Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,021 posts.
On a flight back to New York I read Level 3’s assessment of the latest round of the Netflix vs Internet Provider debacle. The summarized version is that basically Netflix is slow because Verizon refuses to add capacity to peer with Level 3. Fixing the situation would cost Verizon
This page describes a TCP performance problem resulting from a little-known interaction between Nagle’s Algorithm and Delayed ACK. At least, I believe it’s not well known: I haven’t seen it documented elsewhere, yet in the course of my career at Apple I have run into the performance problem it causes over and over…
We discovered that, until recently, Google Public DNS was theoretically vulnerable to a DNS cache poisoning attack on DNSSEC-signed domain names. Google fixed the vulnerability as a result of our report
A look at diversity of MX records across all gTLDs and the Top 1M domains, indicating where SMTP is concentrated and what organizations might have broad access to the world's emails.
I have lived in IRC for about 7 years. What I mean by this is that IRC has been my primary hub for reading information online and interacting with people and systems. I don't use an RSS reader, I visit Twitter and Facebook only ...
Tragedy of the comments
Matrix, the open protocol for secure decentralised communications
We're crowdsourcing ideas and recommendations to help us enhance the privacy and security benefits of DNS-over-HTTPS (DoH) for users around the world
How much do you know about how the PSTN (that is, the public telephone network) works? At some point long long ago, it was signalled using in-band frequencies, which facilitated the infamous phreaking using so-called “blue boxes”. This led to a switch to out of band signalling, ultimately culminating in something…
There's been a lot of talk about DNS-over-HTTPS aka DoH lately, primarily due to Mozilla's and Google's respective plans to move forward with enabling it in their browsers. There's also a lot of misunderstanding and conflation of speculated plans for world domination with practical benefits of the technology; it…
I’m not sure if they realize it yet, but Tailscale seems to work extremely well for polycules. Each user can have their own single-user Tailnet and explicitly share specific machines with other people. Both parties have to consent to sharing a device; either party can revoke this consent. The device owner can further…
If you’re like most people, there’s a good chance that it’s been years since you’ve sent an email that wasn’t cryptographically signed. You don’t use PGP, you say? Well, even if you are…
This post could’ve been titled “Nostr vs ATProto”, but that really isn’t what I wanted to do here. While I will be comparing and contrasting them a lot, and that’s kind of even the point of writing this, I didn’t want to really pit the two against each other at all, and especially not with the title. I also want to…
DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the DNS resolver or application can verify the DNSSEC signatures to ensure the DNS data is not tampered with..DNS is hierarchical, which means that the parent zone vouches for…
Chrome drops NPN for ALPN on May 31st, requiring OpenSSL 1.0.2+. CentOS, Debian, and most Ubuntu versions can't support it, breaking HTTP/2 for millions.
Honestly, I love the design of this thing. It reminds me of something from the good old sci-fi.
On September 30th 2021, Slack had an outage that impacted less than 1% of our online user base, and lasted for 24 hours. This outage was the result of our attempt to enable DNSSEC — an extension intended to secure the DNS protocol, required for FedRAMP Moderate — but which ultimately led to a series of…
A Akamai é a empresa de cibersegurança e computação em nuvem que potencializa e protege negócios online.
This is week "1111111111" in the GPS system. Tomorrow morning it will roll over to week "0000000000". How well will various systems handle this change? Not well, judging by what we've seen so far!
Everyone knows that on most systems you can specify IPv4 addresses just 4 decimal numbers separated with periods (dots). Example: 192.168.0.1 Useful when you for example want to ping your local wifi router and similar. "ping 192.168.0.1" Other bases The IPv4 string is usually parsed by the inet_addr() function or at…
Wouldn't it be great if you could call a Google Voice number directly via SIP? So that you could bypass the PSTN when calling a GV number and go directly over IP? With potentially all the advanced capabilities that could give? (wideband audio, video, etc.) It turns out that you now can !
The Network Load Balancer is designed to handle tens of millions of requests per second while maintaining high throughput at ultra low latency, with no effort on your part (read my post, New Network Load Balancer – Effortless Scaling to Millions of Requests per Second to learn more). In response to customer requests…
I was lucky enough to attend to EuroBSDCon 2023 and offered the opportunity to talk about one of my favorite OpenBSD stock daemon: relayd(8). The talk was recorded and made available on the EuroBSDCon YouTube channel. . One may check the EuroBSDCon 2023 program for more material. This post attempts a reboot of the…
We’re excited to announce the release of Stalwart v0.12, a significant milestone that evolves Stalwart from a powerful mail server into a complete, integrated communication and collaboration...
