New
The latest blog posts to take off on Hacker News. 3,021 posts.
Jitsi Meet Security and Privacy
How secure is Jitsi? Learn more about the Jitsi Meet Security & Privacy information, including how we make sure to protect your privacy here.
Does Zoom use end-to-end encryption?
TL;DR: It’s complicated. Yesterday Zoom (the videoconferencing company, not the defunct telecom) put out a clarification post describing their encryption practices. This is a nice example of …
Zoom rolled their own encryption scheme, transmit keys through servers in China
This report examines the encryption that protects meetings in Zoom and finds that they have made their own encryption scheme and has significant weaknesses.
Tailscale has reached general availability
Just over a year ago, we founded Tailscale with a common sense of nostalgia for the “good old days” of LANs. In our collective opinion (then and now) networking and cloud infrastructure has become too complicated. Attempts to increase team connectivity and migrate towards remote work results in a corresponding burden…
The facts around Zoom and encryption for meetings/webinars
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
How to SSH Properly
This post explains security best practices to use SSH properly and securely
1.1.1.1 for Families
Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.
The Web is the Next Platform (1995)
I started working full-time on what became Internet Explorer 1.0 in early October, 1994, grew the engineering team to 67 individuals by the time we shipped IE 3.0 in August, 1996, and got very litt…
A detailed look at the router provided by my ISP
I have been living in my current apartment for more than a year now and I noticed I have never inspected my router which was provided by my ISP when I moved in. The only thing I changed in router is
Remembering the LAN
I started programming in the 1990s living above my parent's medical practice. We had 15 PCs for the business, and one for me. The standard OS was MS-DOS. The network started off using IPX over coax to a Novell Netware server, the fanciest software we ever owned. IPX was so much easier than TCP/IP. No DHCP and address…
How Tailscale Works
Understand the entire Tailscale system, how it works, how we built it, and its benefits compared to legacy VPNs. Use this article as a guide to quickly build your own Tailscale replacement.
Linux maintains bugs: The real reason ifconfig on Linux is deprecated (2018)
In my third installment of FreeBSD vs Linux, I will discuss underlying reasons for why Linux moved away from ifconfig(8) to ip(8).
Don't Terminate People's Internet Connections
Here is a plea to keep Internet services on in these times where we rely on online communications.
Why Not WireGuard
The latest thing that is getting a lot of attention is WireGuard - the new shooting star in terms of VPN. But is it as great as it sounds? I would like to discuss some thoughts, have a look at the implementation and tell you why WireGuard is not a solution that will replace IPsec or OpenVPN.
Zero Trust Networks
I am leery of jargon. I am as guilty of using it as the next engineer, but there comes a point where there are just too many precise, narrowly-understood terms polluting your vocabulary. The circle of people you can talk to shrinks until going to the store to buy milk feels like an exercise in speaking a foreign…
WebAssembly brings extensibility to network proxies
With the Istio 1.5 release we are happy to introduce WebAssembly (Wasm) extensions in Envoy, built with our long running collaborators Lyft and IBM. With partners like Solo.io deepening their engagement as well, we are excited to see the community and ecosystem developing around this segment of the open source world.
The PCAP – single file with 50 different protocols
For the last couple of years, I captured many different network and upper-layer protocols and published the pcaps along with some information and Wireshark screenshots on this blog . However, it always takes me some time to find the correct pcap when I am searching for a concrete protocol example . There are way too…
Pleroma 2.0: a free, federated social networking server built on open protocols
Long-awaited and finally ready, just in time for FOSDEM International Women’s Day, Pleroma 2.0.0 is here! There have been a lot of changes, including breaking ones, so let me give you a quick tour of this release.
Moznet IRC is dead; long live Mozilla Matrix
Matrix, the open protocol for secure decentralised communications
New Chip Brings Ultra-Low Power Wi-Fi Connectivity to IoT Devices
More portable, fully wireless smart home setups. Lower power wearables. Batteryless smart devices. These could all be made possible thanks to a new ultra-low power WiFi radio developed by UC San Diego engineers. It enables WiFi communication at 5,000 times less power than commercial WiFi radios.
Kr00k vuln in WiFi chips that allows unauthorized decryption of traffic
Kr00k – formally known as CVE-2019-15126 – is a vulnerability in Broadcom and Cypress Wi-Fi chips that allows unauthorized decryption of some WPA2-encrypted traffic.
Firefox turns on DoH as default for US users
Today, Firefox began the rollout of encrypted DNS over HTTPS (DoH) by default for US-based users. The rollout will continue over the next few weeks to conf
Mozilla’s DNS over HTTPs
The current insecure DNS system leaves billions of people around the world vulnerable because the data about where they go on the internet is unencrypted. We’ve set out to change ...
Internet in a Box
I have finished my cruise now, which was mostly holiday, but also some work. I did some training for my mates (mainly in C coding) and we di...
How 1500 bytes became the MTU of the internet
Ethernet is everywhere, tens of thousands of hardware vendors speak and implement it. However almost every ethernet link has one number in common, the MTU:
DisplayPort and 4K
The Problem Video playback looks better with a higher scan rate. A lot of content that was designed for TV (EG almost all historical documentaries) is going to be 25Hz interlaced (UK and Australia)…
OpenPush: A Free, Decentralized Push Messaging Framework for Android
Push messages are an essential part of connected mobile devices. They are also one of the critical missing pieces in the open source Android ecosystem. Until...