1
The secret message hidden in every HTTP/2 connection
If you spy on an HTTP/2 connection starting up you'll notice that it sends an almost-but-not-quite valid HTTP request at the very start of...
2
3
Secure Secure Shell
No ads, no tracking. Ever.<br/> <strong>blog.stribik.technology</strong> is completely static, without cookies or javascript.<br/> <strong>comments.stribik.technology</strong> uses javascript and local storage, it's loaded when you click
4
HTTP/2 Is Done
The IESG has formally approved the HTTP/2 and HPACK specifications, and they’re on their way to the RFC Editor, where they’ll soon be assigned RFC numbers, go through some editorial processes, and be published.
5
We have broken HTTP
If you’re a web developer, then you owe your job to HTTP. You should probably know more about it than you do.
6
7
8
9
Why are free proxies free? (2013)
Personal Blog of Christian Haschek
10
11
Pin-pointing China's attack against GitHub
For the past week, the website "GitHub" has been under attack by China. In this post, I pin-point where the attack is coming from by doing a...
12
13
How a little bit of TCP knowledge is essential
Why you should understand (a little) about TCP
14
15
16
Why the Tor attack matters
Earlier today, Motherboard posted a court document filed in a prosecution against a Silk Road 2.0 user, indicating that the user had been de-anonymized on the Tor network thanks to research conduct…
17
The network is hostile
Yesterday the New York Times and ProPublica posted a lengthy investigation based on leaked NSA documents, outlining the extensive surveillance collaboration between AT&T and the U.S. government…
18
Be your own VPN provider with OpenBSD
Blog about network and security, showing example of Linux iptables and Snort configuration, and Windows security softwares.
19
Google seems to have broken email forwarding
Basically: I'm finding it impossible to reliably convince Google that email from my employees, to my employees, is not spam. I run my own mail server, but most of my employees use Gmail. So I have forwarding set up: employee@dnalounge.com simply forwards to employee@gmail.com. When sending mail using their Gmail…
20
On the Juniper backdoor
You might have heard that a few days ago, Juniper Systems announced the discovery of “unauthorized code” in the ScreenOS software that underlies the NetScreen line of devices. As a resu…
21
FIFA 2014 World Cup live stream architecture
We were given the task to stream the FIFA 14 World Cup and I think this was an experience worth sharing. This is a quick overview about: the architecture, the components, the pain, the learning, th…
22
Why 451?
Today, the IESG approved publication of “An HTTP Status Code to Report Legal Obstacles”. It’ll be an RFC after some work by the RFC Editor and a few more process bits, but effectively you can start using it now.
23
24
Stupid certificate tricks
Sometimes I do things for no real reasons other than “because I can” and/or “it amuses me”. For example, embedding a snarky message into my HTTPS certificate.
25
26
Locking the Web Open: A Call for a Distributed Web
(Short form article, Short lecture , Long lecture , demo of a fraction of the idea of a distributed website (or paste this link in maelstrom ))
27
WebSockets: caution required
WebSockets seem to be gaining a resurgence, suddenly they are sexy again. I think this is the wrong message.
28
29
Your wifi shows me where you live, work and travel
Many people may already know that all your devices try to broadcast your previous connections. I expect that many more have no idea that’s happening. There have been articles published about it before, but without specific examples.
30
Snowden Meets the IETF
Last night, we had a screening of CITIZENFOUR at the IETF meeting in Prague, and about 170 people showed up to see the movie about Edward Snowden’s relevations — information that led the IETF to declare such pervasive monitoring as an attack on the Internet itself.