151
DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8.8.8 x Quad9 x OpenDNS
A couple of months ago I did a performance comparison between some of the top free DNS Resolvers available. It was just after Quad9 had…
New
The latest blog posts to take off on Hacker News. 204 posts.
152
1.1.1.1: Fast, privacy-first consumer DNS service
Cloudflare's mission is to help build a better Internet. We're excited today to take another step toward that mission with the launch of 1.1.1.1 — the Internet's fastest, privacy-first consumer DNS service. This post will talk a little about what that is and a lot about why we decided to do it.
153
154
155
VPN leaks users’ IPs via WebRTC
VPN leaks users’ IPs via WebRTC: I’ve tested hundred VPN and Proxy providers and 19 of them leaks users’ IPs via WebRTC (16%)
156
Just one QUIC bit
A proposal to add a "spin bit" to the QUIC protocol sparked much debate at IETF 101.
157
158
TLS 1.3 approved
Search IETF mail list archives
159
TCP Tracepoints have arrived in Linux
Linux TCP Tracepoints, and using them via bcc/eBPF.
160
161
Lightning on Stellar: Technical Spec and Roadmap
The technical specification and timeline for Lightning on Stellar, including working examples and an explanation of the new BUMP_SEQUENCE operation.
162
TCP is an underspecified two-node consensus algorithm
I recently found myself dealing with TCP load balancing for a project and I've come to think that generic TCP proxies can't be implemented without substantial pain and how it makes TLS terminating proxies a bad idea.
163
Announcing gRPC Support in Nginx
NGINX now proxies gRPC traffic, so you can terminate, inspect, and route gRPC method calls. Manage encryption and load balance gRPC traffic.
164
165
TLS 1.3 and Proxies
I'll generally ignore the internet froth in a given week as much as possible, but when Her Majesty's Government starts repeating misunderstandings about TLS 1.3 it is necessary to write something, if only to have a pointer ready for when people start citing it as evidence.
166
Apparent use of Sandvine devices for malicious or dubious ends in two countries
This report describes our investigation into the apparent use of Sandvine/Procera Networks Deep Packet Inspection (DPI) devices to deliver nation-state malware in Turkey and indirectly into Syria, and to covertly raise money through affiliate ads and cryptocurrency mining in Egypt.
167
The real reason for large DDoS attacks? It's IP Spoofing, not memcached
A week ago we published a story about new amplification attacks using memcached protocol on UDP port 11211. A few things happened since then: Github announced it was a target of 1.3Tbps memcached attack. OVH and Arbor reported similar large attacks with the peak reported at 1.7Tbps.
168
The Mystery of the Slow Downloads
A few months ago, a complaint started popping up from users downloading or updating our apps: “Geez, your downloads are really slow!”
169
170
171
172
Usenet, authentication, and engineering: early design decisions for Usenet
A Twitter thread on trolls brought up mention of trolls on Usenet . The reason they were so hard to deal with, even then, has some lessons for today; besides, the history is interesting. (Aside: this is, I think, the first longish thing I’ve ever written about any of the early design decisions for Usenet. I should…
173
174
Mozilla Re-Files Suit Against FCC to Protect Net Neutrality
This morning, the Federal Communications Commission officially published its order overturning net neutrality rules in the Federal Register. We had origina
175
Eve Online Chat Is Moving to Ejabberd
I am player at heart. I do not have time to play much, but since my young years, I have always been fascinated by gameplay mechanisms, to…
176
Networked Physics in Virtual Reality
Recently, Oculus teamed up with developer Glenn Fiedler for research into networked physics in VR. Below is a guest post from Glenn detailing his research.
177
Paper review: IPFS – Content addressed, versioned, P2P file system
This week we discussed the IPFS whitepaper by Juan Benet in my Distributed Systems Seminar. Remember peer-to-peer systems? IPFS is "pe...
178
Google's CardDAV server isn't standards compliant (2014)
For fruux , we’ve decided to implement syncing with Google Contacts some time ago, allowing people to do bi-directional sync between their fruux and Google Contacts address book.
179
180