31
ArXiv's Updated Rate Limit Policy
arXiv, and the scientific community at large, are facing a watershed moment. Scholarly publishing is currently changing at a rapid pace, and we are seeing a…
New
The latest blog posts to take off on Hacker News. 3,021 posts.
32
Hijacking the PS5's RTMP stream
The long way around to screen sharing.
33
Armada: Encrypted, Open-Source, Discord Alternative (Built on Nostr)
A free, open source, end-to-end encrypted Discord alternative: servers, channels, voice, and moderation, with no company in the middle. Now in open beta.
34
Self-Hosting on the Dark Web
This site is now reachable over Tor as a hidden service, at a .onion address that resolves only inside the Tor network. Tor relays and encrypts your traffic as …
35
Making Tailscale Faster
Tailscale performance updates reduce memory use, increase throughput, and speed startup with multi-queue, writev, and netmap caching.
36
Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%
Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.
37
Flawed routers flood University of Wisconsin internet time server (2003)
ABSTRACT In May 2003, the University of Wisconsin - Madison found that it was the recipient of a continuous large scale flood of inbound Internet traffic destined for one of the campus' public Network Time Protocol (NTP) servers. The flood traffic rate was hundreds-of-thousands of packets-per-second, and hundreds of…
38
Android NAT-T keepalive offload bypasses VPN lockdown
Technical report on Android VPN lockdown bypass via NAT-T keepalive offload.
39
An interactive tour of the spanning tree protocol
Root election, port roles, proposals and agreements, topology changes: explore RSTP through simulations powered by MSTPD compiled to WebAssembly.
40
Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare
Across 44,143 European companies with a detected CDN, 89.6% use Cloudflare. We publish the per-country counts and what the 2025-26 outages showed.
41
Shutting down our public encrypted DNS
Mullvad has operated public encrypted DNS (DoH) servers since 2022. They are unnecessary when using Mullvad VPN — traffic is already encrypted and Mullvad VPN's internal DNS handles all queries.
42
How to get a free .arpa domain
Learn how to get a free .arpa domain by abusing IPv6 reverse DNS delegations on Hurricane Electric, configuring deSEC, and hosting a live website.
43
Transfer files over an Ethernet patch cable
It's possible to just connect two computers together with Ethernet and do a bit of IP configuration:
44
Internet centralization and the original sin of NAT
How NAT broke the concept of an internet connection
45
Building my own network stack
.admonition { margin: .75em 0; padding: .6rem; overflow: hidden; font-size: 12px; page-break-inside: avoid; border-left: .3rem solid #42b983; border-radius: .3rem; box-shadow: 0 0.1re
46
The internet is kind of a predatory cesspit now
Personal blog of Stephen Diehl - Software engineer writing about technology, programming, and the future
47
Debugging my new network, when 10 Gigabit Ethernet Runs at 300 Megabits
I've been moving my home storage over to a UniFi UNAS Pro 8 as part of a larger ...
48
Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache
Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
49
Jabber/XMPP: 25 Years of Digital Independence
Infrastructure “We should own our infrastructure.” A lot of people would instinctively nod in agreement with that statement. Yet who “we” refers to shifts depending on the type of infrastructure. Highways, railways, bridges, and ports require nation-scale efforts. The water supply is usually put into the hands of…
50
Tether: iMessage, SMS, etc. on Linux
No AirPlay kinda sucked, but the one thing I kept wishing I had was what Apple calls "Continuity" : the ability to send and receive iMessages and SMS, share files, sync clipboard, and see notifications from my iPhone on my computer.
51
ATProto spaces: A new extension to ATProto that enables non-public data
Atproto Spaces, formerly known as “the permissioned data protocol,” is a new extension to atproto that enables non-public data. The alpha is now officially open. Here’s how to develop with it and what to expect as we work towards the full release.
52
A joke domain purchase turned in geopolitical warfare
Why is the military and a cheese fortune teller contacting me about SondeHub.org
53
Finger: the 1971 social network that never died
It will surprise more than a few of you to hear that the first social network dates back to 1971. No accounts, no algorithm, no central server. Your…
54
Self hosted email continues to steeply decline
Ten years of DNS measurements reveal three trends across the Internet's most popular domains: email continues to consolidate around two providers, DMARC enforcement has hit a plateau, and a surprisingly large long tail of infrastructure defies easy classification.
55
RustDesk now supports true unattended remote access on Wayland
Try the RustDesk Wayland preview for x86_64 Debian/Ubuntu-based systems: unattended access across multiple monitors and at the login screen after reboot.
56
Bluesky Protocol Services
A new home for the infrastructure Bluesky runs on the open network — including Jetstream v2 with network replay, a new Jetstream SDK, and a lex-based TypeScript SDK
57
IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay
WebKit-based browsers on iOS and macOS can be configured to route all web traffic through proxy servers, which is how Tor browsers on iOS and our own Psylo work. We found three WebKit features — DNS prefetching, WebAuthn Related Origin Requests, and WebTransport — that bypass the configured proxy and send traffic…
58
What DMARC Protects You From, and What It Does Not
DMARC verifies a domain owner authorised an email; it does not verify the email is safe. Where DMARC helps, where it falls short, and why authentication is not trust.
59
Getting 25 Gbps Thunderbolt Ethernet on My Mac Studio
I've been using the built-in 10 Gigabit Ethernet on my Mac Studio for a few years. It works fine: I can edit 4K video straight off my NAS over the network, and run backups at around 1 GB/sec. But... I want more. I upgraded my rack and my NAS to 25 GbE a couple years ago, and wanted to upgrade my main workstation, too.
60
RFC 8890 – The Internet is for End Users (2020)
The Internet Architecture Board (IAB) has published RFC8890, The Internet is for End Users, arguing that the Internet Engineering Task Force (IETF) should ground its decisions in what’s good for people who use the Internet, and that it should take positive steps to achieve that.