Weakening TLS protection, South Korean style
TLS protocol is fundamental to internet security. All South Korean security applications add their own “trusted” Certificate Authorities however, weakening this protocol severely.
Topics /
The most popular blog posts about networking & internet on Hacker News. 143 posts.
TLS protocol is fundamental to internet security. All South Korean security applications add their own “trusted” Certificate Authorities however, weakening this protocol severely.
Many years ago, Google applied for the .zip Top Level Domain. ICANN, in its infinite wisdom, granted it. And now, I think, bad things are going to happen. You see computers try to be helpful. They see you wrote "visit example.com" and autolink the thing which looks like a domain name. That's handy - especially as most…
Whenever you enter a URL into a system, it must be parsed and validated. It is a surprisingly challenging task: it may require hundreds of nanoseconds and possibly over a thousand cycles to parse a typical URL. We can use URL parsing as a reasonable benchmark of a system performance. Of course, no single measure ……
We’ve written previously about the fact that the Internet seems to be missing a standard protocol for the request/response paradigm, with repeated attempts to force-fit TCP leading to inevitable mismatches. Sometimes we feel that we are the only people who think this way, with our networking
Fun with Kermit and ZMODEM file transfers over SSH using Qodem
Two communicating processes on a single machine have a few options. They can use regular TCP sockets, UDP sockets, unix domain sockets, or shared memory. A recent project I was working on used Node…
How I received the signal of MANY satellites with an RTL-SDR V3
I've studied a lot of chips from the 1970s and 1980s, so I usually know what to expect. But an Ethernet chip from 1982 had something new: a ...
From time to time I need to expose a development web site or web service to the world. In the past, I’ve used ngrok for that, and of course long ago I built ReverseHTTP which is somewhere in the same ballpark, but I recently got fed up with the state of affairs and decided to see whether there was something simple I…
an addendum has been posted, read it here 2023/12/02 - Hello, Hacker News! Check out these pictures of my cat: https://emma.pet Back in February, Mikrotik announced the CCR2004-1G-2XS-PCIe, a peculiar 25gbps NIC. They’ve thrown an entire router into a PCIe NIC. But why? Wait, why? Mikrotik’s product listing has…
If your household uses Xfinity for cable, you have almost definitely heard of Xfinity Stream at some point. If you haven’t, Xfinity Stream is a service that allows you to access Xfinity’s on-demand TV over the internet. This can be useful if you want to watch something on Xfinity’s on-demand TV but do not want to go…
Twitter user opdroid1234 remarked that they are getting more performance out of the ARM nodes than out of the Intel nodes on Amazon's cloud (AWS). I found previously that the Graviton 3 processors had less bandwidth than comparable Intel systems. However, I have not done much in terms of raw compute power. The Intel…
I was always curious about all that bad guys (criminals, drug dealers, hitman’s, thief’s etc.) using not very good and secure communication channels. Forgetting about whole OPSEC stuff. There is a lo
How to Kill a Decentralised Network (such as the Fediverse) par Ploum - Lionel Dricot.
This is the first post of a many planned to shed light on the various networking techniques eBPF makes available to a Linux network developer.
A comment on a Hacker News thread inspired me to contemplate why Mastodon is everything we loved about social media before…
This is a brief mini-howto on how to build a linux based wireless router out of what amounts to spare parts, using the linux router project's single disk router software. The total cost of each end of the router, including antennas and cabling, is less than 1300 US dollars, which is a considerable cost savings over…
Published: 15-04-2023 22:30 | Author: Remy van Elst | Text only version of this article
A look at diversity of MX records across all gTLDs and the Top 1M domains, indicating where SMTP is concentrated and what organizations might have broad access to the world's emails.
How much do you know about how the PSTN (that is, the public telephone network) works? At some point long long ago, it was signalled using in-band frequencies, which facilitated the infamous phreaking using so-called “blue boxes”. This led to a switch to out of band signalling, ultimately culminating in something…
I was lucky enough to attend to EuroBSDCon 2023 and offered the opportunity to talk about one of my favorite OpenBSD stock daemon: relayd(8). The talk was recorded and made available on the EuroBSDCon YouTube channel. . One may check the EuroBSDCon 2023 program for more material. This post attempts a reboot of the…
First part of a story on how I’ve built 25 Gbps router for home use.
How to run your own VPN in the cloud for less than a penny per hour ( $0.007 / hr )
Reasons to not use your own domain for email on Eduardo Bautista's blog.
Originally, the domain part of a web address was all ASCII (so no accents, no emojis, no Chinese characters). This was extended a long time ago thanks to something called internationalized domain name (IDN). Today, in theory, you can use any Unicode character you like as part of a domain name, including emojis…
On 26 Nov 2019 at 14:55 UTC, I logged into my server that hosts my website to perform a simple maintenance activity. Merely three minutes later, at 14:58 UTC, the domain name susam.in used to host this website was transferred to another registrant without any authorisation by me or without any notification sent to me…
How to use a company's TXT records to discover the products they use.