31
A full TCP/IP stack in under 200 LoC (and the power of DSLs)
(Note: This is the third and final part of a series. Part one appeared Monday and part two appeared yesterday.)
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 457 posts.
32
33
Net Neutrality Violations: A History of Abuse
Here's what happens when cable and phone companies are left to their own devices.
34
Warp – Mobile VPN
Today we're excited to announce what we began to plan more than two years ago: the 1.1.1.1 App with WARP performance and security technology. We built Warp from the ground up to thrive in the harsh conditions of the modern mobile Internet.
35
Blender is testing PeerTube after YouTube blocks their videos worldwide
The Free and Open Source 3D Creation Software — blender.org
36
37
The sound of the dialup, pictured (2012)
If you ever connected to the Internet before the 2000s, you probably remember how it sounded. But what do these sounds mean?
38
The Post-American Internet
On December 28th, I delivered a speech entitled " A post-American, enshittification-resistant internet " for 39C3, the 39th Chaos Communications Congress in Hamburg, Germany. This is the transcript of that speech.
39
ADSL works over wet string (2017)
Broadband services are a wonderful innovation of our time, using multiple frequency bands (hence the name) to carry signals over wires (us...
40
Amazon threatens to suspend Signal's AWS account over censorship circumvention
Last week, we received the following email from Amazon: From: [redacted], [redacted] <[redacted]@amazon.com> Subject: Notification of potential account suspension regarding AWS Service Terms Moxie, Yesterday AWS became aware of your GitHub and Hacker News/ycombinator posts des...
41
42
How decentralized is Bluesky really?
Recently due to various events (namely a lot of people getting off of X-Twitter), Bluesky has become a lot more popular, and excitement for its underlying protocol, ATProto , is growing. Since I worked on ActivityPub which connects together Mastodon , Sharkey , Peertube , GotoSocial , etc, etc, etc in the present-day…
43
Show HN: Cloud Storage with ZFS send and receive over SSH
rsync.net offers secure cloud storage on an open standards ZFS and SSH platform for offsite backup and disaster recovery
44
Cloudflare outage on November 18, 2025 post mortem
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
45
Understanding how Facebook disappeared from the internet
Today at 1651 UTC, we opened an internal incident entitled "Facebook DNS lookup returning SERVFAIL" because we were worried that something was wrong with our DNS resolver 1.1.1.1. But as we were about to post on our public status page we realized something else more serious was going on.
46
AWS to begin charging for public IPv4 addresses
We are introducing a new charge for public IPv4 addresses. Effective February 1, 2024 there will be a charge of $0.005 per IP per hour for all public IPv4 addresses, whether attached to a service or not (there is already a charge for public IPv4 addresses you allocate in your account but don’t attach to […]
47
NSA and IETF: Can an attacker purchase standardization of weakened cryptography?
It's normal for post-quantum cryptography to be rolled out as an extra layer of security on top of traditional pre-quantum cryptography, rather than as a replacement .
48
49
Building an OpenBSD Router
The Ultimate OpenBSD Router
50
How to Kill a Decentralised Network
How to Kill a Decentralised Network (such as the Fediverse) par Ploum - Lionel Dricot.
51
Say goodbye to resource-caching across sites and domains
A look-back at caching strategies from the past; with recent changes in Chrome's and Safari's caching strategies, there is no caching benefit from using publicly available third-party libraries anymore.
52
My Experience With the Great Firewall of China
When I recently visited China for the first time,as an InfoSec professional I was very curious to finally be able to poke at theGreatFirewall of China with m...
53
Blocking-resistant communication through domain fronting
David Fifield, University of California, Berkeley Chang Lan, University of California, Berkeley Rod Hynes, Psiphon Inc Percy Wegmann, Brave New Software Vern Paxson, University of California, Berkeley and the International Computer Science Institute
54
55
Is Telegram really an encrypted messaging app?
This blog is reserved for more serious things, and ordinarily I wouldn’t spend time on questions like the above. But much as I’d like to spend my time writing about exciting topics, som…
56
iMessage with PQ3 Cryptographic Protocol
We are introducing PQ3, a groundbreaking cryptographic protocol for iMessage that advances the state of the art of end-to-end secure messaging. With compromise-resilient encryption and extensive defenses against even highly sophisticated quantum attacks, PQ3 provides protocol protections that surpass those in all…
57
Improving DNS Privacy with Oblivious DoH
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1
58
59
Quake 3 Source Code Review: Network Model (2012)
The network model of Quake3 is with no doubt the most elegant part of the engine. At the lower level Quake III still abstract communications with the NetChannel module that first appeared in Quake World . The most important thing to understand is: In a fast paced environment any information that is not received on…
60
Bypassing the Linux kernel for high-performance packet filtering
In two previous posts we've discussed how to receive 1M UDP packets per second and how to reduce the round trip time. We did the experiments on Linux and the performance was very good considering it's a general purpose operating system.