1111
New
The latest blog posts to take off on Hacker News. 1,615 posts.
1112
CloudFlair: Bypassing CloudFlare using Internet-wide scan data
Cloudflare is a service that acts as a middleman between a website and its end users, protecting it from various attacks. Unfortunately, those websites are often poorly configured, allowing an attacker to entirely bypass Cloudflare and run DDoS attacks or exploit web-based vulnerabilities that would otherwise be…
1113
Some thoughts on security after ten years of Qmail 1.0
Some thoughts on security after ten years of qmail 1.0 Bernstein, 2007 I find security much more important than speed. We need invulnerable software systems, and we need them today, even if they ar…
1114
DNSFS – Store files in others' DNS resolver caches
A while ago I did a blog post about how long DNS resolvers hold results in cache for, using RIPE Atlas probes testing against their default resolvers (in a lot of cases, the DNS cache on their modem/router).
1115
Attack of the Week: Group Messaging in WhatsApp and Signal
If you’ve read this blog before, you know that secure messaging is one of my favorite topics. However, recently I’ve been a bit disappointed. My sadness comes from the fact that lately …
1116
Xerox Alto's 3 Mb/s Ethernet: Building a Gateway with a BeagleBone
The Alto was a revolutionary computer designed at Xerox PARC in 1973. It introduced the GUI, high-resolution bitmapped displays, the optic...
1117
1118
As the U.S. Retreats, Canada Doubles Down on Net Neutrality
As the U.S. Federal Communications Commission prepares to rollback net neutrality protections, the Canadian government has used the controversy to double down on its support for net neutrality safeguards, linking it to democracy, equality, and freedom of expression. I've written several posts on how the U.S. decision…
1119
Now that the FCC has repealed net neutrality, let’s adopt it in California
Today the Federal Communications Commission repealed net neutrality — a terrible step for the future of a free and open internet and for…
1120
TP-Link firmware sends six DNS requests and one NTP query every 5 seconds
A design flaw in TP-Link Wi-Fi repeater firmware causes it to waste an excessive amount of bandwidth on NTP timekeeping. DDoS’ed public NTP servers in the process.
1121
Redoing all my home networking
How I set up my home lab to be my very own cloud.
1122
Randomize your WiFi MAC address on Ubuntu
Your device’s MAC address can be used to track you across the WiFi networks you connect to. That data can be shared and sold, and often identifies you as an individual. It’s possible to limit this tracking by using pseudo-random MAC addresses.
1123
The beginning of the end for copper wire
The FCC voted last Thursday to relax the rules for retiring copper wiring. This change was specifically aimed at Verizon and AT&T and is going to make it a lot easier for them to tear down old …
1124
SSH vs. OpenVPN for Tunneling
Update 28.01.16 I found some sites referring to this post. Below are the common complaints I saw, and my replies:
1125
Net Neutrality will die, so let’s take the profit out of killing it
Fighting the FCC is futile at this point, but Bob has a way to (in a way) save Net Neutrality
1126
1127
Creating an Autonomous System for Fun and Profit
The thoughts and projects of an engineer who likes to convert solder, firmware, and wire into all sorts of different forms of entertainment.
1128
Fixing the Ethernet Board from a Vintage Xerox Alto
A Xerox Alto system on the East coast had Ethernet problems, so the owner sent me the Ethernet board to diagnose. (After restoring our Alto,...
1129
The sound of the dialup, pictured (2012)
If you ever connected to the Internet before the 2000s, you probably remember how it sounded. But what do these sounds mean?
1130
How much traffic do I get from North Korea anyway?
While the president of the United States and the leader of North Korea were/are currently beefing on Twitter about who should destroy the world first, North Korea was also causing me some personal frustration on data quality.
1131
Attack of the week: DUHK
Before we get started, fair warning: this is going to be a post about a fairly absurd (but non-trivial!) attack on cryptographic systems. But that’s ok, because it’s based on a fairly a…
1132
1133
Falling through the KRACKs
The big news in crypto today is the KRACK attack on WPA2 protected WiFi networks. Discovered by Mathy Vanhoef and Frank Piessens at KU Leuven, KRACK (Key Reinstallation Attack) leverages a vulnerab…
1134
US telcos appear to be selling non-anonymized access to consumer telephone data
https://bit.ly/crazymobiledemo
1135
Traceroute Lies: A Typical Misinterpretation Of Output
Traceroute can points to a link having terrible latency, but despite what it appears, it's easy to misread the output and jump to the wrong conclusion.
1136
Someone Created a Tor Hidden Service to Phish My Tor Hidden Service
SMS Privacy is available as a Tor hidden service, and it turns out ~10% of users actually use it that way. This post details what I found when somebody created a phishing site of my Tor hidden service.
1137
Peer-to-peer social networking with Rotonde and Beaker
A short introduction to p2p social networking with Rotonde & Beaker Browser.
1138
Tracking friends and strangers using WhatsApp
You and your good buddy, Steve Steveington, are in training for an arduous charity walk. You signed up together on the spur of the moment and pledged to hold each other accountable whilst you got in shape for the big day. However, you have developed reason to suspect that Steve Steveington is losing his commitment to…
1139
How the Catalan government uses IPFS to sidestep Spain's legal block
Catalonia, with Barcelona as its capital, is currently one of Spain’s seventeen autonomous comunities. It has a long story of pro-independence movements, and has even declared itself independent in the past. Nowadays, the political climate is very heated up. A majority of catalan people want to hold a referendum for…
1140
TLS 1.2 Session Tickets
Session Tickets, specified in RFC 5077 , are a technique to resume TLS sessions by storing key material encrypted on the clients. In TLS 1.2 they speed up the handshake from two to one round-trips.