Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,616 posts.
Building my own network stack
.admonition { margin: .75em 0; padding: .6rem; overflow: hidden; font-size: 12px; page-break-inside: avoid; border-left: .3rem solid #42b983; border-radius: .3rem; box-shadow: 0 0.1re
Protocols, not platforms
Does everybody get to coin one maxim in their lives? If so, here’s mine: Everything gets worse. Let’s say you’re shopping at the grocery, when you notice a new food product. It competes directly with
Passwordless Logins with Yubikey
Yubikey is currently the de facto device for U2F authentication. It enables adding an extra layer of security on top of SSH, system login, signing GPG keys,...
Arris / Arris-variant DSL/Fiber router critical vulnerability exposure
Cybersecurity researcher, entrepreneur, and engineer.
Simple Networking in Linux
Industrial production of readable insanity
LibraryBox
The LibraryBox Project Website
Most TOR servers are vulnerable (NSA crackable)
After more revelations, and expert analysis, we still aren't precisely sure what crypto the NSA can break. But everyone seems to agree that...
A P2P Vision for QUIC (2024)
Using QUIC to achieve everything needed for NAT traversal, from address discovery to proxying UDP
SSH uses four TCP segments for each character you type
Every time we press a key in an interactive SSH session, the SSH Client sends that keystroke as a TCP segment to the SSH Server. Here is a Wireshark …
How to properly interpret a traceroute or mtr
traceroute vs mtr When a packet travels across the Internet, it travels through multiple routers. The traceroute and mtr tools can be used to identify the routers a packet passes through between you and a given destination IP address. traceroute is a one-shot sort of tool whereas mtr runs and agg
That Plane Overhead: Starring Our Friends SDR, ADS-B, I2C and KLGA
You may ask yourself, “How did I get here?” - Talking Heads
The problems with url shorteners
URL shortening services have been around for a number of years . Their original purpose was to prevent cumbersome URLs from getting fragmented by broken email clients that felt the need to wrap everything to an 80 column screen. Addendum: They're useful in print , too. But it's 2009 now, and this problem no longer…
The IPv6 mess (2002)
Each computer on the Internet has its own public IPv4 address, similar to a phone number: for example, 131.193.178.181. The target of each packet of data is identified by a public IPv4 address.
The New Normal: 200-400 Gbps DDoS Attacks
Over the past four years, KrebsOnSecurity has been targeted by countless denial-of-service attacks intended to knock it offline. Earlier this week, KrebsOnSecurity was hit by easily the most massive and intense such attack yet — a nearly 200 Gbps assault leveraging a simple attack method that industry experts say is…
Facebook's DKIM RSA key should be crackable
If Facebook sends you a mail they will sign it using DKIM . Here are the headers from a mail I received the other day: DKIM-Signature: v=1...
Imminent Death of the Net Predicted due to RCF3484
Warning: the following is excessively technical, and is intended more for the sake of the next poor sod who types "vista dns round robin resolution" into Google than it is for my actual friends list. (Except for a few of you. And you know who you are.) Also, since I want this to be searchable on…
Advanced SSH Techniques
At one site where I provide technical assistance, access to the network is all done via ssh over the Internet. However, one can't get access to the machines directly; one must first make an ssh connection to a gateway box I'll call martha. martha doesn't allow one to use regular passwords or keys, though. We're all…
How decentralized is Bluesky really?
Recently due to various events (namely a lot of people getting off of X-Twitter), Bluesky has become a lot more popular, and excitement for its underlying protocol, ATProto , is growing. Since I worked on ActivityPub which connects together Mastodon , Sharkey , Peertube , GotoSocial , etc, etc, etc in the present-day…