Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,406 posts.
A rare and revealing breach attributed to a North Korean-affiliated actor, known only as “Kim” as named by the hackers who dumped the data, has delivered a new insight into Kimsuky (APT43) tactics, techniques, and infrastructure. This actor's operational profile showcases credential-focused intrusions targeting South…
Customers discontinuing their use of Google Cloud can move their data without incurring any network data transfer fees.
We have found that you could be leaking traffic on macOS after system updates. To our current knowledge a reboot resolves it. We are currently investigating this and will follow up with more information.
At Mozilla, we closely track threats to users' privacy and security. This is why we've added tracking protection to Firefox and created the Facebook container extension. In today's cartoon intro, ...
There has been speculation about the cause of a BGP anomaly observed in Venezuela on January 2. We take a look at BGP route leaks, and dive into what the data suggests caused the anomaly in question.
We often tout things like “Mastodon is based on open web protocols” as one of its advantages. I want to elaborate why exactly that’s a good thing.
With "Passive Wi-Fi," UW computer scientists and electrical engineers have generated Wi-Fi transmissions using 10,000 times less power than conventional methods
Update: Starting May 4, 2023, we’re expanding Mozilla.social to a private beta. If you’re interested, join our waitlist. In early 2023, Mozilla will st
BGP route leak interrupts access to Google’s services throughout the world. Traffic rerouted via Russia and China and slammed into the great firewall.
A few weeks ago, a small group of Tor developers got together in Montreal and worked on onion...
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
We recently announced the completion of our migration to remove all traces of disks in use on our VPN infrastructure.
In this research paper James Kettle introduces multiple new classes of HTTP/2-exclusive attacks, demonstrated on popular websites and servers.
The SSH agent acts behind the scenes to keep you safe. Here's how it works.
After four years of development, we’re thrilled to announce a major milestone in the evolution of Stalwart — the full implementation of JMAP for Calendars, Contacts, File Storage, and Sharing. With...
HAProxy Technologies is excited to announce the release of HAProxy 2.0, bringing features critical for cloud-native and containerized environments.
Across 44,143 European companies with a detected CDN, 89.6% use Cloudflare. We publish the per-country counts and what the 2025-26 outages showed.
We are excited to announce the release of mitmproxy 11, which introduces full support for HTTP/3 in both transparent and reverse proxy modes. We’re also bringing in a ton of DNS improvements that we’ll cover in this blog post.
Back in November we wrote a blog post about one latency spike. Today I'd like to share a continuation of that story. As it turns out, the misconfigured rmem setting wasn't the only source of added latency. It looked like Mr Wolf hadn't finished his job.
Yesterday Forbes broke the news that Canadian Calvin Ayre and partners who operate the Bodog online gambling empire have been indicted in the U.S., and in a blog post Calvin Ayre confirmed that their bodog.com domain had been seized by homeland security. As reported in Forbes (hat tip to The Domains…
This 1.5 release is unlike any of the previous ones. It brings many new features that can improve quality and the general audio experience. That is achieved through machine learning. Although Opus has included machine learning — and even deep learning — before (e.g. for speech/music detection ), this is the first time…
DuckDB instances can now talk to each other using the Quack remote protocol. This lets you run DuckDB in a client-server setup with multiple concurrent writers. In DuckDB's spirit, Quack is simple to set up and builds on proven technologies such as HTTP. It's also fast, which allows it to support workloads ranging…
Certificates and public key infrastructure (PKI) are hard. No shit, right? I know a lot of smart people who''ve avoided this particular rabbit hole. Eventually, I was forced to learn this stuff because of what it enables: PKI lets you define a system cryptographically. It''s universal and vendor-neutral yet poorly…
QUIC is a new networking transport protocol that combines the features of TCP, TLS, and more. HTTP/3 is the latest version of HTTP, the prot...
Welcome! In this article, I am going to detail for you what I consider to be the perfect Pi-hole setup instructions for 2023 (yes, I know – as of the writing of this article, it’s still 2022, but we’re close enough).
NGINX now proxies gRPC traffic, so you can terminate, inspect, and route gRPC method calls. Manage encryption and load balance gRPC traffic.
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
