2026-04-18T05:36:02Z https://yabu.me Matt Nordhoff https://yabu.me/npub185ceaey2s0sv2luquzxnsw4c0cthnfk2h7ju5qlu9h93j5gltulstmjnwf https://yabu.me/nevent1qqsw9ft388tudcxaqzdggvp3xl30upuveay96wc5xq8d39x7dfd0wnszyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n787t6up In reply to <a href='/nevent1qqswram8fq8z7aqrawtelv2hmtxdztjcypx53u8kx7n35n39tfkm2msxwm7dh'>nevent1q…m7dh</a><br/>_________________________<br/><br/>Luckily for some, AWS&#39;s public SLAs have an &#34;SLA Exclusions&#34; section that says you can get lost in case of force majeure! I guess they can skip the refunds and everyone can proceed straight to the lawsuits.<br/><br/><a href="https://aws.amazon.com/s3/sla/">https://aws.amazon.com/s3/sla/</a><br/><a href="https://aws.amazon.com/compute/sla/">https://aws.amazon.com/compute/sla/</a><br/><br/>I wonder what local laws say or what kinda contracts their large/government clients get. 2026-03-03T01:47:34Z https://yabu.me/nevent1qqs254020y7eqxepnhyj8gtk836wm3kp7sjc7pn9uxfffhfvjs4gj0szyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n73ut6tz Lengthy update on <a href="https://health.aws.amazon.com/health/status">https://health.aws.amazon.com/health/status</a> earlier:<br/><br/>&gt; **Mar 02 4:19 PM PST**&gt; We are providing an update on the ongoing service disruptions affecting the AWS Middle East (UAE) Region (ME-CENTRAL-1) and the AWS Middle East (Bahrain) Region (ME-SOUTH-1). Due to the ongoing conflict in the Middle East, both affected regions have experienced physical impacts to infrastructure as a result of drone strikes. In the UAE, two of our facilities were directly struck, while in Bahrain, a drone strike in close proximity to one of our facilities caused physical impacts to our infrastructure. These strikes have caused structural damage, disrupted power delivery to our infrastructure, and in some cases required fire suppression activities that resulted in additional water damage. We are working closely with local authorities and prioritizing the safety of our personnel throughout our recovery efforts.<br/><br/>&gt; In the ME-CENTRAL-1 (UAE) Region, two of our three Availability Zones (mec1-az2 and mec1-az3) remain significantly impaired. The third Availability Zone (mec1-az1) continues to operate normally, though some services have experienced indirect impact due to dependencies on the affected zones. In the ME-SOUTH-1 (Bahrain) Region, one facility has been impacted. Across both regions, customers are experiencing elevated error rates and degraded availability for services including Amazon EC2, Amazon S3, Amazon DynamoDB, AWS Lambda, Amazon Kinesis, Amazon CloudWatch, Amazon RDS, and the AWS Management Console and CLI. We are working to restore full service availability as quickly as possible, though we expect recovery to be prolonged given the nature of the physical damage involved.<br/><br/>&gt; … 2026-03-03T01:15:05Z https://yabu.me/nevent1qqsy5wu6u808lgxjevnldupqgx9qv4xq28qhhulelec5aa5f2r9j2rszyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n77ecst4 In reply to <a href='/nevent1qqsfhzx6pw07h9t6qfux28yndetr5ds5vqgahezrunuh9a2u22znl6gxj5rz7'>nevent1q…5rz7</a><br/>_________________________<br/><br/>RE: <a href="https://infosec.exchange/@mnordhoff/116160410647779449">https://infosec.exchange/@mnordhoff/116160410647779449</a><br/><br/>Based on its unique architecture, Amazon S3 is designed to exceed 99.999999999% data durability.<br/><br/>The S3 Standard storage class offers a 99.9% availability SLA and is designed for 99.99% availability.<br/><br/><a href="https://aws.amazon.com/s3/storage-classes/">https://aws.amazon.com/s3/storage-classes/</a><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1nwyd5zulaw2h5qncv5wfxmjk8gmpgcq3m0jy8e8ewt64c5598l5s8z82q2" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1nwy…82q2</a></span><br/> </div> I missed this yesterday, but AWS Middle East (UAE) (me-central-1) has been having issues due to the war.<br/><br/>"At around 4:30 AM PST [2026-03-01], one of our Availability Zones (mec1-az2) was impacted by objects that struck the data center, creating sparks and fire. The fire department shut off power to the facility and generators as they worked to put out the fire."<br/><br/>"**Mar 01 10:46 PM PST** We can confirm that a localized power issue has affected another Availability Zone in the ME-CENTRAL-1 Region (mec1-az3)."<br/><br/>This might be the first time AWS has ever had separate, serious outages affecting multiple AZs simultaneously, if you exclude the many many outages where a region-level service like S3 goes down due to a software issue.<br/><br/><a href="https://health.aws.amazon.com/health/status">https://health.aws.amazon.com/health/status</a><br/><br/>Edit: I didn't scroll down! Middle East (Bahrain) also has an affected AZ.<br/><br/>"**Mar 01 11:09 PM PST** We are investigating connectivity and power issues affecting APIs and instances in a single Availability Zone (mes1-az2) in the ME-SOUTH-1 Region due to a localized power issue." </blockquote> 2026-03-02T23:23:38Z https://yabu.me/nevent1qqsfhzx6pw07h9t6qfux28yndetr5ds5vqgahezrunuh9a2u22znl6gzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n7wantdr I missed this yesterday, but AWS Middle East (UAE) (me-central-1) has been having issues due to the war.<br/><br/>&#34;At around 4:30 AM PST [2026-03-01], one of our Availability Zones (mec1-az2) was impacted by objects that struck the data center, creating sparks and fire. The fire department shut off power to the facility and generators as they worked to put out the fire.&#34;<br/><br/>&#34;**Mar 01 10:46 PM PST** We can confirm that a localized power issue has affected another Availability Zone in the ME-CENTRAL-1 Region (mec1-az3).&#34;<br/><br/>This might be the first time AWS has ever had separate, serious outages affecting multiple AZs simultaneously, if you exclude the many many outages where a region-level service like S3 goes down due to a software issue.<br/><br/><a href="https://health.aws.amazon.com/health/status">https://health.aws.amazon.com/health/status</a><br/><br/>Edit: I didn&#39;t scroll down! Middle East (Bahrain) also has an affected AZ.<br/><br/>&#34;**Mar 01 11:09 PM PST** We are investigating connectivity and power issues affecting APIs and instances in a single Availability Zone (mes1-az2) in the ME-SOUTH-1 Region due to a localized power issue.&#34; 2026-03-02T16:00:03Z https://yabu.me/nevent1qqsd2kz9eh6rql5qkwqt4zu2zz8sky3pfe8vrdyfjd05gdg42ftnzegzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n75lv4v7 In reply to <a href='/nevent1qqs9tt2auqsud22sjpe8zkxmhvf2q53s6ahn82p2r9kne9vyp47cmjqq5842n'>nevent1q…842n</a><br/>_________________________<br/><br/>RE: <a href="https://infosec.exchange/@mnordhoff/115675202677067879">https://infosec.exchange/@mnordhoff/115675202677067879</a><br/><br/><a href="https://groups.google.com/a/list.nist.gov/g/internet-time-service/c/Zd7VaR-vqV4">https://groups.google.com/a/list.nist.gov/g/internet-time-service/c/Zd7VaR-vqV4</a><br/><br/>&gt; On Saturday, 6 December 2025 at approximately 21:13 UTC, the atomic time source (a single cesium beam atomic clock) for all the internet time servers at the NIST Gaithersburg campus failed and exhibited a time step of approximately -10 ms.<br/><br/>Oh.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note12kk4mcppc654pyrjw9vdhwcj5pfrp4m0xw5z5xtd8j2cgrta3hyqnuljut" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note12kk…ljut</a></span><br/> </div> time.cloudflare.com suddenly 5-10 ms off the real time in the eastern US.<br/><br/>I'd guess probably something boring, like network asymmetry near the top of the tree (bottom of the tree?).<br/><br/>(When the service was new, the accuracy was routinely worse than this.) </blockquote> 2025-12-09T11:11:11Z https://yabu.me/nevent1qqs9tt2auqsud22sjpe8zkxmhvf2q53s6ahn82p2r9kne9vyp47cmjqzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n792t46r time.cloudflare.com suddenly 5-10 ms off the real time in the eastern US.<br/><br/>I&#39;d guess probably something boring, like network asymmetry near the top of the tree (bottom of the tree?).<br/><br/>(When the service was new, the accuracy was routinely worse than this.) 2025-12-06T23:25:17Z https://yabu.me/nevent1qqsy4ehajmf8sdeu4yp7hqkrztc389u6kt84y70sf76wdjth8wpd45qzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n7kztysv In reply to <a href='/nevent1qqs2plqr5ucw7rvy6eq052263xl32u24u3r5yznzysc93wxxjfkzx0qs45dd7'>nevent1q…5dd7</a><br/>_________________________<br/><br/>Cloudflare will also turn off Cloudflare&#39;s security features if Cloudflare is down!<br/><br/><a href="https://blog.cloudflare.com/details-of-the-cloudflare-outage-on-july-2-2019/">https://blog.cloudflare.com/details-of-the-cloudflare-outage-on-july-2-2019/</a> 2025-11-18T17:22:06Z https://yabu.me/nevent1qqsqakjszq579f3ntkx73vq93n2wf5wayxa80nthaqu56yfu62cg0nqzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n78savdj Almost all of the gTLD registry backend operators, and some ccTLDs, love moving infrastructure to AWS.<br/><br/>I wonder if there will ever be any negative consequences to this, beyond the financial ones.<br/><br/>:pika: 2025-08-17T20:16:16Z https://yabu.me/nevent1qqs0nc3xj2ajn9ut6dglrlx68tm2q2ljjv4amumd5zgqcp28kxvsevczyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n7r34fv7 In reply to <a href='/nevent1qqsy0c2fvu82a7xcnzw0tpj537sxc3w6f93c8g0h0f95sgaqv0fmdfg6c0jxh'>nevent1q…0jxh</a><br/>_________________________<br/><br/>I&#39;m not sure. I think Ubuntu generated/generates their own, but my memory could be playing tricks on me. 2025-03-03T02:00:58Z https://yabu.me/nevent1qqsxhd6j20mxtrxtenm2k383v8eqx689ucr3w4huzjwr50s9nt3vj8czyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n7nx7c2y In reply to <a href='/nevent1qqs0hel0576jnydf04g3tukjwyd756rxm33xlj0dedmu5vu7g7uyhrqktx5nz'>nevent1q…x5nz</a><br/>_________________________<br/><br/>I liked how old versions of Ubuntu shipped tons of small parameters, about a dozen 6144-bit ones (dated 2004), and three 8192-bit ones (dated 2006). Obviously someone at OpenSSH/Debian/Ubuntu got tired of waiting and hit ^C.<br/><br/>(Now they have dozens of each, dated more recently.) 2025-03-02T22:41:26Z https://yabu.me/nevent1qqsya0pu8td5x54t896dzf6r7ln2lyhergt6pm2ml5xn37knnxvtngqzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n7mfzqn7 So, yesterday&#39;s thing was, DigiCert is dumping IPv6 support after their current CDN, Edgio, went bankrupt.<br/><br/>(2 longstanding companies merged and rebranded onto a colonial .io domain and filed for bankruptcy 2 years later, eh?)<br/><br/>But DigiCert also recently acquired the oft-DDoSed DNS service UltraDNS (to go with the other DNS service they acquired before), which uses Edgio for DDoS protection!<br/><br/>(traceroute an UltraDNS nameserver like pdns196.ultradns.com or b.cctld.us, you may see AS22822/llnw.net near the destination.)<br/><br/>Wonder how that&#39;s gonna go.<br/><br/><a href="https://social.elizabeth.cat/notes/a2m7w4bjk1e3newm">https://social.elizabeth.cat/notes/a2m7w4bjk1e3newm</a> 2025-01-05T13:56:46Z https://yabu.me/nevent1qqsxralmluzu6vl4xqw8qzjrka28f0hynxdq5m3k7yuddyuv4zw485czyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n7atfj9c The .fun TLD has been a bit broken for a month now. 👍<br/><br/><a href="https://dnsviz.net/d/fun/ZzsFkg/dnssec/">https://dnsviz.net/d/fun/ZzsFkg/dnssec/</a><br/><br/>They use a secondary DNS service -- but don&#39;t list it in the root zone, so it doesn&#39;t really make the TLD more reliable -- and it stopped updating the zone around 2024-10-18 for some reason.<br/><br/>And the three companies involved have yet to fix it for some reason.<br/><br/>So under certain circumstances a small percentage of DNS queries for .fun domains just randomly fail. 🤷 2024-11-18T09:28:57Z https://yabu.me/nevent1qqsq8nxqsdhjxgxassc096uy68xv8xs6m77rf272dcx7u2xu6n0r4yqzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n79rhz82 <a href="https://vercara.com/news/digicert-completes-acquisition-of-vercara">https://vercara.com/news/digicert-completes-acquisition-of-vercara</a><br/><br/>!?!?!? First DigiCert acquired DNS Made Easy/Constellix, now they acquired Vercara (UltraDNS).<br/><br/>Real loss for competition in the US enterprise DNS market. Now it&#39;s just like NS1 (acquired by IBM instead), Akamai, *sigh* Cloudflare, and non-traditional services like Amazon.<br/><br/>(Defining a &#34;traditional&#34; DNS service as roughly one that supports zone transfers, arbitrary record types and static DNSSEC.)<br/><br/>(Meanwhile I continue to lament the non-enterprise-budget personal or small business DNS market.) 2024-09-25T09:47:57Z https://yabu.me/nevent1qqsrruljszgm3x6ht59cm0m6wktcvtnyl5hlh7uk0xwksxpz92mgvtqzyq7nr8hy32p7p3tlsrsg6wp6hplpw7dxe2l6tjsrlskukx23ra0n7ws8wee Popular controversial hosting company Cloudflare has been reenabling Encrypted Client Hello (ECH) recently. They had announced it with [fanfare](<a href="https://blog.cloudflare.com/announcing-encrypted-client-hello/">https://blog.cloudflare.com/announcing-encrypted-client-hello/</a> ) and then disabled it again with [less fanfare](<a href="https://community.cloudflare.com/t/early-hints-and-encrypted-client-hello-ech-are-currently-disabled-globally/567730">https://community.cloudflare.com/t/early-hints-and-encrypted-client-hello-ech-are-currently-disabled-globally/567730</a> ).<br/><br/>Almost all of the popular domains with it enabled look NSFW. :blobshrug:&lt;code&gt;$ dig +short openstreetmap.org https&lt;br&gt;1 . alpn=&#34;h3,h2&#34; ipv4hint=104.21.88.66,172.67.173.161 ech=AEX+DQBBswAgACCY/JoV+3cuHZdOgYzHZ0SP9Ms+TN3PN8D8vk10GJU/AgAEAAEAAQASY2xvdWRmbGFyZS1lY2guY29tAAA= ipv6hint=2606:4700:3030::ac43:ada1,2606:4700:3034::6815:5842&lt;br&gt;&lt;/code&gt;<br/><br/>(That domain is not NSFW. Probably.)<br/><br/>Apparently [someone noticed and Cloudflare confirmed it](<a href="https://community.cloudflare.com/t/encrypted-client-hello-ech-are-being-enabled-again/700863">https://community.cloudflare.com/t/encrypted-client-hello-ech-are-being-enabled-again/700863</a> ) 3 weeks ago. 2024-09-11T15:11:33Z