Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,615 posts.
Why PS4 downloads are so slow
PS4 downloads have a reputation of being very slow. I did some digging to find out the root cause, and was surprised.
Discovering that a Bluetooth car battery monitor is siphoning location data
Reverse engineering an Android app for a Bluetooth connected car battery monitor with some startling discoveries ...
DNS Esoterica – Why you can't dig Switzerland
As part of my new job, I'm learning a lot more about the mysteries of the Domain Name System than any mortal should know I thought possible. The humble unix dig command allows you to query all sort of DNS information. For example, to see name server records for the BBC website, you can run: dig bbc.co.uk NS Which will…
How fast are Linux pipes anyway?
Pipes are ubiquitous in Unix --- but how fast can they go on Linux? In this post we'll iteratively improve a simple pipe-writing benchmark from 3.5GiB/s to 65GiB/s, guided by Linux `perf`.
Dead Internet Theory
I had a wierd experience which made me realize that the internet is probably dead.
Encoding your WiFi access point password into a QR code
Up until recently, it was a pain to defend againt WPA2 brute-force attacks by using a random 63-character password (the maximum in WPA-Personal ) mode). Thanks to Android 10 and iOS 11 supporting reading WiFi passwords from a QR code, this is finally a practical defense.
Passkeys will come at a cost
Firstyear's blog
The world in which IPv6 was a good design
. It took a look longer to read the book than to play this little web game, but you get pretty much the same thing out of the game, so I hig...
The sound of the dialup, pictured (2012)
If you ever connected to the Internet before the 2000s, you probably remember how it sounded. But what do these sounds mean?
Discord Alternatives, Ranked
Building an online community takes more than tools. But the right tool can make all the difference.
Let's Encrypt makes certs for 30% of web domains
Looking at a dataset of 350 million ssl connections inspires some initial questions:
API Shouldn't Redirect HTTP to HTTPS
Instead of redirecting API calls from HTTP to HTTPS, make the failure visible. Unfortunately, many well-known API providers don't currently do so.
Unlocking free WiFi on British Airways
Personal website talking about some stuff I've made and technology
Running your own email is increasingly an artisanal choice, not a practical one
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
Why does SSH send 100 packets per keystroke?
I made my next game twice as fast by forking go's crypto library
New NSA Leak Shows MITM Attacks Against Major Internet Services
The Brazilian television show “Fantastico” exposed an NSA training presentation that discusses how the agency runs man-in-the-middle attacks on the Internet. The point of the story was that the NSA engages in economic espionage against Petrobras, the Brazilian giant oil company, but I’m more interested in the tactical…
Resurrecting a dead torrent tracker and finding 3M peers
So I was uh, downloading some linux isos, like usual. It was going slowly, so I opened up the Trackers tab in qBittorrent and saw the following:
Another free CA as an alternative to Let's Encrypt
As the use of HTTPS continues to increase across the Web, we need more support from Certificate Authorities that issue the certificates to make it all work. I'm a huge fan of Let's Encrypt and what they're doing, but if we want to encrypt the entire Web,
I can see your local web servers
How many web servers are running on your machine right now? Do all of those development web servers have a secure login, and restrictive CORS permissions? You don’t know? Allow me to check for you:
The Problem with AMP
Details about accelerated mobile pages and their numerous issues
How to Run Your Own Mail Server (2017)
A guide to self-hosting your email on FreeBSD using Postfix, Dovecot, Rspamd, and LDAP.
Sign arbitrary data with your SSH keys
ssh-keygen can sign and verify signatures, and it's way better than PGP
SMS phishing is way too easy
Impersonating someone in SMS texts is way too easy, we must change this to prevent social engineering fraud.
Network protocols for anyone who knows a programming language
The network stack does several seemingly-impossible things. It does reliable transmission over our unreliable networks, usually without any detectable hiccups. It adapts smoothly to network congestion. It provides addressing to billions of active nodes. It routes packets around damaged network infrastructure…
Blocked by Cloudflare
Well, it finally happened to me. I was blocked out of a website I use for work because of Cloudflare. And I have no idea if or when I'll be...
Mastodon.technology Shutdown
Dear mastodon.technology community,