1
Zoom rolled their own encryption scheme, transmit keys through servers in China
This report examines the encryption that protects meetings in Zoom and finds that they have made their own encryption scheme and has significant weaknesses.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 112 posts.
2
BitTorrent v2
libtorrent-2.0 has just been released with a few major new features. One of them is support for BitTorrent v2 .
3
Turns out half the internet has a single-point-of-failure called “Cloudflare”
On Friday a large chunk of the internet went off the air when Cloudflare apparently fat-fingered a routing update and sent all of their global traffic to a single POP, vaporizing it almost instantly. This affected their DNS service, and of course, as everybody knows, when your DNS is gone,…
4
Zoom to bring end-to-end encryption to all users, including non-paying
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
5
A Google Cloud support engineer solves a tough DNS case
How a Google Cloud support engineer found one customer’s missing DNS packets
6
7
Cloudflare and the Wayback Machine, joining forces for a more reliable Web
Cloudflare now populating and using the Internet Archive’s Wayback Machine in its content distribution network application Cloudflare and the Internet Archive are now working together to help make the web more reliable. Websites that enable Cloudflare’s Always Online service will now have their content automatically…
8
Gitter is joining Matrix
Matrix, the open protocol for secure decentralised communications
9
Mozilla’s DNS over HTTPs
The current insecure DNS system leaves billions of people around the world vulnerable because the data about where they go on the internet is unencrypted. We’ve set out to change ...
10
Jitsi Meet features update
Learn about Jitsi Meet features update including a new systems audio update and new translations features. Click here for more information.
11
Proof of concept: end-to-end encryption in Jitsi Meet
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
12
Cross-signing and end-to-end encryption by default
Matrix, the open protocol for secure decentralised communications
13
14
How to SSH Properly
This post explains security best practices to use SSH properly and securely
15
Riot is now Element
Hi everyone, We are incredibly excited to announce that Riot is now Element! In fact we have simplified all our naming: Element is also the name for New Vector (the company behind Riot) while Modular, our flagship Matrix hosting service, has become Element Matrix Services. For those discovering us for
16
Improving DNS Privacy with Oblivious DoH
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1
17
Running your own secure communication service with Matrix and Jitsi
Matrix, the open protocol for secure decentralised communications
18
Critical Bluetooth vulnerability in Android
On November 3rd, 2019, we have reported a critical vulnerability affecting the Android Bluetooth subsystem. This vulnerability has been assigned CVE-2020-0022 and was now patched in the latest security patch from February 2020. The security impact is as follows:
19
Looking back at how Signal works
In the midst of world-wide protests against racism and police brutality, a lot of people are becoming more immediately aware and concerned about the security of their data and online communication. We’ve gotten a lot of questions at Signal over the past week, so we wanted to briefly recap how it ...
20
Gitter now speaks Matrix
Matrix, the open protocol for secure decentralised communications
21
Chromium's Impact on Root DNS Traffic
Guest Post: With 70% of market share, Chromium has had a significant impact on the total root DNS traffic.
22
Stable 1.2 Gigabit/s Internet achieved in moving train in Switzerland
Uninterrupted, good quality mobile phone reception is extremely important to rail passengers.
23
1.1.1.1 for Families
Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.
24
The majority of Facebook's traffic now uses QUIC and HTTP/3
We are replacing the de facto protocol the internet has used for decades with QUIC, the latest and most radical step we’ve taken to optimize our network protocols to create a better experience for …
25
SSH Agent Explained
The SSH agent acts behind the scenes to keep you safe. Here's how it works.
26
Chrome is deploying HTTP/3 and IETF QUIC
QUIC is a new networking transport protocol that combines the features of TCP, TLS, and more. HTTP/3 is the latest version of HTTP, the prot...
27
We abused Slack's TURN servers to gain access to internal services
Slack's TURN server allowed relaying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.
28
I2C in a Nutshell
A community and blog for embedded software makers
29
Cloudflare One
Today we’re announcing Cloudflare One. It provides secure, fast, reliable, cost-effective network services, integrated with leading identity management and endpoint security providers.
30
Zero-days in Cisco Discovery Protocol
Identify which devices of your company are impacted by five vulnerabilities that Armis found out in the Cisco Discovery Protocol (CPD).