691
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
New
The latest blog posts to take off on Hacker News. 3,021 posts.
692
HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks
The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed
693
The novel HTTP/2 'Rapid Reset' DDoS attack
Learn how the new DDoS attack technique Rapid Reset works, and how to mitigate it
694
Testing if a port can be reached, using built-in tools other than ol' telnet
Charlie Arehart - Server Troubleshooting - Testing if a port can be reached, using built-in tools other than 'good old telnet'
695
Where does my computer get the time from?
This week I was in Rotterdam for a RIPE meeting . On Friday morning I gave a lightning talk called where does my computer get the time from? The RIPE meeting website has a copy of my slides and a video of the talk; this is a blogified low-res version of the slides with a rough and inexact transcript.
696
HTTP/3 adoption is growing rapidly
Guest Post: What problems HTTP/3 solves, how it performs, why it’s seen such swift adoption, and what limitations it is still working to overcome.
697
1.1.1.1 lookup failures on October 4th, 2023
On 4 October 2023, Cloudflare experienced DNS resolution problems. Some users may have received SERVFAIL DNS responses to valid queries. In this blog, we’re going to talk about what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again
698
Enabling IPv6 support for IPv4-only apps on Linux
Guest Post: How to easily enable IPv6 support for apps without it.
699
BBC gives up on Threads, sticks with Mastodon
So numerous brands are giving up on Threads by Instagram, allegedly due to lack of engagement (ironically, most of them are still using...
700
Encrypted Client Hello
We're excited to announce a contribution to improving privacy for everyone on the Internet. Encrypted Client Hello, a new standard that prevents networks from snooping on which websites a user is visiting, is now available on all Cloudflare plans.
701
702
WiFi without internet on a Southwest flight
I spent a recent flight finding out what I could do with a connection to the flight’s wifi, but without access to the internet. I was on my way home from Strange Loop, a direct flight from St. Louis to Oakland. It’s a long enough flight that I planned to purchase the $8 internet access and get some work done, but…
703
Cloudflare is now powering Microsoft Edge Secure Network
This integration will allow Microsoft Edge users who opt in to browse the Internet more privately, without being tracked across websites
704
macOS 14 Sonoma firewall bug fixed
The firewall bug in macOS 14 Sonoma betas and release candidates that we blogged about last week has been fixed by Apple.
705
Nuvem, a subsea cable to connect Portugal, Bermuda, and the U.S.
The Nuvem submarine cable will connect Portugal, Bermuda and South Carolina, and will be Bermuda’s first transatlantic fiber optic route.
706
TOFU: Do You Check?
Let’s say you’re on a fresh machine. Maybe you’ve just started a new job or you’ve wiped your machine. You’re about to push some code you’ve written and you get this: $ git push The authenticity of host 'github.com (140.82.121.4)' can't be established. ED25519 key fingerprint is…
707
AWS Customers Cannot Escape IPv4
AWS will charge for IPv4 addresses but its IPv6 support lacks severely
708
709
Matrix 2.0: The Future of Matrix
Matrix, the open protocol for secure decentralised communications
710
Introduction to Linux interfaces for virtual networking (2018)
Explore common Linux virtual network interfaces, including Bridge, Bonded interface, VLAN, VXLAN, MACVLAN, IPVLAN, MACVTAP/IPVTAP, and more. Learn how to create and use them effectively for your
711
712
Quantum Resistance and the Signal Protocol
The Signal Protocol is a set of cryptographic specifications that provides end-to-end encryption for private communications exchanged daily by billions of people around the world. After its publication in 2013, the Signal Protocol was adopted not only by Signal but well beyond. Technical informat...
713
Your WiFi Can See You
And it's so much worse than you think
714
Apple TV, now with more Tailscale
Learn how Apple TV now supports Tailscale with tvOS 17, enabling secure remote networking, media streaming, and exit node functionality. Transform your Apple TV into a powerful networking tool today!
715
Exploring the Halo 1 System Link Protocol
One of my all-time favorite games is Halo: Combat Evolved that launched together with the original Xbox in 2001. One major part of the game was multiplayer, up to 16 people at a LAN party could play together by connecting four Xbox consoles over Ethernet , referred to as System Link .
716
AWS IPv4 Estate Now Worth $4.5B
AWS grew its IPv4 estate with an additional 27 million IP addresses to now owning 128 Million IPv4 addresses. At a value of $35 per IPv4 address, the total value of AWS’ IPv4 estate is ~4.5 Billion dollars. An increase of $2 billion
717
718
Yes, Android 14 still allows modification of system certificates
Tim Perry recently claimed in an article that “Android 14 blocks all modification of system certificates, even as root”. This sparked significant discussion on Hacker News. Thankfully my tests show that it is still possible to adjust the system certificate store in Android 14.
719
Bug in macOS 14 Sonoma prevents our app from working
The macOS 14 Sonoma betas and release candidate contain a bug that causes the firewall to not filter traffic correctly. As a result, our app does not work.
720
Reasons to not use your own domain for email
Reasons to not use your own domain for email on Eduardo Bautista's blog.