
Husband and father of our 1̶ ̶2̶ ̶3̶ ̶4̶ 5 sons | #infosec #cybersecurity
DNS
Joined April 2007
- Tweets848
- Following1.9K
- Followers1.1K
- Likes3.8K
David Redekop retweeted
🚨 “Too good to be true because nobody else is doing it.”
That is the objection @DRtheNerd says ADAMnetworks heard from interested buyers about its “don’t talk to strangers” approach to network security.
The principle: a device can reach a destination only after an approved DNS query authorizes it - and that permission is time-limited.
In this clip, David explains how Microsoft’s Zero Trust DNS helped bring attention to the concept, and why making restrictive security work with everyday business applications takes more than a simple rule.
For mobile privacy, it raises a question worth asking: which connections are explicitly trusted, and which are simply allowed?
Watch David of @adam_networks discuss the journey with our GM, Mark Kreitzman. Full interview in the next post. 👇
David Redekop retweeted
#Clickfix compromise at the infrastructure level - how KongTuke delivered Clickfix on September 14th without compromising individual websites
adamnet.works/blog/brevo-del…
Ya know - think we've gone and done it again. New #clickfix banger coming out tomorrow 👀 - new ground, dif campaign.
David Redekop retweeted
Traditional cybersecurity is built around identifying and detecting threats.
But by the time that happens, the attacker may have already done the damage.
In the latest episode of Efani Features, Mark Kreitzman sits down with @DRtheNerd, Founder and CEO of @adam_networks, to discuss why cybersecurity needs to shift from reactive detection toward preemptive defense.
They cover:
→ Why outbound access can become one of the biggest weaknesses after an attacker gets inside
→ Why data exfiltration is often the final step in a much longer attack chain
→ DNS as a root of trust
→ Zero Trust DNS
→ Why IP reputation is becoming less reliable
→ Protecting IoT and decades-old OT systems
→ Default deny vs. default allow
→ Why allowing only known-good destinations can fundamentally change network defense
David’s central point:
If protection comes after identification and detection, the adversary may already be ahead of you.
🎙️ Watch the full interview: youtu.be/zDRiq6nt2r4
#Cybersecurity #ZeroTrust #NetworkSecurity #PreemptiveDefense #Efani #Podcast #Interview
Fascinating what happens when you look where most people aren't looking. Why would WhatsApp in the background even attempt a DNS resolution via unauthorized service on a fully-patched iOS device with the latest App? It goes through this cycle every 6-8 minutes.
David Redekop retweeted
I managed to get on a podcast: youtube.com/watch?v=PukjmfzB…
David Redekop retweeted
"security systems architecture experts" TIL about MITRE D3FEND: Detection, Denial, and Disruption Framework Empowering Network Defense.
It's updated quarterly and useful to map "defensive cybersecurity techniques" to TTPs.
Nice one.
d3fend.mitre.org/
David Redekop retweeted
So far Cursor seems to me the best of all worlds.
It supports ACP unlike Google’s Antigravity.
It supports many models unlike Claude Code.
It has a decent Auto model router.
And I integration with various git* platforms.
I cannot shake the thought that Michael Saylor can sell a few dozen BTC and then potentially buy 10,000 more at a 10% discount
Can we teach this to our sons and daughters everywhere and enjoy generations of peace?
Attitude is a choice.
Gratitude is a discipline.
Bitterness is expensive.
Nobody accidentally has a great attitude.
Nobody stumbles into gratitude.
And nobody means to end up bitter, it just quietly moves in when you stop choosing something better.
Guard your peace like it cost you something.
Because it did.
I have a @costcocanada marketing idea. Promote your digital gas car experience (app QR code) as a Treasure Hunt. That way, when it finally works, people are excited instead of being frustrated.
Blocking outbound TCP port 80 on user networks to any internet destination. Anyone else as pleasantly surprised at how few things break? Debian updates. connectivitycheck.gstatic\.com on legacy devices, for example... anyone have similar experience?
David Redekop retweeted
"Rarely is anyone thanked for the work they did to prevent the disaster that didn't happen." – Mikko Hypponen
David Redekop retweeted
One of the best explanations for CVE-2025-55182 / React2Shell. Recommended reading.
In spite of me only supplying Macs to the family, I just found out we have some Linux users in the family
How many DNS TLD‘s does Google own? google goog gle xyz - next thing you know they will own the dot .
I see yet another reason for zero trust DNS and don’t talk to strangers adamnet.io/dtts






















