Reverse Shell from an OpenVPN Configuration File
While doing background research on OpenVPN I stumbled upon an interesting question on Stack Exchange.
Topics /
The most popular blog posts about networking & internet on Hacker News. 3,019 posts.
While doing background research on OpenVPN I stumbled upon an interesting question on Stack Exchange.
A public and free DNS service for a better security and privacy
It's been a while since we last wrote about Layer 3/4 DDoS attacks on this blog. This is a good news - we've been quietly handling the daily onslaught of DDoS attacks. Since our last write-up, a handful of interesting L3/4 attacks have happened. Let's review them.
Last time we perambulated on telephones, we discussed open-wire long-distance telephone carriers and touched on carriers intended for cables. Recall that, in the telephone industry, cable refers to an assembly of multiple copper twisted pairs (often hundreds) in a single jacket. There is a surprising amount of…
A few years ago I wrote [_The World in Which IPv6 was a Good Design_](https://apenwarr.ca/log/20170810). I'm still proud of that article, bu...
Could the complex political history of Diego Garcia put the .io domain at risk? Tech firms should be aware of potential risk to their websites.
The seedy underbelly of gRPC.
Wow! The pace of IPv6 deployment is rapidly accelerating! This morning Google’s IPv6 measurements crossed the 3% milestone just under five months from when the 2% milestone was crossed. Prior to that it had taken 11 months to go from 1% to 2%. The growth path is certainly heading in the right direction: To […]
A proof of concept demonstrating how to use the Hinge dating app as a C2.
Visit the post for more.
NOTE: Currently this guide only deals with IPv4 as most people still don't use IPv6 and many ISPs also still only use IPv4, but IPv6 is planned for a future update of the guide.
Recently, I covered some of the history of Ethernet's tenuous relationship with installed telephone cabling . That article focused on the earlier and more business-oriented products, but many of you probably know that there have been a number of efforts to install IP networking over installed telephone wiring in a…
In a vote of 232-190, the House of Representatives passed the Save the Internet Act (H.R. 1644). This is a major step forward in the fight for net neutrality protections, and it’s because you spoke up about what you want.The Save the Internet Act was written to restore the strong and hard-fought...
Posted by Elie Bursztein, Anti-Abuse Research Lead Earlier this year, we deployed a new TLS cipher suite in Chrome that operates three tim...
As I was debugging a wireless mouse based on a 2.4 GHz proprietary protocol, I wanted to detect the transmitted signals. Note that I purposefully wrote “detect”: It was sufficient to see how often the transmission occurred (and if at all) and whether the link was unidirectional – i.e., only the mouse transmits and the…
My current employer does a lot of really cool systems work that’s covered by NDAs. I recently did some work to integrate a cool open source tool into our workflow. Felt it deserved a blog post. NFS Testing Requires Parallelism. I work for Pure Storage. One of the products we make is a scale-out NFS1 (and…
You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites . This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.
On March 15th, an HTTPS/TLS Certificate Authority (CA) was tricked into issuing fraudulent certificates that posed a dire risk to Internet security. Based on currently available information, the incident got close to — but was not quite — an Internet-wide security meltdown. As this post will...
A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker…
There's been some discussion about forward secret TLS recently, spurred, I think, by this piece from Declan McCullagh on CNET.
Traceroute can points to a link having terrible latency, but despite what it appears, it's easy to misread the output and jump to the wrong conclusion.
Get modern messaging features in the US with RCS in the Messages app