1021
HomeLab #1: MikroTik as a Home Router
Proceed at your own risk! (... it's worth it)
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,615 posts.
1022
Security concerns with the e-Tugra certificate authority
Certificate authorities (CAs) are a critical backbone of internet security; when they are compromised, users lose the ability to securely connect to websites without fear of interception. Websites cannot insulate themselves against a fully-compromised CA, even if they normally use other CAs.
1023
1024
HFT in the Banana Land
It’s beautiful outside Looks like it’s raining money Dr. Dre, For the love of money [Updated 1 on 01/27/2016 | Minor corrections + kmz file added] [Updated 2 on 01/27/2016 | This post w…
1025
OpenSSH Keys: A Walkthrough
Photography and long-form writing on my life, technology, photography, philosophy, books, and whatever else strikes my fancy.
1026
Weakening TLS protection, South Korean style
TLS protocol is fundamental to internet security. All South Korean security applications add their own “trusted” Certificate Authorities however, weakening this protocol severely.
1027
The new .zip TLD is going to cause some problems
Many years ago, Google applied for the .zip Top Level Domain. ICANN, in its infinite wisdom, granted it. And now, I think, bad things are going to happen. You see computers try to be helpful. They see you wrote "visit example.com" and autolink the thing which looks like a domain name. That's handy - especially as most…
1028
1029
What happens when DNS in China is poisoned and pointed at your server
I’ve been using the Internet in one form or another since the mid-80’s. In that time, I’ve seen a lot of strange stuff happening on our global network. On Tuesday, I experienced something extraordinary. It all started with a text message from my partner Ged at 8:30 AM: Mail server down. Please take a look […]
1030
When did POP and IMAP become a “legacy protocol?”
So when did POP and IMAP become a “legacy protocol?”
1031
1032
1033
1034
Achieving 100Gbps intrusion prevention on a single server
Achieving 100 Gbps intrusion prevention on a single server, Zhao et al., OSDI’20 Papers-we-love is hosting a mini-event this Wednesday (18th) where I’ll be leading a panel discussion including one …
1035
I traced my traffic through a home Tailscale exit node
A practical deep dive into Tailscale exit nodes: route changes, traceroute evidence, DERP fallback, trust boundaries, and why this model can be free.
1036
Bad Apple but It's Traceroute
This was unavoidable, given my post from the other day about how to make traceroute display (almost) arbitrary strings.
1037
Building a WireGuard jail with FreeBSD's standard tools
Recently, I had an opportunity to build a WireGuard jail on a FreeBSD 12.1 host. As it was really quick and easy to setup and it has been working completely fine for a month, I’d like to share my experience with anyone interested in this topic. I would like to use WireGuard app on my Android phone to access my home…
1038
Exploring a Modern SMTPE 2110 Broadcast Truck
In October, my Dad and I got to go behind the scenes at two St. Louis Blues (NHL hockey) games, and observe the massive team effort involved in putting together a modern digital sports broadcast. I wanted to explore the timing and digital side of a modern SMPTE 2110 mobile unit, and my Dad has been involved in studio…
1039
Democracy and the open internet die in daylight
O bviously there have been many editorial changes at the formerly venerable Washington Post, a tawdry saga which I don’t intend to recap here.
1040
Graviton 3, Apple M2 and Qualcomm 8cx 3rd gen: a URL parsing benchmark
Whenever you enter a URL into a system, it must be parsed and validated. It is a surprisingly challenging task: it may require hundreds of nanoseconds and possibly over a thousand cycles to parse a typical URL. We can use URL parsing as a reasonable benchmark of a system performance. Of course, no single measure ……
1041
1042
Cloud Traffic
I recently watched Build an enterprise-grade service mesh with Traffic Director , featuring Stewart Reichling and Kelsey Hightower of GCP, and of course Google Cloud’s Traffic Director . Coming at this with a brain steeped in 5½ years of AWS technology and culture was surprising in ways that seem worth sharing.
1043
A little bump in the wire that makes the Internet faster
My parents live in a rural area, where the usual monopolist Internet service provider provides the usual monopolist Internet service: DSL, r...
1044
My Experience With the Great Firewall of China
When I recently visited China for the first time,as an InfoSec professional I was very curious to finally be able to poke at theGreatFirewall of China with m...
1045
Some interesting stuff I found on IX LANs
These days the internet as a whole is mostly constructed out of point to point ethernet circuits, meaning an ethernet interface (mostly optical) attached directly from one routing device to another routing device.
1046
Amazon Dash Button's Wireless Audio Configuration
Update: I’ve learned a bit more and as such, see the bottom of the post for an update. I’ve been slow to update this but now that it’s seeming to be gaining a lot of traffic (lead…
1047
Linux Bridge – How it works
developer. curious. learner
1048
The Linux audio stack demystified (and more)
Digital audio processing is a complex yet fascinating subject. Getting a deeper understanding requires knowledge in multiple technical disciplines, including physics, electrical/electronical engineering, and some software engineering when it comes to parts of the Linux ecosystem. This article aims to demystify the…
1049
When Every Network is 192.168.1.x
Solving the conflicting subnet problem with overlay addressing, WireGuard, and 1:1 NAT.
1050
Creating a Home IPv6 Network
One of the recent experiences of Linux Plumbers Conference convinced me that if you want to be part of a true open source WebRTC based peer to peer audio/video interaction, you need an internet address that’s not behind a NAT. In reality, the protocol still works as long as you can contact a stun server to tell you…