2761
Topics /
Networking & Internet
The most popular blog posts about networking & internet on Hacker News. 3,019 posts.
2762
2763
Scanners Beware: Welcome to the network from hell
We’ve crafted a bold defense strategy that not only slows scans but actively disrupts and deceives attackers.
2764
UDP transmitter implemented with PIO and DMA on the RP2040
The objective for this project was to implement a UDP transmitter for use on the RP2040 that would consume zero CPU time. The system described on this webpage is implemented with 3 PIO state machines, 12 DMA channels, and 1 PWM channel. It generates an NLP, performs packet checksum calculations, and performs packet…
2765
Apparent use of Sandvine devices for malicious or dubious ends in two countries
This report describes our investigation into the apparent use of Sandvine/Procera Networks Deep Packet Inspection (DPI) devices to deliver nation-state malware in Turkey and indirectly into Syria, and to covertly raise money through affiliate ads and cryptocurrency mining in Egypt.
2766
Inline PGP signatures considered harmful
People often suggest that inline PGP signatures in e-mail are somehow more compatible or more acceptable than using PGP/MIME . This is a mistake. Inline PGP signatures are prone to several failure modes, up to and including undetectable message tampering.
2767
Tracing HTTP Requests with tcpflow
PagerDuty went off very early in the morning, and our hero cursed his bad luck and received the phone call. He made PagerDuty repeat the message twice, but couldn’t understand the message. He pressed the number to acknowledge the incident. He opened the MacBook and found the slack message from the PagerDuty bot more…
2768
Flawed routers flood University of Wisconsin internet time server (2003)
ABSTRACT In May 2003, the University of Wisconsin - Madison found that it was the recipient of a continuous large scale flood of inbound Internet traffic destined for one of the campus' public Network Time Protocol (NTP) servers. The flood traffic rate was hundreds-of-thousands of packets-per-second, and hundreds of…
2769
Anomalous keys in Tor relays
Counting almost 7,000 relays , the Tor network is one of the largest volunteer-run anonymity networks operating today. Most of the volunteers who operate these relays choose to remain anonymous, and little is known about how they set up or operate their relays. As a result, it is not clear if all relays correctly…
2770
Xdpcap: XDP Packet Capture
Our servers manage heaps of network packets, from legit traffic to big DDoS attacks. For top efficiency, we adopted eXpress Data Path (XDP), a Linux kernel tool for swift, low-level packet handling.
2771
RFC 9518 – What can internet standards do about centralisation?
RFC 9518: Centralization, Decentralization, and Internet Standards has been published after more than two years of review, discussion, and revision.
2772
2773
Internet usage pattern during power outage in Spain and Portugal
What patterns do we see in RUM data during the April 28th power outage in Portugal and Spain?
2774
Android’s IPv6 Is Still Broken
I got into some interesting discussions about IPv6 on Twitter. Then someone asked if Android is getting DHCPv6 support in version 11 of the OS.
2775
2776
2777
2778
Google – polling like it's the 90s
A technical review of the live score feature in Google search results, delivered with some surprisingly old-school tech from the 90s.
2779
2780
SPF, DMARC, and DKIM: How to Keep Your Email Out of the Spam Folder
Insights gleaned from years in the trenches. Truly essential tips, practices, and guides for achieving WordPress success.
2781
ZeroMQ - Disconnects are Good for You
The hidden disconnects of ZeroMQ can be dangerous if you don’t write your application to work around them.
2782
An argument for increasing TCP's initial congestion window (2024)
Introduction Google has a long history of performing networking research, making changes, and pushing those changes to the entire internet. In 2011, they published one of my favorite papers, which described their decision to increase the TCP initial congestion window from 1 to 10 on their entire infrastructure. This…
2783
BGP and RPKI
We have been receiving occasional notifications, primarily via twitter from concerned customers who have visited 'isbgpsafeyet.com' and been told by the site's operator, Cloudflare, that their ISP is, apparently unsafe.
2784
The Internet Gopher from Minnesota
Structured Text on the Internet before the World Wide Web
2785
A first look at Aperture by Tailscale (private alpha)
Aperture is an AI gateway that doesn't get in the way of developers, and works with most AI tools.
2786
Implementing fast TCP fingerprinting with eBPF
In this article I want to document my journey implementing fast TCP fingerprinting in a golang webserver, using eBPF.
2787
Snapchat - GibSec Full Disclosure
A series of nicely formatted documents about Snapchat by GibSec.
2788
VoWiFi
I haven't written for a bit, in part because I am currently on vacation in Mexico. Well, here's a short piece about some interesting behavior I've noticed here.
2789
2790
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks