901
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,615 posts.
902
Understanding Traceroute
I never understood how traceroute discovers each hop. Turns out it's a clever TTL trick, and about 80 lines of Rust.
903
Building My Own Home Router
This page has moved. If your browser hasn't redirected you already, click here .
904
PureVPN IPv6 Leak
Two findings in PureVPN on Ubuntu 24.04. After a reconnect the system takes a default IPv6 route outside the tunnel, and the ip6tables OUTPUT policy is still ACCEPT, so traffic leaves in the clear while the client reports connected.
905
More than DNS: Learnings from the 14 hour AWS outage
A thorough review of a major cloud outage.
906
Most use cases of ActivityPub would be better off as Atom or RSS feeds
Most use cases of ActivityPub would be better off as Atom or RSS feeds.
907
The PCAP – single file with 50 different protocols
For the last couple of years, I captured many different network and upper-layer protocols and published the pcaps along with some information and Wireshark screenshots on this blog . However, it always takes me some time to find the correct pcap when I am searching for a concrete protocol example . There are way too…
908
A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS
I’ve used Mullvad as my VPN provider for a few years. Their service is good, they provide keys for 5 devices, rely on the Wireguard protocol, and offer alternative configurations as well. Despite that, my needs have changed and I wanted to be able to have granular control over DNS queries and the ability to connect my…
909
Stop Breaking TLS
Rant ahead: I hate TLS “Inspection” software with a burning passion and I wish we collectively as an industry would just knock it the fuck off and stop pretending it’s some great security benefit. Every time I encounter it, in whatever form, it’s a gigantic headache that makes everyone’s life worse off and as far as I…
910
911
A M.2 HDMI capture card
Have you ever looked at an NVMe drive and thought to yourself, 'Hey, this would be 31.7% cooler with HDMI ports?'
912
Ethernet History Deepdive – Why Do We Have Different Frame Types?
In my previous post Encapsulation of PDUs On Trunk Ports , I showed what happens to PDUs when you change the configuration of a trunk. You may have noticed that there are typically three different types of Ethernet encapsulations that we see:
913
Superhighway84 – a Usenet-inspired decentralized internet discussion system
Superhighway84 is a USENET-inspired decentralized internet discussion system, featuring a retro text user interface and powered by IPFS and OrbitDB.
914
915
AWS NLBs and the mixed up TCP connections
One of my services was running into timeouts, because connections were being reset by clients. I had assumed that it couldn't be the Network Load Balancers (NLB
916
TCP is harder than it looks
It's easy to write a TCP stack that works with most traffic. It's harder to write one that interoperates properly with every strange or buggy device that's out there.
917
Things we finally know about network queues (2017)
How big should your queue be, and what should you do when it fills up? Many times, we implement or even deploy a networking system before w...
918
How to get a free .arpa domain
Learn how to get a free .arpa domain by abusing IPv6 reverse DNS delegations on Hurricane Electric, configuring deSEC, and hosting a live website.
919
It’s time to stop using SMS for security
By now most infosec professionals are aware of various ways SMS text messaging can be hijacked. For example so-called “SIM Swap” attacks…
920
I'm blocking connections from AWS to my on-prem services
The direct result of bulletproof infrastructure / cloud providers which are "too big to fail" is the balkanized internet . I don't think this has fully come to pass, but it might be starting to happen or might come to pass soon.
921
922
Use Unix Pipes to Improve Chromecast Playback
When casting from YouTube to a Chromecast, sometimes the audio playback will skip and stutter. We can use VLC and Unix pipes to address this problem.
923
The most backdoor-looking bug I’ve ever seen (2021)
This is the story of a bug that was discovered and fixed in Telegram’s self-rolled cryptographic protocol about seven years ago. The bug didn’t get any press, and no one seems to know about it, probably because it was only published in Russian.
924
The Trouble with 5G
Science News, Physics, Science, Philosophy, Philosophy of Science
925
From 400 Mbps to 1.7 Gbps: A WiFi 7 Debugging Journey
Upgraded to WiFi 7 expecting 1.7 Gbps speeds. Got 400 Mbps instead. Here's what was actually wrong and how I fixed it.
926
Deploying fiber in the home
Getting a fiber Internet connection to your home is a big deal! It’s probably the last physical connection you’ll ever need, due to the virtually unlimited bandwidth, stability, performance, and attainable speeds.
927
How to distrust a CA without any certificate errors
A “distrust” is when a certification authority (CA) that issues HTTPS certificates to websites is removed from a root store because it is no longer trusted to issue certificates. This means certificates issued by that CA will be treated as invalid, likely causing certificate error interstitials in any browser that…
928
DIY Mail
I have another post about half-written that I will finish up and publish soon, but in the mean time I have been thinking today about something that perennially comes up in certain orange-tinted online communities: running your own mail server.
929
930
DNS Explained – How Domain Names Get Resolved
Learn how DNS works: hierarchy, records, TTL caching, and the full resolution process with diagrams.