1
The C10K problem
It's time for web servers to handle ten thousand clients simultaneously, don't you think? After all, the web is a big place now.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 197 posts.
2
The IPv6 mess (2002)
Each computer on the Internet has its own public IPv4 address, similar to a phone number: for example, 131.193.178.181. The target of each packet of data is identified by a public IPv4 address.
3
Does Cloudflare’s 1.1.1.1 DNS Block Archive.is? (2019)
Short answer: no. Quite the opposite, actually — Archive.is is intentionally blocking 1.1.1.1 users. Here's why.
4
Against DNSSEC
10 years later and still unrebutted: DNSSEC is pageantry, it's not security, which is why so few security teams deploy it.
5
Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.)
6
The world in which IPv6 was a good design (2017)
Last November I went to an IETF meeting for the first time. The IETF is an interesting place; it seems to be about 1/3 maintenance grunt wo...
7
Secure Secure Shell
No ads, no tracking. Ever.<br/> <strong>blog.stribik.technology</strong> is completely static, without cookies or javascript.<br/> <strong>comments.stribik.technology</strong> uses javascript and local storage, it's loaded when you click
8
Internet Mail 2000
The sender's ISP, rather than the receiver's ISP, is the always-online post office from which the receiver picks up the message.
9
Encrypted traffic interception on Hetzner and Linode targeting Jabber service
TL;DR: we have discovered XMPP (Jabber) instant messaging protocol encrypted TLS connection wiretapping (Man-in-the-Middle attack) of jabber.ru (aka xmpp.ru) service’s servers on Hetzner and Linode hosting providers in Germany. The attacker has issued several new TLS certificates using Let’s Encrypt service which were…
10
DNSSEC Downtime: List of Outages & Validation Failures
Major DNSSEC Outages and Validation Failures
11
12
Bitsquatting: DNS Hijacking without exploitation
Researchers have exploited bit-errors before in amazing ways . But bit-errors can be detected and exploited in new ways on an Internet-wide scale. One of these means is by bitsquatting, or registering domain names one bit different than frequently resolved domains.
13
14
A full TCP/IP stack in under 200 LoC (and the power of DSLs)
(Note: This is the third and final part of a series. Part one appeared Monday and part two appeared yesterday.)
15
16
The sound of the dialup, pictured (2012)
If you ever connected to the Internet before the 2000s, you probably remember how it sounded. But what do these sounds mean?
17
The Post-American Internet
On December 28th, I delivered a speech entitled " A post-American, enshittification-resistant internet " for 39C3, the 39th Chaos Communications Congress in Hamburg, Germany. This is the transcript of that speech.
18
ADSL works over wet string (2017)
Broadband services are a wonderful innovation of our time, using multiple frequency bands (hence the name) to carry signals over wires (us...
19
How decentralized is Bluesky really?
Recently due to various events (namely a lot of people getting off of X-Twitter), Bluesky has become a lot more popular, and excitement for its underlying protocol, ATProto , is growing. Since I worked on ActivityPub which connects together Mastodon , Sharkey , Peertube , GotoSocial , etc, etc, etc in the present-day…
20
NSA and IETF: Can an attacker purchase standardization of weakened cryptography?
It's normal for post-quantum cryptography to be rolled out as an extra layer of security on top of traditional pre-quantum cryptography, rather than as a replacement .
21
22
How to Kill a Decentralised Network
How to Kill a Decentralised Network (such as the Fediverse) par Ploum - Lionel Dricot.
23
Say goodbye to resource-caching across sites and domains
A look-back at caching strategies from the past; with recent changes in Chrome's and Safari's caching strategies, there is no caching benefit from using publicly available third-party libraries anymore.
24
My Experience With the Great Firewall of China
When I recently visited China for the first time,as an InfoSec professional I was very curious to finally be able to poke at theGreatFirewall of China with m...
25
Blocking-resistant communication through domain fronting
David Fifield, University of California, Berkeley Chang Lan, University of California, Berkeley Rod Hynes, Psiphon Inc Percy Wegmann, Brave New Software Vern Paxson, University of California, Berkeley and the International Computer Science Institute
26
Is Telegram really an encrypted messaging app?
This blog is reserved for more serious things, and ordinarily I wouldn’t spend time on questions like the above. But much as I’d like to spend my time writing about exciting topics, som…
27
Quake 3 Source Code Review: Network Model (2012)
The network model of Quake3 is with no doubt the most elegant part of the engine. At the lower level Quake III still abstract communications with the NetChannel module that first appeared in Quake World . The most important thing to understand is: In a fast paced environment any information that is not received on…
28
Flawed routers flood University of Wisconsin internet time server (2003)
ABSTRACT In May 2003, the University of Wisconsin - Madison found that it was the recipient of a continuous large scale flood of inbound Internet traffic destined for one of the campus' public Network Time Protocol (NTP) servers. The flood traffic rate was hundreds-of-thousands of packets-per-second, and hundreds of…
29
30
Comcast caught hijacking web traffic
On November 20th, 2012 Comcast hijacked my HTTP traffic and re-routed it through their own servers, injecting a “notice” on the page before completing the request. What this means is instead of my web request being routed to the website I wanted to visit, Comcast took it upon themselves to hijack my web…