2761
The internet was designed with a narrow waist
When you hear the term, you should picture an hourglass with M things on one side, N on the other, and an important concept in the middle.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,021 posts.
2762
HTTP/2 for TCP/IP Geeks
I attended a TCP/IP Geeks Stockholm meetup yesterday and did a talk about HTTP/2. Below is the slide set, but as usual it might not be entirely self explanatory... HTTP/2 - for TCP/IP Geeks Stockholm from Daniel Stenberg
2763
2764
2765
Scanners Beware: Welcome to the network from hell
We’ve crafted a bold defense strategy that not only slows scans but actively disrupts and deceives attackers.
2766
UDP transmitter implemented with PIO and DMA on the RP2040
The objective for this project was to implement a UDP transmitter for use on the RP2040 that would consume zero CPU time. The system described on this webpage is implemented with 3 PIO state machines, 12 DMA channels, and 1 PWM channel. It generates an NLP, performs packet checksum calculations, and performs packet…
2767
Apparent use of Sandvine devices for malicious or dubious ends in two countries
This report describes our investigation into the apparent use of Sandvine/Procera Networks Deep Packet Inspection (DPI) devices to deliver nation-state malware in Turkey and indirectly into Syria, and to covertly raise money through affiliate ads and cryptocurrency mining in Egypt.
2768
Inline PGP signatures considered harmful
People often suggest that inline PGP signatures in e-mail are somehow more compatible or more acceptable than using PGP/MIME . This is a mistake. Inline PGP signatures are prone to several failure modes, up to and including undetectable message tampering.
2769
Tracing HTTP Requests with tcpflow
PagerDuty went off very early in the morning, and our hero cursed his bad luck and received the phone call. He made PagerDuty repeat the message twice, but couldn’t understand the message. He pressed the number to acknowledge the incident. He opened the MacBook and found the slack message from the PagerDuty bot more…
2770
Flawed routers flood University of Wisconsin internet time server (2003)
ABSTRACT In May 2003, the University of Wisconsin - Madison found that it was the recipient of a continuous large scale flood of inbound Internet traffic destined for one of the campus' public Network Time Protocol (NTP) servers. The flood traffic rate was hundreds-of-thousands of packets-per-second, and hundreds of…
2771
Anomalous keys in Tor relays
Counting almost 7,000 relays , the Tor network is one of the largest volunteer-run anonymity networks operating today. Most of the volunteers who operate these relays choose to remain anonymous, and little is known about how they set up or operate their relays. As a result, it is not clear if all relays correctly…
2772
Xdpcap: XDP Packet Capture
Our servers manage heaps of network packets, from legit traffic to big DDoS attacks. For top efficiency, we adopted eXpress Data Path (XDP), a Linux kernel tool for swift, low-level packet handling.
2773
RFC 9518 – What can internet standards do about centralisation?
RFC 9518: Centralization, Decentralization, and Internet Standards has been published after more than two years of review, discussion, and revision.
2774
2775
Internet usage pattern during power outage in Spain and Portugal
What patterns do we see in RUM data during the April 28th power outage in Portugal and Spain?
2776
Android’s IPv6 Is Still Broken
I got into some interesting discussions about IPv6 on Twitter. Then someone asked if Android is getting DHCPv6 support in version 11 of the OS.
2777
2778
2779
2780
Google – polling like it's the 90s
A technical review of the live score feature in Google search results, delivered with some surprisingly old-school tech from the 90s.
2781
2782
SPF, DMARC, and DKIM: How to Keep Your Email Out of the Spam Folder
Insights gleaned from years in the trenches. Truly essential tips, practices, and guides for achieving WordPress success.
2783
ZeroMQ - Disconnects are Good for You
The hidden disconnects of ZeroMQ can be dangerous if you don’t write your application to work around them.
2784
An argument for increasing TCP's initial congestion window (2024)
Introduction Google has a long history of performing networking research, making changes, and pushing those changes to the entire internet. In 2011, they published one of my favorite papers, which described their decision to increase the TCP initial congestion window from 1 to 10 on their entire infrastructure. This…
2785
BGP and RPKI
We have been receiving occasional notifications, primarily via twitter from concerned customers who have visited 'isbgpsafeyet.com' and been told by the site's operator, Cloudflare, that their ISP is, apparently unsafe.
2786
The Internet Gopher from Minnesota
Structured Text on the Internet before the World Wide Web
2787
A first look at Aperture by Tailscale (private alpha)
Aperture is an AI gateway that doesn't get in the way of developers, and works with most AI tools.
2788
Implementing fast TCP fingerprinting with eBPF
In this article I want to document my journey implementing fast TCP fingerprinting in a golang webserver, using eBPF.
2789
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
2790
VoWiFi
I haven't written for a bit, in part because I am currently on vacation in Mexico. Well, here's a short piece about some interesting behavior I've noticed here.