1
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 33 posts.
2
The IPv6 mess (2002)
Each computer on the Internet has its own public IPv4 address, similar to a phone number: for example, 131.193.178.181. The target of each packet of data is identified by a public IPv4 address.
3
Does Cloudflare’s 1.1.1.1 DNS Block Archive.is? (2019)
Short answer: no. Quite the opposite, actually — Archive.is is intentionally blocking 1.1.1.1 users. Here's why.
4
Encrypted traffic interception on Hetzner and Linode targeting Jabber service
TL;DR: we have discovered XMPP (Jabber) instant messaging protocol encrypted TLS connection wiretapping (Man-in-the-Middle attack) of jabber.ru (aka xmpp.ru) service’s servers on Hetzner and Linode hosting providers in Germany. The attacker has issued several new TLS certificates using Let’s Encrypt service which were…
5
AWS to begin charging for public IPv4 addresses
We are introducing a new charge for public IPv4 addresses. Effective February 1, 2024 there will be a charge of $0.005 per IP per hour for all public IPv4 addresses, whether attached to a service or not (there is already a charge for public IPv4 addresses you allocate in your account but don’t attach to […]
6
How to Kill a Decentralised Network
How to Kill a Decentralised Network (such as the Fediverse) par Ploum - Lionel Dricot.
7
Quantum Resistance and the Signal Protocol
The Signal Protocol is a set of cryptographic specifications that provides end-to-end encryption for private communications exchanged daily by billions of people around the world. After its publication in 2013, the Signal Protocol was adopted not only by Signal but well beyond. Technical informat...
8
Removing support for forwarded ports
Today we announce that we no longer support port forwarding. New port forwards will no longer be supported, and existing ports will be removed 2023-07-01.
9
Surpassing 10Gb/S over Tailscale
Discover how Tailscale achieved over 10Gb/s throughput on Linux using advanced UDP segmentation and checksum optimizations. Explore benchmarks, results, and the innovations powering wireguard go's latest performance leap.
10
RSS Autodiscovery (2006)
RSS autodiscovery is a technique that makes it possible for browsers and other software to automatically find a site's RSS feed, whether it's in RSS 1.0 or RSS 2.0 format.
11
Mitigating the Hetzner/Linode XMPP.ru MitM interception incident
(If you just want some recommendations for what to do, skip down to the Recommendations section below .)
12
Home Assistant blocked from integrating with Garage Door opener API
Why the MyQ integration will be removed in Home Assistant 2023.12
13
Email: Explained from first principles
Modern email is a patchwork of protocols and extensions. Here is one article to understand them all.
14
Web Push for Web Apps on iOS and iPadOS
With iOS and iPadOS 16.4 beta 1 comes support for Web Push for Home Screen web apps, Badging API, Manifest ID, and more.
15
Bluesky's AT Protocol - Federation Architecture Overview
Soon, we’re launching a sandbox environment for federation. In advance, we want to share some technical details about our design decisions.
16
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
17
ISPs should not police online speech no matter how awful it is
Entrusting our speech to multiple different corporate actors is always risky. Yet given how most of the internet is currently structured, our online expression largely depends on a set of private companies ranging from our direct Internet service providers and platforms, to upstream ISPs (sometimes...
18
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
19
Proof-of-Work Defense for Onion Services
Today, we are officially introducing a proof-of-work (PoW) defense for onion services designed to prioritize verified network traffic as a deterrent against denial of service (DoS) attacks with the release of Tor 0.4.8.
20
Deploying key transparency at WhatsApp
WhatsApp has launched a new cryptographic security feature to automatically verify a secured connection based on key transparency. The feature requires no additional actions or steps from users an…
21
Free Public WiFi
Once, many years ago, I stayed on the 62nd floor of the Westin Peachtree Plaza in Atlanta, Georgia. This was in the age when the price of a hotel room was directly correlated with the price of the WiFi service, and as a high school student I was not prepared to pay in excess of $15 a day for the internet. As I…
22
The novel HTTP/2 'Rapid Reset' DDoS attack
Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it
23
SMTP Smuggling – Spoofing Emails Worldwide
Introducing a novel technique for e-mail spoofing
24
HTTP/2 rapid reset attack impacting Nginx products
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
25
HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
26
Ford EV Customers to Gain Access to 12,000 Tesla Superchargers
The official home for stories from Ford. Get the latest news, in-depth vehicle features, media site information, and meet the people and ideas driving our company forward.
27
Load Balancing
A bottom-up, animated guide to HTTP load balancing algorithms.
28
Passkeys will come at a cost
Firstyear's blog
29
Mullvad on Tailscale: Privately browse the web
Learn how Tailscale's partnership with Mullvad enables secure, private browsing with Mullvad’s VPN servers as exit nodes. Protect your internet traffic, maintain privacy, and enjoy fast, encrypted browsing worldwide. Discover how to configure Mullvad with Tailscale for ultimate security.
30
Unveiling secrets of the ESP32: creating an open-source MAC layer
Reverse engineering the ESP32 Wi-Fi hardware registers