1
No, that dot in the domain name of the URL is not a mistake (2004)
You've come to this page because you've asked a question similar to the following:
New
The latest blog posts to take off on Hacker News. 83 posts.
2
Encoding your WiFi access point password into a QR code
Up until recently, it was a pain to defend againt WPA2 brute-force attacks by using a random 63-character password (the maximum in WPA-Personal ) mode). Thanks to Android 10 and iOS 11 supporting reading WiFi passwords from a QR code, this is finally a practical defense.
3
4
Flight stats, entertainment, and trying to crack Widevine
Investigating onboard flight entertainment APIs, flight telemetry, and Widevine-protected media.
5
The Great $50M African IP Address Heist
A top executive at the nonprofit entity responsible for doling out chunks of Internet addresses to businesses and other organizations in Africa has resigned his post following accusations that he secretly operated several companies which sold tens of millions of dollars worth of the increasingly scarce resource to…
6
The Nintendo Switch Switch
Yesterday I had the idea that it would be cool if I turned a Nintendo Switch (will be referred to as NX to avoid confusion as NX is the code name for the Nintendo Switch ) console into an actual network switch. I thought about it a bit and realized that it would be doable in hardware at least, since the NX docking…
7
Verizon/Yahoo Blocking Attempts to Archive Yahoo Groups – Deletion: Dec. 14
Well, as of sometime on December 5th a huge number of the archivists that were scrambling to rescue archives from Yahoo Groups, had their {e-mail addresses} apparently banned so they can no longer…
8
Sinkholed
On 26 Nov 2019 at 14:55 UTC, I logged into my server that hosts my website to perform a simple maintenance activity. Merely three minutes later, at 14:58 UTC, the domain name susam.in used to host this website was transferred to another registrant without any authorisation by me or without any notification sent to me…
9
10
11
Bits on the Wire
Exactly 100% of everything on the Internet involves exchanging messages which represent items of interest to humans. These items can be classified into three baskets: One for “media” (images, sound, video), one for text (HTML, PDF, XML), and one for “objects” (chat messages, payments, love poems, order statuses). This…
12
The Early History of Usenet, Part I: The Technological Setting
Usenet—Netnews—was conceived almost exactly 40 years ago this month. To understand where it came from and why certain decisions were made the way they were, it’s important to understand the technological constraints of the time.
13
The July Galileo Outage: What happened and why
By bert hubert / bert@hubertnet.nl This post is an excerpt of a far longer post on Galileo, its structures and the cause of the outage. Here we’ll only focus on the outage - the potential underlying reasons behind it are described in the full article. Since the week-long outage in July I’ve been fascinated by Galileo…
14
DNS Wars
NANOG is now quite an institution in the Internet, particularly in the North American Internet community. It was an offshoot of the Regional Techs meetings, which were part of the NSFNET framework of the late 80s and early 90s. NANOG has thrived since then and is certainly one of the major network operational forums…
15
Stop using low DNS TTLs
DNS latency is a key component to having a good online experience. And in order to minimize DNS latency, carefully picking DNS servers and anonymization...
16
Starlink is a big deal
Part of my series countering misconceptions in space journalism. Now available in audio form. Starlink, SpaceX’s plan to serve internet via tens of thousands of satellites, is a staple in the…
17
Setting up a home VPN server with WireGuard
Motivation For a moderately security conscious geek like myself, there can be a number of reasons to want to set up a home VPN server: Accessing your home computer via screen sharing without exposing it to the Internet (and thereby to potential evil-doers). Accessing servers with IP white lists (common case for…
18
DNS Security: Threat Modeling DNSSEC, DoT, and DoH
There's been a lot of talk about DNS-over-HTTPS aka DoH lately, primarily due to Mozilla's and Google's respective plans to move forward with enabling it in their browsers. There's also a lot of misunderstanding and conflation of speculated plans for world domination with practical benefits of the technology; it…
19
20
CloudFlare is ruining the internet for me (2016)
Follow up: Cloudflare: Making the internet a little bit faster – for a select group of people CloudFlare is a very helpful service if you are a website owner and don’t want to deal with separate…
21
Wireless attacks on aircraft instrument landing systems
Wireless attacks on aircraft instrument landing systems Sathaye et al., USENIX Security Symposium 2019 It’s been a while since we last looked at security attacks against connected real-world entiti…
22
The tech behind building an independent, internet radio station
Oscar is on the web
23
Curryfinger – Find the Server Behind the CDN
CURRYFINGER quickly and effectively identifies the real hosts behind CDN networks like CloudFlare - and outperforms existing tools. Find out how to use it.
24
Candidates for Mozilla's IRC Successor
These candidates were assessed on a variety of axes, most importantly Community Participation Guideline enforcement and accessibility, but also including team requirements from engineering, organizational-values alignment, usability, utility and cost. To close out, I’ll talk about the options we haven’t chosen and…
25
I revoked $1M worth of EV certificates
Personal like or dislike of EV aside for a moment, we can all agree on what the name of EV certs implies. Organisations get their company details in the certificate and CAs have to do some extended validation of that data compared to a normal certificate. Turns out, that doesn'
26
Let's Encrypt makes certs for 30% of web domains
Looking at a dataset of 350 million ssl connections inspires some initial questions:
27
The “mail is hard” myth
TL;DR: - Mail is not hard: people keep repeating that because they read it, not because they tried it - Big Mailer Corps are quite happy with that myth, it keeps their userbase growing - Big Mailer Corps control a large percentage of the e-mail address space which is good for none of us - It's ok that people have…
28
29
Capturing PAL video with an SDR, and a few dead ends
A blog about signals, programming, music, and other stuff.
30
Spying on HTTPS
When I launched Chrome on Thursday, I saw something unexpected: While most users probably would have no idea what to make of this, I happened to know what it means– Chrome is warning me that …