News for hackers. Stuff that matters.

lb_

The route hijack was RPKI valid because they spoofed Hetzner's AS into the AS_PATH and Hetzner used a max length of /24 on the ROA (https://bgp.tools/rpki-history?cidr=162.55.0.0%2f16&asn=2494...).

I personally believe the real fix would be to incentivise the use of CAA records, ideally including the accounturi parameter.

Re:Thunderbird Pro August 2025 Update on Friday August 22, 2025 @11:06AM (#44985536)
Thundermail uses Stalwart
Re:Calendars, Contacts and Files in Stalwart on Tuesday May 27, 2025 @07:16AM (#44105797)
I really like where Stalwart is going, but I am quite hesitant to use it when basically all commits are authored by a single person. What would happen if he abandons the project or disappears?
Re:OpenWrt One router officially launched on Saturday December 07, 2024 @09:23AM (#42350009)
If you're not afraid of the CLI a standard configuration management solution like Ansible would work well.
Re:Embrace IPv6 before its too late on Sunday June 09, 2024 @11:50AM (#40625252)
NAT is a workaround, not a fix.
Re:What Are You Building? Share Your Projects on Thursday May 02, 2024 @12:40PM (#40238251)
Sounds interesting! Do you already have a website for this project?
Re:ReVanced on Friday March 25, 2022 @10:12AM (#30802381)
> redistributing a proprietary app

Revanced patches the locally installed version, so hopefully that means they'll be in the clear

Yes! I'm currently using https://usefathom.com/, works pretty great