781
Zero click vulnerability in Apple’s macOS Mail
Zero-Click Zip TL;DR
New
The latest blog posts to take off on Hacker News. 1,615 posts.
782
VPN over SSH? The Socks Proxy
Some resources on the internet might be only accessible from clients with particular IP addresses. For example, suppose you want to…
783
The Actual OSI Model
I have said before that I believe that teaching modern students the OSI model as an approach to networking is a fundamental mistake that makes the concepts less clear rather than more. The major reason for this is simple: the OSI model was prescriptive of a specific network stack designed alongside it, and that…
784
Closing web browser windows doesn't close connections
Months ago I noticed something strange in the Little Snitch Network Monitor: Safari was still connecting to web sites after every window had been closed. At the time, I thought this was just a Safari bug. I brought the issue to the attention of some Safari engineers, who I had hoped would look into it. Since then…
785
Avoid Consumer Routers
Consumer Routers are not secure
786
Can We Stop Pretending SMS Is Secure Now?
SMS text messages were already the weakest link securing just about anything online, mainly because there are tens of thousands of employees at mobile stores who can be tricked or bribed into swapping control over a mobile phone number to someone else. Now we’re learning about an entire ecosystem of companies that…
787
It’s time to stop using SMS for security
By now most infosec professionals are aware of various ways SMS text messaging can be hijacked. For example so-called “SIM Swap” attacks…
788
gRPC Is Easy to Misconfigure
Google's gRPC is an RPC system that supports many languages, and is relatively widely used. I think its popularity is due to being used for parts of Docker and Kubernetes. I think gRPC is mostly fine, but it is surprisingly easy to screw up by misconfiguring it. Part of that is because RPC systems are challenging to…
789
Staying Out of TTL Hell
Cache strategies that don't trade-off correctness for speed
790
791
Bitsquatting Windows.com
Earlier this month, I came back around to seriously considering an attempt at bitsquatting. While the prior link goes into great depth on the topic, I will attempt to give a very high level overview here: If this sort of thing interests you: I tend to do stuff like this weekly. Give me a follow @_mattata
792
Splitting the Ping
Ping is one of the fundamental pillars of networking. It’s simple, universally supported, and is normally one of the few things that is shipped with all network stacks.
793
WhatsApp and most alternatives share the same problem
Shall I migrate to Signal, Threema or Telegram? No, because they all have — WhatsApp included — the same problem: They are walled gardens. Imagine a world where for each mail recipient using a separate domain, I would need separate mail client? Or in other words: Gmail users can only communicate with Gmail users…
794
795
Plain Text Protocols
If you haven't noticed already I really love plain text so I thought I would find some plain text protocols that are used in different software systems. The Redis Protocol specification states it best by describing its own protocol, but this applies to all of the plain text protocols I will cover.
796
Please do not put IP addresses into DNS MX records
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
797
798
Passwordless Logins with Yubikey
Yubikey is currently the de facto device for U2F authentication. It enables adding an extra layer of security on top of SSH, system login, signing GPG keys,...
799
800
Change your MAC address with a shell script (2019)
Sometimes I'm at a coffee shop and get locked out of the wifi, after an hour or two has passed. Rather than spending 2 minutes/week entering terminal commands, I thought it made sense to spend a few hours figuring out how to make it take one minute a week, instead, via AUTOMATION
801
Why updating DNS is slow
If you want to see more comics like this, sign up for my saturday comics newsletter or browse more comics !
802
A visual guide to SSH tunnels
This page explains use cases and examples of SSH tunnels while visually presenting the traffic flows. For example, here's a reverse tunnel that allows only users from IP address 1.2.3.4 access to port 80 on the SSH client through an SSH server.
803
804
Talking to Postgres Through Java 16 Unix-Domain Socket Channels
Reading a blog post about what’s coming up in JDK 16 recently, I learned that one of the new features is support for Unix domain sockets (JEP 380). Before Java 16, you’d have to resort to 3rd party …
805
Where's the fastest place to put my server? How much does it matter?
Using my own web server accesslogs and public latency data to get a quantitative answer and why roundtrips are such a pain.
806
ANSI escape codes (2019)
My team writes a lot of command line tools, and we like to assume that people aren’t using a literal VT100 (meaning: we liberally use colours, italics, and basically every other terminal feature available to us). This tends to result in strings in our code that look a little like this:
807
gemini:// space
Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.
808
809
810
A few HiDPI tricks for Linux
As part of that switch, I needed to configure parts of my Linux environment (which was originally stock Ubuntu, but is now i3 with a heavily customized userspace) to function correctly on HiDPI displays.