2371
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,021 posts.
2372
A bit more on Twitter/X's new encrypted messaging
Update 6/10: Based on a short conversation with an engineering lead at X, some of the devices used at X are claimed to be using HSMs. See more further below. Matthew Garrett has a nice post about T…
2373
Quick VPN Setup with AWS Lightsail and WireGuard
How to run your own VPN in the cloud for less than a penny per hour ( $0.007 / hr )
2374
Fun with Telnet (2024)
Some time ago I came across a cinematic experience ......... @@@@@ @@@@@ ........... ......... @ @ @ @ ........... ......... @@@ @ @ .......... ........ @@ @ @ ......... ........ @@@@@@@ @@@@@ th ....... ...... ----------------------- ...... ..... C E N T U R Y .... .... ----------------------- ... ... @@@@@ @@@@@ @ @…
2375
Cisco devices must regenerate self-signed certificates before 2020
Self-signed X.509 PKI certificates (SSC) that were generated on devices that run affected Cisco IOS® or Cisco IOS XE software releases expire on 2020-01-01 00:00:00 UTC. New self-signed certificates cannot be created on affected devices after 2020-01-01 00:00:00 UTC. Any service that relies on these self-signed…
2376
Solaris adopting OpenBSD's pf
Yet another proprietary tech titan turns to the free OpenBSD operating system as their source of innovation in the networking and security ...
2377
2378
If You Can Read This, You're SNIing
When TLS was defined, it didn’t allow more than one hostname to be available on a single IP address / port pair, leading to “virtual hosting” issues; each Web site (for example) now requires a dedicated IP address.
2379
Sudan woke up without Internet
Today, October 25, following political turmoil, Sudan woke up without Internet access.
2380
The Great $50M African IP Address Heist
A top executive at the nonprofit entity responsible for doling out chunks of Internet addresses to businesses and other organizations in Africa has resigned his post following accusations that he secretly operated several companies which sold tens of millions of dollars worth of the increasingly scarce resource to…
2381
Testing “Exotic” P2P VPN
My standard "everyday" solution when it comes to connecting computers into a single network is Wireguard. Wireguard is good, supports p2p, and generally has no downsides.
2382
No U PNP
Previously on Deep Space Nine, we discussed (read: I complained about) the short life and quick death of DLNA. On the way, I mentioned DLNA's dependence on UPnP as an underlying autoconfiguration protocol. Let's talk a bit more about UPnP, because it's 1) an interesting protocol, 2) widely misunderstood, and 3)…
2383
After 28 years, SSLv2 is still not gone from the internet
After 28 years, SSLv2 is still not gone from the internet... but we're getting there, Author: Jan Kopriva
2384
Building a PGP web of trust that people will actually use
Back in the early 1990s, PGP introduced the concept of web of trust (WoT)- a means by which users of personal encryption can know whether or...
2385
Project Capillary: End-to-end encryption for push messaging, simplified
Developers already use HTTPS to communicate with Firebase Cloud Messaging (FCM). The channel between FCM server endpoint and the device is encrypted with SSL over TCP. However, messages are not encrypted end-to-end (E2E) between the developer server and the user device unless developers take special measures. To this…
2386
Large European routing leak sends traffic through China Telecom
Guest Post: A Swiss data centre leaked over 70,000 routes to China Telecom, some for over two hours.
2387
2388
2389
2390
Reasons to not use your own domain for email
Reasons to not use your own domain for email on Eduardo Bautista's blog.
2391
Is HTTP Public Key Pinning Dead?
HTTP Public Key Pinning (HPKP, RFC 7469)—a standard that was intended to bring public key pinning to the masses—might be dead.
2392
XMODEM in 2022
Let's start at the beginning: it all started with me trying to boot a system which receives its initial ramdisk over XMODEM.
2393
"Doors" in Solaris: Lightweight RPC Using File Descriptors (1996)
A door is a "file" descriptor used to describe a procedure in a process and optionally some additional state associated with the procedure. Doors were initially designed as Spring object descriptors used to encapsulate the state and capabilities of C++ objects. A process which obtains a door is free to pass it, along…
2394
2395
How Microsoft Bing Censors the Middle East
Shortly after Microsoft Bing launched in 2009, researchers at the Berkman Center for Internet...
2396
Whois: Fragile, Unparseable, Obsolete
A rather unstructured look at one of the older and infuriatingly trivial internet protocols: WHOIS
2397
Cloudflare Pub/Sub: Programmable MQTT Message Brokers
Announcing the beta of Cloudflare Pub/Sub, our programmable, serverless message broker built on the open MQTT messaging standard
2398
2399
ZeroMQ: Modern & Fast Networking Stack
Berkeley Sockets (BSD) are the de facto API for all network communication. With roots from the early 1980's, it is the original implementation of the TCP/IP suite, and arguably one of the most widely supported and critical components of any operating system today. BSD sockets that most of us are familiar with are…
2400
Chrome Returns 206 when the Server Returns 403
Chrome Returns 206 when the Server Returns 403 Postmortem It is a feature not a bug! I got detailed explanation from chrome developers which is very helpful. You may find the complete response in the bug ticket. Also this blog post draws a lot of attention after I post it on Hackers News. You may find comments here…