Profile picture
Nick Sullivan @grittygrease
, 3 tweets, 2 min read Read on Twitter
DNS interception and manipulation is real and pervasive. This paper is a great motivator for the deployment of encrypted DNS and DNSSEC. #usesec18

Who Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path usenix.org/conference/use…
Here’s a website built by the researchers to help reveal which DNS resolver you are using.

whatismydnsresolver.com
@shuang_hao there are some comments/questions in replies to this thread. Hopefully you can answer them.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Nick Sullivan
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#usesec18

More from @grittygrease see all

Profile picture
Welcome to #CryptoWeek at @Cloudflare!

Kicking it off with an introduction by me: blog.cloudflare.com/crypto-week-20…

The Distributed Web Gateway (starring IPFS): blog.cloudflare.com/distributed-we…

IPFS Gateway Validator extension: blog.cloudflare.com/e2e-integrity/

Stay tuned every day for new announcements!
You can now access anything on IPFS at cloudflare-ipfs.com/ipfs/<hash>, or you can point any hostname to an IPFS hash and serve that content through HTTPS.

For example, here's a full, searchable mirror of Stack Exchange:
…sec.stackexchange.cloudflare-ipfs.com
If you set up DNSSEC, then users can run our new IPFS Gateway Validator browser extension to make sure they're getting your content with end-to-end integrity validation. Valid sites are highlighted by this beautiful blue fingerprint icon by @kkblinder. addons.mozilla.org/en-US/firefox/…
Read 3 tweets
Profile picture
Crypto 2018 has affiliated events this year, which is fun. I’m currently attending the Quantum-safe Cryptography for Industry event, a big focus of mine lately. crypto.iacr.org/2018/affevents…

@Cloudflare is a sponsor of Crypto this year, so come see me if you want a webcam cover!
We just heard from Adrian Stanger from the NSA. There is high confidence in the NIST process and no plans to invest in QKD. Algorithm recommendations (key agreement and signatures) to be made around 2023-24. There are no plans to replace AES-256 or SHA2-384.
Brian LaMacchia of @MSFTResearch gives an overview of the cryptographic algorithm transitions we’ve gone through so far in the 21st century.
Read 8 tweets
Profile picture
Thread.

I was recently privy to a conversation in which some really smart people in security shared their favorite papers or articles. Security engineering, like other disciplines, has a rich history worth learning from.

I'm going to list some of these papers in this thread.
New Directions in Cryptography - Whitfield Diffie and Martin Hellman (1976)

It's hard to emphasize just how revolutionary the concept of public key cryptography is. This paper started it all, introducing D-H key agreement and digital signatures.

ee.stanford.edu/~hellman/publi…
Reflections on Trusting Trust - Ken Thompson (1984)

This paper succinctly describes the concept that it's not enough to trust software, you also need to trust the software that compiles the software, and the software that compiles the compiler, and so on

archive.ece.cmu.edu/~ganger/712.fa…
Read 16 tweets

Related threads

Profile picture
Does this mean next week it begins with the declass release and Huber’s testimony? Oh joy joy joy 🤣

Tick Tock @HillaryClinton Isn't it time to kill off one of your doubles and slip away in the night to Qatar? It's about to get #Real
Read 3 tweets
Profile picture
Turks commemorate the death of a #GREAT leader who saved #Turkey from collapsing. The country was about to fall to Greeks before 1922, but this #BRAVE man formed Free Turkish Army - which was joined by millions of Turks - and stood against the enemy. #WWI #AtaturkMemorialDay 1/3
The first thing he did was to educate the illiterate people of Turkey who were suffering from ignorance of #Ottoman Empire. He refused to use Arabic characters for Turkish language and slowly replaced Arabic words with Western ones. The Turks owe this #INCREDIBLE man 2/3
However, when it comes to Kurdish question, he was the #WORST Turkish leader. He even did not recognize them "Kurds", but "mountainous Turks." He initiated the policy of #assimilation and imprisoned thousands of Kurds for political reasons. In this regard, he was a #DICTATOR 3/3
Read 3 tweets
Profile picture
Now that the #epibookclub is over, my weekends are free for reading #RCTs. So, how about a #tweetorial about #pragmatic trials, causal questions, and #landmark analyses, inspired by the #SCOTHEART trial?

#epimethodsclub #cardiotwitter
If we’re going to talk about #pragmatic trials, then we need to start with a definition. The simplest definition I’ve seen is from a trialist I interviewed for my recent @JClinEpi paper (authors.elsevier.com/a/1XS1b3BcJPuv…)

pRCTs “...attempt to address effectiveness in real world settings”
Sure, it’s a bit vague but it’s useful because, like Tolstoy’s unhappy families, #pragmatic trials are all different.

So, what makes me think #SCOTHEART is pragmatic?

My 2¢: lack of blinding, inclusion criteria based on symptoms not diagnoses, & standard care as comparator.
Read 20 tweets
Profile picture
Damon gets the sudden urge to check to phone and demands Katherine give it back to him. YESSS READ YOUR DAMN MESSAGES. Its like he got this feeling something wasn't right
"You are going to get yourself killed. The Damon I remember wouldn't have been that stupid."
"I wouldn't have done it for you."
AAGSHD he will risk to life for Elena. We all been knew. But truthfully, he would have for Kat too. He did and he died in 1864.
He wouldn't do it for Katherine NOW, obviously.
Read 1273 tweets
Profile picture
How did Cambridge Analytica weaponize your loved ones into tools that destroy democracy & damage society?

Find out with Free will and seductive coercion by Heather Marsh

#DeleteFacebookNow #DeleteFacebook #CambridgeAnalyticaUncovered #Brexit #Trump georgiebc.wordpress.com/2014/04/22/fre…
Governance is a force directing actions taken by society. We began governance with small tribes arranging relationships and personal assets between themselves and authority only required to settle disputes. /1
As populations grew, we moved to a variety of government systems with full hierarchies, official authorities and hard coercive force in the form of official military and police. Lately we have moved far beyond these forms to all pervasive and largely invisible soft coercion. /2
Read 89 tweets
Profile picture
I’m watching all of the @Marvel movies with @ThereseTheBeast, we are going in release order over the next 8 weeks leading up to #AvengersInfinityWar

Yesterday was Iron Man, we just started The Incredible Hulk now.

Updating this thread with thoughts and lists as we go #marvel
💭 Most shocking moment so far in the @Hulk 2008 is @LivTyler dating the dad from Modern Family.

Also as much as I like Edward Norton I’m just picturing @MarkRuffalo in my head and this movie is even better.
Putting @Hulk on pause to talk Iron Man.

1. I forgot how we used to talk about Marvel movies being “grounded” or “realistic” especially when it comes to color pallete and portrayal of characters or events.

The colors in Black Panther and Thor 3 have come a long way since 2008.
Read 184 tweets

Trending hashtags

#InformationWarfare #River #word #Apical #humanity #AvengerInfinityWar #OSHO #growth #race #bookofwhy #area #Peace #machine #Putin #HybridWar #Croats #s #silence #ventricular #war #king #AmitShahKiLoot #developingdevelopers #TakeItToTheMat #unawares

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!