The latest blog posts to take off on Hacker News. 3,021 posts.
One little used type of DNS record is the LOC (or location). It allows you to specify a physical location. CloudFlare handles millions of DNS records; of those just 743 are LOCs. Nevertheless, it's possible to set up a LOC record in the CloudFlare DNS editor.
Imgur started blocking UK users. Rather than installing a VPN on every device, I set up a network-wide proxy that tunnels Imgur traffic through a VPN automatically.
Let's explore and deobfuscate the input stack on Linux. Our aim is to understand its components and what each does. Input handling can be divided into two parts, separated by a common layer. We’ll try to make sense of all this, one thing at a time, with a logical and coherent approach.
[BROKEN LINK: blog/google-cloud-s-outage-should-not-have-happened-and-they-seem-to-be-missing-the-point-on-how-to-avoid-it-in-the-future.pre-processed.org], another global IT outage happened (dèjá vu strikes again in our industry). This time at cloudflare(Prince 2025). Again, taking down large swaths of the internet…
How much do you remember from elementary school? I remember vinyl tile floors, the playground, the teacher sentencing me to standing in the hallway. I had a teacher who was a chess fanatic; he painted a huge chess board in the paved schoolyard and got someone to fabricate big wooden chess pieces. It was enough of an…
This specification defines the QUERY method for HTTP. A QUERY requests that the request target process the enclosed content in a safe and idempotent manner and then respond with the result of that processing. This is similar to POST requests but can be automatically repeated or restarted without concern for partial…
Tor is upgrading its relay encryption algorithm for improved security. In upcoming releases, Arti and Tor will both support a new encryption algorithm called Counter Galois Onion (CGO). CGO prevents attackers from tampering with encrypted traffic, adds forward secrecy, and brings Tor's encryption up to modern…
How we achieved 20% faster mobile response times, improved SEO, and reduced infrastructure load.
Normal practice in deploying post-quantum cryptography is to deploy ECC+PQ. IETF's TLS working group is standardizing ECC+PQ. But IETF management is also non-consensually ramming a particular NSA-driven document through the IETF process, a "non-hybrid" document that adds just PQ as another TLS option.
I have at least a few readers for which the sound of a man's voice saying "government cell phone detected" will elicit a palpable reaction. In Department of Energy facilities across the country, incidences of employees accidentally carrying phones into secure areas are reduced through a sort of automated nagging. A…
The issues described in this article were resolved after this article was posted.
From April 2026, only verified devices can send or receive end-to-end encrypted message on Element.
How dare you!
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
DAVIS, California – November 18, 2025 – The Connectivity Standards Alliance (Alliance) announced today the release of Zigbee 4.0 and Suzi, the new brand for Zigbee’s Sub-GHz feature…
At the time of writing 12:43 UTC on Tue 18 Nov, Cloudflare has taken many sites down. I'm trying to browse the web, but about half of the sites show an error: cloudflare.webp Most of these sites are n...
Released in June 1996, Quake had to ride three technological shock-waves during its lifetime. Besides the emergence of 3D hardware accelerator cards and the growth of the Internet, an operating system shift put game developers in a tough position.
Have you ever asked yourself which protocols get used when downloading pictures from the Perseverance Mars rover to Earth? I hadn’t thought about that either, until I came across an intriguing message on the internet, back in April 2024: I’m looking for someone knowledgeable of quic/quinn to help us out for our deep…
Many products at Cloudflare aren’t possible without pushing the limits of network hardware and software to deliver improved performance, increased efficiency, or novel capabilities such as soft-unicast, our method for sharing IP subnets across data centers. Happily, most people do not need to know the intricacies of…
Everything you wanted to know about using Cloudflare Zero Trust Argo tunnels for your personal network
What is TCP? This post is an exploration of TCP, the workhorse of the internet. This deep dive includes detailed examples and a step-by-step walkthrough. A simple TCP explanation.
Bitchat is a new messaging app that allows users to chat securely with or without internet access. Download it today via the App Store or Google Play store to begin communicating safely, even when connectivity disappears. Why Bitchat is needed Palestinians are dependent on Israel for their access to electricity,
.admonition { margin: .75em 0; padding: .6rem; overflow: hidden; font-size: 12px; page-break-inside: avoid; border-left: .3rem solid #42b983; border-radius: .3rem; box-shadow: 0 0.1re
On November 27, 2025, we will shut down our search proxy, Leta.
Using QUIC to achieve everything needed for NAT traversal, from address discovery to proxying UDP
Building a state machine for travel - tracking Schengen days, the 183-day rule for tax residency across countries, and visa thresholds when governments won't expose state.
Poking around in Android the other day I found this nugget in Carrier Config manager ; a flag (KEY_INFLATE_SIGNAL_STRENGTH_BOOL) to always report the signal strength to the user as one bar higher than it really is.
