31
Important security vulnerabilities in OpenVPN
UPDATE: OpenVPN fuzzers now released. Summary I’ve discovered 4 important security vulnerabilities in OpenVPN. Interestingly, these were not found by the two recently completed audits of Open…
32
33
When “Dumb Pipes” Get Too Smart
I wrote this in 2012, when CloudFlare (an almost awkwardly popular CDN) introduced a bug into websites they hosted using some of their "advanced features" via injected JavaScript that managed to not just break the website but lock up entire web browers by tickling a scheduler starvation bug in WebCore. This issue was…
34
Rethinking the D-Bus Message Bus
Later this year, on November 21, 2017, D-Bus will see its 15th birthday. An impressive age, only shy of the KDE and GNOME projects, whose collaboration inspired the creation of this independent IPC system. While still relied upon by the most recent KDE and GNOME releases, D-Bus is not free of criticism. Despite its…
35
Set up a cheap cloud hosted adblocker in an hour for $2.50 a month
👋 Linux commands, bash scripts, and tech pro-tips.
36
The beginning of the end for copper wire
The FCC voted last Thursday to relax the rules for retiring copper wiring. This change was specifically aimed at Verizon and AT&T and is going to make it a lot easier for them to tear down old …
37
Comcast internet speed improved with non-Comcast hardware
I am sure the first thought that goes through the mind of many when reading this headline is "of course Comcast is ripping me off!" Comcast is one of the most hated service providers in the U.S. They have some of the lowest customer satisfaction possible , their pricing tactics outrageo
38
As the U.S. Retreats, Canada Doubles Down on Net Neutrality
As the U.S. Federal Communications Commission prepares to rollback net neutrality protections, the Canadian government has used the controversy to double down on its support for net neutrality safeguards, linking it to democracy, equality, and freedom of expression. I've written several posts on how the U.S. decision…
39
HAProxy vs. Nginx for load balancing (2016)
Load balancers are the point of entrance to the datacenter. They are on the critical path to access anything and everything. That give them some interesting characteristics. First, they are the mos…
40
New in Debian stable Stretch: nftables
Debian Stretch stable includes the nftables framework, ready to use.Created by the Netfilter project itself, nftables is the firewalling toolthat replaces th...
41
Randomize your WiFi MAC address on Ubuntu
Your device’s MAC address can be used to track you across the WiFi networks you connect to. That data can be shared and sold, and often identifies you as an individual. It’s possible to limit this tracking by using pseudo-random MAC addresses.
42
43
Deprecated Linux networking commands and their replacements
In my article detailing the command line utilities available for configuring and troubleshooting network properties on Windows and Linux, I mentioned some Linux tools that, while still included and…
44
45
How I Tricked Symantec with a Fake Private Key
This blog is written by Hanno Böck. Unless noted otherwise, its content is licensed as CC0 .
46
47
Rapid DHCP: Or, how do Macs get on the network so fast? (2011)
One of life's minor annoyances is having to wait on my devices to connect to the network after I wake them from sleep. All too often, I'll open the lid on my …
48
The Internet of Things – A Disaster
It's bullshit, no question, let's get past that part. How did Nest screw up this finished product?
49
TLS 1.2 Session Tickets
Session Tickets, specified in RFC 5077 , are a technique to resume TLS sessions by storing key material encrypted on the clients. In TLS 1.2 they speed up the handshake from two to one round-trips.
50
Signal intelligence 101: SIGINT targets
A quick overview of the various types of signal intelligence targets, with an emphasis on the Soviet Cold War systems
51
Peer-to-peer social networking with Rotonde and Beaker
A short introduction to p2p social networking with Rotonde & Beaker Browser.
52
Net Neutrality will die, so let’s take the profit out of killing it
Fighting the FCC is futile at this point, but Bob has a way to (in a way) save Net Neutrality
53
COAP endpoints on IKEA Trådfri
Hi, great work, I was just about to get down to trying to work this out. I’d got as far noticing it was CoAP and DTLS but no further yet ( https://gist.github.com/hardillb/4ce9fc493b792806e39f7fae4b7c28a7 ). CoAP is new to me so finding out it’s somewhat self describing is really useful.
54
55
Net Neutrality Alive and Well in Canada
The CRTC today released the final chapter (for now) in its net neutrality governance framework, creating policy that establishes strong safeguards against net neutrality violations and severely restricts the ability for providers to engage in zero rating practices. When combined with the federal government's clear…
56
Avery’s laws of Wi-Fi reliability
Hello everyone! After many years of using a massively hacked-up version of dcoombs's NITLog page generator to host these pages, I've become,...
57
58
59
60
OpenSSH Keys: A Walkthrough
Photography and long-form writing on my life, technology, photography, philosophy, books, and whatever else strikes my fancy.