91
Threat actor abuses Cloudflare tunnels to deliver remote access trojans
Key findings Proofpoint has observed an increase in malware delivery via TryCloudflare Tunnel abuse. The activity is financially motivated and delivers exclusively remote
New
The latest blog posts to take off on Hacker News. 198 posts.
92
Just disconnect the internet
So, let's say that a security vendor, we'll call them ClownStrike, accidentally takes down most of their Windows install base with a poorly tested content update. Rough day at the office, huh? There are lots of things you could say about this, lots of reasons it happens this way, lots of people to blame and not to…
93
Was the Internet created to survive a nuclear strike? (2022)
Was the Internet Created for Nuclear War?
94
Linux Network Performance Ultimate Guide
https://blog.packagecloud.io/illustrated-guide-monitoring-tuning-linux-networking-stack-receiving-data/
95
The New Internet
Tailscale's CEO, Avery Pennarun, explores the future of the internet, discussing the evolution of networking, the issues with today's complex systems, and how Tailscale is simplifying connectivity for developers with a new, more efficient approach. Discover the vision for a New Internet.
96
"Doors" in Solaris: Lightweight RPC Using File Descriptors (1996)
A door is a "file" descriptor used to describe a procedure in a process and optionally some additional state associated with the procedure. Doors were initially designed as Spring object descriptors used to encapsulate the state and capabilities of C++ objects. A process which obtains a door is free to pass it, along…
97
The Linux audio stack demystified (and more)
Digital audio processing is a complex yet fascinating subject. Getting a deeper understanding requires knowledge in multiple technical disciplines, including physics, electrical/electronical engineering, and some software engineering when it comes to parts of the Linux ecosystem. This article aims to demystify the…
98
Minuteman missile communications
A programming note: I am looking at making some changes to how I host things like Computers Are Bad and wikimap that are going to involve a lot more recurring expense. For that and other reasons, I want to see if y'all would be willing to throw some money my way. If everyone reading this gave $3 a month, we could…
99
Stop Microsoft users sending 'reactions' to email by adding a postfix header
Over the past few months, I’ve noticed that an increasing number of replies to email that I’ve sent are “reactions”.
100
Decoding DME aircraft radio navigation system with the LimeSDR
DME (distance measuring equipment) is an aircraft radio navigation system that is used to measure the distance between an aircraft and a DME station on ground. DME is often colocated with a VOR station, in which case the VOR provides the bearing information. DME works by measuring the two-way time of flight of pulse…
101
Building the Bell System
If someone was making a list of the most important American companies today, it’s unlikely AT&T would be anywhere near the top.
102
Second factor SMS: Worse than its reputation
One-time passwords are often sent via SMS. Security researchers from the CCC recently had live access to over 200 million such SMS messages from more than 200 affected companies.
103
PySkyWiFi: Free stupid wi-fi on long-haul flights
The plane reached 10,000ft. I took out my laptop, planning to peruse the internet and maybe do a little work if I got really desperate.
104
End-to-end congestion control cannot avoid latency spikes (2022)
What are the fundamental limits of end-to-end congestion control in 5G networks?
105
"Out of Band" network management is not trivial
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
106
Sans-IO: The secret to effective Rust for network services
Learn how Firezone uses the sans-IO pattern to build testable, deterministic Rust networking code. A deep dive into our connlib design.
107
Wcurl: a curl wrapper to download files
My personal website
108
Making a Linux-managed network switch
Sometimes the custom 5-port gigabit switch _is_ the solution.
109
110
111
gRPC: The Bad Parts
gRPC isn't perfect but who is?
112
Navigating Starlink's FCC Paper Trail
Guest Post: What I learned when I figured out how to navigate FCC filings.
113
Timeliness without datagrams using QUIC
Media over QUIC: Rethink your approach. *Unless you're doing something dope.
114
Remembering the LAN (2020)
Learn more about the early days of LAN.
115
Off-path TCP hijacking in NAT-enabled Wi-Fi networks
Guest Post: New off-path TCP hijacking attack in Wi-Fi networks that exploits vulnerabilities in the NAT mapping strategies of routers discovered.
116
The Public Interest Internet
What if the internet were public interest technology? Is that too wildly speculative? I think not. I am not talking about a utopian project here — a public interest internet would be a glorious imperfect mess and it would be far from problem-free. But while there is a lot of solid thinking about various digital issues…
117
First look at the upcoming Starlink Mini
I've owned Starlink Mini for about 6 months, using it for camping, backup internet, and in motion inside my car. Here is my honest review.
118
What You Get After Running an SSH Honeypot for 30 Days
Discover what 11,599 SSH login attempts reveal after running a honeypot for 30 days. Learn key cybersecurity insights—read now to protect your systems!
119
We improved the performance of a userspace TCP stack in Go
Learn how we enhanced TCP performance in Coder to achieve 5X faster throughput by optimizing buffer sizes, implementing the HyStart algorithm, and minimizing packet loss, significantly improving remote development experiences.
120
Hacking millions of modems and investigating who hacked my modem
Two years ago, something very strange happened to me while working from my home network. I was exploiting a blind XXE vulnerability that required an external HTTP server to smuggle out files, so I spun up an AWS box and ran a simple Python webserver to receive the traffic from the vulnerable server.