Kal Feher

@[email protected]
52 Followers
35 Following
537 Posts
I have strong un-researched opinions on the Internet and Security.

I once worked for a cloud provider and now work for a cloud provider ☁️

vim, never emacs


it's always DNS
My CDS observation project: https://kalfeher.com/analysis/cds-charts/
Websitehttps://kalfeher.com
Githubhttps://github.com/kalfeher
LocationAustralia
Kal FeherJun 2
Show threadISC.orgJun 2
It also ties in with our recent blog post: https://www.isc.org/blogs/2026-05-12-bind-security-updates/
Prepare for more frequent BIND security updates

Plan for more frequent BIND security updates, at least for the remainder of 2026.

Kal FeherJun 2
Wes GeorgeJun 2
Are there any other Android apps that manage both Bluesky and Fedi accounts like Openvibe? They're going paid and the free version now wastes characters on an ad for them in every crosspost, so I am looking at alternatives to decide whether to buy it or abandon it. Basic feature set I like from Openvibe: crossposting w/threading support, shows a common chronological feed of both my accounts, & applies a common muted words list. Boosts appreciated.
Show threadKal FeherJun 1
argh. there's something very broken with the R53 registrar sync. it is eventually consistent. but _eventually_ is more than 3 days, by my testing.
Kal FeherMay 28
In addition to the Jordan IDN which has been broken all month, I'm starting to investigate the .cw (Curaçao) zone which has intermittent failures for a couple of weeks now.
#dns #dnssec
Kal FeherMay 28
Increase in CDS record mismatch in the .shop TLD over the last 2 weeks.
#dns #dnssec
https://kalfeher.com/analysis/cds-charts/#6-mismatch-between-cds-and-ds-records-per-tld
Daily CDS Usage Charts

Charts showing CDS usage on the Internet. Updated daily.

Kal FeherMay 25

been using R53 as a registrar bc I worked for AWS and updating DS records was easy via lambda and api. But the R53domains API or reseller sync has been broken for quite some time and I've had to turn off my automation.

So any registrar suggestions welcome. Currently leaning towards porkbun.
#dns #dnssec #registrar

Kal FeherMay 22
#dnssec outage for Jordan IDN
https://kalfeher.com/jordan-idn-fail/
#dns
Jordans IDN zone fails

Jordan's IDN zone has a long running outage

Show threadKal FeherMay 17

The first ongoing outage is Jordan's IDN xn--mgbayh7gpa (الاردن.). They appear to have misplaced their signing infrastructure.

their monthly sig roll didnt occur a few weeks ago and now all sigs are expired.
#dns #dnssec

Kal FeherMay 17
I'm restarting my project to monitor dnssec issues in TLDs.
https://kalfeher.com/tld-availability-project/
TLD DNSSec Availability Project

After a break of nearly 2 years I restart my TLD DNSSec availability project

Kal FeherMay 15

a fact that many non-australians are unaware of is that Russia robbed us of our best chance at Eurovision victory. Specifically their professional jury.

The country that beat us and won was Ukraine.

There's a metaphor there somewhere

#eurovision