1
Apple's git still trusts the compromised eMudhra certificates
Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
Topics /
Networking & Internet
The most popular blog posts about networking & internet on Hacker News. 130 posts.
2
A joke domain purchase turned in geopolitical warfare
Why is the military and a cheese fortune teller contacting me about SondeHub.org
3
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
4
Mobile carriers can get your GPS location
In iOS 26.3, Apple introduced a new privacy feature which limits “precise location” data made available to cellular networks via cell towers. The feature is only available to devices with Apple’s in-house modem introduced in 2025. The announcement1 says https://support.apple.com/en-us/126101 ↩
5
Migrating from DigitalOcean to Hetzner
A real-world production migration from DigitalOcean to Hetzner dedicated, handling 248 GB of MySQL data across 30 databases, 34 Nginx sites, GitLab EE, Neo4j, and live mobile app traffic — with zero downtime.
6
7
How to turn anything into a router
I don’t like to cover “current events” very much, but the American government just revealed a truly bewildering policy effectively banning import of new consumer router models. This is ridiculous for many reasons, but if this does indeed come to pass it may be beneficial to learn how to “homebrew” a router…
8
Dead Internet Theory
I had a wierd experience which made me realize that the internet is probably dead.
9
Discord Alternatives, Ranked
Building an online community takes more than tools. But the right tool can make all the difference.
10
Why does SSH send 100 packets per keystroke?
I made my next game twice as fast by forking go's crypto library
11
New 10 GbE USB adapters are cooler, smaller, cheaper
For years, the best way to get 10 gigabit networking on laptops was to buy an expensive, large, and hot 10 GbE Thunderbolt adapter. With new RTL8159-based 10G USB 3.2 adapters coming onto the market, the bulky adapters might be a thing of the past. Just look at the size of the thing in comparison to my Thunderbolt…
12
Setting up a free *.city.state.us locality domain (2025)
In the US, you can get a domain name like `somename.city.state.us` for free. If your town has its own domain, you can get nameservers from Amazon Lightsail, send the *Interim .US Domain Template* to the delegated manager for your locality, then point DNS entries at your webhost.
13
Mullvad exit IPs are surprisingly identifying
Update 5/29: Mullvad has begun rolling out a mitigation feature on their servers that scrambles exit IP positions, thereby fixing this issue. IPs are still deterministically selected based on the pubkey. Mullvad is one of the few VPN providers that offers multiple exit IPs for its servers. If two people connect to the…
14
Major European payment processor can't send email to Google Workspace users
Viva.com, one of Europe's largest payment processors, sends verification emails without a Message-ID header — a requirement of RFC 5322 since 2008. Google Workspace rejects them outright. Their support team's response to my detailed bug report: your account has a verified email, so there's no problem.
15
Unlocking any car from X brand in most of the world
I've always had a soft spot for this particular car brand. Our family has owned a few of them over the years, and they've served us incredibly well. In 2023, I bought a new four wheel drive/SUV from them, and it was the first time I had
16
The Post-American Internet
On December 28th, I delivered a speech entitled " A post-American, enshittification-resistant internet " for 39C3, the 39th Chaos Communications Congress in Hamburg, Germany. This is the transcript of that speech.
17
Tether: iMessage, SMS, etc. on Linux
No AirPlay kinda sucked, but the one thing I kept wishing I had was what Apple calls "Continuity" : the ability to send and receive iMessages and SMS, share files, sync clipboard, and see notifications from my iPhone on my computer.
18
Somebody used spoofed ADSB signals to raster the meme of JD Vance
This, if it is still visible: Via: Next up, age verification for ADSB?
19
Why Switzerland has 25 gbit internet and America doesn't
The Free Market Lie: Why Switzerland Has 25 Gbit Internet and America Doesn't
20
What your Bluetooth devices reveal
Building Bluehood, a Bluetooth scanner that reveals what information we leak just by having Bluetooth enabled on our devices.
21
There are no instances in ATProto
Like RSS and Google Reader.
22
Doing gigabit Ethernet over my British phone wires
Disclaimer: None of this is written by AI, I’m still a real person writing my own blog like its 1999 I finally figured out how to do Gigabit Ethernet over my existing phone wires. Powerline adapter…
23
The internet is kind of a predatory cesspit now
Personal blog of Stephen Diehl - Software engineer writing about technology, programming, and the future
24
25
FastCGI: 30 years old and still the better protocol for reverse proxies
For FastCGI's 30th birthday, let's look at how it avoids the security problems inherent in HTTP reverse proxying
26
What Apple and Google are doing to push notifications
I wrote recently about what Google, Yahoo, Microsoft, and Apple are doing to your email: how four providers stopped being transport layers and turned into active intermediaries between brands and their customers, parsing, ranking, summarising, and increasingly answering on the recipient's behalf.
27
The dead Internet is not a theory anymore
Bots have taken over
28
How I got over 300 Tor exit nodes removed
On Friday Oct 2, 09:35am, 333 infected exit nodes started a coordinated campaign to intercept SSH connections and gather as much unencrypted data as possible.
29
Measuring Input Latency on Linux: X11 vs. Wayland, VRR, and DXVK
I built a device to measure end-to-end input latency, then used it to find out what actually moves the needle.
30
I'm Getting into Mesh Networks (Meshtastic, MeshCore, and Reticulum)
I love networking, a lot. So much so that I've run my own ISP since 2024, complete with its own ASN, IPv4/6 address space, fiber optics, etc. However, do this and you quickly realize how reliant you still remain on central service providers. The internet is a mesh,