31
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 198 posts.
32
How SSH port became 22 (2017)
The SSH port is 22. This is the story of how it got that port number. And practical configuration instructions.
33
Visual guide to SSH tunneling and port forwarding (2023)
Sysadmin doing syadmin stuff
34
Removing data transfer fees when moving off Google Cloud
Customers discontinuing their use of Google Cloud can move their data without incurring any network data transfer fees.
35
MacOS sometimes leaks traffic after system updates
We have found that you could be leaking traffic on macOS after system updates. To our current knowledge a reboot resolves it. We are currently investigating this and will follow up with more information.
36
Just disconnect the internet
So, let's say that a security vendor, we'll call them ClownStrike, accidentally takes down most of their Windows install base with a poorly tested content update. Rough day at the office, huh? There are lots of things you could say about this, lots of reasons it happens this way, lots of people to blame and not to…
37
38
Understanding Round Robin DNS
In which I try to understand how browsers and Cloudflare choose which server to use
39
Mitmproxy 11: Full HTTP/3 Support
We are excited to announce the release of mitmproxy 11, which introduces full support for HTTP/3 in both transparent and reverse proxy modes. We’re also bringing in a ton of DNS improvements that we’ll cover in this blog post.
40
Opus 1.5 released: Opus gets a machine learning upgrade
This 1.5 release is unlike any of the previous ones. It brings many new features that can improve quality and the general audio experience. That is achieved through machine learning. Although Opus has included machine learning — and even deep learning — before (e.g. for speech/music detection ), this is the first time…
41
Minuteman missile communications
A programming note: I am looking at making some changes to how I host things like Computers Are Bad and wikimap that are going to involve a lot more recurring expense. For that and other reasons, I want to see if y'all would be willing to throw some money my way. If everyone reading this gave $3 a month, we could…
42
High-speed 10Gbps full-mesh network based on USB4 for just $47.98
Fang-Pen Lin's blog about programming
43
Czech republic sets IPv4 end date
On 17 January 2024, the Government of the Czech Republic approved the material "Restarting the implementation of DNSSEC and IPv6 technologies in the state administration". On the basis of this decision, the Czech state administration will stop providing its services over IPv4 on 6 June 2032. Thus, the Czech Republic…
44
Second factor SMS: Worse than its reputation
One-time passwords are often sent via SMS. Security researchers from the CCC recently had live access to over 200 million such SMS messages from more than 200 affected companies.
45
Matrix 2.0 Is Here
Matrix, the open protocol for secure decentralised communications
46
Quake 3 Source Code Review: Network Model (2012)
The network model of Quake3 is with no doubt the most elegant part of the engine. At the lower level Quake III still abstract communications with the NetChannel module that first appeared in Quake World . The most important thing to understand is: In a fast paced environment any information that is not received on…
47
WireGuard: Beyond the most basic configuration
Last week I wanted to replace my OpenVPN setup with WireGuard. The basics were well-documented, going beyond the basics was a bit trickier. Let me teach you want I learned. The basics But first, let’s summarize the basics. I have a server with a hosting provider that I want to use as a VPN server. I won’t delve into…
48
Proposed top-level domain string for private use: ".internal"
ICANN received a total of 32 public comments from across the community on the Proposed Top-Level Domain String for Private Use. Thirteen of these were in support of the proposal. Of the remaining nineteen comments, six believed a shorter string should be selected, one believed a more meaningful string should be…
49
Ham radio operators receive signals from Voyager 1 on Dwingeloo telescope
We have used the historic Dwingeloo radio telescope to receive signals from the Voyager 1 spacecraft. Only a few telescopes in the world have received these signals, which are very faint due to the distance of Voyager 1: almost 25 billion kilometers, more than four times the distance to Pluto.
50
Threat actor abuses Cloudflare tunnels to deliver remote access trojans
Key findings Proofpoint has observed an increase in malware delivery via TryCloudflare Tunnel abuse. The activity is financially motivated and delivers exclusively remote
51
The journey of an internet packet: Exploring networks with traceroute
This article explains the mechanics behind traceroute, from IP headers and TTL fields to ICMP messages. Learn why traceroute is a crucial tool for network diagnostics, how it differs from ping, and how to interpret its output. Ideal for network administrators, IT professionals, and curious users looking to understand…
52
Cloudflare loses 22% of its domains in Freenom .tk shutdown
A staggering 12.6 million domains on TLDs controlled by Freenom (.tk, .cf and .gq) have been shut down and no longer resolve, leading to a significant reduc ...
53
54
OpenID Connect specifications published as ISO standards
I’m thrilled to report that the OpenID Connect specifications have now been published as ISO/IEC standards. They are:
55
HTTP/2 Continuation Flood: Technical Details
Preface In October 2023 I learned about HTTP/2 Rapid Reset attack, dubbed “the largest DDoS attack to date”. I didn’t have deep knowledge of HTTP/2 back then. I knew its basics like frames or HPACK but I was focusing more on HTTP/1.1 protocol and programming languages vulnerabilities. I decided to dedicate time to…
56
57
Spotify has shut down several API endpoints
To increase security we are limiting access to certain Web API endpoints for new applications.
58
Sol-Ark manufacturer reportedly disables all Deye inverters in the US
Seemingly, at the drop of a hat the morning of Friday, Nov 15th, Deye-branded inverters across the US were intentionally bricked.
59
Speed, scale and reliability: 25 years of Google datacenter networking evolution
Google networking leaders reflect on the milestones that led to Jupiter supporting 13 petabits per second bandwidth, and what comes next.
60
WPA3 Enterprise 192-bit mode at home
For our 2023 holiday project, we're setting up an WPA3 Enterprise certificate-authenticated Wi-Fi network at home! And when your family from out of town asks to "jump on the Wi-Fi real quick," you'll learn why this type of network is such a hassle to manage.