1081
Topics /
Networking & Internet
The most popular blog posts about networking & internet on Hacker News. 1,406 posts.
1082
IETF Draft: Centralization, Decentralization, and Internet Standards
Despite being designed and operated as a decentralized network-of-networks, the Internet is continuously subjected to forces that encourage centralization. This document offers a definition of centralization, explains why it is undesirable, identifies different types of it, catalogues limitations of common approaches…
1083
1084
1085
The Quiet Numbers Station: Decoding Nineteen Years of GPS Cryptography
The Global Positioning System (GPS) relies on its primary L1 frequency to broadcast precise timing and orbital data, allowing receivers on Earth to calculate their exact location. Because the L1 C/A signal transmits at just fifty bits per second, every bit of this navigation data must earn its place. Yet, within this…
1086
A lock with many keys: Spoofing DNSSEC-signed domains in 8.8.8.8
We discovered that, until recently, Google Public DNS was theoretically vulnerable to a DNS cache poisoning attack on DNSSEC-signed domain names. Google fixed the vulnerability as a result of our report
1087
1088
Shutting down the Matrix bridge to Libera chat
Matrix, the open protocol for secure decentralised communications
1089
Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period
We're crowdsourcing ideas and recommendations to help us enhance the privacy and security benefits of DNS-over-HTTPS (DoH) for users around the world
1090
First-ever DNSSEC root key rollover
DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the DNS resolver or application can verify the DNSSEC signatures to ensure the DNS data is not tampered with..DNS is hierarchical, which means that the parent zone vouches for…
1091
1092
1093
The case of the recursive resolvers: What happened during Slack’s DNSSEC rollout
On September 30th 2021, Slack had an outage that impacted less than 1% of our online user base, and lasted for 24 hours. This outage was the result of our attempt to enable DNSSEC — an extension intended to secure the DNS protocol, required for FedRAMP Moderate — but which ultimately led to a series of…
1094
FritzFrog: A New Generation of Peer-to-Peer Botnets
A Akamai é a empresa de cibersegurança e computação em nuvem que potencializa e protege negócios online.
1095
New AWS UDP Load Balancing for Network Load Balancer
The Network Load Balancer is designed to handle tens of millions of requests per second while maintaining high throughput at ultra low latency, with no effort on your part (read my post, New Network Load Balancer – Effortless Scaling to Millions of Requests per Second to learn more). In response to customer requests…
1096
Calendars, Contacts and Files in Stalwart
We’re excited to announce the release of Stalwart v0.12, a significant milestone that evolves Stalwart from a powerful mail server into a complete, integrated communication and collaboration...
1097
WebAssembly brings extensibility to network proxies
With the Istio 1.5 release we are happy to introduce WebAssembly (Wasm) extensions in Envoy, built with our long running collaborators Lyft and IBM. With partners like Solo.io deepening their engagement as well, we are excited to see the community and ecosystem developing around this segment of the open source world.
1098
A distributed spam attack across the public Matrix network
Matrix, the open protocol for secure decentralised communications
1099
1100
1101
Blueborne – A new attack vector endangering major operating systems
Following the disclosure of the BlueBorne attack vector this past September, Armis discovered that critical Bluetooth vulnerabilities impact the Amazon Echo and Google Home.
1102
1103
DASH playback of AV1 video in Firefox
Bitmovin and Mozilla, both members of the Alliance for Open Media (AOM), are partnering to bring AV1 playback with HTML5 to Firefox as the first browser to play AV1 MPEG-DASH/HLS ...
1104
The mechanics of a sophisticated phishing scam and how we stopped it
Yesterday, August 8, 2022, Twilio shared that they’d been compromised by a targeted phishing attack. Around the same time as Twilio was attacked, we saw an attack with very similar characteristics also targeting Cloudflare’s employees
1105
Domain Name Registration and Geo DNS for Route 53
Amazon Route 53 is a highly available and scalable Domain Name Service (DNS), including a powerful Health Checking Service. Today we are extending Route 53 with support for domain name registration and management and Geo DNS. We are also reducing the price for Route 53 queries! Let’s take a closer look at each one of…
1106
Mico: A PDM to USB Microphone Based on the Raspberry Pi RP2040
Using RP2040 to create a USB audio microphone.
1107
1108
AirBorne: Wormable zero-click remote code execution (RCE) in AirPlay protocol
Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices worldwide — and how to protect yourself.
1109
Common interface for Linux NIC statistics
In Linux 5.13 ethtool gains an interface for querying IEEE and IETF statistics. This removes the need to parse vendor specific strings in...
1110
Cisco devices must regenerate self-signed certificates before 2020
Self-signed X.509 PKI certificates (SSC) that were generated on devices that run affected Cisco IOS® or Cisco IOS XE software releases expire on 2020-01-01 00:00:00 UTC. New self-signed certificates cannot be created on affected devices after 2020-01-01 00:00:00 UTC. Any service that relies on these self-signed…