pjf

- https://bgpipe.org/stages/aspa/

- https://www.ripe.net/manage-ips-and-asns/resource-management...

  [1] https://www.ietf.org/proceedings/104/slides/slides-104-maprg-dns-observatory-monitoring-global-dns-for-performance-and-security-pawel-foremski-and-oliver-gasser-00.pdf (see slide 15; yeah, it's already a bit old, yet still the case from my practice)

[1] https://github.com/agl/crlset-tools

1. 100 IXes alone would get 56% IPv4 and 61% IPv6 prefixes, but ~14% reachability

2. little uniqueness between exchanges: not many new prefixes after the top 5

3. for outbound-heavy networks IXes are great, but to attract traffic they are not (edit: applies to automatic peering via route servers)

Isn't this one of the remaining, "legit" uses of the Telnet protocol on TCP/23 port over the public Internet?

Another thing is bgpipe speaks JSON to background (or even remote) packet processors, so basically you can use whatever language you want with it to drive your BGP routers.

- https://bgp.tools/ - https://bgproutes.io/ - https://bgp.he.net/ - https://radar.qrator.net/ - https://github.com/nttgin/BGPalerter

...all of which are (usually) free. IMHO you should have a competing product + money strategy before you continue. Many people have tried (and failed) to make money off BGP.

BTW, author of https://bgpipe.org/ here, an open-source BGP data tool

I'm working on a man in the middle proxy for BGP, which can fix and inspect routing sessions on the fly. Like a firewall for the BGP control plane.

I guess it might be a very competitive alternative to your product, yet it can't reach 60+fps and is sketchy in terms of security, imho.

* https://lcamtuf.substack.com/p/afternoon-project-jpeg-dct-te...

* https://lcamtuf.substack.com/p/not-so-fast-mr-fourier

  - math/rand
  The math/rand package now automatically seeds the global 
  random number generator (used by top-level functions like 
  Float64 and Int) with a random value, and the top-level 
  Seed function has been deprecated. Programs that need a 
  reproducible sequence of random numbers should prefer to 
  allocate their own random source, using 
  rand.New(rand.NewSource(seed)).
  (...)

Wait, it's the opposite, at least on the infrastructure side. The Internet is increasingly centralized, due to Cloudflare and other big players.

First time to be called shady, though ;)

Another point is that CTs alone won't prevent the attacks nor inform you about a problem - they need a monitoring system.

(yes I know that's not the problem with CT - it's great, just trying to justify a strong opinion of "it doesn't work")

Farsight Security, lead by Paul Vixie, is all about DNS and security. We provide the world’s largest real-time actionable threat intelligence information on how the Internet is changing, seeing more than 200,000 DNS-related observations per second.

We are looking for a Senior Distributed Systems Engineer to join our development team distributed around the world.

Details at https://www.farsightsecurity.com/about-farsight-security/job...