how many (currently active and applicable) DNS RFCs there are, don’t look it up. done it? okay write your number down, and *now* go look

can do the same for TLD zones, too

(few people tend to even be in the ballpark of the right numbers, even among generally better tech clue. talking sub-20%, ime to date)

Feb 20 at 12:30amWeb
Show threadGrumpSec SpottycatFeb 20
@froztbyte @xabean @static now send an email to dnscrimes at "cname dot fyi". That shouldn't work (since the apex for cname dot fyi is CNAMED) but it does..
Show threadJPFeb 20
@kyhwana @xabean @static I also really enjoyed that in-addr.arpa fedi host someone made not too long back, I forget the full instance name now
Show threadGrumpSec SpottycatFeb 20
@froztbyte @xabean @static magic!