New
The latest blog posts to take off on Hacker News. 142 posts.
Possible upcoming attempts to disable the Tor network
The Tor Project has learned that there may be an attempt to incapacitate our network in the next...
Using Freenet
I've been following the Freenet project for many years, occasionally firing it up and seeing if I can do anything useful with it. I've been using it regularly over the last month and it has come a long way since I first tried it. It's much faster than what it was in the past. This post describes a bit of...
When your IP traffic in AWS disappears into a black hole
When we’d spin up new machines, some would fail our health checks. There was no network traffic between these boxes and our database machines.. The ARP tables on the database boxes had cached, outdated MAC addresses from no-longer-living boxes.
At Apple’s request, we removed the ability to “Send” files to other services
UPDATE 12/11/14: After a considerate conversation with Apple, Transmit iOS 1.1.2 has been released with restored “Send To” functionality.
A Shark on the Network
DISCLAIMER: I do not condone monitoring network traffic with intent to spy or otherwise cause harm to people. My interest in the techniques described below is academic. I write in the hope that I can improve Internet security, or at least increase public awareness of vulnerabilities. If you are attempting to replicate…
How NSA and GCHQ are tapping internet cables
A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment
Inline PGP signatures considered harmful
People often suggest that inline PGP signatures in e-mail are somehow more compatible or more acceptable than using PGP/MIME . This is a mistake. Inline PGP signatures are prone to several failure modes, up to and including undetectable message tampering.
China Just Blocked Thousands of Websites
自2011年以来用技术对抗审查。我们使用AI监控审查并在全球范围内扩大言论自由。
Unraveling NSA's TURBULENCE Programs
The NSA TURBULENCE program was first revealed in 2007 by the Baltimore Sun for being over-budget and poorly-managed 1 2 . Many documents from the Snowden trove from the past two years reference parts of this program, but no coherent story or overview of how these programs operate together has been described. This is…
VP8 and H.264 to both become mandatory for WebRTC
WebRTC is one of the most exciting things to happen to the Web in years: it has the potential to bring instant voice and video calling to anyone with a browser, finally unshackling us from propriet…
Network Link Conditioner
App developers often forget to test how their apps perform under less-than-ideal networking environments. Learn how you can use the Network Link conditioner to simulate a spotty Internet connection on your device.
ISPs Removing Their Customers' Email Encryption
Recently, Verizon was caught tampering with its customer's web requests to inject a tracking super-cookie. Another network-tampering threat to user safety has come to light from other providers: email encryption downgrade attacks. In recent months, researchers have reported ISPs in the US and...
TCP is harder than it looks
It's easy to write a TCP stack that works with most traffic. It's harder to write one that interoperates properly with every strange or buggy device that's out there.
Let's Talk About Beacons
Let's Talk About Beacons If you’ve been following the tech scene lately, you may have heard a thing or two about “Beacons”. What are Beacons? Beacons are hardware devices emitting a unique signature...
HFT in my Backyard – IV
[Update, November 18, 2014: check episode 2 with the Latent answer to this post] There’s a thin grey line Between the black and white It’s evidently hard to find at night Depeche Mode, …
How Verizon's Advertising Header Works
Over the past couple of days, there’s been an outpouring of concern about Verizon’s advertising practices. Verizon Wireless is injecting a unique identifier into web requests, as data transits the network. On my phone, for example, here’s the extra HTTP header. 1
How Big is Email?
Estimating the size of the world’s communications.
FFS SSL
wingolog: article: ffs ssl
How Unreliable is UDP?
Unlike TCP, UDP doesn't provide any delivery or ordering guarantees. Put into practice, just how bad, or good, is UDP?