181
The Trouble with CloudFlare
Wednesday, CloudFlare blogged that 94% of the requests it sees from Tor are "malicious." We find...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,020 posts.
182
Setting up a free *.city.state.us locality domain (2025)
In the US, you can get a domain name like `somename.city.state.us` for free. If your town has its own domain, you can get nameservers from Amazon Lightsail, send the *Interim .US Domain Template* to the delegated manager for your locality, then point DNS entries at your webhost.
183
Proof of concept: end-to-end encryption in Jitsi Meet
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
184
Setting up a home VPN server with WireGuard
Motivation For a moderately security conscious geek like myself, there can be a number of reasons to want to set up a home VPN server: Accessing your home computer via screen sharing without exposing it to the Internet (and thereby to potential evil-doers). Accessing servers with IP white lists (common case for…
185
Sinkholed
On 26 Nov 2019 at 14:55 UTC, I logged into my server that hosts my website to perform a simple maintenance activity. Merely three minutes later, at 14:58 UTC, the domain name susam.in used to host this website was transferred to another registrant without any authorisation by me or without any notification sent to me…
186
Cross-signing and end-to-end encryption by default
Matrix, the open protocol for secure decentralised communications
187
Hidden Networks in TP-Link Routers
I was debugging my WiFi settings this week when I noticed something strange. WiFi Analyzer was showing two hidden networks coming from my router, one for each frequency: 2.4GHz and 5GHz. Networks which I haven't configured and didn't appear in my router's admin interface. WTF?
188
Mullvad exit IPs are surprisingly identifying
Update 5/29: Mullvad has begun rolling out a mitigation feature on their servers that scrambles exit IP positions, thereby fixing this issue. IPs are still deterministically selected based on the pubkey. Mullvad is one of the few VPN providers that offers multiple exit IPs for its servers. If two people connect to the…
189
190
A detailed look at the router provided by my ISP
I have been living in my current apartment for more than a year now and I noticed I have never inspected my router which was provided by my ISP when I moved in. The only thing I changed in router is
191
Major European payment processor can't send email to Google Workspace users
Viva.com, one of Europe's largest payment processors, sends verification emails without a Message-ID header — a requirement of RFC 5322 since 2008. Google Workspace rejects them outright. Their support team's response to my detailed bug report: your account has a verified email, so there's no problem.
192
Introduction to open source private LTE and 5G networks
It’s so easy these days to set-up your own WiFi network. You order a router online, plug it into the electrical socket, define a password and you’re good to go. WiFi is fast, reliable and easy to use. But if you want to cover a wider area or connect hundreds of small devices it quickly […]
193
The secret message hidden in every HTTP/2 connection
If you spy on an HTTP/2 connection starting up you'll notice that it sends an almost-but-not-quite valid HTTP request at the very start of...
194
Ban me at the IP level if you don't like me
“Bro, ban me at the IP level if you don't like me!”
195
We need a federation of forges
Git is decentralized, but what of the rest?
196
197
Xfinity Is Man-in-the-Middle Attacking My Internet
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
198
Matrix 2.0: The Future of Matrix
Matrix, the open protocol for secure decentralised communications
199
Matrix 1.0 and the Matrix.org Foundation
Matrix, the open protocol for secure decentralised communications
200
Is Telegram really an encrypted messaging app?
This blog is reserved for more serious things, and ordinarily I wouldn’t spend time on questions like the above. But much as I’d like to spend my time writing about exciting topics, som…
201
Web Search API
Search the web from your AI agents and applications through AI Gateway with Ceramic.ai, Exa, and Linkup.
202
Resolving an unusual WiFi issue
Late last year, I started experiencing some unusual intermittent connection issues on my Desktop. In general, I had a stable connection with average latency; however, at (seemingly) random times throughout the week, I would start experiencing sudden 2000ms+ latency spikes every couple of seconds.
203
Wireless Is a Trap
Over and over again, I’ve seen people fix some wireless-related problem and go “wow, I had no idea how much better this could be!" • Wireless protocols often silently operate in an extremely degraded state that makes them substantially worse than wired equivalents.
204
5G: The outsourced elephant in the room
This article is part of a series on (European) innovation and capabilities. In a break from the usual GPS/Galileo, DNA and C++ posts, here is a bit on 5G and national security. It turns out that through PowerDNS and its parent company Open-Xchange, we know a lot about how large scale European communication service…
205
The world in which IPv6 was a good design (2017)
Last November I went to an IETF meeting for the first time. The IETF is an interesting place; it seems to be about 1/3 maintenance grunt wo...
206
207
SSH tips and tricks
Since I joined Charm, I’ve been working and learning more about SSH, and I thought I would share a few quick tips and tricks with you.
208
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
209
Bypassing YouTube video download throttling
Have you ever tried to download videos from YouTube? I mean manually without relying on software like youtube-dl, yt-dlp or one of “these” websites. It’s much more complicated than you might think.
210
How to SSH Properly
This post explains security best practices to use SSH properly and securely