New
The latest blog posts to take off on Hacker News. 3,021 posts.
Sovereign Keys, EFF's proposal to replace the certificate authority model
This is part 2 of a series on the security of HTTPS and TLS/SSL. [Part 1] In a previous post, we discussed some structural insecurities in HTTPS and TLS/SSL, and how those are beginning to pose serious problems for the security of the Web. In this post I will introduce a new proposal called "...
WebSockets RFC is now official
Search IETF mail list archives
Port 25 will be blocked for South Korea from December
Oh, boy has it been quiet here. I have used wayback machine to pull a bunch of older content into the repo so that it can be shared with you beautiful people. There was no real reason to do that except I get annoyed by broken links. Really annoyed. It seems every time I reach back into my bookmarks for something the…
DuckDuckGo included in Opera
The Internet privacy company that empowers you to seamlessly take control of your personal information online, without any tradeoffs.
SPDY: An experimental protocol for a faster web
As part of the "Let's make the web faster" initiative, we are experimenting with alternative protocols to help reduce the latency of web pages. One of these experiments is SPDY (pronounced "SPeeDY"), an application-layer protocol for transporting content over the web, designed specifically for minimal latency. In…
Browser Market Pollution: IE[x] is the new IE6
Feb 2015: 3½ years later, we’re in a better place. The new IE Spartan project has killed off document modes . (Technically, still possible in firewall environments, but… effectively dead for us.) These days, our IE support landscape is IE8 (still), IE11, and IE Mobile. 3 is definitely better than 72.
SPDY: What I Like About You
I've been working on implementing SPDY as an experiment in Firefox lately. We'll have to see how it plays out, but so far I really like it. ...
Iran blocks Tor; Tor releases same-day fix
The short version: Tor relays and bridges should upgrade to Tor 0.2.2.33 or Tor 0.2.3.4-alpha so...
World Domination Using Arduinos and Websockets
Arduino Websocket Client Arduino Pusher Client Pusher – Real Time Push Notifications Follow Me On Twitter: @kevinrohling If you don’t have your very own Arduino yet you should get one. …
UTorrent.com compromised, malware added to installer
This morning on 9/13/2011 at approximately 4:20 a.m. Pacific Daylight Time (UTC -7), the uTorrent.com and BitTorrent.com Web servers were compromised. Our standard Windows software download was replaced with a type of fake antivirus “scareware” program. (UPDATE: See below for removal instructions.) Just…
Searching for "semicolon injection" bugs in embedded Linux devices
Introduction I recently bought a D-Link DCS-2121 surveillance camera. This is good stuff: Megapixel camera + microphone + speaker WiFi,...
GoDaddy's New "Selective DNS Blackouts" Policy
Now that GoDaddy is a near monopoly (larger than the next 8 closest registrar competitors combined 1 ), and just got bought out on July 1, 2011 2 , they have decided they can defy the sacred. Customers be damned.
DigiNotar Damage Disclosure (with full list of issued certs)
About an hour ago I was contacted by the Dutch Government with more details about the DigiNotar...
Iran forged the wrong SSL certificate
If you want to be really evil, however, *.google.com is the wrong SSL certificate to forge. The right one? ssl.google-analytics.com .
An update on attempted man-in-the-middle attacks
Posted by Heather Adkins, Information Security Manager Today we received reports of attempted SSL man-in-the-middle (MITM) attacks again...
Rapid DHCP: Or, how do Macs get on the network so fast?
One of life's minor annoyances is having to wait on my devices to connect to the network after I wake them from sleep. All too often, I'll open the lid on my …
Own Your Identity
This paragraph in Marshall Kirkpatrick’s Why I’ll Never Redirect my Personal Blog to Google Plus scared me a bit: