Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,021 posts.
NextNav's Callous Land-Grab to Privatize 900 MHz
The 900 MHz band, a frequency range serving as a commons for all, is now at risk due to NextNav’s brazen attempt to privatize this shared resource. Left by the FCC for use by amateur radio operators, unlicensed consumer devices, and industrial, scientific, and medical equipment, this spectrum has...
How we moved to Google Cloud using Consul and ZeroTier with zero downtime
Our old hosting provider was having network issues... again. There had been a network split around 3:20 AM, which had caused a few of our worker servers to become disconnected from the rest of our network. The background jobs on those workers kept trying to reach our other services until their timeout was reached, and…
Curl and http/2 on Mac
$ curl ‐‐http2 https://daniel.haxx.se/ curl: (1) Unsupported protocol curl on mac curl has been shipped by default on Mac OS X since many years - I actually couldn't even manage to figure out exactly how many. It is built and bundled with the operating system by Apple itself and on Apple's own terms and even ……
33C3 talk on dissecting cellular modems
Yesterday, together with Holger 'zecke' Freyther, I co-presented at 33C3 about Dissectiong modern (3G/4G) cellular modems. This presentation covers some of our recent explorations into a specific type
GNUnet 0.14.0
GNU's framework for secure p2p networking
Is it time to replace TCP in data centers?
One of my readers asked for my opinion about the provocative “It’s Time to Replace TCP in the Datacenter” article by prof. John Ousterhout. I started reading it, found too many things that didn’t make sense, and decided to ignore it as another attempt of a proverbial physicist solving hard problems in someone else’s…
Are we self-sovereign PKI yet?
Every end-to-end encrypted messenger ships a fingerprint UI. Almost nobody opens it. A note on what's actually missing.
Vulnerabilities show why STARTTLS should be avoided if possible (2021)
Guest Post: Study finds more than 40 STARTTLS-related security flaws in many different software products, both client-side and server-side.
Port 25 will be blocked for South Korea from December
Oh, boy has it been quiet here. I have used wayback machine to pull a bunch of older content into the repo so that it can be shared with you beautiful people. There was no real reason to do that except I get annoyed by broken links. Really annoyed. It seems every time I reach back into my bookmarks for something the…
Lizard Stresser Runs on Hacked Home Routers
The online attack service launched late last year by the same criminals who knocked Sony and Microsoft ’s gaming networks offline over the holidays is powered mostly by thousands of hacked home Internet routers, KrebsOnSecurity.com has discovered.
Update to Microsoft Takedown – Domains Fully Restored
We would like to give you an update on the Microsoft takedown and announce that ALL of the 23 domains that were seized are now back in our control.
HAProxy: How to temporary disable a back end server using the command line
HAProxy can be controlled from the command line using its admin socket. This can be used to easily disable and enable a backend server on the cli.
Internet Atlas maps the physical internet to enhance security
A thorough understanding of the internet’s physical makeup has only recently emerged, thanks to painstaking work by UW-Madison researchers and their collaborators.
The real reason for large DDoS attacks? It's IP Spoofing, not memcached
A week ago we published a story about new amplification attacks using memcached protocol on UDP port 11211. A few things happened since then: Github announced it was a target of 1.3Tbps memcached attack. OVH and Arbor reported similar large attacks with the peak reported at 1.7Tbps.
DIY PTP Grandmaster Clock with a Raspberry Pi
tl;dr: I set up an open source Time Pi project to build a stratum 1 PTP and NTP timeserver using a Raspberry Pi. Time is important to modern society, and most of us have a clock on our wrist that's more accurate than at any time in human history. But highly precise time is important in many industries, especially…
Counter Galois Onion: Improved encryption for Tor circuit traffic
Tor is upgrading its relay encryption algorithm for improved security. In upcoming releases, Arti and Tor will both support a new encryption algorithm called Counter Galois Onion (CGO). CGO prevents attackers from tampering with encrypted traffic, adds forward secrecy, and brings Tor's encryption up to modern…
Faking the TCP handshake
Update: This article has been superseded by a new post which hopefully explains it more clearly: Spoofing TCP connections without sequence number prediction
An investigation into Apple’s new Relay network
Guest Post: Analysing Apple Private Relay’s effects on the Internet and future measurement-based research.
5G Network end-to-end demonstration by Ericsson
Ericsson Newsroom features news, blogs and information related to 5G and next-gen technology leadership.
New 'negative light' technology hides data transfers in plain sight
Researchers have developed a ‘negative luminescence’ system to create an innovative way of sending hidden information.
Quad9 DOH HTTP/1.1 Retirement, December 15, 2025
A public and free DNS service for a better security and privacy