1
New
The latest blog posts to take off on Hacker News. 204 posts.
2
AdGuard DNS: A Privacy-Oriented DNS Server
AdGuard DNS: a privacy-oriented DNS service that blocks trackers and ads anywhere, from your PC and mobile devices to smart TV and IoT.
3
SSH Examples, Tips and Tunnels
Bounce through the network with SSH tunnels and proxies. Take your remote system administration skills to the next level with our practical SSH examples.
4
The Matrix.org 2018 year in review
Matrix, the open protocol for secure decentralised communications
5
LibreRouter: Powering community networks with free and open hardware
The LibreRouter project has developed an open source, open hardware router, customized to the needs of community-run networks.
6
Wireguard VPN: Typical Setup (2017)
I recently discovered the awesome Wireguard VPN tunnel and I was sold. Wireguard is a simple, kernel-based, state-of-the-art VPN that also happens to be ridiculously fast and uses modern cryptographic principles that all other highspeed VPN solutions lack.
7
CenturyLink is blocking customer internet, saying Utah legislators told them to
We've all experienced frustration with the internet going down. Now imagine how frustrated you'd be if you found out that your ISP intentionally blocked your internet access for the purpose of advertising their software; and better yet, your ISP claimed that state legislators required them to do it!...
8
Everything you should know about certificates and PKI but are too afraid to ask
Certificates and public key infrastructure (PKI) are hard. No shit, right? I know a lot of smart people who''ve avoided this particular rabbit hole. Eventually, I was forced to learn this stuff because of what it enables: PKI lets you define a system cryptographically. It''s universal and vendor-neutral yet poorly…
9
Mail Loop From Hell (2012)
One of those awesome 90ies computer stories...
10
11
12
Neither PWA nor AMP are needed to make a website load fast
Good performance practices are still needed when developing fast web experience.
13
O2 outage due to expired Ericsson certificate
Following network disturbances in a number of Ericsson’s (NASDAQ:ERIC) customer networks, Ericsson has taken immediate action to minimize impact and support the
14
The latest on Messages, Allo, Duo and Hangouts
We're sharing an update on Messages, Allo, Duo, and Hangouts
15
HTTPS in the real world
In cryptography, trust is mathematically provable. Everything else is just faith.
16
OpenBGPD – Adding Diversity to the Route Server Landscape
Thanks to the RIPE NCC Community Project Fund we were able to revive the OpenBGPD daemon and bring more diversity to the Route Server landscape.
17
AWS Transfer for SFTP – Fully Managed SFTP Service for Amazon S3
Many organizations use SFTP (Secure File Transfer Protocol) as part of long-established data processing and partner integration workflows. While it would be easy to dismiss these systems as “legacy,” the reality is that they serve a useful purpose and will continue to do so for quite some time. We want to help our…
18
Some notes about HTTP/3
HTTP/3 is going to be standardized. As an old protocol guy, I thought I'd write up some comments. Google (pbuh) has both the most popular ...
19
20
Mozilla Fights On For Net Neutrality
Mozilla took the next step today in the fight to defend the web and consumers from the FCC’s attack on an open internet. Together with other petitioners,
21
Internet Vulnerability Takes Down Google
BGP route leak interrupts access to Google’s services throughout the world. Traffic rerouted via Russia and China and slammed into the great firewall.
22
The rise of multivector DDoS attacks
It's been a while since we last wrote about Layer 3/4 DDoS attacks on this blog. This is a good news - we've been quietly handling the daily onslaught of DDoS attacks. Since our last write-up, a handful of interesting L3/4 attacks have happened. Let's review them.
23
A 100k Botnet Turns Home Routers to Email Spammers
This article was co-authored by Hui Wang and RootKiter. Since September 2018, 360Netlab Scanmon has detected multiple scan spikes on TCP port 5431, each time the system logged more than 100k scan sources, a pretty large number compared with most other botnets we have covered before. The interaction between the
24
HTTP-over-QUIC will officially become HTTP/3
The protocol that's been called HTTP-over-QUIC for quite some time has now changed name and will officially become HTTP/3. This was triggered by this original suggestion by Mark Nottingham. The QUIC Working Group in the IETF works on creating the QUIC transport protocol. QUIC is a TCP replacement done over UDP…
25
Should you use www or not in your domain? (2017)
For 20 years or so, there has been the debate over whether you should use www or not in your web site’s canonical hostname. So should you use www or not?
26
27
28
The hidden cost of QUIC and TOU (2016)
Some new proposed protocols will encrypt the transport layer headers. Encryption is good, so more encryption must be better, right? Unfortunately there's going to be a huge hidden cost that'll be paid by anyone troubleshooting networking problems.
29
Technology preview: Sealed sender for Signal
In addition to the end-to-end encryption that protects every Signal message, the Signal service is designed to minimize the data that is retained about Signal users. By design, it does not store a record of your contacts, social graph, conversation list, location, user avatar, user profile name, ...
30
Generate ASCII RFC-like header diagrams for your own custom protocols
Protocol is a command-line tool to display ASCII RFC-like protocol header diagrams for both existing network protocols or user-defined ones (using a very simple syntax). Protocol is written in Python and it's open-source software.