2701
Unbloating the buffers
What is bufferbloat, why is it bad, and what to do about it
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,021 posts.
2702
2703
Reverse Shell from an OpenVPN Configuration File
While doing background research on OpenVPN I stumbled upon an interesting question on Stack Exchange.
2704
2705
Quad9 Files Official Objection Opposing Sony Music’s German Court Ruling
A public and free DNS service for a better security and privacy
2706
2707
The rise of multivector DDoS attacks
It's been a while since we last wrote about Layer 3/4 DDoS attacks on this blog. This is a good news - we've been quietly handling the daily onslaught of DDoS attacks. Since our last write-up, a handful of interesting L3/4 attacks have happened. Let's review them.
2708
2709
Coaxial Goes to War
Last time we perambulated on telephones, we discussed open-wire long-distance telephone carriers and touched on carriers intended for cables. Recall that, in the telephone industry, cable refers to an assembly of multiple copper twisted pairs (often hundreds) in a single jacket. There is a surprising amount of…
2710
2711
IPv4, IPv6, and a sudden change in attitude
A few years ago I wrote [_The World in Which IPv6 was a Good Design_](https://apenwarr.ca/log/20170810). I'm still proud of that article, bu...
2712
What happens when a ccTLD is retired? Exploring the potential risks of .io
Could the complex political history of Diego Garcia put the .io domain at risk? Tech firms should be aware of potential risk to their websites.
2713
gRPC: The Ugly Parts
The seedy underbelly of gRPC.
2714
Google’s IPv6 Stats Pass 3% Less Than 5 Months After Passing 2%
Wow! The pace of IPv6 deployment is rapidly accelerating! This morning Google’s IPv6 measurements crossed the 3% milestone just under five months from when the 2% milestone was crossed. Prior to that it had taken 11 months to go from 1% to 2%. The growth path is certainly heading in the right direction: To […]
2715
Using Hinge as a Command and Control Server
A proof of concept demonstrating how to use the Hinge dating app as a C2.
2716
Facebook demonstrates record-breaking data rate using millimeter-wave technology
Visit the post for more.
2717
OpenBSD Router Guide
NOTE: Currently this guide only deals with IPv4 as most people still don't use IPv6 and many ISPs also still only use IPv4, but IPv6 is planned for a future update of the guide.
2718
Residential Networking over Telephone
Recently, I covered some of the history of Ethernet's tenuous relationship with installed telephone cabling . That article focused on the earlier and more business-oriented products, but many of you probably know that there have been a number of efforts to install IP networking over installed telephone wiring in a…
2719
House of Representatives Passes Net Neutrality Protections
In a vote of 232-190, the House of Representatives passed the Save the Internet Act (H.R. 1644). This is a major step forward in the fight for net neutrality protections, and it’s because you spoke up about what you want.The Save the Internet Act was written to restore the strong and hard-fought...
2720
2721
2722
Speeding up and strengthening HTTPS connections for Chrome on Android
Posted by Elie Bursztein, Anti-Abuse Research Lead Earlier this year, we deployed a new TLS cipher suite in Chrome that operates three tim...
2723
Detecting a 2.4 GHz transmission for under 1 EUR
As I was debugging a wireless mouse based on a 2.4 GHz proprietary protocol, I wanted to detect the transmitted signals. Note that I purposefully wrote “detect”: It was sufficient to see how often the transmission occurred (and if at all) and whether the link was unidirectional – i.e., only the mouse transmits and the…
2724
Reading NFS at 25GB/s using FIO and libnfs
My current employer does a lot of really cool systems work that’s covered by NDAs. I recently did some work to integrate a cool open source tool into our workflow. Felt it deserved a blog post. NFS Testing Requires Parallelism. I work for Pure Storage. One of the products we make is a scale-out NFS1 (and…
2725
A dive into open chat protocols
You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites . This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.
2726
2727
Iranian hackers obtain fraudulent HTTPS certificates
On March 15th, an HTTPS/TLS Certificate Authority (CA) was tricked into issuing fraudulent certificates that posed a dire risk to Internet security. Based on currently available information, the incident got close to — but was not quite — an Internet-wide security meltdown. As this post will...
2728
2729
Cisco buffer overflow vulnerability with remote code execution
A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker…
2730
How to botch TLS forward secrecy
There's been some discussion about forward secret TLS recently, spurred, I think, by this piece from Declan McCullagh on CNET.