The latest blog posts to take off on Hacker News. 1,406 posts.
The Great Firewall of China (GFW) experienced the largest leak of internal documents in its history on Thursday September 11, 2025. Over 500 GB of source code, work logs, and internal communication records were leaked, revealing details of the GFW's research, development, and operations.
A rare and revealing breach attributed to a North Korean-affiliated actor, known only as “Kim” as named by the hackers who dumped the data, has delivered a new insight into Kimsuky (APT43) tactics, techniques, and infrastructure. This actor's operational profile showcases credential-focused intrusions targeting South…
Engineers prove their technique is effective even with the lowest-cost WiFi devices
Media over QUIC: We have a winner! Cloudflare has released a technical preview of their MoQ CDN. Now you can use MoQ at scale with style and grace.
The Great Firewall of China (GFW) conducted a large-scale, unconditional block targeting TCP port 443 on August 20, 2025. This report documents the measurements and analysis we conducted of that event.
Report incorrectly blocked sites on UK ISP and mobile networks.
Sovereign code infrastructure.
OpenSSH post quantum cryptography
We’ve started delivering independent search results from our European-based index. This will help us build the kind of ethical and fair internet we believe in.
Learn how a Google spoof used a DKIM replay attack to bypass email security and trick users with a fake subpoena in this real-world phishing case.
Matrix, the open protocol for secure decentralised communications
On July 14th, 2025, Cloudflare made a change to our service topologies that caused an outage for 1.1.1.1 on the edge, resulting in downtime for 62 minutes for customers using the 1.1.1.1 public DNS Resolver as well as intermittent degradation of service for Gateway DNS. We’re deeply sorry for this outage. This outage…
It's been a quiet year at geminiprotocol.net thus far. I've let two "Apollo days" slip by without a word. I'm about as disappointed in myself for this as I expect many folks are unsurprised by it. I do still have plans and clear ideas for finalising the minor oustanding spec issues. I'd tell people to look forward to…
ISC is excited to announce the release of Kea 3.0.0! This is a major release, and is the first Long-Term Support (LTS) version of Kea.
Matrix, the open protocol for secure decentralised communications
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
During a one hour period today, my computer contacted 63 different Apple domains while i was not logged on and using it. I have been trying to minimize to the extent possible the reach of big tech into my life. A full 25% of the DNS queries from one of my computers (M2 MBA with macOS 15.4) are to Apple owned domains …
The free DNS4EU resolver, for everyone in Europe. Get the addresses, set it up in minutes, and block malware and phishing with no tracking.
Grants are Tailscale’s next generation of access controls that combine network and application capabilities into a single syntax.
We’re excited to announce the release of Stalwart v0.12, a significant milestone that evolves Stalwart from a powerful mail server into a complete, integrated communication and collaboration...
Privacy is dead: For multiple months, any O2 customer has had their location exposed to call initiators without their knowledge.
In this post, we’re highlighting 4via6 subnet routing — a powerful way to extend Tailscale’s mesh across entire edge or customer networks. It’s ideal for scenarios where traditional VPNs struggle, like fleets of robots, sensors, or isolated cloud environments.
I think the human race has no future if it doesn’t go to space. —— Stephen Hawking Starlink is a low Earth orbit (LEO) satellite internet service provided by SpaceX. Users connect to near-Earth orbit satellites through a user terminal, which then connects to the internet via ground gateways. Basic Starlink network…
The SSL landscape has shifted dramatically. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.
What patterns do we see in RUM data during the April 28th power outage in Portugal and Spain?
Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices worldwide — and how to protect yourself.
Understand the mechanics, risks, and the future of IMSI catching (a.k.a. stealing your cellular ID) in 2025. Read our primer on this niche form of hacking.
