The latest blog posts to take off on Hacker News. 198 posts.
A lot of community applications died when API access to twitter, reddit & others was severely restricted, but they can't stop us from sharing our own data with each other!
I went for a spelunk through an ancient codebase a few weeks ago which contained a curious regex that I just couldn't grok. Copied to 📋⧉ {<((https?|ftp|dict|tel):[^\'">\s]+)>}i I'm familiar with HTTP and FTP. I worked in the mobile industry, so knew that tel:+44... could be used to launch a dialer. But DICT?!?!?! It…
UPDATE: Spoke too soon… The problem discussed here turned out to be specific to Little Snitch 6.1 and not a general issue in macOS. It has already been fixed in Little Snitch 6.1.1. See the end of the article for details. DNS Encryption 101 When…
This specification defines a new HTTP method, QUERY, as a safe, idempotent request method that can carry request content.
The 900 MHz band, a frequency range serving as a commons for all, is now at risk due to NextNav’s brazen attempt to privatize this shared resource. Left by the FCC for use by amateur radio operators, unlicensed consumer devices, and industrial, scientific, and medical equipment, this spectrum has...
Critical zero-click vulnerability chain in macOS (patched)
A disclosure for an OpenSSH keystroke obfuscation bypass affecting current OpenSSH versions after 9.4.
Following my previous post on rate limiting with GCRA, leaky buckets without the buckets , I reviewed my old notes on rate limiting for Exim . I thought I should do a new write-up of the ideas that I hope will be more broadly interesting.
In this article we're going to explore atproto from the perspective of distributed backend engineering.
A deep dive into my home grown cocktail recipe app which speaks Tailscale natively using tsnet, and serves up delicious drinks direct to your tailnet. Libations is built with Go, Nix and Vanilla Framework.
The seedy underbelly of gRPC.
The Internet's architecture is viewed as an hourglass: broad application support at the top, narrow waist (IP), wide choice of links below IP
The direct result of bulletproof infrastructure / cloud providers which are "too big to fail" is the balkanized internet . I don't think this has fully come to pass, but it might be starting to happen or might come to pass soon.
A post outlining tricks for firewall privilege escalation
Userspace wireguard is fun!
Last night Adam Mosseri, Head of Instagram, quitely announced the next step in the integration of Threads into the Fediverse. In addition to being able to follow Threads accounts from Fediverse/Mastodon accounts, we can now reply to and like Threads posts. Threads are taking a quiet, incremental approach to…
Guest Post: Study finds more than 40 STARTTLS-related security flaws in many different software products, both client-side and server-side.
This blog is reserved for more serious things, and ordinarily I wouldn’t spend time on questions like the above. But much as I’d like to spend my time writing about exciting topics, som…
This article explains the mechanics behind traceroute, from IP headers and TTL fields to ICMP messages. Learn why traceroute is a crucial tool for network diagnostics, how it differs from ping, and how to interpret its output. Ideal for network administrators, IT professionals, and curious users looking to understand…
Let’s start by defining the word Wardriving: it is the search for WIFI wireless networks from a vehicle equipped with a computer. This would be the classic definition. I define modern wardriving as the search for WIFI networks, Bluetooth devices … Continue reading →
In my previous post Encapsulation of PDUs On Trunk Ports , I showed what happens to PDUs when you change the configuration of a trunk. You may have noticed that there are typically three different types of Ethernet encapsulations that we see:
Data harvesters are reaching into virtually every part of your digital life through the little-known surveillance hardware industry.
The ANPC transponder landing system at McMurdo station allows aircraft to land on the moving ice runway in poor weather or low visibility.
Whereas, on 1 March 2019, the Board took action on each of the 35 recommendations issued within the Competition, Consumer Trust, and Consumer Choice (CCT) Review Team Final Report dated 8 September 2018, as specified within the scorecard titled " Final CCT Recommendations: Board Action (1 March 2019) ". The Board…
Stealth is a new VPN protocol from Proton VPN that overcomes censorship in restrictive countries.
This document contains the R 5 N DHT technical specification. R 5 N is a secure distributed hash table (DHT) routing algorithm and data structure for decentralized applications. It features an open peer-to-peer overlay routing mechanism which supports ad-hoc permissionless participation and support for topologies in…
