pigggg

MPTCP doesn't require IP options. Confused at what you are trying to say.

Tragically not enough people drop IP options. I did it in the early 2000s for a very large US network and was glad. There's lots of obvious reasons as they're generally an old school ddos path to knock out routers (get punted to the RE/RP exception path, a good way to bypass some loopback/routing engine acls if folks don't filter it right). Every few years some academics pop up with let's use IP options because we can stuff more bullshit in the datagram - it's always a bad idea.

I remember reading about this story awhile back. Some young twenty something was caught with a small amount (MDMA I think?) and the ADA was pushing for him to take a deal. Before anything was inked or signed - the father of the son has his lawyer draft some legal process to the DEA/DOJ to get what sort of evidence they had on him. The ADA called the father and bitched at him for a solid few minutes about how that action will result in months of them having to do work - and at that point the deal was off and it was retribution time.

It was a very telling experience where doing things our constitution permits is considered a burden on law enforcement and prosecutors.

Who told you about it?

Because they've already got the ISPs DNS resolvers blocking shit and when they see clients from those same ISPs still connecting they get hints on which public DNS resolvers people are using. You can make a safe bet French ISPs played an active part in pointing people to go after quad 9.

Their Internet registry people also weaponized AS0 (zero) as a method to take networks off air via BGP RPKI for the ranges they're responsible for. There's been a number of situations where multinational companies who operate in India who are forced to use IPs from the India RIR have been fat fingered by some staffer who makes changes then goes home for the day: meanwhile a multinational bank is down for 24 hours within the country because said agency doesn't believe in 24/7 support.

Typically they do this for non pay but they've dropped the hammer multiple other times incorrectly (and good luck getting a RFO out of anyone there).

Various Indian regulations (particularly around commerce and banking) require you to use India companies for solutions like the above. It gets worse when companies are "steered" by a regulator/compliance person who has a bias for a specific solutions provider.

Typical bullshit where India regulations force people in India to buy local - and because the landscape is filled with incompetent and inept companies you get shit like this.

Eh a month or two before the October 2023 Israel conflict - there were many reports of GPS jamming in the middle east impacting air transport aircraft. To the point where it basically caused various failure modes that shouldn't have happened with avionics (think the things you'd expect in a fuzzing scenario). It was pretty eye opening example of just how poor modern avionics are (and their integrations) when they get unpredictable inputs & the dependant downrange systems that rely upon that data.

If you go to any large DC construction site the lot will be filled with out of state plates - and not just adjacent states, but folks from across the country.

Isn't this because of the kimwolf (and now 6+ other botnets) that are taking advantage of people running residential proxyware unknowingly on the device which permits outbound connections to 127.0.0.1 on tcp/5555 to auth in and exec wgets or drops a loader that grabs the ddos malware APKs and install it?

Can confirm they've null routed various cloud providers IPs - with no notification and when folks reached out to the telecoms it took them 2 weeks of impact before they responded (even when provided with sufficient data of specific IPs getting dropped in their network).

It's literally a known thing at telcos in various roles they find people looking up folks dox regularly. If someone registers a complaint that someone access their data they'll look it up and deal with them.

I once asked someone on the security /investigations side if you are logging what everyone is doing can't you easily find when folks are looking up stuff unrelated to their job? Their answer: we'd have to fire over half the people here - everyone is constantly looking up people's PII - celebrities, friends, enemies, etc. it's almost considered a unofficial perk of the job. This was from one of the largest US Telco carriers circa 2010. Maybe things have changed, hopefully.