Topics /
Networking & Internet
The most popular blog posts about networking & internet on Hacker News. 3,019 posts.
How to drop 10M packets per second
Internally our DDoS mitigation team is sometimes called "the packet droppers". When other teams build exciting products to do smart things with the traffic that passed through our network, we take joy in discovering novel ways of discarding it.
Upcoming changes to Let's Encrypt and how they affect XMPP server operators
On 11th February, Let’s Encrypt will be rolling out a change to the certificates they issue to servers by default. Although there is generally nothing that Prosody operators need to do, servers using the new certificates may experience problems connecting to some other XMPP servers on the network.
HFT in My Backyard
INTRO As soon as the summer sun returns to Belgium, there is a natural human migration from Francophone Wallonia to the west coast sea in the Flemish part of the country. Here, à la mer du Nord, pe…
Amazon, Verizon found using IPv4 240/4 addresses
In this article we use data from RIPE Atlas probes to investigate the usage of 240/4, a block of IPv4 addresses 'reserved for future use', formally known as Class E in the wild.
Matrix v1.15
Matrix, the open protocol for secure decentralised communications
Flipboard Begins to Federate
*This post was originally published by Mike McCue.
Shortest bit sequence that's never been sent over the Internet (2017)
We can never know for sure because we don't have a comprehensive list of all the data. But what can we say probabilistically? Restating it like so:
Everybody gets WebSockets
Two summers ago, with a seemed-big-at-the-time network of 28 datacenters, not long after introducing Medellin, CloudFlare introduced support for WebSockets, initially for our Enterprise customers.
DDoS Attacks: Best Practices for Prevention and Response
Late last month, Internet users across the eastern seaboard of the United States had trouble accessing popular websites, such as Reddit, Netflix, and the New York Times....
Tunnel via Cloudflare to any TCP service
Cloudflare's cloudflared tunnels are commonly used to 'publish' a web server that runs behind a firewall (e.g. making the webserver accessible from the…
Running BGP in large-scale data centers
What the research is: A first-of-its-kind study that details the scalable design, software implementation, and operations of Facebook’s data center routing design, based on Border Gateway Protocol …
Yep, Passkeys Still Have Problems
Firstyear's blog
AWS and their billions in IPv4 addresses
Earlier this week, I was doing some work on AWS and wanted to know what IP addresses were being used. Luckily for me, AWS publishes this all here https://ip-ranges.amazonaws.com/ip-ranges.json. When you go through this list, you’ll quickly see that AWS has a massive asset
Mastodon and the challenges of abuse in a federated system
This post will probably only make sense to those deeply involved in Mastodon and the fediverse. So if that’s not your thing, or you’re not interested in issues…
The Rise of One-Time Password Interception Bots
In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. That service quickly went offline, but new research reveals a number of competitors have since…
No, SAR Can't See Through Buildings
Explore Capella blogs, case studies, and insights on SAR, space systems, and Earth intelligence.
VPN users unmasked by zero-day vulnerability in Virgin Media routers
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
Quad9 public DNS moves to Switzerland
A public and free DNS service for a better security and privacy
Remembering the LAN
I started programming in the 1990s living above my parent's medical practice. We had 15 PCs for the business, and one for me. The standard OS was MS-DOS. The network started off using IPX over coax to a Novell Netware server, the fanciest software we ever owned. IPX was so much easier than TCP/IP. No DHCP and address…
TCP BBR congestion control comes to GCP
Google Cloud Platform (GCP) now features a cutting-edge new congestion control algorithm, TCP BBR, which achieves higher bandwidths and lower latencies for internet traffic.
The CPU Cost of Networking on a Linux Host
When evaluating networking for a host the focus is typically on latency, throughput or packets per second (pps) to see the maximum load a...
A History of the TTY
It's one of those anachronisms that is deeply embedded in modern technology. From cloud operator servers to embedded controllers in appliances, there must be uncountable devices that think they are connected to a TTY.
5G Skeptic
When I was working at AWS, around 2017 we started getting excited pitches from companies who wanted to be part of the 5G build-out, saying that obviously there’d be lots of opportunities for public-cloud providers. But I never walked away convinced. Either I didn’t believe the supposed customers really needed what 5G…
Enabling IPv6 support for IPv4-only apps on Linux
Guest Post: How to easily enable IPv6 support for apps without it.
Help Censored Users – Run a Tor Bridge
Today the Tor Project is launching the Run a Tor Bridge campaign. Participants are invited to contribute and help censored users by running a Tor bridge. You can find more details below, including our special reward kits for participants. The campaign will run from November 17 to January 7, 2022. Join us and help…
Mandatory encryption on XMPP starts today
Last year Peter Saint-Andre laid out a plan for strengthening the security of the XMPP network. The manifesto, to date signed by over 70 XMPP service operators and software developers, offered a rallying point for those interested in ensuring the security of XMPP for its users. Today is the date that the manifesto…