New
The latest blog posts to take off on Hacker News. 189 posts.
Attack of the Week: Apple iMessage
Today’s Washington Post has a story entitled “Johns Hopkins researchers poke a hole in Apple’s encryption”, which describes the results of some research my students and I have bee…
Google shares software network load balancer design powering GCP networking
Maglev is the software network load balancer that enables Compute Engine load balancing to serve a million requests per second with no pre-warming.
Advanced Tor Browser Fingerprinting
The ability to privately communicate through the internet is very important for dissidents living under authoritary regimes, activists and basically everyone concerned about internet privacy.
400Gbps: Winter of Whopping Weekend DDoS Attacks
Over the last month, we’ve been watching some of the largest distributed denial of service (DDoS) attacks ever seen unfold. As CloudFlare has grown we've brought on line systems capable of absorbing and accurately measuring attacks.
A tale of a DNS exploit: CVE-2015-7547
A buffer overflow error in GNU libc DNS stub resolver code was announced last week as CVE-2015-7547. While it doesn't have any nickname yet (last year's Ghost was more catchy), it is potentially disastrous.
Insecure by design: protocols for encrypted phone calls
The MIKEY-SAKKE protocol is being promoted by the UK government as a better way to secure phone calls. The reality is that MIKEY-SAKKE is designed to offer minimal security while allowing undetectable mass surveillance, through the introduction a backdoor based around mandatory key-escrow. This weakness has…
HTTP GZIP Compression remote date and time leak
Tor is a service run by a network of volunteers to allow people to use internet anonymously. Normally tor is used to browse the web without being tracked or identified.
Early Impacts of Let's Encrypt
During the months I worked in Let's Encrypt's operations team I got fairly used to being the go-to man for any question that a database query could solve.…
An introduction to IPFS
By Dr. Christian Lundkvist and John Lilic
Cisco buffer overflow vulnerability with remote code execution
A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker…
Linux kernel bug delivers corrupt TCP/IP data
(Edit: This article is now up on hacker news, feel free to discuss there)
Militia Radio Frequencies
The militia-patriot movement in America has embraced radio communications in a big way. Within the past decade, the methods and communications gear have evolved from basic CB or FRS radios, to now …
IRCv3
IRCv3 is a working group of client/server software authors and network operators from the community, set up to advance the IRC protocol.
Jailbreak firmware turns cheap digital walkie-talkie into DMR scanning receiver
In the last years, DMR and MOTOTRBO (a.k.a. TRBO a Motorola Solutions branded DMR Radios ) has become a very popular digital voice mode on the UHF and VHF bands and the MD380 radio is the latest cheap DMR walkie-talkie to come out of China. The question is, is it any good? The longer answer is…
OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)
Usual Mandatory Disclaimer: IANAC (I am not a cryptographer) so I might likely end up writing a bunch of mistakes in this blog post... ...
NTP Pool Bad Actors: The Rising Sophistication of Network Scanning
Gone are the days when computers didn't need firewalls. We are now living in an internet security arms race and your personal information ...
HFT in the Banana Land
It’s beautiful outside Looks like it’s raining money Dr. Dre, For the love of money [Updated 1 on 01/27/2016 | Minor corrections + kmz file added] [Updated 2 on 01/27/2016 | This post w…
That Plane Overhead: Starring Our Friends SDR, ADS-B, I2C and KLGA
You may ask yourself, “How did I get here?” - Talking Heads