10 ms·

Here's what it looks like: $ traceroute cv6.poinsignon.org traceroute to cv6.poinsignon.org (2001:bc8:3eff:c0::ff), 30 hops max, 80 byte packets 1

• yjftsjthsd-h 4y ago
  > Cloudflare.NetworkEngineer Ah, that explains a lot. Not that anyone else couldn't do such a thing, but I feel like even amongst more "hacker" types it takes a relatively specialized background to pull a trick like this (at least statistically; I'm sure there are outliers).
  • DropKiwiFarms 4y ago
    • brightball 4y ago
  • tyingq 4y ago
    Not sure how he did it, but my first guess would be just a bunch of virtual interfaces on a linux box with a->b->c->d->e->etc routing, and something like the tc command[1] to add enough latency to each one that traceroute sees them all. If he's scripted it to do all the virtual nic creation and dns ptr entries, it would be interesting to see. [1] https://bencane.com/2012/07/16/tc-adding-simulated-network-latency-to-your-linux-server/ https://bencane.com/2012/07/16/tc-adding-simulated-network-l...
    • JoachimSchipper 4y ago
      traceroute(1) uses the IP Time-To-Live (TTL) field, not network latency. So just a bunch of virtual interfaces on a suitable *nix should be enough.
      • tyingq 4y ago
        Ah, right, hop count ceiling and decrement from each hop. Specifically timed latency might be fun to delineate sections for the viewer though.
    • mrb 4y ago
      Virtual interfaces aren't necessary, and would be overkill. All he needs on his server is to listen on a raw network socket, read the incoming packet's IP TTL value, then forge and send an ICMP "time exceeded" response with the source IP address set to a value that depends on the TTL. The entire thing could be done in 20-30 lines of Python. Next to that he set up a DNS server configured with PTR records that map these forged IP addresses to arbitrary hostnames of his choices.
      • tyingq 4y ago
        Sure, another way to do it, though the python would have to get the peer address, extract 64 bits of the incoming msg, table lookups of hop count -> forged address, decrement hop counts, etc. A shell script creating virtual interfaces and routing wouldn't likely be much longer than 20-30 lines either.
  • vlan0 4y ago
    Feels like we’re a dying bread with everything cloud first and serverless.
    • irrational 4y ago
      Dying breed? Though dying bread sounds like an interesting metaphor.
    • yjftsjthsd-h 4y ago
      Eh, smaller slice of a bigger pie. Somebody has to make "the cloud" work so that everybody else doesn't have to worry about the underlying bits as much.
    • mhh__ 4y ago
      There are always nerdy kids learning this stuff. Especially when the breed has "died"
    • exikyut 4y ago
      Ah so this is how "the next best thing since sliced bread"s die :'(
  • prvit 4y ago
    This is a very old and oft-repeated trick though. https://github.com/blechschmidt/fakeroute https://github.com/blechschmidt/fakeroute https://github.com/antifork/hopfake https://github.com/antifork/hopfake https://github.com/jprenken/rickroute https://github.com/jprenken/rickroute https://github.com/sams-gleb/ipv4-traceroute-fake https://github.com/sams-gleb/ipv4-traceroute-fake https://github.com/job/ipv6-traceroute-faker https://github.com/job/ipv6-traceroute-faker And so on… I remember being a 13yo kid sitting on IRC doing exactly this for fun years ago back when IP addresses were cheap and easy to come by. But spoofing military IPs in the traceroute was more fun.
    • silentsea90 4y ago
      Believe it or not, you might have very specific interests :)
      • water-your-self 4y ago
        If a 13 year old was using irc regularly in 2022 I would be concerned for them. Not thata 13 year old shouldn't use irc but I would wonder how they found that destination, especially given the countless other sinks for internet denizens
        • sweetbitter 4y ago
          I'm curious why you would be concerned. I've seen a good number of teenagers hanging around and playing with computers.
          • deleted 4y ago
            [deleted]
        • necovek 4y ago
          Free software development and chat still largely happens over IRC: witness irc.gnome.org and libera chat. As a 13 year old, if I had access to internet instead of buying Slackware floppies from local software "pirates" (they also had all the DOS stuff like Wordperfect and games), I'd probably be hanging around IRC. I don't think there was much to be concerned about me back then.
  • chatmasta 4y ago
    It’s because practical experience with technologies like BGP is difficult to acquire without sufficient capital to run a network. You can of course purchase a /24 and dabble (search HN for blog posts describing exactly that). And you can experiment with large deployments in simulators. But network optimization is inherently more of a practical pursuit than a theoretical one, so most broad and consistent learning opportunities are siloed to large organizations where you can accrue daily experience with the stack. This is really unfortunate, and I mostly blame Cisco and Juniper. They suffocated an entire academic discipline with obfuscated terminology driven more by their business models than anything resembling the OSI model or open standards. That’s why WireGuard feels like such a breath of fresh air after 20 years of L2TP/IPSec. I applaud companies like Cloudflare and Fly.io for their openness in sharing techniques and open sourcing so much of their code. It goes a long way toward lowering the barriers to self-teaching and experimenting with the latest networking software. And I’m sure HR is happy about the increasingly large applicant pool of qualified networking engineers – even if some hires do eventually leave by advertising their resume to anyone who sends them an IPv6 trace-route :)
    • RF_Savage 4y ago
      44Net and hamnet are also interesting to those with radio amateur licenses. Many folks run their own AS an BGP in that range.
    • lawrenceyan 4y ago
      You can contribute to the Solana core tech team, with the incentive alignment of underlying token value as a partial backer! I think they're doing some really cool stuff on the network optimization level. As an example, Solana recently implemented QUIC in its latest release: https://github.com/solana-labs/solana/projects/74 https://github.com/solana-labs/solana/projects/74
      • jhugo 4y ago
        Are they still using that hand-wavy "cryptographic proof that a duration of time has passed"?
• Exuma 4y ago
  So is that mail.jobs@ or mail+jobs@... or jobs@ A total flop on the last line
  • deleted 4y ago
    [deleted]
  • bkane521 4y ago
    My interpretation was mail: jobs@poinsignon.org
    • randunel 4y ago
      My interpretation would be mail+jobs@example.com, given that it's become the de facto standard, and mail@example.com looks like his main one.
      • kadoban 4y ago
        I'm not sure it can be a de facto standard with the number of sites that flatly refuse to recognize + as a valid character in email addresses. There's so many that I gave up and started just using . instead.
  • readthenotes1 4y ago
    I bet if he can do this trace route thing, he can get all those emails going to his own domain regardless of who they are addressed to
    • Exuma 4y ago
      I would presume a better way would be to not make people feel unsure of what it is, and just pick something thats super clear.
      • amenod 4y ago
        Or it's a filter. No need to send anything if you are unsure.
• psydvl 4y ago
  Why have you traceroute ip instead of domain?
  • internet_user 4y ago
    you could have multiple IPs attached to a domain which could mess up this trick. I also wonder why not use use the domain, much easier.
  • qHss6ID2JSztUgr 4y ago
    > Host mail.jobs.at.poinsignon.org not found: 3(NXDOMAIN) (A bit of a missed opportunity; the author should really set a AAAA record there IMHO) There's no actual requirement that your PTR records resolve back to the same IP. Historically very little software bothered to check, and most of the Unix-y diagnostic software has never been updated to do so...
    • josteink 4y ago
      > Historically very little software bothered to check For some reason, most IRC servers tend to do this.
    • bawolff 4y ago
      Unless you send email.
  • di 4y ago
    Bad copy/paste
• avg_dev 4y ago
  speaking as a software developer who has generally forgotten what little i know of routing, that is really cool
• silasdavis 4y ago
  Oh noes you just doxxed their email address on the https
  • munk-a 4y ago
    It's probably more accurate to "Oh noes this HN post is going to get this guy a few dozen really lucrative job offers". Doxxing usually implies ill intent but having your personal information broadcast to HN is likely only to result in a few of the hiring managers that haunt here sending a cold offer.
    • silasdavis 4y ago
      Yes I thought so, as in you're quoted thing was exactly what I meant, sarcasm doesn't serialise well
    • fomine3 4y ago
      I don't think writing obfuscated email address as plaintext is doxxing, but it may be collected spam bot.
• reaperducer 4y ago
  Remember when they said we'd never run out of IPV6 addresses? Good times.
  • WorldPeas 4y ago
    they never anticipated the internet of internet of things. What a shame.
  • bushbaba 4y ago
    Will age just like the famous quotes about 640K of memory is enough.
• petalmind 4y ago
  I think that many HRs would be suspicious about somebody who worked at each job for 2.261 ms.
  • fragmede 4y ago
    It's contracting work, so the short duration makes sense!
    • jcalabro 4y ago
      2.261ms, aka a billable hour!
      • smashem 4y ago
        You've earned yourself a promotion.
  • quickthrower2 4y ago
    It is not length of experience that counts, but skill. Some people with 100ms experience have just done the same millisecond over and over.
• a-dub 4y ago
  i love how the low bits of the addresses in hex are cognates for both the section and the actual content of the name/line. also, looking glasses... jeez. i haven't heard or thought of those in _years_.
• fragmede 4y ago
  He must have added Apple at some point. Here's what I got (using mtr): 19. hello 0.0% 14 141.6 140.5 139.1 141.6 0.7 20. my.name.is.louis.poinsignon 0.0% 14 141.9 142.1 141.2 143.3 0.5 21. i.am.a.network.and.systems.engineer 0.0% 14 140.5 140.4 139.7 141.6 0.5 22. this.is.my.resume.over.traceroute 0.0% 14 140.5 140.4 140.0 141.5 0.5 23. o---experience---o 0.0% 14 139.9 140.4 139.4 141.4 0.5 24. 2021.apple.engineer.sf.usa 0.0% 14 140.7 140.5 139.8 141.2 0.4 25. 2018.cloudflare.engineer.sf.usa 0.0% 14 140.8 140.4 139.4 142.8 0.9 26. 2017.cloudflare.engineer.london.uk 0.0% 13 142.2 142.6 141.4 147.5 1.5 27. 2016.cloudflare.engineer.intern.sf.usa 0.0% 13 149.7 141.2 139.1 149.7 2.7 28. o---education---o 0.0% 13 142.1 142.1 141.3 144.1 0.7 29. 2015-2016.drexeluni.exchange.ce.philadelphia.usa 0.0% 13 140.9 140.3 139.5 141.3 0.5 30. 2011-2016.utt.master.ce.france 0.0% 13 143.1 142.3 140.8 143.3 0.7 31. o---skills---o 0.0% 13 140.3 140.9 139.7 146.0 1.6 32. golang.c.python 0.0% 13 142.2 142.4 141.1 146.0 1.2 33. networks.linux.automation.kafka.clickhouse.kubernetes 0.0% 13 139.6 140.5 139.3 142.2 0.8 34. statistics.maths 0.0% 13 141.6 142.1 141.2 142.8 0.5 35. o---various---o 0.0% 13 141.8 142.4 141.8 144.8 0.8 36. swimming.karate.piano 0.0% 13 139.8 141.4 138.7 155.2 4.2 37. o---contact---o 0.0% 13 140.1 140.3 138.6 141.7 0.8 38. mail.jobs.at.poinsignon.org 0.0% 13 141.1 142.5 141.1 145.4 1.1 39. cv6.poinsignon.org 0.0% 13 139.4 140.3 139.4 141.2 0.5