91
Passive Wi-Fi: Bringing Low Power to Wi-Fi Transmissions
Bryce Kellogg, Vamsi Talla, Shyamnath Gollakota, and Joshua R. Smith, University of Washington
Topics /
Networking & Internet
The most popular blog posts about networking & internet on Hacker News. 118 posts.
92
First-ever DNSSEC root key rollover
DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the DNS resolver or application can verify the DNSSEC signatures to ensure the DNS data is not tampered with..DNS is hierarchical, which means that the parent zone vouches for…
93
94
Project Capillary: End-to-end encryption for push messaging, simplified
Developers already use HTTPS to communicate with Firebase Cloud Messaging (FCM). The channel between FCM server endpoint and the device is encrypted with SSL over TCP. However, messages are not encrypted end-to-end (E2E) between the developer server and the user device unless developers take special measures. To this…
95
OpenBGPD – Adding Diversity to the Route Server Landscape
Thanks to the RIPE NCC Community Project Fund we were able to revive the OpenBGPD daemon and bring more diversity to the Route Server landscape.
96
97
Oblivious DNS: Plugging the Internet’s Biggest Privacy Hole
by Annie Edmundson, Paul Schmitt, Nick Feamster The recent news that Cloudflare is deploying their own DNS recursive resolver has once again raised hopes that users will enjoy improved privacy, since they can send DNS traffic encrypted to Cloudflare, rather than to their ISP. In this post, we explain why this approach…
98
Modernizing Transport Security
Posted by David Benjamin, Chrome networking *Updated on October 17, 2018 with details about changes in other browsers TLS (Transport Lay...
99
Do we really need a new BGP?
Guest post: BGP gets a bad rap from some but maybe the problem is with people not the protocol.
100
Introducing the Cloudflare Onion Service
Two years ago this week Cloudflare introduced Opportunistic Encryption, a feature that provided additional security and performance benefits to websites that had not yet moved to HTTPS.
101
Building a Cross-Browser, Cross-Platform, Real-Time Game Streaming Protocol
BUILDING FOR HUMANITY
102
Networked Physics in Virtual Reality
Recently, Oculus teamed up with developer Glenn Fiedler for research into networked physics in VR. Below is a guest post from Glenn detailing his research.
103
104
Streaming Video and Audio with Low Delay
Data sent over the Internet will traverse a large number of smaller links. The combination of these links forms a path from the sender to the receiver. Sometimes data is lost when it traverses this path. For video and audio streams such losses can lead to playback glitches if not corrected.
105
The Matrix.org 2018 year in review
Matrix, the open protocol for secure decentralised communications
106
Reverse Shell from an OpenVPN Configuration File
While doing background research on OpenVPN I stumbled upon an interesting question on Stack Exchange.
107
The rise of multivector DDoS attacks
It's been a while since we last wrote about Layer 3/4 DDoS attacks on this blog. This is a good news - we've been quietly handling the daily onslaught of DDoS attacks. Since our last write-up, a handful of interesting L3/4 attacks have happened. Let's review them.
108
Introduction to HAProxy ACLs
A practical guide to HAProxy ACLs. Learn the syntax and follow step-by-step examples to block traffic, redirect users, choose backends, and enhance security.
109
Discovering Issues in HTTP/2 with Chaos Testing
via Chaos Engineering we discovered that there are situations where HTTP/2 will perform worse than HTTP/1.
110
Apparent use of Sandvine devices for malicious or dubious ends in two countries
This report describes our investigation into the apparent use of Sandvine/Procera Networks Deep Packet Inspection (DPI) devices to deliver nation-state malware in Turkey and indirectly into Syria, and to covertly raise money through affiliate ads and cryptocurrency mining in Egypt.
111
112
Eve Online Chat Is Moving to Ejabberd
I am player at heart. I do not have time to play much, but since my young years, I have always been fascinated by gameplay mechanisms, to…
113
The real reason for large DDoS attacks? It's IP Spoofing, not memcached
A week ago we published a story about new amplification attacks using memcached protocol on UDP port 11211. A few things happened since then: Github announced it was a target of 1.3Tbps memcached attack. OVH and Arbor reported similar large attacks with the peak reported at 1.7Tbps.
114
Fixing an old hack – why we are bumping the IPv6 MTU
Back in 2015 we deployed ECMP routing - Equal Cost Multi Path - within our datacenters. This technology allowed us to spread traffic heading to a single IP address across multiple physical servers.
115
Dweb: Building a Resilient Web with WebTorrent
The web is healthy when the financial cost of self-expression isn’t a barrier. This installment of the Dweb series describes WebTorrent – an implementation of the BitTorrent protocol that runs ...
116
RPKI – The required cryptographic upgrade to BGP routing
We have talked about the BGP Internet routing protocol before. We have talked about how we build a more resilient network and how we can see outages at a country-level via BGP. We have even talked about the network community that is vital to the operation of the global Internet.
117
Cloudflare Browser Check
Secure DNS Transport using DoH (DNS over HTTPS) or DoT (DNS over TLS) and SNI with ECH
118
Encrypt it or lose it: how encrypted SNI works
Today we announced support for encrypted SNI, an extension to the TLS 1.3 protocol that improves privacy of Internet users.