Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 260 posts.
Introducing QUIC support for HTTPS load balancing
By Michael Behr, Software Engineer; Ian Swett, Software Engineer For four years now, Google has been using QUIC, a UDP-based encrypted tra...
A Call to Arms: Supporting Matrix
Matrix, the open protocol for secure decentralised communications
Apple and IPv6 – Happy Eyeballs
Search IETF mail list archives
IPv6-only subnets and EC2 instances
In June 2021, we announced our continued commitment and innovation towards the enablement of IPv6 on AWS. Today, we take a monumental step forward with the ability to create an IPv6-only architecture on AWS. With this launch, Amazon Virtual Private Cloud (VPC) now allows you to create IPv6-only subnets in your…
An update on attempted man-in-the-middle attacks
Posted by Heather Adkins, Information Security Manager Today we received reports of attempted SSL man-in-the-middle (MITM) attacks again...
Monitoring and Tuning the Linux Networking Stack: Receiving Data
This post guides you through monitoring and tuning the Linux network stack with the focus on receiving data.
Broken packets: IP fragmentation is flawed
As opposed to the public telephone network, the internet has a Packet Switched design. But just how big can these packets be?
Cisco Leap Frogs H.264 Video Collaboration with Real-Time AV1 Codec
Webex is rolling out the AV1 video codec into production early next year, bringing our media quality to the next level.
The case of the recursive resolvers: What happened during Slack’s DNSSEC rollout
On September 30th 2021, Slack had an outage that impacted less than 1% of our online user base, and lasted for 24 hours. This outage was the result of our attempt to enable DNSSEC — an extension intended to secure the DNS protocol, required for FedRAMP Moderate — but which ultimately led to a series of…
Blueborne – A new attack vector endangering major operating systems
Following the disclosure of the BlueBorne attack vector this past September, Armis discovered that critical Bluetooth vulnerabilities impact the Amazon Echo and Google Home.
VideoLAN has issued a legal notice to Indian Gov for banning their website
VideoLAN’s URL from which users download the VLC Media Player appears to have been banned by the DoT in India since March 2021. This was done without any prior notice, or affording VideoLAN an opportunity of hearing, which is contrary to the Indian law.
Modernizing Transport Security
Posted by David Benjamin, Chrome networking *Updated on October 17, 2018 with details about changes in other browsers TLS (Transport Lay...
Introducing HumbleNet: Cross-Platform Networking Library for the Browser
Announcing the release of HumbleNet, a project initiated at Humble Bundle in 2015 to port peer-to-peer multiplayer games, originally to asm.js and now to WebAssembly. The current open source version ...
The real reason for large DDoS attacks? It's IP Spoofing, not memcached
A week ago we published a story about new amplification attacks using memcached protocol on UDP port 11211. A few things happened since then: Github announced it was a target of 1.3Tbps memcached attack. OVH and Arbor reported similar large attacks with the peak reported at 1.7Tbps.
Insecure by design: protocols for encrypted phone calls
The MIKEY-SAKKE protocol is being promoted by the UK government as a better way to secure phone calls. The reality is that MIKEY-SAKKE is designed to offer minimal security while allowing undetectable mass surveillance, through the introduction a backdoor based around mandatory key-escrow. This weakness has…