31
Moving our Encrypted DNS servers to run in RAM
We recently announced the completion of our migration to remove all traces of disks in use on our VPN infrastructure.
New
The latest blog posts to take off on Hacker News. 255 posts.
32
Home Assistant blocked from integrating with Garage Door opener API
Why the MyQ integration will be removed in Home Assistant 2023.12
33
34
What the QWAC? An EV Certificate all over again
Almost 2 years on from the last time I wrote about QWACs, I'm sadly not here to tell you that things have gone well since then. In fact, I'm actually here to tell you that things are not going well at all... QWAC Back in Jan 2022, I
35
36
Guide to Adopting AV1 Encoding
This comprehensive guide to implementing AV1 encoding includes a step-by-step guide and questions you should consider when adding AV1 encoding to your workflow.
37
Reverse-engineering Ethernet backoff on the Intel 82586 network chip's die
Introduced in 1973, Ethernet is the predominant way of wiring computers together. Chips were soon introduced to handle the low-level aspects...
38
39
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
40
Replacing WebRTC: real-time latency with WebTransport and WebCodecs
Media over QUIC: The long path to use something else for real-time media.
41
Finding services companies via their TXT records
How to use a company's TXT records to discover the products they use.
42
Exploiting DNS response parsing on the Wii U
It's annual Wii U exploit time! 😄 Image of the Wii U connection test screen on the GamePad. After reverse engineering parts of the Wii Us' ...
43
44
After 28 years, SSLv2 is still not gone from the internet
After 28 years, SSLv2 is still not gone from the internet... but we're getting there, Author: Jan Kopriva
45
Mitigating the Hetzner/Linode XMPP.ru MitM interception incident
(If you just want some recommendations for what to do, skip down to the Recommendations section below .)
46
Encrypted traffic interception on Hetzner and Linode targeting Jabber service
TL;DR: we have discovered XMPP (Jabber) instant messaging protocol encrypted TLS connection wiretapping (Man-in-the-Middle attack) of jabber.ru (aka xmpp.ru) service’s servers on Hetzner and Linode hosting providers in Germany. The attacker has issued several new TLS certificates using Let’s Encrypt service which were…
47
Google opens Falcon, a reliable low-latency hardware transport, to the ecosystem
Falcon enables an order-of-magnitude improvement over software-only transports. Today at the OCP Global Summit, Google is excited to open Falcon to the ecosystem through the Open Compute Project.
48
Removal of Mazda Connected Services integration
Why the integration has been removed from Home Assistant in 2023.10.2.
49
Would we still create Nebula today?
Spoiler: Yes. (But the "why" matters. A lot.)
50
HTTP/2 rapid reset attack impacting Nginx products
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
51
Using OpenBSD Relayd(8) as an Application Layer Gateway
I was lucky enough to attend to EuroBSDCon 2023 and offered the opportunity to talk about one of my favorite OpenBSD stock daemon: relayd(8). The talk was recorded and made available on the EuroBSDCon YouTube channel. . One may check the EuroBSDCon 2023 program for more material. This post attempts a reboot of the…
52
53
The largest DDoS attack to date, peaking above 398M rps
Google Cloud stopped the largest known DDoS attack to date, which exploited HTTP/2 stream multiplexing using the new “Rapid Reset” technique.
54
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
55
HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
56
The novel HTTP/2 'Rapid Reset' DDoS attack
Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it
57
Testing if a port can be reached, using built-in tools other than ol' telnet
Charlie Arehart - Server Troubleshooting - Testing if a port can be reached, using built-in tools other than 'good old telnet'
58
Where does my computer get the time from?
This week I was in Rotterdam for a RIPE meeting . On Friday morning I gave a lightning talk called where does my computer get the time from? The RIPE meeting website has a copy of my slides and a video of the talk; this is a blogified low-res version of the slides with a rough and inexact transcript.
59
HTTP/3 adoption is growing rapidly
Guest Post: What problems HTTP/3 solves, how it performs, why it’s seen such swift adoption, and what limitations it is still working to overcome.
60
1.1.1.1 lookup failures on October 4th, 2023
On 4 October 2023, Cloudflare experienced DNS resolution problems. Some users may have received SERVFAIL DNS responses to valid queries. In this blog, we’re going to talk about what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again