1
WebSockets: caution required
WebSockets seem to be gaining a resurgence, suddenly they are sexy again. I think this is the wrong message.
New
The latest blog posts to take off on Hacker News. 73 posts.
2
3
On the Juniper backdoor
You might have heard that a few days ago, Juniper Systems announced the discovery of “unauthorized code” in the ScreenOS software that underlies the NetScreen line of devices. As a resu…
4
How Tor Works: Part One
Security and Programming Blog
5
Why 451?
Today, the IESG approved publication of “An HTTP Status Code to Report Legal Obstacles”. It’ll be an RFC after some work by the RFC Editor and a few more process bits, but effectively you can start using it now.
6
7
Faking the TCP handshake
Update: This article has been superseded by a new post which hopefully explains it more clearly: Spoofing TCP connections without sequence number prediction
8
The secret message hidden in every HTTP/2 connection
If you spy on an HTTP/2 connection starting up you'll notice that it sends an almost-but-not-quite valid HTTP request at the very start of...
9
Telegram stalking
Update 20151216: This quick post got far more attention than expected. I regret not mentioning that the leakage can easily be prevented via a setting. In practice the problem remains, users in general will have no idea about this being a relevant setting to change and will stay with the default. The best discussion on…
10
How a little bit of TCP knowledge is essential
Why you should understand (a little) about TCP
11
Why the Tor attack matters
Earlier today, Motherboard posted a court document filed in a prosecution against a Silk Road 2.0 user, indicating that the user had been de-anonymized on the Tor network thanks to research conduct…
12
The sad state of SMTP encryption
This is a quick recap of why I’m sad about SMTP encryption. It explains how TLS certificate verification in SMTP is useless even if you force it.
13
System design implications of declining network latency vs. disk latency
Hardware performance “obviously” affects software performance and affects how software is optimized. For example, the fact that caches are multiple orders of magnitude faster than RAM means that blocked array accesses give better performance than repeatedly striding through an array.
14
How New Long-Range Radios Will Change the Internet of Things
New radios that combine miles of range with years of battery life are changing the way we build and use connected devices. Here’s how.
15
16
How to Download a List of All Registered Domain Names
Security and Programming Blog
17
18
I hope WebDAV dies
WebDAV is a file access and transfer protocol created in the 90s. It has support for file locks, arbitrary key-value properties attached to folders, file mimetypes, and many other features that extend this standard. It also has powerful access control features.
19
20
21
Will there be a Distributed HTTP?
One of the things that came up at the HTTP Workshop was “distributed HTTP” — i.e., moving the Web from a client/server model to a more distributed one. This week, Brewster Khale (of Archive.org fame) talked about similar thoughts on his blog and at CCC. If you haven’t seen that yet, I’d highly suggest watching the…
22
23
AT&T Hotspots: Now with Advertising Injection
While traveling through Dulles Airport last week, I noticed an Internet oddity. The nearby AT&T hotspot was fairly fast—that was a pleasant surprise.
24
25
Locking the Web Open: A Call for a Distributed Web
(Short form article, Short lecture , Long lecture , demo of a fraction of the idea of a distributed website (or paste this link in maelstrom ))
26
The network is hostile
Yesterday the New York Times and ProPublica posted a lengthy investigation based on leaked NSA documents, outlining the extensive surveillance collaboration between AT&T and the U.S. government…
27
Why is Bitcoin forking?
A tale of differing visions
28
29
30
