The tech behind building an independent, internet radio station
Oscar is on the web
BGP 768K day, and whether it will cause internet outages
Learn what 768K day is and what it may mean for businesses that rely on the Internet to operate.
We built network isolation for 1500 services
We've been working on isolating the 1,500 services that power Monzo. The sheer size and complexity of our platform made this difficult. But by protecting us against compromised services, it makes Monzo more secure.
5G: if you build it, we will fill it
What is 5G? Why do we care? How much faster does the pipe get? What can we do with a fatter pipe? How does this relate to VR? Cars? Broadband? What’s the killer app? Really, unless you work in a few very narrow niches, you shouldn’t spend much time thinking about it.
Starlink is a big deal
Part of my series countering misconceptions in space journalism. Now available in audio form. Starlink, SpaceX’s plan to serve internet via tens of thousands of satellites, is a staple in the…
Equiano, a subsea cable from Portugal to South Africa
Google’s private Equiano subsea cable will improve connectivity, resilience and latency for the people who live and work in Africa.
The Low Latency Live Streaming Landscape in 2019
One of the hot topics of NAB, IBC, and Demuxed last year was “low latency” live video streaming. In this post we’ll examine the spectrum of different latencies that users experience, discuss the use ca...
DNS Security: Threat Modeling DNSSEC, DoT, and DoH
There's been a lot of talk about DNS-over-HTTPS aka DoH lately, primarily due to Mozilla's and Google's respective plans to move forward with enabling it in their browsers. There's also a lot of misunderstanding and conflation of speculated plans for world domination with practical benefits of the technology; it…
GPS Time Rollover Failures Keep Happening, But They’re Almost Done
This is week "1111111111" in the GPS system. Tomorrow morning it will roll over to week "0000000000". How well will various systems handle this change? Not well, judging by what we've seen so far!
New AWS UDP Load Balancing for Network Load Balancer
The Network Load Balancer is designed to handle tens of millions of requests per second while maintaining high throughput at ultra low latency, with no effort on your part (read my post, New Network Load Balancer – Effortless Scaling to Millions of Requests per Second to learn more). In response to customer requests…
Cisco devices must regenerate self-signed certificates before 2020
Self-signed X.509 PKI certificates (SSC) that were generated on devices that run affected Cisco IOS® or Cisco IOS XE software releases expire on 2020-01-01 00:00:00 UTC. New self-signed certificates cannot be created on affected devices after 2020-01-01 00:00:00 UTC. Any service that relies on these self-signed…
The Great $50M African IP Address Heist
A top executive at the nonprofit entity responsible for doling out chunks of Internet addresses to businesses and other organizations in Africa has resigned his post following accusations that he secretly operated several companies which sold tens of millions of dollars worth of the increasingly scarce resource to…
Large European routing leak sends traffic through China Telecom
Guest Post: A Swiss data centre leaked over 70,000 routes to China Telecom, some for over two hours.
VPN services blocked in Sri Lanka as information controls tighten
Internet providers in Sri Lanka are in the vanguard of blocking access to digital security tools that allow users to work around censorship, according to new NetBlocks network measurement data. ...
Building an LTE Access Point with OpenWRT Rooter
My LTE internet connection (70 Mbit downstream, 15 MBit upstream) came with a combined Huawei B315s LTE modem/access point. As I was using it for the last two to three years a couple of problems did arise: the internet connection was often shaky, oftentimes the uplink connection got lost and I had to power-cycle the…
DNS servers that offer privacy and filtering
If you’re a programmer, a systems administrator, or really any type of IT worker, you probably have your favorite go-to IP addresses for troubleshooting.
SOCKMAP – TCP splicing of the future
cccccblgtbhdtvkdkbdfcdvgiicuckkdkruvfceiuiur
AWS Is Now Available from a Local Zone in Los Angeles
AWS customers are always asking for more features, more bandwidth, more compute power, and more memory, while also asking for lower latency and lower prices. We do our best to meet these competing demands: we launch new EC2 instance types, EBS volume types, and S3 storage classes at a rapid pace, and we also reduce […]
The Early History of Usenet, Part I: The Technological Setting
Usenet—Netnews—was conceived almost exactly 40 years ago this month. To understand where it came from and why certain decisions were made the way they were, it’s important to understand the technological constraints of the time.
Maesh, a Lightweight and Simpler Service Mesh
We are proud to introduce Maesh, Containous’ new service mesh designed from the ground up to be straightforward, easy to install and easy to use...
Wireless attacks on aircraft instrument landing systems
Wireless attacks on aircraft instrument landing systems Sathaye et al., USENIX Security Symposium 2019 It’s been a while since we last looked at security attacks against connected real-world entiti…
TLS Termination for Network Load Balancers
When you access a web site using the HTTPS protocol, a whole lot of interesting work (formally known as an SSL/TLS handshake) happens to create and maintain a secure communication channel. Your client (browser) and the web server work together to negotiate a mutually agreeable cipher, exchange keys, and set up a…