91
Timeliness without datagrams using QUIC
Media over QUIC: Rethink your approach. *Unless you're doing something dope.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 198 posts.
92
No NAT November: My month without IPv4
Near the beginning of November, nixCraft posted this challenge on Mastodon, daring people to take the No NAT November challenge and disable IPv4 for the month, relying only on IPv6:
93
Inside the failed attempt to backdoor SSH globally that got caught by chance
Why the threat actor rushed deployment.
94
We build X.509 chains so you don't have to
For the past eight months, Trail of Bits has worked with the Python Cryptographic Authority to build cryptography-x509-verification, a brand-new, pure-Rust implementation of the X.509 path validation algorithm that TLS and other encryption and authentication protocols are built on. Our implementation is fast…
95
No need to email me about Cisco AnyConnect
My name and email address can be found in the VPN client application made by Cisco called AnyConnect. They are present there as part of the curl license, because this product - like thousands of others - uses libcurl. My name appears in many products. Apparently, people often have problems finding an appropriate…
96
Simple Precision Time Protocol at Meta
While deploying Precision Time Protocol (PTP) at Meta, we’ve developed a simplified version of the protocol (Simple Precision Time Protocol – SPTP), that can offer the same level of clock syn…
97
Stalwart mail server (self-hosted all-in-one mail server) now as an admin webui
We're thrilled to announce the release of Stalwart Mail Server version 0.7.0, a significant update that brings a wealth of features and improvements to enhance the performance and manageability of...
98
A transport protocol's view of Starlink
Digital communications systems always represent a collection of design trade-offs. Maximising one characteristic of a system may impair others, and various communications services may chose to optimise different performance parameters based on the intersection these design decisions with the physical characteristics…
99
Tailscale SSH is now Generally Available
Tailscale SSH is now generally available, offering seamless SSH authentication and authorization with SSO, MFA, and ACLs. Enjoy robust security, zero trust remote access, and tools like session recording and VS Code integration.
100
Google Public DNS's approach to fight against cache poisoning attacks
Tianhao Chi and Puneet Sood, Google Public DNS The Domain Name System (DNS) is a fundamental protocol used on the Internet to translate hum...
101
Off-path TCP hijacking in NAT-enabled Wi-Fi networks
Guest Post: New off-path TCP hijacking attack in Wi-Fi networks that exploits vulnerabilities in the NAT mapping strategies of routers discovered.
102
Attack of the Week: Airdrop Tracing
It’s been a while since I wrote an “attack of the week” post, and the fault for this is entirely mine. I’ve been much too busy writing boring posts about Schnorr signatures!…
103
Tunnelmole, an ngrok alternative (open source)
Tunnelmole is a free and open-source alternative to ngrok. It works out of the box with no port forwarding or networking config needed.
104
First look at the upcoming Starlink Mini
I've owned Starlink Mini for about 6 months, using it for camping, backup internet, and in motion inside my car. Here is my honest review.
105
Why isn't Bluesky a peer-to-peer network?
Today in "our novel form of NIH," why did Bluesky choose not to use a peer-to-peer network when designing the AT Protocol?
106
RIP botsin.space
There's no easy way to put it, so here goes -- after a lot of consideration, I've made the hard (frankly, painful) decision to shut down botsin.space. TLDR: here's the plan:
107
ATProto for distributed system engineers
In this article we're going to explore atproto from the perspective of distributed backend engineering.
108
OpenSSH Keystroke Obfuscation Bypass
A disclosure for an OpenSSH keystroke obfuscation bypass affecting current OpenSSH versions after 9.4.
109
Linux Network Performance Ultimate Guide
https://blog.packagecloud.io/illustrated-guide-monitoring-tuning-linux-networking-stack-receiving-data/
110
Traceroute Isn't Real
Almost nobody understands how traceroute works. Worse, it's not a real tool
111
A History of the TTY
It's one of those anachronisms that is deeply embedded in modern technology. From cloud operator servers to embedded controllers in appliances, there must be uncountable devices that think they are connected to a TTY.
112
Proton announces release of a new VPN protocol, "Stealth"
Stealth is a new VPN protocol from Proton VPN that overcomes censorship in restrictive countries.
113
Are We Watching the Internet Die?
Sometime this month, Reddit will go public at a valuation of $6.5bn. Select Redditors were offered the chance to buy stock at the initial listing price, which it hasn’t announced yet but is expected to be in the range of $31-34 per share. Regardless of the actual
114
Firewall rules: not as secure as you think
A post outlining tricks for firewall privilege escalation
115
116
Remembering the LAN (2020)
Learn more about the early days of LAN.
117
Computer Networking Fundamentals – Learning Series (2023)
This colorful series walks you through the networking basics in just a few thousand words! It also offers hands-on labs to practice the obtained knowledge.
118
Threads Enables Fediverse Replies
Last night Adam Mosseri, Head of Instagram, quitely announced the next step in the integration of Threads into the Fediverse. In addition to being able to follow Threads accounts from Fediverse/Mastodon accounts, we can now reply to and like Threads posts. Threads are taking a quiet, incremental approach to…
119
The Top of the DNS Hierarchy
In the past (in fact two years ago, proof I have been doing this for a while now!) I wrote about the "inconvenient truth" that structural aspects of the Internet make truly decentralized systems infeasible, due to the lack of a means to perform broadcast discovery. As a result, most distributed systems rely on a set…
120
A transport protocol's view of Starlink
How TCP interacts with the characteristics of the Starlink service.