91
Solaris adopting OpenBSD's pf
Yet another proprietary tech titan turns to the free OpenBSD operating system as their source of innovation in the networking and security ...
New
The latest blog posts to take off on Hacker News. 129 posts.
92
Why we will not be registering easydns.sucks
Similar to how it's getting harder these days to differentiate actual news from The Onion satires, reality takes on a somewhat surreal timbre when it starts to imitate your April Fool's gags from yesteryear… In 2011 we joked "easyDNS To Launch .SUX TLD", in which we posited a thinly veiled…
93
The Federal HTTPS-Only Standard: Necessary and Overdue
The White House Office of Management and Budget has published a new standard recommending full HTTPS on all federal web sites and web services. They are accepting public comments until April 14; if you care about privacy and security, you should weigh in.This post is our public comment: we whole-...
94
95
96
Pin-pointing China's attack against GitHub
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
97
China's Man-On-the-Side Attack on GitHub
On March 27 The following message was posted on the official GitHub blog: We are currently experiencing the largest DDoS (distributed denial of service) attack in github.coms history. The attack began around 2AM UTC on Thursday, March 26, and involves a wide combination of attack vectors. These incl[...]
98
99
How a bad RJ45 termination can ruin a cable
There are at least two good ways to make a bad Ethernet cable. One can start with badly-made bulk cable -- this seems to be the usual explanation for Chinese-made Ethernet cables -- or one can take good cable and do a terrible job of putting connectors on it. Some types of connectors -- a crimp BNC, for example -- are…
100
Opportunistic Encryption for Firefox
Firefox 37 brings more encryption to the web through opportunistic encryption of some http:// based resources. It will be released the week ...
101
102
103
Your wifi shows me where you live, work and travel
Many people may already know that all your devices try to broadcast your previous connections. I expect that many more have no idea that’s happening. There have been articles published about it before, but without specific examples.
104
The day I was DoSed by Google
I launched my startup this week. On a very modest scale, no debauched parties or penthouse offices on scads of VC money, just me and ...
105
Google seems to have broken email forwarding
Basically: I'm finding it impossible to reliably convince Google that email from my employees, to my employees, is not spam. I run my own mail server, but most of my employees use Gmail. So I have forwarding set up: employee@dnalounge.com simply forwards to employee@gmail.com. When sending mail using their Gmail…
106
Attack of the week: FREAK (or 'factoring the NSA for fun and profit')
This is the story of how a handful of cryptographers ‘hacked’ the NSA. It’s also a story of encryption backdoors, and why they never quite work out the way you want them to. But I…
107
108
No, it’s not the end of XMPP for Google Talk
There’s some recent discussion about the sky falling for XMPP at Google. See this blog post by Dan York for example. In reality, we don’t know the state of XMPP inside Google because they don’t share their use of XMPP with the XSF. …
109
110
Dear FCC: Thanks for Listening to Team Internet
Today the FCC voted three to two to reclassify broadband Internet access as a common carrier service under Title II of the Communications Act, and forbear from the parts of the Act that aren’t necessary for net neutrality rules. This reclassification gives the FCC the authority to enact (and...
111
10Gbit/s full TX wirespeed smallest packet size on a single CPU core
The Linux Kernel Network Stack Scalability, mitigating DDoS attacks firewalling iptables netfilter connection tracking (conntrack)
112
113
HTTP/2 Approved
After more than two years of discussion, over 200 design issues, 17 drafts, and 30 implementations, the HTTP/2 and HPACK specifications have now been approved by the IETF’s steering group for publication as standards-track RFCs.
114
HTTP/2 Is Done
The IESG has formally approved the HTTP/2 and HPACK specifications, and they’re on their way to the RFC Editor, where they’ll soon be assigned RFC numbers, go through some editorial processes, and be published.
115
End of the m0n0wall project
on this day 12 years ago, I have released the first version of m0n0wall to the public. In theory, one could still run that version - pb1 it was called - on a suitably old PC and use it to control the Internet access of a small LAN (not that it would be recommended security-wise). However, the world keeps turning, and…
116
More than 39M Americans Only Have Access to One Wired Broadband Provider
Since 2010 the US government has spent $3.3B on broadband infrastructure yet 39 Million Americans only have access to 1 wired broadband provider. See the worst states and learn more about your state.
117
Introducing “6-pack”: the first open hardware modular switch
Visit the post for more.
118
119
120
What happens when DNS in China is poisoned and pointed at your server
I’ve been using the Internet in one form or another since the mid-80’s. In that time, I’ve seen a lot of strange stuff happening on our global network. On Tuesday, I experienced something extraordinary. It all started with a text message from my partner Ged at 8:30 AM: Mail server down. Please take a look […]