1291
On the Juniper backdoor
You might have heard that a few days ago, Juniper Systems announced the discovery of “unauthorized code” in the ScreenOS software that underlies the NetScreen line of devices. As a resu…
New
The latest blog posts to take off on Hacker News. 1,615 posts.
1292
How Tor Works: Part One
Security and Programming Blog
1293
Why 451?
Today, the IESG approved publication of “An HTTP Status Code to Report Legal Obstacles”. It’ll be an RFC after some work by the RFC Editor and a few more process bits, but effectively you can start using it now.
1294
1295
Faking the TCP handshake
Update: This article has been superseded by a new post which hopefully explains it more clearly: Spoofing TCP connections without sequence number prediction
1296
The secret message hidden in every HTTP/2 connection
If you spy on an HTTP/2 connection starting up you'll notice that it sends an almost-but-not-quite valid HTTP request at the very start of...
1297
Telegram stalking
Update 20151216: This quick post got far more attention than expected. I regret not mentioning that the leakage can easily be prevented via a setting. In practice the problem remains, users in general will have no idea about this being a relevant setting to change and will stay with the default. The best discussion on…
1298
How a little bit of TCP knowledge is essential
Why you should understand (a little) about TCP
1299
Why the Tor attack matters
Earlier today, Motherboard posted a court document filed in a prosecution against a Silk Road 2.0 user, indicating that the user had been de-anonymized on the Tor network thanks to research conduct…
1300
The sad state of SMTP encryption
This is a quick recap of why I’m sad about SMTP encryption. It explains how TLS certificate verification in SMTP is useless even if you force it.
1301
System design implications of declining network latency vs. disk latency
Hardware performance “obviously” affects software performance and affects how software is optimized. For example, the fact that caches are multiple orders of magnitude faster than RAM means that blocked array accesses give better performance than repeatedly striding through an array.
1302
How New Long-Range Radios Will Change the Internet of Things
New radios that combine miles of range with years of battery life are changing the way we build and use connected devices. Here’s how.
1303
1304
How to Download a List of All Registered Domain Names
Security and Programming Blog
1305
1306
I hope WebDAV dies
WebDAV is a file access and transfer protocol created in the 90s. It has support for file locks, arbitrary key-value properties attached to folders, file mimetypes, and many other features that extend this standard. It also has powerful access control features.
1307
1308
1309
Will there be a Distributed HTTP?
One of the things that came up at the HTTP Workshop was “distributed HTTP” — i.e., moving the Web from a client/server model to a more distributed one. This week, Brewster Khale (of Archive.org fame) talked about similar thoughts on his blog and at CCC. If you haven’t seen that yet, I’d highly suggest watching the…
1310
1311
AT&T Hotspots: Now with Advertising Injection
While traveling through Dulles Airport last week, I noticed an Internet oddity. The nearby AT&T hotspot was fairly fast—that was a pleasant surprise.
1312
1313
Locking the Web Open: A Call for a Distributed Web
(Short form article, Short lecture , Long lecture , demo of a fraction of the idea of a distributed website (or paste this link in maelstrom ))
1314
The network is hostile
Yesterday the New York Times and ProPublica posted a lengthy investigation based on leaked NSA documents, outlining the extensive surveillance collaboration between AT&T and the U.S. government…
1315
Why is Bitcoin forking?
A tale of differing visions
1316
1317
1318
1319
1320
Detecting VPN (and its configuration) and proxy users on the server side
A lot of people use VPN every day. Somebody use it in always-on mode to circumvent government or corporative internet censorship, while…