New
The latest blog posts to take off on Hacker News. 1,615 posts.
Fun with DNS TXT Records
TXT Record Specification Primer # Reading through the RFC Using the Domain Name System To Store Arbitrary String Attributes to summarise the relevant part: Any printable ASCII character is permitted for the attribute name. More importantly, on the restrictions section Some DNS server implementations place limits on…
Why 56k is the fastest dial up modem speed
10stripe is a collection of computer and technology information, providing answers to common questions and concerns.
I discovered caching CDNs were throttling my everyday browsing
Update: 28 Nov 2023 Zen Internet and I have amicably parted ways over this matter. Their technical response has been added to this post.
Building a freedom-friendly WiFi pocket-router (2020)
Daniel Kulesz's personal website
Lockheed is now tracking phones and walkie-talkies from space
Space-based phone location-tracking firm HawkEye 360 announced its partnership with U.S. weapons manufacturer Lockheed Martin this morning. The UAE military is allegedly a "strong" customer.
What the QWAC? An EV Certificate all over again
Almost 2 years on from the last time I wrote about QWACs, I'm sadly not here to tell you that things have gone well since then. In fact, I'm actually here to tell you that things are not going well at all... QWAC Back in Jan 2022, I
Reverse-engineering Ethernet backoff on the Intel 82586 network chip's die
Introduced in 1973, Ethernet is the predominant way of wiring computers together. Chips were soon introduced to handle the low-level aspects...
Finding services companies via their TXT records
How to use a company's TXT records to discover the products they use.
Exploiting DNS response parsing on the Wii U
It's annual Wii U exploit time! 😄 Image of the Wii U connection test screen on the GamePad. After reverse engineering parts of the Wii Us' ...
Mitigating the Hetzner/Linode XMPP.ru MitM interception incident
(If you just want some recommendations for what to do, skip down to the Recommendations section below .)
Encrypted traffic interception on Hetzner and Linode targeting Jabber service
TL;DR: we have discovered XMPP (Jabber) instant messaging protocol encrypted TLS connection wiretapping (Man-in-the-Middle attack) of jabber.ru (aka xmpp.ru) service’s servers on Hetzner and Linode hosting providers in Germany. The attacker has issued several new TLS certificates using Let’s Encrypt service which were…
Using OpenBSD Relayd(8) as an Application Layer Gateway
I was lucky enough to attend to EuroBSDCon 2023 and offered the opportunity to talk about one of my favorite OpenBSD stock daemon: relayd(8). The talk was recorded and made available on the EuroBSDCon YouTube channel. . One may check the EuroBSDCon 2023 program for more material. This post attempts a reboot of the…
Testing if a port can be reached, using built-in tools other than ol' telnet
Charlie Arehart - Server Troubleshooting - Testing if a port can be reached, using built-in tools other than 'good old telnet'
Where does my computer get the time from?
This week I was in Rotterdam for a RIPE meeting . On Friday morning I gave a lightning talk called where does my computer get the time from? The RIPE meeting website has a copy of my slides and a video of the talk; this is a blogified low-res version of the slides with a rough and inexact transcript.
BBC gives up on Threads, sticks with Mastodon
So numerous brands are giving up on Threads by Instagram, allegedly due to lack of engagement (ironically, most of them are still using...
WiFi without internet on a Southwest flight
I spent a recent flight finding out what I could do with a connection to the flight’s wifi, but without access to the internet. I was on my way home from Strange Loop, a direct flight from St. Louis to Oakland. It’s a long enough flight that I planned to purchase the $8 internet access and get some work done, but…
TOFU: Do You Check?
Let’s say you’re on a fresh machine. Maybe you’ve just started a new job or you’ve wiped your machine. You’re about to push some code you’ve written and you get this: $ git push The authenticity of host 'github.com (140.82.121.4)' can't be established. ED25519 key fingerprint is…
AWS Customers Cannot Escape IPv4
AWS will charge for IPv4 addresses but its IPv6 support lacks severely
Your WiFi Can See You
And it's so much worse than you think
Exploring the Halo 1 System Link Protocol
One of my all-time favorite games is Halo: Combat Evolved that launched together with the original Xbox in 2001. One major part of the game was multiplayer, up to 16 people at a LAN party could play together by connecting four Xbox consoles over Ethernet , referred to as System Link .
AWS IPv4 Estate Now Worth $4.5B
AWS grew its IPv4 estate with an additional 27 million IP addresses to now owning 128 Million IPv4 addresses. At a value of $35 per IPv4 address, the total value of AWS’ IPv4 estate is ~4.5 Billion dollars. An increase of $2 billion