Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,021 posts.
Sovereign Keys, EFF's proposal to replace the certificate authority model
This is part 2 of a series on the security of HTTPS and TLS/SSL. [Part 1] In a previous post, we discussed some structural insecurities in HTTPS and TLS/SSL, and how those are beginning to pose serious problems for the security of the Web. In this post I will introduce a new proposal called "...
The input stack on Linux: An end-to-end architecture overview
Let's explore and deobfuscate the input stack on Linux. Our aim is to understand its components and what each does. Input handling can be divided into two parts, separated by a common layer. We’ll try to make sense of all this, one thing at a time, with a logical and coherent approach.
Headerless Train Announcements
A blog about signals, programming, music, and other stuff.
How banks are getting around open banking and PSD2
Banks are scared. They’ve seen the rise of the new world of open APIs, apps and analytics and know that their organisations are not yet ready or fit to change to that world. What to do? Well, the easiest thing to do is to block access to the bank’s data. If third party FinTech firms...
We scanned the Internet for port 22
Yesterday (Sept. 12) we scanned the entire Internet for port 22 -- the port reserved for "SSH", the protocol used by sysadmins to remotely l...
How Hyper built a 1M-accurate indoor GPS
To @AndrewHart: “Our app is shit and we know it’s shit”. My life changed forever when a senior exec from one of the world’s largest retailers messaged me on Twitter. This was back in 2017. My outdoor AR navigation demos had just gone viral, and my new open-source project for...
The SIM-less Phone Is Coming. And It Should Scare The Shit Out Of You
The argument over the nano-SIM is a distraction. It's a sleight of hand designed to catch the industry off guard and fool it into doing something really stupid. The SIM is designed to do a number of things; encryption, address storage, hold SMS, etc. Most importantly, it's designed to be swappable. With GSM, you can…
Finding services companies via their TXT records
How to use a company's TXT records to discover the products they use.
End-to-end congestion control cannot avoid latency spikes (2022)
What are the fundamental limits of end-to-end congestion control in 5G networks?
iOS 14 USB tethering broken on Linux: looking for docs and contact at Apple
iOS 14 USB tethering broken on Linux: looking for documentation and contact at Apple
Where is every IP Address?
Benchmarks & Tips for Big Data, Hadoop, AWS, Google Cloud, PostgreSQL, Spark, Python & More...
Netdev Day 1: IPsec
netdev day 1: IPsec!
SpoofMAC - Spoof your MAC address in Mac OS X
Feross Aboukhadijeh is a computer security researcher, teacher, web developer, designer, long distance runner, gamer, music lover, and builder of websites that (sometimes) go viral.
Building an LTE Access Point with OpenWRT Rooter
My LTE internet connection (70 Mbit downstream, 15 MBit upstream) came with a combined Huawei B315s LTE modem/access point. As I was using it for the last two to three years a couple of problems did arise: the internet connection was often shaky, oftentimes the uplink connection got lost and I had to power-cycle the…
Add Latency to Localhost
Pádraig Brady taught me a great trick in a comment to a previous blog post and it was so neat I feel a need to highlight it further as it also makes it easier for me to find it again later! To simulate a far away server, add RTT time to the localhost device. For … Continue reading Add latency to localhost →
Infiltrating a Botnet - A Conversation With a Botmaster
Overview Defending a Customer from a Botmaster An Unsuspecting Customer Stopping the Bot Conversations with a Botmaster You Can Find Anything on the Internet One-Stop Botnet Shopping Pretense to Avoid Pwning Conclusion References Acknowledgments
Homelab analog telephone exchange
An introduction to my MCU based fully featured analog telephone exchange, how I mounted it in my home lab powered with batteries for months of use
CoreBGP – Plugging in to BGP
In this post I'll provide some of my personal experience and history working with BGP, and introduce a new BGP library, CoreBGP, which can be used to build the next generation of BGP-enabled applications.
The internet is slipping out of our reach
With AI encroaching every open forum on the internet, the future of human discourse is bleak.
Goodbye, IPv4 IANA Starts Allocating Final Address Blocks
IPv4 address exhaustion just got more real! In an announcement on Tuesday, the Internet Corporation for Assigned Names and Numbers (ICANN) indicated that they are starting the process of allocating the final available blocks of IPv4 addresses out to the Regional Internet Registries (RIRs) from the IANA recovered…
Twitter shut off API access; users volunteering their own data for an open API
A lot of community applications died when API access to twitter, reddit & others was severely restricted, but they can't stop us from sharing our own data with each other!
DNS servers that offer privacy and filtering
If you’re a programmer, a systems administrator, or really any type of IT worker, you probably have your favorite go-to IP addresses for troubleshooting.
Static IPs for Serverless Containers
Now your Modal containers around the world can have static outbound IPs. Featuring WireGuard, policy-based routing, and NAT.
Ultra high-speed broadband is coming to Kansas City, Kansas
Insights from Googlers into our products, technology, and the Google culture
Usenet Tradecraft: Survival in an Extremely Adversarial Environment (2013)
Survival in an Extremely Adversarial Environment If your secure communications platform isn’t being used by terrorists and pedophiles, you&# …
X-Clacks-Overhead
A small HTTP-header tribute to Sir Terry Pratchett