1
OpenSSH 10.6p2 Critical workaround for alpine without PAM
OpenSSH release notes
New
The latest blog posts to take off on Hacker News. 3,019 posts.
2
3
So my ISP was hijacking my DNS
My ISP was tampering with my DNS queries and handing back bogus IP addresses. Here are the misconceptions about DoH, DoT and DNSSEC that followed, and the setup I actually run.
4
We halved DNS build delay and cut memory use by 85%
Zone setting changes used to rebuild entire DNS zones, even ones with tens of millions of records. Here is how we built a planner that picks the smallest safe build, cutting full builds by 40%, peak memory by 85%, and halving build delay.
5
Sanstun: A sans-IO, parallel-friendly WireGuard implementation in Rust
Our sans-IO WireGuard implementation in Rust, optimized for ease of use, security and performance through a parallel-friendly and idiomatic API.
6
The federated code forge
For most of the past two decades, the code forge has been where projects live: where code is hosted, where changes are reviewed, and where contributors find each other. Forges offered convenience in exchange for centralisation.
7
If IPv4 were land
An interactive world map where every country is resized by how many IPv4 addresses it holds instead of its land area. Flip between real land and IPv4 land, zoom in, and compare countries.
8
Apple's git still trusts the compromised eMudhra certificates
Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
9
Tailscale SSH: Investigation and remediation update
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
10
Quad9 to exit France
A public and free DNS service for a better security and privacy
11
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
12
How I got over 300 Tor exit nodes removed
On Friday Oct 2, 09:35am, 333 infected exit nodes started a coordinated campaign to intercept SSH connections and gather as much unencrypted data as possible.
13
France's supermarket fridges were vulnerable online for months
IPinfo scans reveal that 85% of exposed French refrigeration controllers had known security flaws before the October 2026 cyberattack.
14
Plex vulnerabilities being exploited in the wild to drop a cryptominer
Intro: (No AI was involved in writing, research, etc...) If you see weird fonts and spacing, blame Blogger. Skip to "In the wild exploitati...
15
One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux
A vulnerability in Broadcom’s proprietary WPS implementation enables unauthenticated attackers within WiFi range to leak memory and achieve unauthenticated remote code execution on millions of routers. This post covers its discovery through agentic vulnerability research, exploitation across eCos and Linux platforms…
16
What was a Token Ring network?
Token Ring and ARCNET once competed with Ethernet as networking standards
17
RFC8950: Announce IPv4 with an IPv6 next-hop
This post covers how RFC8950 gives the ability to route IPv4 over IPv6 BGP sessions with IPv6 next-hops
18
RPKI now protects 70% of internet routes
RPKI now protects 70% of Internet routes. See what drove the 2026 jump, how well it stops invalid routes, and where gaps remain.
19
20
Yandex outage: data shows that instead of going dark, malicious bots moved
When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.
21
Submarine cable resilience
The estimated 1.5M kilometres of subsea communications cables underpins our global telecommunication services. This critical infrastructure faces serious challenges in the coming years.
22
Will Linux phones become a viable alternative to the Android/iOS duopoly?
Linux phones now have the hardware and software to succeed, but it is an open question whether they will become a viable alternative to the Android/iOS duopoly.
23
The Hetzner Cloud network stack – history and technical overview
Learn how the Hetzner Cloud network stack has evolved and what role Open vSwitch, Private Networks, and Cloud Firewalls play.
24
The people holding up the internet
Four billion phones ask one text file what time it is, kept by a UCLA lecturer in his spare time. We counted who maintains the code under your phone.
25
A Terminal Protocol for Program Status (OSC 7501)
I wrote a specification for a new terminal escape sequence: OSC 7501, the Program Status Protocol . It lets any program tell the terminal what it's doing: idle, working, waiting on the user, finished, or failed, and why.
26
Web Search API
Search the web from your AI agents and applications through AI Gateway with Ceramic.ai, Exa, and Linkup.
27
Self-hosted HTTP tunnels with SSH and Nginx
No extra software to install: OpenSSH remote forwarding and nginx's secure_link module give you a shareable HTTPS URL with an expiring token.
28
Cloudflare OHTTP gateway
We’re announcing the closed beta of a self-serve Cloudflare OHTTP Gateway. We’re also renaming our Privacy Gateway to Cloudflare OHTTP Relay to better distinguish the two products.
29
ArXiv's Updated Rate Limit Policy
arXiv, and the scientific community at large, are facing a watershed moment. Scholarly publishing is currently changing at a rapid pace, and we are seeing a…
30
Hijacking the PS5's RTMP stream
The long way around to screen sharing.