1
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 30 posts.
2
Building an OpenBSD Router
The Ultimate OpenBSD Router
3
My Experience With the Great Firewall of China
When I recently visited China for the first time,as an InfoSec professional I was very curious to finally be able to poke at theGreatFirewall of China with m...
4
Blocking-resistant communication through domain fronting
David Fifield, University of California, Berkeley Chang Lan, University of California, Berkeley Rod Hynes, Psiphon Inc Percy Wegmann, Brave New Software Vern Paxson, University of California, Berkeley and the International Computer Science Institute
5
Why we use the Linux kernel's TCP stack
A recent blog post posed the question Why do we use the Linux kernel's TCP stack?. It triggered a very interesting discussion on Hacker News.
6
T-Mobile’s Binge On Optimization is Just Throttling, Applies Indiscriminately
Back in November, T-Mobile announced a new service for its mobile customers called Binge On, in which video streams from certain websites don’t count against customers’ data caps.[fn]To be fair, T-Mobile’s plans don’t have traditional data caps—they just slow down to “2G” speeds once customers...
7
8
9
The Trouble with CloudFlare
Wednesday, CloudFlare blogged that 94% of the requests it sees from Tor are "malicious." We find...
10
11
12
H.264 is Magic
A high level walkthrough of the basics of video compression techniques used in MPEG, AVC/H.264, codecs.
13
Total Nightmare: USB-C and Thunderbolt 3
Did you buy the new MacBook or MacBook Pro? Maybe the Google Pixel? You're about to enter a world of confusion thanks to those new "USB-C" ports. See, that simple-looking port hides a world of complexity, and the (thankful) backward-compatibility uses different kinds of cables for different tasks. Shoppers have to be…
14
My url isn't your url
When I started the precursor to the curl project, httpget, back in 1996, I wrote my first URL parser. Back then, the universal address was still called URL: Uniform Resource Locators. That spec was published by the IETF in 1994. The term "URL" was then used as source for inspiration when naming the tool and … Continue…
15
Attack of the Week: Apple iMessage
Today’s Washington Post has a story entitled “Johns Hopkins researchers poke a hole in Apple’s encryption”, which describes the results of some research my students and I have bee…
16
17
AWS Application Load Balancer
We launched Elastic Load Balancing (ELB) for AWS in the spring of 2009 (see New Features for Amazon EC2: Elastic Load Balancing, Auto Scaling, and Amazon CloudWatch to see just how far AWS has come since then). Elastic Load Balancing has become a key architectural component for many AWS-powered applications. In…
18
HPACK: the silent killer (feature) of HTTP/2
If you have experienced HTTP/2 for yourself, you are probably aware of the visible performance gains possible with HTTP/2 due to features like stream multiplexing, explicit stream dependencies, and Server Push.
19
Industry Concerns about TLS 1.3
Search IETF mail list archives
20
Google’s QUIC protocol: moving the web from TCP to UDP
QUIC replaces TCP with UDP for faster connections, eliminating head-of-line blocking and reducing latency. Learn how it works and why it matters.
21
The Cuban CDN
On a recent trip to Cuba I brought with me a smartphone and hoped to get Internet access either via WiFi or 3G. I managed that (at a price) but also saw for myself how Cubans get access to an alternate Internet delivered by sneakernet.
22
23
IPv6 Support for EC2 Instances in Virtual Private Clouds
Update (7/13/2017): Since this post was published, IPv6 supported has been extended and now supports 15 Regions and Multiple AWS Services. The continued growth of the Internet, particularly in the areas of mobile applications, connected devices, and IoT, has spurred an industry-wide move to IPv6. In accord with a…
24
Monitoring and Tuning the Linux Networking Stack: Receiving Data
This post guides you through monitoring and tuning the Linux network stack with the focus on receiving data.
25
Why I Live in IRC (2015)
I have lived in IRC for about 7 years. What I mean by this is that IRC has been my primary hub for reading information online and interacting with people and systems. I don't use an RSS reader, I visit Twitter and Facebook only ...
26
Usenet Tradecraft: Survival in an Extremely Adversarial Environment (2013)
Survival in an Extremely Adversarial Environment If your secure communications platform isn’t being used by terrorists and pedophiles, you&# …
27
Roughtime: a protocol for secure, auditable time synchronisation
Security protocols often assume an accurate, local clock (e.g. TLS, Kerberos, DNSSEC and more). It's a widely accepted assumption when designing protocols but, for a lot of people, it just isn't true. We find good evidence that at least 25% of all certificate errors in Chrome are due to a bad local clock.
28
29
Russian ship loitering near undersea cables
**Russian ship loitering near undersea cables** Updated: Original article 9th Oct. 2016. The Russian Navy’s Project 22010 mini-sub host ship Yantar is known for loitering near undersea internet cables (known as Submarine communications Cables - SCC). It may have other special missions also…. Read More >….
30
Insecure by design: protocols for encrypted phone calls
The MIKEY-SAKKE protocol is being promoted by the UK government as a better way to secure phone calls. The reality is that MIKEY-SAKKE is designed to offer minimal security while allowing undetectable mass surveillance, through the introduction a backdoor based around mandatory key-escrow. This weakness has…