2025-03-17T19:10:18Z https://nostr.now Farside https://nostr.now/npub1futsmzhe77p7rlntdty2j7u5lmmrxspwa2f3jv7h3z4nqh5w7cmqpnvwhk https://image.nostr.build/294bab14b12a1c46863204b4b88a3753749454e65f3ffca262bbba54e762aa2b.jpg https://image.nostr.build/294bab14b12a1c46863204b4b88a3753749454e65f3ffca262bbba54e762aa2b.jpg https://nostr.now/nevent1qqsf29nevm5sagety0y4m52kax3a83qsgmfyqwrtxq87960ju9x59rczyp83wrv2l8mc8c07dd4v32tmjnl0vv6q9m4fxxfn67y2kvz73mmrvh40dvm A tech post. A simple one for some people in tech, but many disciplines within the sector do not cover this, it it was a long forgotten lecture at uni.<br/><br/>Before attackers touch your network, they read your DNS. <br/>Each of these records left empty is an open door. Here is what they see, and what it means:<br/><br/>1. CAA. Empty means any certificate authority can issue a cert for YOUR domain. <br/>Publish: 0 issue &#34;letsencrypt.org&#34; (list the CAs you actually use).<br/><br/>2. SPF. Empty means anyone can send mail as your servers. <br/>Publish: v=spf1 &lt;your senders&gt; ~all, and exactly ONE SPF record.<br/><br/>3. DMARC. Empty means phishers spoof your exact domain to your own staff. <br/>Publish: v=DMARC1; p=none; rua=mailto:you@yourdomain. <br/>Read the reports, then ratchet to p=reject.<br/><br/>4. DNSSEC. Unsigned means your DNS answers can be forged. Enable auto-signing at your DNS provider and publish the DS record at your registrar. <br/>Proof: dig @1.1.1.1 yourdomain +dnssec returns the ad flag.<br/><br/>5. MTA-STS. Empty means attackers can strip encryption off your inbound mail. <br/>Publish a &#34;v=STSv1&#34; TXT at _mta-sts plus the policy file at <a href="https://mta-sts.yourdomain/.well-known/mta-sts.txt">https://mta-sts.yourdomain/.well-known/mta-sts.txt</a>. Add TLS-RPT to see failures.<br/><br/>6. Null MX. Your parked domains are free spoofing stationery. <br/>Publish: MX 0 . plus &#34;v=spf1 -all&#34;. 2026-10-25T13:23:47Z https://nostr.now/nevent1qqsprvzz9q73qwhset52jufaeueag9wfanamgm57c4jns2l886hwyhgzyp83wrv2l8mc8c07dd4v32tmjnl0vv6q9m4fxxfn67y2kvz73mmrvdca8x3 In reply to <a href='/nevent1qqs9psclru3ngyx8efxx28pepjdmj2z6zrrzjhf4za59argsgfjnm5qpnzfd9'>nevent1q…zfd9</a><br/>_________________________<br/><br/>Wow! That is massive!!<br/>To help normal folks wrap their head around this, I challenge you to train for a half marathon. As you cross the finish line, consider turning around and doing it a second time. And that is just the run part of this event 😁<br/><br/>Good luck Richard and remember to smile. 2026-08-16T14:11:52Z https://nostr.now/nevent1qqsvw6lhfrkf8h5zjh5d4pwgq5kh2hxlfs90gt07qs7lfux30u3xm5czyp83wrv2l8mc8c07dd4v32tmjnl0vv6q9m4fxxfn67y2kvz73mmrvjrfpc6 In reply to <a href='/nevent1qqsqv6hnvl8y4ctcpz3v6y044839xjnm5fgxgnuysqrq8hecrs7k5ms023tdw'>nevent1q…3tdw</a><br/>_________________________<br/><br/>Post it here and we&#39;ll verify that you&#39;ve done it properly 😁 2026-08-06T12:31:45Z https://nostr.now/nevent1qqsvqm7gh3tsjg3nk5jz98w9sgcf489afhusxr4ht2kan56e29nkaugzyp83wrv2l8mc8c07dd4v32tmjnl0vv6q9m4fxxfn67y2kvz73mmrvat9qk5 In reply to <a href='/nevent1qqsvjs4g59shtrcg8gjtk50puftj6zwjknen509cvmxpagpyq846wrgpr9mhxue69uhk2umsv4kxsmewva5hy6twduhx7un89ursgsrh'>nevent1q…gsrh</a><br/>_________________________<br/><br/>Yeah there is a lot less shit that they put in cigars. No burn and moisture regulating chemicals for example. 2026-03-15T15:39:18Z https://nostr.now/nevent1qqsfc2zhrqj9v3589jdth4m9f2s78w7kukns6ky3ng4h63sxu5tzhyszyp83wrv2l8mc8c07dd4v32tmjnl0vv6q9m4fxxfn67y2kvz73mmrvcv40vt In reply to <a href='/nevent1qqsgsqnn4xrnynekc5qxpjyek3kd9v2g5ldhgzyr934pka6g26dszmc4nlgvq'>nevent1q…lgvq</a><br/>_________________________<br/><br/>No Way!<br/>Slash was part of the club too?<br/>Is there actually anyone who legit broke into the industry? 2026-01-25T21:39:12Z https://nostr.now/nevent1qqswcgnyr99f6q09z07uw8sqfdnke056m7aens9u9e7ygdz4d0pxfnqzyp83wrv2l8mc8c07dd4v32tmjnl0vv6q9m4fxxfn67y2kvz73mmrvlzpj23 My sheep investment just returned 100% ROI again. <br/><br/>My Icelandic ewe just gave birth to another ewe and a ram without any assistance.<br/><br/>Last year she did the same. The ram paid for their living expenses, which means what started with 1 sheep has turned into 3 sheep in 3 years.<br/><br/>Crypto isn&#39;t the only way to crush folks. And if the global electricity grid goes down tomorrow, my bleatcoin reigns supreme! 😅 2025-04-03T22:42:52Z