69 Followers
32 Following
211 Posts
Lover, hater, IP networking.
The Call for Presentations for NLNOG Day 2026 is now open! You can read all about it on https://nlnog.net/cfp. Please submit your presentation before July 20th!
NLNOG CFP

RE: https://oldbytes.space/@feoh/116687129039392818

Advice I was given in my youth:

Print your slide on a full piece of paper. Put the paper on the ground. Stand on a chair.

If you can’t easily read your slide, neither can the person at the back of the room.

It flummoxes me that 30 years into using computers to show slides, tiny fonts in slide is *still* widespread practice.

Almost two years ago I presented on the challenges that come with self hosting things for friends and family when you're not available anymore.

Today at RIPE92 (@ripencc) Robert Kisteleki presented an initative to gather information, best practices, etc on this topic.

You can find his presentation here: https://ripe92.ripe.net/programme/meeting-plan/sessions/103/7PEF7V/#robert-kisteleki.

Video of my presentation: https://www.youtube.com/watch?v=K3Ocy1AyLpg, slides: https://nlnog.net/events/past-events/nlnog-day-2024/presentations/NLNOG2024-05-Teun_Vink_-Your_Digital_Legacy.pdf.

Please join this initiative so we can create a set of best practises!

Talk details: Personal Continuity Plans (Digital Legacy), Robert Kisteleki - RIPE 92

Talk details for 'Personal Continuity Plans (Digital Legacy)' by Robert Kisteleki at RIPE 92

I dreamt that my Mac got infected with malware and got as far as finding the launch daemon, contemplating whether I could stop it that way or it would have a killswitch before waking up

Yesterday, a kernel flaw affecting many different Linux distributions
was announced: https://copy.fail. This issue allows unprivileged users to gain root privileges on unpatched systems. Since no updated kernel packages have
been released yet by Ubuntu, we have implemented the suggested workaround on all NLNOG RING nodes.

We have no indications that any RING nodes were compromised before we
implemented the fix. Should you notice any signs of the contrary, please
let us know.

Copy Fail — 732 Bytes to Root

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

Xint

I found a chain of vulnerabilities in systems at RIPE NCC, operator of one of five global RPKI trust anchors. A single click on an ordinary-looking link was enough to disconnect a network from the internet.

My entry points were debugging fields in DNS and crafted TLS certificates. From there, I escalated to the RPKI Dashboard, which controls which networks are authorised to announce your IP addresses to the internet, and the RIPE Database, which stores routing policy. All vulnerabilities have been fixed.

Full write-up: https://mxsasha.eu/posts/ripe-ncc-rpki-exploit-chain/

Just over 4 years after publishing the first draft, NRTMv4 has been approved by the IESG! This was my first ever IETF draft. This new protocol dramatically improves Internet Routing Registry security and reliability.

All that remains now is the RFC Editor process. Four authors went through 11 versions, 25 reviewers/implementers, dozens of comments, and 5 interoperable implementations. Catch my talk at the #RIPE92 database working group to learn more.

https://datatracker.ietf.org/doc/draft-ietf-grow-nrtm-v4/

OH:
"When I look at Nextcloud I see five million lines of PHP."
"Yeah, well, I just see one Docker image."

We have another event planned: on June 5th we will be organising 'Lekker Weer NLNOG 2026', a combination of interesting talks followed by drinks and good food!

For more details check out https://nlnog.net/events/lekker-weer-nlnog-2026/

We hope to see you all there!

Lekker Weer NLNOG 2026 | NLNOG - Netherlands Network Operator Group

@benjojo why does that site use the 4chan color scheme