Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 23 posts.
AWS to begin charging for public IPv4 addresses
We are introducing a new charge for public IPv4 addresses. Effective February 1, 2024 there will be a charge of $0.005 per IP per hour for all public IPv4 addresses, whether attached to a service or not (there is already a charge for public IPv4 addresses you allocate in your account but don’t attach to […]
Quantum Resistance and the Signal Protocol
The Signal Protocol is a set of cryptographic specifications that provides end-to-end encryption for private communications exchanged daily by billions of people around the world. After its publication in 2013, the Signal Protocol was adopted not only by Signal but well beyond. Technical informat...
Removing support for forwarded ports
Today we announce that we no longer support port forwarding. New port forwards will no longer be supported, and existing ports will be removed 2023-07-01.
Surpassing 10Gb/S over Tailscale
Discover how Tailscale achieved over 10Gb/s throughput on Linux using advanced UDP segmentation and checksum optimizations. Explore benchmarks, results, and the innovations powering wireguard go's latest performance leap.
RSS Autodiscovery (2006)
RSS autodiscovery is a technique that makes it possible for browsers and other software to automatically find a site's RSS feed, whether it's in RSS 1.0 or RSS 2.0 format.
Home Assistant blocked from integrating with Garage Door opener API
Why the MyQ integration will be removed in Home Assistant 2023.12
Web Push for Web Apps on iOS and iPadOS
With iOS and iPadOS 16.4 beta 1 comes support for Web Push for Home Screen web apps, Badging API, Manifest ID, and more.
Bluesky's AT Protocol - Federation Architecture Overview
Soon, we’re launching a sandbox environment for federation. In advance, we want to share some technical details about our design decisions.
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
ISPs should not police online speech no matter how awful it is
Entrusting our speech to multiple different corporate actors is always risky. Yet given how most of the internet is currently structured, our online expression largely depends on a set of private companies ranging from our direct Internet service providers and platforms, to upstream ISPs (sometimes...
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
Proof-of-Work Defense for Onion Services
Today, we are officially introducing a proof-of-work (PoW) defense for onion services designed to prioritize verified network traffic as a deterrent against denial of service (DoS) attacks with the release of Tor 0.4.8.
Deploying key transparency at WhatsApp
WhatsApp has launched a new cryptographic security feature to automatically verify a secured connection based on key transparency. The feature requires no additional actions or steps from users an…
The novel HTTP/2 'Rapid Reset' DDoS attack
Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it
SMTP Smuggling – Spoofing Emails Worldwide
Introducing a novel technique for e-mail spoofing
HTTP/2 rapid reset attack impacting Nginx products
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
Ford EV Customers to Gain Access to 12,000 Tesla Superchargers
The official home for stories from Ford. Get the latest news, in-depth vehicle features, media site information, and meet the people and ideas driving our company forward.
Mullvad on Tailscale: Privately browse the web
Learn how Tailscale's partnership with Mullvad enables secure, private browsing with Mullvad’s VPN servers as exit nodes. Protect your internet traffic, maintain privacy, and enjoy fast, encrypted browsing worldwide. Discover how to configure Mullvad with Tailscale for ultimate security.
Unveiling secrets of the ESP32: creating an open-source MAC layer
Reverse engineering the ESP32 Wi-Fi hardware registers
Encrypted Client Hello
We're excited to announce a contribution to improving privacy for everyone on the Internet. Encrypted Client Hello, a new standard that prevents networks from snooping on which websites a user is visiting, is now available on all Cloudflare plans.
Introduction to Linux interfaces for virtual networking (2018)
Explore common Linux virtual network interfaces, including Bridge, Bonded interface, VLAN, VXLAN, MACVLAN, IPVLAN, MACVTAP/IPVTAP, and more. Learn how to create and use them effectively for your