New
The latest blog posts to take off on Hacker News. 1,615 posts.
Snowden Meets the IETF
Last night, we had a screening of CITIZENFOUR at the IETF meeting in Prague, and about 170 people showed up to see the movie about Edward Snowden’s relevations — information that led the IETF to declare such pervasive monitoring as an attack on the Internet itself.
Goodbye, OpenStack
I just removed myself from every OpenStack mailing list and meetup. I’m sure I’ll still use it, but I don’t see myself as part of that community any longer. When I was at DreamHost, I really felt like part of that community and that I could help make it better. However, in the three years since I’ve left DreamHost, I…
Hacking Team and a case of BGP hijacking
After just a few hours the Hacking Team emails archive has already provided many tasty leaks. I want to focus on a routing security issue since this is my main research activity for this year.
UDP and me
David P. Reed has transferred the domain reed.com to Reed Online Ltd. Links relating to the work of David P.Reed should be updated to point to URLs at www.deepplum.com. If you have arrived at this web page by following a link in another website, blog, etc., you can find the desired web page by substituting deepplum…
HTTP/2 for TCP/IP Geeks
I attended a TCP/IP Geeks Stockholm meetup yesterday and did a talk about HTTP/2. Below is the slide set, but as usual it might not be entirely self explanatory... HTTP/2 - for TCP/IP Geeks Stockholm from Daniel Stenberg
Stupid certificate tricks
Sometimes I do things for no real reasons other than “because I can” and/or “it amuses me”. For example, embedding a snarky message into my HTTPS certificate.
OS X 10.10.3 seems to have done something bad to wifi drivers
As a PSA (public service announcement), I'm reporting here that updating your Yosemite system to 10.10.3 is incredibly toxic if you use WiFi...
FIFA 2014 World Cup live stream architecture
We were given the task to stream the FIFA 14 World Cup and I think this was an experience worth sharing. This is a quick overview about: the architecture, the components, the pain, the learning, th…
HFT in my backyard – VI
When you think about it, it really is one tangled, small cottage industry. Everybody knows everybody. Everybody knows what everybody is doing, and nobody talks. One of my informants. This is the f…
Solaris adopting OpenBSD's pf
Yet another proprietary tech titan turns to the free OpenBSD operating system as their source of innovation in the networking and security ...
Pin-pointing China's attack against GitHub
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
Opportunistic Encryption for Firefox
Firefox 37 brings more encryption to the web through opportunistic encryption of some http:// based resources. It will be released the week ...
Your wifi shows me where you live, work and travel
Many people may already know that all your devices try to broadcast your previous connections. I expect that many more have no idea that’s happening. There have been articles published about it before, but without specific examples.
The day I was DoSed by Google
I launched my startup this week. On a very modest scale, no debauched parties or penthouse offices on scads of VC money, just me and ...
Google seems to have broken email forwarding
Basically: I'm finding it impossible to reliably convince Google that email from my employees, to my employees, is not spam. I run my own mail server, but most of my employees use Gmail. So I have forwarding set up: employee@dnalounge.com simply forwards to employee@gmail.com. When sending mail using their Gmail…
Attack of the week: FREAK (or 'factoring the NSA for fun and profit')
This is the story of how a handful of cryptographers ‘hacked’ the NSA. It’s also a story of encryption backdoors, and why they never quite work out the way you want them to. But I…
10Gbit/s full TX wirespeed smallest packet size on a single CPU core
The Linux Kernel Network Stack Scalability, mitigating DDoS attacks firewalling iptables netfilter connection tracking (conntrack)