The latest blog posts to take off on Hacker News. 1,615 posts.
I really love ping! It is easy to use and directly reveals whether the network works or not. Refer to Why Ping is no Security Flaw! (But your Friend) and Advanced Tracerouting . At least outgoing pings (from trust to untrust) should be allowed without any security concerns. However, many companies are denying these…
Chrome drops NPN for ALPN on May 31st, requiring OpenSSL 1.0.2+. CentOS, Debian, and most Ubuntu versions can't support it, breaking HTTP/2 for millions.
When I started the precursor to the curl project, httpget, back in 1996, I wrote my first URL parser. Back then, the universal address was still called URL: Uniform Resource Locators. That spec was published by the IETF in 1994. The term "URL" was then used as source for inspiration when naming the tool and … Continue…
In May last year, a new attack on the Diffie Hellman algorithm was released, called Logjam . At the time, I was working on a security team, so it was our responsiblity to check that none of our servers would be affected. We ran through our TLS config and decided it was safe, but also needed to check that our SSH…
This is great news: You can now install a GSM network using apt-get! Thanks to the efforts of Debian developer Ruben Undheim, there's now an OpenBSC (with all its flavors like OsmoBSC, OsmoNITB, OsmoS
Today’s Washington Post has a story entitled “Johns Hopkins researchers poke a hole in Apple’s encryption”, which describes the results of some research my students and I have bee…
The ability to privately communicate through the internet is very important for dissidents living under authoritary regimes, activists and basically everyone concerned about internet privacy.
Tor is a service run by a network of volunteers to allow people to use internet anonymously. Normally tor is used to browse the web without being tracked or identified.
During the months I worked in Let's Encrypt's operations team I got fairly used to being the go-to man for any question that a database query could solve.…
(Edit: This article is now up on hacker news, feel free to discuss there)
The militia-patriot movement in America has embraced radio communications in a big way. Within the past decade, the methods and communications gear have evolved from basic CB or FRS radios, to now …
In the last years, DMR and MOTOTRBO (a.k.a. TRBO a Motorola Solutions branded DMR Radios ) has become a very popular digital voice mode on the UHF and VHF bands and the MD380 radio is the latest cheap DMR walkie-talkie to come out of China. The question is, is it any good? The longer answer is…
Usual Mandatory Disclaimer: IANAC (I am not a cryptographer) so I might likely end up writing a bunch of mistakes in this blog post... ...
Gone are the days when computers didn't need firewalls. We are now living in an internet security arms race and your personal information ...
It’s beautiful outside Looks like it’s raining money Dr. Dre, For the love of money [Updated 1 on 01/27/2016 | Minor corrections + kmz file added] [Updated 2 on 01/27/2016 | This post w…
You may ask yourself, “How did I get here?” - Talking Heads
When I recently visited China for the first time,as an InfoSec professional I was very curious to finally be able to poke at theGreatFirewall of China with m...
WebSockets seem to be gaining a resurgence, suddenly they are sexy again. I think this is the wrong message.
