91
Introducing Prompt. Nice SSH for iOS.
In our State of the Union blog post, I mentioned that we’ve been working on some iOS proof of concept / research projects here in the Panic Office. It’s been a lot of fun for us.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 260 posts.
92
SSH Agent Restriction (new in OpenSSH 8.9)
OpenSSH agent restriction
93
OpenSSH 10.6p2 Critical workaround for alpine without PAM
OpenSSH release notes
94
New Tools for Detecting HTTPS Interception
The practice of HTTPS interception continues to be commonplace on the Internet. This blog post discusses types of monster-in-the-middle devices and software, and how to detect them.
95
Post-mortem and remediations for the Matrix.org security breach
Matrix, the open protocol for secure decentralised communications
96
The facts around Zoom and encryption for meetings/webinars
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
97
Role-based access control like it was meant to be
Learn about role-based access control, its use cases and benefits.
98
Riot Games: Peeking into Valorant's Netcode (2020)
We’re Matt deWet, gameplay tech lead on VALORANT , and David Straily, project tech lead on VALORANT - and we're beyond excited to be here with you all to share some of the technical details behind how we’re addressing som…
99
Bluesky's AT Protocol - Federation Architecture Overview
Soon, we’re launching a sandbox environment for federation. In advance, we want to share some technical details about our design decisions.
100
The Road to QUIC
QUIC (Quick UDP Internet Connections) is a new encrypted-by-default Internet transport protocol, that provides a number of improvements designed to accelerate HTTP traffic as well as make it more secure, with the intended goal of eventually replacing TCP and TLS on the web.
101
No, it’s not the end of XMPP for Google Talk
There’s some recent discussion about the sky falling for XMPP at Google. See this blog post by Dan York for example. In reality, we don’t know the state of XMPP inside Google because they don’t share their use of XMPP with the XSF. …
102
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
103
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
104
ISPs should not police online speech no matter how awful it is
Entrusting our speech to multiple different corporate actors is always risky. Yet given how most of the internet is currently structured, our online expression largely depends on a set of private companies ranging from our direct Internet service providers and platforms, to upstream ISPs (sometimes...
105
China's Man-On-the-Side Attack on GitHub
On March 27 The following message was posted on the official GitHub blog: We are currently experiencing the largest DDoS (distributed denial of service) attack in github.coms history. The attack began around 2AM UTC on Thursday, March 26, and involves a wide combination of attack vectors. These incl[...]
106
Cross-signing and end-to-end encryption by default
Matrix, the open protocol for secure decentralised communications
107
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
108
Introducing Cloudflare Registrar
“I love my domain registrar.” Has anyone ever said this? Before Cloudflare even launched in 2010, our early beta customers were literally begging us: "Will you please launch a registrar too?!"
109
An Introduction to Meshtastic
Discover Meshtastic: a community-driven, open-source project using LoRa radios for long-range, off-grid communication.
110
Cloudflare servers don't own IPs anymore so how do they connect to the internet?
In this blog we'll discuss how we manage Cloudflare IP addresses used to retrieve the data from the Internet, how our egress network design has evolved, how we optimized it for best use of available IP space and introduce our soft-anycast technology
111
Native Matrix VoIP with Element Call
Hopefully in-person meet-ups will prove much easier in 2022 - but, there’s still a need for video calls, so let’s face it, they’re here to stay. This makes it really exciting to present Element Call: the world’s first decentralised voice and video conferencing app powered entirely
112
The Agent2Agent Protocol (A2A)
Explore A2A, Google's new open protocol empowering developers to build interoperable AI solutions.
113
Opus 1.5 released: Opus gets a machine learning upgrade
This 1.5 release is unlike any of the previous ones. It brings many new features that can improve quality and the general audio experience. That is achieved through machine learning. Although Opus has included machine learning — and even deep learning — before (e.g. for speech/music detection ), this is the first time…
114
Proof-of-Work Defense for Onion Services
Today, we are officially introducing a proof-of-work (PoW) defense for onion services designed to prioritize verified network traffic as a deterrent against denial of service (DoS) attacks with the release of Tor 0.4.8.
115
AWS Application Load Balancer
We launched Elastic Load Balancing (ELB) for AWS in the spring of 2009 (see New Features for Amazon EC2: Elastic Load Balancing, Auto Scaling, and Amazon CloudWatch to see just how far AWS has come since then). Elastic Load Balancing has become a key architectural component for many AWS-powered applications. In…
116
HTTP/3: the past, the present, and the future
We are now happy to announce that QUIC and HTTP/3 support is available on the Cloudflare edge network. We’re excited to be joined in this announcement by Google Chrome and Mozilla Firefox, two of the leading browser vendors and partners in our effort to make the web faster and more reliable for all.
117
118
Innernet: open source Rust based Tailscale alternative
Nurture and shape your own private networks with simple, free, open-source infrastructure
119
Tailnet Lock
Use this article learn how to decide who to trust when it comes to your tailnet’s coordination server and how nodes are added to your tailnet.
120
Cross-Platform P2P Wi-Fi: How the EU Killed AWDL
This post investigates how we got from Wi-Fi Direct to AWDL to Wi-Fi Aware, what makes Wi-Fi Aware technically superior, and why this shift unlocks true cross-platform peer-to-peer connectivity for developers.