evldns - A Framework for Light-weight DNS Servers
I’ve recently written and released source code for “evldns”. evldns is a software mashup - it takes libevent’s fast event processing code and combines it with ldns’s DNS packet handling. It’s derived...
View ArticleMutation Testing with Jumble
Mutation testing is a technique for checking how good your unit tests are. It mutates a class by for example swapping a subtraction for an addition or by negating an if statement. It then runs the...
View ArticleCan Cloud computing be a threat for security?
A cloud refers to “the provision of dynamically scalable and often virtualized resources as a service over the Internet” (from Wikipedia). In practice, a user that logs in a cloud service (the bottom...
View ArticleMultithreading and first come, first served
A recent query from a registrar has prompted the Registrar Systems Support team to take a close look at how our EPP system works with Nominet’s first come, first served approach. The nature of our EPP...
View ArticleClik here to view.
DNS RFC Dependency Graphs
Spurred by a recent Slashdot posting, I’ve produced some graphs showing the relationships between the RFCs which define the DNS protocol. The graphs (which are in SVG format) split the DNS-related RFCs...
View ArticleVerifying ENUM signatures
When an ENUM user sends us a Create command, we validate the XML against the schemas and that the XML signature chain of trust to our CA is OK. When this doesn’t work, there isn’t much feedback that we...
View ArticleDNSSEC incident report
We had an incident two weeks ago with our DNSSEC signing system causing it to accidentally release a new Zone-signing-key into our live zone file. We have spent the last two weeks looking into how this...
View ArticleHow to corrupt your Data Dictionary with Oracle Streams
Hopefully this blog will save you some trouble if you are working with Oracle Streams. If you do what I did on a production database you will end up with a corrupt Data Dictionary. Luckily I didn’t...
View ArticleEnabling SSL / https and disabling http in OBIEE 11.1.1.5
It seems trivial to enable the https channel in OBIEE for the server in which your OBIEE is installed. And in fact enabling SSL is trivial. Just tick the “SSL Listen Port enabled” tickbox on the...
View ArticleENUM XML certificate expiry
The ENUM registry has been live for 2 years, so we are now starting to see problems due to certificate expiry. The certificates are stored in non human-readable form (X509 format), something like:...
View Article
