571
Attackers can decloak routing-based VPNs
We discovered a fundamental design problem in VPNs and we're calling it TunnelVision. This problem lets someone see what you're doing online, even if you think you're safely using a VPN.
New
The latest blog posts to take off on Hacker News. 3,021 posts.
572
DNS traffic can leak outside the VPN tunnel on Android
We were recently made aware of multiple potential DNS leaks on Android. They stem from bugs in Android itself, and only affect certain apps.
573
Passkeys: A shattered dream
Firstyear's blog
574
Xz sshd backdoor collecting usernames from logs
The amazingly scary xz sshd backdoor, Author: Bojan Zdrnja
575
Sysadmin friendly high speed Ethernet switching
I’ve been on the lookout for a ethernet switch that I don’t hate, the problem with a lot of higher speed (10G and above) ethernet switches is that they are quite expensive new and if you buy the used then they rarely have many years left ( or none at all ) of software patches.
576
Some Fritz!Box modems might have been hijacked
TL;DR: Fritz!Box devices using custom DNS resolution services like Pihole or Adguard might have been compromised by DNS hijacking and using those Fritz!Box devices might be unsafe, especially for Windows users. Update: I updated the article to downscale the severity of the situation. After posting the article on HN, I…
577
Tailscale SSH is now Generally Available
Tailscale SSH is now generally available, offering seamless SSH authentication and authorization with SSO, MFA, and ACLs. Enjoy robust security, zero trust remote access, and tools like session recording and VS Code integration.
578
usbredir: A protocol for sending USB device traffic over a network connection
usbredir is the name of a network protocol for sending USB device traffic over a network connection. It is also the name of the software package offering a parsing library, a usbredirhost library and several utilities implementing this protocol.
579
580
The FCC needs to stop 5G fast lanes
The FCC is set to vote on April 25 to restore its authority over the companies we pay to get online, and reinstate federal net neutrality protections that were jettisoned by the Trump administration in 2017. Net neutrality protections are supposed to ensure that we, not the internet service providers
581
Why can't my mom email me?
Proton email keeps sending my non-Proton email accounts encrypted emails. I figure out why and show you how to turn it off.
582
Stalwart mail server (self-hosted all-in-one mail server) now as an admin webui
We're thrilled to announce the release of Stalwart Mail Server version 0.7.0, a significant update that brings a wealth of features and improvements to enhance the performance and manageability of...
583
Total eclipse of the Internet: traffic impacts in Mexico, the US, and Canada
Cloudflare’s data shows a clear impact on Internet traffic from Mexico to the US, and Canada, following the path of totality of the total solar eclipse that occurred on April 8, 2024
584
Google Public DNS's approach to fight against cache poisoning attacks
Tianhao Chi and Puneet Sood, Google Public DNS The Domain Name System (DNS) is a fundamental protocol used on the Internet to translate hum...
585
HTTP/2 Continuation Flood: Technical Details
Preface In October 2023 I learned about HTTP/2 Rapid Reset attack, dubbed “the largest DDoS attack to date”. I didn’t have deep knowledge of HTTP/2 back then. I knew its basics like frames or HPACK but I was focusing more on HTTP/1.1 protocol and programming languages vulnerabilities. I decided to dedicate time to…
586
The Wi-Fi only works when it's raining
The strangest hardware problem I've ever had to debug.
587
Inside the failed attempt to backdoor SSH globally that got caught by chance
Why the threat actor rushed deployment.
588
About the Tailscale.com outage on March 7, 2024
On March 7, 2024, tailscale.com was unavailable for approximately 90 minutes due to an expired TLS certificate. We were able to identify and address the issue quickly, and the downtime was mostly limited to our marketing materials and documentation; still, we would like to explain exactly what happened, what the…
589
What is DECT-2020 New Radio (NR), and how big a deal is it? (2021)
Is it fair to describe DECT-2020 NR as a 5G wireless technology at all?
590
TCP connection timeout mystery
For over a year, I’ve been investigating a strange issue with the internet in my apartment. I’m posting the details here in case someone more knowledgeable than me can solve the mystery. I live in graduate student housing with internet provided by the university campus. Usually things work reasonably well, with one…
591
Flightradar24's new GPS jamming map
Learn how to view areas of GPS jamming affecting aircraft around the world and how GPS jamming affects aviation.
592
Tunnelmole, an ngrok alternative (open source)
Tunnelmole is a free and open-source alternative to ngrok. It works out of the box with no port forwarding or networking config needed.
593
WebSockets vs. Server-Sent-Events vs. Long-Polling vs. WebRTC vs. WebTransport
Learn the unique benefits and pitfalls of each real-time tech. Make informed decisions on WebSockets, SSE, Polling, WebRTC, and WebTransport.
594
Cloudflare loses 22% of its domains in Freenom .tk shutdown
A staggering 12.6 million domains on TLDs controlled by Freenom (.tk, .cf and .gq) have been shut down and no longer resolve, leading to a significant reduc ...
595
HTTP/2 and HTTP/3 explained
Understand better how HTTP works in each version.
596
Simplicity of IRC (2022)
During discussions with my friends and colleagues, whenever the topic of chat protocols comes up, I often remark how simple the Internet Relay Chat (IRC) protocol is and how this simplicity has fostered creativity in the lives of many young computer hobbyists growing up in the late 1990s and early 2000s. For many of…
597
JIT WireGuard
Our fancy WireGuard setup was accumulating stale peers. Here's what we did about it.
598
The internet is slipping out of our reach
With AI encroaching every open forum on the internet, the future of human discourse is bleak.
599
Are We Watching the Internet Die?
Sometime this month, Reddit will go public at a valuation of $6.5bn. Select Redditors were offered the chance to buy stock at the initial listing price, which it hasn’t announced yet but is expected to be in the range of $31-34 per share. Regardless of the actual
600
