1
New
The latest blog posts to take off on Hacker News. 158 posts.
2
The IE 11 user-agent forced Mozilla to freeze part of its user-agent string
Erotic web browser fan fiction.
3
Encrypted DNS and NTP = Deadlock
I recently found out the hard way that encrypted DNS can deadlock with NTP on embedded devices without a battery-backed clock.
4
Wiretapping Google smart speakers
I was recently rewarded a total of $107,500 by Google for responsibly disclosing security issues in the Google Home smart speaker that allowed an attacker within wireless proximity to install a "backdoor" account on the device, enabling them to send commands to it remotely over the Internet, access its microphone…
5
The 5GHz “Problem” for Wi-Fi Networks: DFS (2018)
Wi-Fi networking provides us with 2 bands for the operation of wireless LAN networks: the 2.4Ghz band and the 5GHz band. The 2.4GHz band has...
6
Tech journalism doesn’t know what to do with Mastodon
What happens when innovation doesn’t fit the usual narratives?
7
Protocols, not platforms
Does everybody get to coin one maxim in their lives? If so, here’s mine: Everything gets worse. Let’s say you’re shopping at the grocery, when you notice a new food product. It competes directly with
8
Getting started with nmap
Sysadmin doing syadmin stuff
9
IDN is crazy
IDN, International Domain Names, is the concept that lets us register and use international characters in domain names, and by international we of course mean characters outside of the ASCII range. Recently I have fought some battles against IDN and IDN decoding so I felt this urge to write a lot of words about it ……
10
11
12
FreeBSD on the Raspberry Pi
How to install FreeBSD on a Raspberry Pi, one step in building an Active Directory server with Samba and FreeBSD.
13
14
15
Security concerns with the e-Tugra certificate authority
Certificate authorities (CAs) are a critical backbone of internet security; when they are compromised, users lose the ability to securely connect to websites without fear of interception. Websites cannot insulate themselves against a fully-compromised CA, even if they normally use other CAs.
16
Tracing HTTP Requests with tcpflow
PagerDuty went off very early in the morning, and our hero cursed his bad luck and received the phone call. He made PagerDuty repeat the message twice, but couldn’t understand the message. He pressed the number to acknowledge the incident. He opened the MacBook and found the slack message from the PagerDuty bot more…
17
Mastodon’s eternal September begins?
The fediverse is dealing with a huge wave of Twitter people bringing toxic ideas with them.
18
The Fediverse is inefficient but that's a good trade-off
Let's address the mammoth in the room: the fediverse , the network of mastodon servers, is very inefficient.
19
Your Organization should run its own Mastodon server
Run your own Mastodon server to control your social media presence
20
Exploring Mastodon
With the current uncertainty over Twitter, I'm starting to explore using Mastodon
21
22
It looks like I’m moving to Mastodon
Elon Musk laid off about half of Twitter this morning. There are many terrible stories emerging about how this went down, but one that particularly struck me was that he …
23
24
Comparing TCP and QUIC
There is a common view out there that the QUIC transport protocol (RFC 9000) is just another refinement to the original TCP transport protocol [ 1 ] [ 2 ]. I find it hard to agree with this sentiment, and for me QUIC represents a significant shift in the set of transport capabilities available to applications in terms…
25
SMS Multifactor Authentication in Antarctica
Issues pertaining to SMS (for multifactor auth) in Antarctica.
26
RIPE meetings: IP addresses as spoils of war
Zobacz listę najlepszych kasyn online w Polsce na 2026 rok. Porównaj bonusy, gry live i metody płatności dla polskich graczy 🎰⚡
27
28
SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri
Gui Rambo writes about his coding and reverse engineering adventures.
29
Chromium based browsers leak user local IP via WebRTC foundation attribute
This script uses a pregenerated foundation lookup table to find local IP address for ICE candidates that render local mDNS hostnames seen as xx-xxx-xxx-xx.local .
30
The HTTP crash course nobody asked for
HTTP does a pretty good job staying out of everyone’s way. If you’re reading this article, there’s a solid chance it was delivered to you over HTTP. Even if you’re reading this from an RSS reader o...