Goblin Eaters Cyber Cavern

Most subnetting tutorials hand you a mask and march you through the arithmetic. That teaches the mechanics but hides the thing people actually get stuck on — which isn’t the math at all. It’s a category error about what kind of question subnetting actually is. Here is the reframe this whole piece rests on: An address block has no subnetting until you give it one. 172.16.0.0/16 is not secretly eight /19s waiting to be uncovered. Before you commit a mask, the question “what are its subnets?” has no determinate answer. In subnetting terms, the block is under-determined, not undecidable. It’s like a loaf of bread. Whole, one unit. It needs exactly one more constraint to resolve to a subnet scheme — and that constraint does not live in the address math. It doesn’t live in how big the loaf or the slices are. The constraint comes from outside the address space: the network’s requirements. How many segments? How many sandwiches to make. How many hosts in the largest one? Those are the measurement. Bring them, and the block snaps into one determinate layout. The classic hang-up is treating an underdetermined problem as an intractable one — staring harder at the range of possible subnet masks, when the resolution was never going to come from the possibles. It comes from asking what the network needs. Keep that in mind and the arithmetic stops being intimidating, because you’re no longer searching a space — you’re applying a requirement. Everything below is a tool for applying it cleanly. ...

Architecture, security implications, and the competency gap the industry hasn’t closed. IPv6 is the second part of Layer 3. Last week we discussed IPv4, and the design assumptions that were made, and have led to many types of attacks due to the way the protocols work. This week, we’ll investigate IPv6 — the current version of the Internet Protocol, operating at Layer 3 of the OSI model. Back in the days of the early 1990’s it began to dawn on the industry that IPv4 was running out of steam. The two biggest challenges were the inefficient use of the class A, B, C (and D and E!!) address space, and the exploding capacity of router tables. They realized something needed to be done quickly, while deeper work began on a complete rework of IP. ...

Week 3 of How Protocols Work, and How They Break In 2008, Pakistan Telecom took YouTube offline. Not just in Pakistan. Globally. For eighteen minutes, anyone on earth who tried to reach YouTube was either getting nothing, or their traffic was silently arriving in Islamabad. Nobody hacked YouTube. Nobody broke into a server. Nobody exploited a vulnerability in any conventional sense. Pakistan Telecom simply announced to the internet that they were the fastest path to YouTube’s address space — and the internet believed them. Every major router on the planet updated its table and started sending traffic their way. The “packages” went to the wrong destination. The internet’s routing system did exactly what it was designed to do, and that was the problem. ...

I want to talk to you about expectations, relationships, and deceit. Todays networks were designed to work. They were designed with straight forward, pragmatic protocols that performed the information exchange that aided the discovery of other nodes when required, and the exchange of information. The problem is, the designs didn’t foresee the way that these protocols could be used against the legitimate operators of networks. Let’s use a literary lens and have a walk through Layer 2 to see how key protocols can be usurped. ...

In his book Purgatorio, Dante writes of seven terraces that must be crossed on the path to redemption. As souls cross each of these 7 terraces they must pay a penitential price to be cleansed of their 7 deadly sins. For many people who have studied networking and IT, I’m sure they have the feeling that each layer of the OSI model has done the same to them. But fear not, young cyber warrior, there is much good news. Drawing another parallel from Dante’s work, all is filled with hope. The secret that I hope to share with you comes from my own personal experience. I spent too long “in the terraces” and paid too heavy a price. What I want you to remember is that all you need to do is keep true to the path. These terraces are not to dwelt upon, they are just to be traversed. As you pay your price (learn the level), you move on. Cleansed. Through to the other side. To redemption, to a deeper understanding. This is the journey. ...

When I was beginning to study cybersecurity, I quickly encountered a kind of confusion that made me think I was being gaslighted. I’d read books, perused websites, watched videos that would talk about certain attack types, and I’d think to myself “cool, thats interesting. I understand that”. But then later on the fog of confusion came down again. The attack had morphed into something else. Only it hadn’t really. What was I missing? It dawned on me that what was happening was, I missed a critical piece of the perspective of attacks. They were not all on the same plane - they existed up and down the OSI model. Denial of Service, HiJacking, Evasion were terms that more described an OUTCOME of actions, not just a fixed method or tactic. Once I grasped this clearly, my fog finally lifted and the scenarios became distinct. ...

Welcome! Hi, I’m Goblin Eater, welcome to my Cyber Cavern. I work in cybersecurity. I have often thought about writing on the subject, but have never found the right tools to make it fluid for me. To be fair, I have a full-time job, a family, and am taking three classes a semester at the local community college. Yeah, I like being busy, but there comes a point when you have a few days between classes and its burning you up enough to make it happen. I’m at that point. ...