541
Second factor SMS: Worse than its reputation
One-time passwords are often sent via SMS. Security researchers from the CCC recently had live access to over 200 million such SMS messages from more than 200 affected companies.
New
The latest blog posts to take off on Hacker News. 3,021 posts.
542
PySkyWiFi: Free stupid wi-fi on long-haul flights
The plane reached 10,000ft. I took out my laptop, planning to peruse the internet and maybe do a little work if I got really desperate.
543
End-to-end congestion control cannot avoid latency spikes (2022)
What are the fundamental limits of end-to-end congestion control in 5G networks?
544
"Out of Band" network management is not trivial
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
545
Sans-IO: The secret to effective Rust for network services
Learn how Firezone uses the sans-IO pattern to build testable, deterministic Rust networking code. A deep dive into our connlib design.
546
Wcurl: a curl wrapper to download files
My personal website
547
Making a Linux-managed network switch
Sometimes the custom 5-port gigabit switch _is_ the solution.
548
549
550
gRPC: The Bad Parts
gRPC isn't perfect but who is?
551
Navigating Starlink's FCC Paper Trail
Guest Post: What I learned when I figured out how to navigate FCC filings.
552
Timeliness without datagrams using QUIC
Media over QUIC: Rethink your approach. *Unless you're doing something dope.
553
Remembering the LAN (2020)
Learn more about the early days of LAN.
554
Off-path TCP hijacking in NAT-enabled Wi-Fi networks
Guest Post: New off-path TCP hijacking attack in Wi-Fi networks that exploits vulnerabilities in the NAT mapping strategies of routers discovered.
555
The Public Interest Internet
What if the internet were public interest technology? Is that too wildly speculative? I think not. I am not talking about a utopian project here — a public interest internet would be a glorious imperfect mess and it would be far from problem-free. But while there is a lot of solid thinking about various digital issues…
556
First look at the upcoming Starlink Mini
I've owned Starlink Mini for about 6 months, using it for camping, backup internet, and in motion inside my car. Here is my honest review.
557
What You Get After Running an SSH Honeypot for 30 Days
Discover what 11,599 SSH login attempts reveal after running a honeypot for 30 days. Learn key cybersecurity insights—read now to protect your systems!
558
We improved the performance of a userspace TCP stack in Go
Learn how we enhanced TCP performance in Coder to achieve 5X faster throughput by optimizing buffer sizes, implementing the HyStart algorithm, and minimizing packet loss, significantly improving remote development experiences.
559
Hacking millions of modems and investigating who hacked my modem
Two years ago, something very strange happened to me while working from my home network. I was exploiting a blind XXE vulnerability that required an external HTTP server to smuggle out files, so I spun up an AWS box and ran a simple Python webserver to receive the traffic from the vulnerable server.
560
Engineering for Slow Internet
How to minimize user frustration in Antarctica.
561
IBDNS: Intentionally Broken DNS server
Afnic, the association in charge of the .fr top-level domain and several other French overseas and generic TLDs, announced today the release as free software of its tool named IBDNS, standing for Intentionally Broken DNS.
562
API Shouldn't Redirect HTTP to HTTPS
Instead of redirecting API calls from HTTP to HTTPS, make the failure visible. Unfortunately, many well-known API providers don't currently do so.
563
Reclaiming IPv4 Class E's 240.0.0.0/4
Ever since the supply of fresh IPv4 address blocks was depleted there has been a number of interesting market changes, mostly around the costs to either acquire or lease IPv4 address blocks. Since the demand for IPv4 addressing has not changed that much, prices have gone up, and more providers like AWS, Hetzner, OVH…
564
Is regulated BGP security coming?
What impact would regulating BGP routing security have on the global Internet?
565
566
567
BIMI and DMARC Can't Save You: The Overlooked DKIM Exploit
Analysts at Zone.eu, one the leading domain registrars and web hosting providers in Europe, have observed a vulnerability affecting the global e-mail ecosystem, stemming from unaddressed warnings in the DomainKeys Identified Mail (DKIM) standard that puts billions of users in risk. This is not an issue in a particular…
568
A transport protocol's view of Starlink
Digital communications systems always represent a collection of design trade-offs. Maximising one characteristic of a system may impair others, and various communications services may chose to optimise different performance parameters based on the intersection these design decisions with the physical characteristics…
569
It's always TCP_NODELAY
The first thing I check when debugging latency issues in distributed systems is whether TCP_NODELAY is enabled. And it’s not just me. Every distributed system builder I know has lost hours to latency issues quickly fixed by enabling this simple socket option, suggesting that the default behavior is wrong, and perhaps…
570
New UUID formats have been approved
This document presents new time-based UUID formats which are suited for use as a database key. A common case for modern applications is to create a unique identifier for use as a primary key in a database table. This identifier usually implements an embedded timestamp that is sortable using the monotonic creation time…