61
More details about the October 4 outage
Now that our platforms are up and running as usual after yesterday’s outage, I thought it would be worth sharing a little more detail on what happened and why — and most importantly, how we’re lear…
New
The latest blog posts to take off on Hacker News. 255 posts.
62
63
Running BGP in large-scale data centers
What the research is: A first-of-its-kind study that details the scalable design, software implementation, and operations of Facebook’s data center routing design, based on Border Gateway Protocol …
64
Update about the October 4th outage
To all the people and businesses around the world who depend on us, we are sorry for the inconvenience caused by today’s outage across our platforms. We’ve been working as hard as we can to restore…
65
Understanding how Facebook disappeared from the internet
Today at 1651 UTC, we opened an internal incident entitled "Facebook DNS lookup returning SERVFAIL" because we were worried that something was wrong with our DNS resolver 1.1.1.1. But as we were about to post on our public status page we realized something else more serious was going on.
66
What is BGP? – BGP routing explained
Border Gateway Protocol (BGP) is the routing protocol for the Internet. Much like the post office processing mail, BGP picks the most effecient routes for delivering Internet traffic.
67
PipeWire and fixing the Linux Video Capture stack
PipeWire has already made great strides forward in terms of improving the audio handling situation on Linux, but one of the original goals was to also bring along the video side of the house. In fact in the first few releases of Fedora Workstation where we shipped PipeWire we solely enabled it as a tool...
68
The Rise of One-Time Password Interception Bots
In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. That service quickly went offline, but new research reveals a number of competitors have since…
69
DNS Record Types
An overview of all the DNS record types. Each DNS record type is briefly explained, and extensive explanations are available in linked articles.
70
Enabling IPv6 support for GitHub Pages
GitHub Pages now supports IPv6 for all Pages hosted on *.github.io and custom domains. Documentation for enabling IPv6 with custom domains can be found here.
71
72
Demonopolizing the Internet with Interoperability
The Communications of the Association for Computing Machinery has just published my editorial, "Competitive Compatibility: Let's Fix the Internet, Not the Tech Giants," explaining how interoperability was once an engine for competition and user empowerment – and how that ended.
73
74
75
How WhatsApp enables multi-device capability
For years, people have been asking us to create a true multi-device experience that allows people to use WhatsApp on other devices without requiring a smartphone connection. Today, we’re announcing…
76
77
Let's Encrypt's old root certificate is expiring
On 30th September 2021, the root certificate that Let's Encrypt are currently using, the IdentTrust DST Root CA X3 certificate, will expire. You may or may not need to do anything about this Root CA expiring, but I'm betting a few things will probably break on that day
78
There are six internet links on my office on wheels—seven when Starlink arrives
If you are going to work remotely anywhere in Australia from a van, you need damn good internet. Here's how I put together a vehicle with the best internet connectivity in Australia.
79
VPN users unmasked by zero-day vulnerability in Virgin Media routers
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
80
Linux Networking: MAC VLANs and Virtual Ethernets
This website is for sale! pocketnix.org is your first and best source for information about pocketnix. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!
81
Zerotier – multiple vulnerabilities lead to private network access
Zerotier - Multiple vulnerabilities leading to identity hijacking and unauthorised private network access.
82
Russia restricts opposition election voting app
Mobile app store metrics from NetBlocks confirm the removal of a popular opposition election tracking app from the Apple App Store and Google Play Store. The incident comes as Russia ...
83
Using the FreeBSD Rack TCP Stack
Explore FreeBSD's RACK TCP Stack, a dynamic pluggable TCP stack introduced in version 12, offering advanced flexibility for handling TCP flows.
84
Weaponizing Middleboxes for TCP Reflected Amplification
Censors pose a threat to the entire Internet.
85
Tianwen-1 attitude in Mars orbit
It has been a while since the last time I wrote an update about Tianwen-1’s attitude . In that post I showed that Tianwen-1 had changed to a sun angle of 0 degrees with respect to the spacecraft’s X axis on 2020-10-22. Since then, nothing changed, even after the spacecraft arrived to Mars orbit on February 2021, so I…
86
Disclosing E2EE vulnerability in multiple Matrix clients
Matrix, the open protocol for secure decentralised communications
87
88
Did AS8003 just disappear?
There has been a new development in The Mystery of AS8003. As you may recall, this was the AS number registered to a defunct company in Florida that appeared earlier this year in the global routing table announcing over 175 million IPv4 addresses belonging to the US Department of Defense. Well, that just changed.
89
Linux implementation of Homa, a protocol to replace TCP for low-latency RPC
Programming note: I will be taking a several week break from writing paper reviews for the summer. When we come back, I will be finishing off the papers from Usenix ATC and OSDI , then moving on to the great upcoming conferences (my non-exhaustive list is here ). As always, feel free to reach out on Twitter with…
90
Quad9 Files Official Objection Opposing Sony Music’s German Court Ruling
A public and free DNS service for a better security and privacy