AWS and their billions in IPv4 addresses
Earlier this week, I was doing some work on AWS and wanted to know what IP addresses were being used. Luckily for me, AWS publishes this all here https://ip-ranges.amazonaws.com/ip-ranges.json. When you go through this list, you’ll quickly see that AWS has a massive asset
Remembering the LAN
I started programming in the 1990s living above my parent's medical practice. We had 15 PCs for the business, and one for me. The standard OS was MS-DOS. The network started off using IPX over coax to a Novell Netware server, the fanciest software we ever owned. IPX was so much easier than TCP/IP. No DHCP and address…
Does Zoom use end-to-end encryption?
TL;DR: It’s complicated. Yesterday Zoom (the videoconferencing company, not the defunct telecom) put out a clarification post describing their encryption practices. This is a nice example of …
Rediscovering CardDAV
I can no longer sync iOS’ Contacts with my macOS Catalina’s Finder (the iOS sync portion of iTunes is now built into the Finder in macOS Catalina); the OS insists I’ve iCloud configured for Contact...
Maybe we shouldn't want a fully decentralized web
Why I have stopped working with IPFS and the distributed web
The PCAP – single file with 50 different protocols
For the last couple of years, I captured many different network and upper-layer protocols and published the pcaps along with some information and Wireshark screenshots on this blog . However, it always takes me some time to find the correct pcap when I am searching for a concrete protocol example . There are way too…
AWS NLBs and the mixed up TCP connections
One of my services was running into timeouts, because connections were being reset by clients. I had assumed that it couldn't be the Network Load Balancers (NLB
Use Unix Pipes to Improve Chromecast Playback
When casting from YouTube to a Chromecast, sometimes the audio playback will skip and stutter. We can use VLC and Unix pipes to address this problem.
The Web is the Next Platform (1995)
I started working full-time on what became Internet Explorer 1.0 in early October, 1994, grew the engineering team to 67 individuals by the time we shipped IE 3.0 in August, 1996, and got very litt…
What happens when you load a URL? (2015)
I've been hearing this question a lot lately, and when I do, it reminds me how much I don't know. Here are some questions this question brings to mind.
How to Improve Bluetooth Audio Quality on Linux
Bluetooth Audio on Linux is a bit of a mess. There's a fair bit you can do to significantly improve the quality though.
Zero Trust Networks
I am leery of jargon. I am as guilty of using it as the next engineer, but there comes a point where there are just too many precise, narrowly-understood terms polluting your vocabulary. The circle of people you can talk to shrinks until going to the store to buy milk feels like an exercise in speaking a foreign…
WireGuard on K8s: road-warrior-style VPN server
Road-warrior-style VPN server
Leakage paths for the Apple / Google Bluetooth tracing system
Plus general overview
I'm back into the grind of FreeBSD's wireless stack and 802.11ac
hi! Yes, it's been a while since I posted here and yes, it's been a while since I was actively working on FreeBSD's wireless stack. Life's...
TP-Link Archer VR1600V V2 Super User Password Cracked
Well the news is out, I won’t explain the method for reasons, but our code warriors have a new fight. After requesting the SU password, they were told flat out it doesn’t exist and refe…
Achieving 100Gbps intrusion prevention on a single server
Achieving 100 Gbps intrusion prevention on a single server, Zhao et al., OSDI’20 Papers-we-love is hosting a mini-event this Wednesday (18th) where I’ll be leading a panel discussion including one …
Building a WireGuard jail with FreeBSD's standard tools
Recently, I had an opportunity to build a WireGuard jail on a FreeBSD 12.1 host. As it was really quick and easy to setup and it has been working completely fine for a month, I’d like to share my experience with anyone interested in this topic. I would like to use WireGuard app on my Android phone to access my home…
Cloud Traffic
I recently watched Build an enterprise-grade service mesh with Traffic Director , featuring Stewart Reichling and Kelsey Hightower of GCP, and of course Google Cloud’s Traffic Director . Coming at this with a brain steeped in 5½ years of AWS technology and culture was surprising in ways that seem worth sharing.
Creating a Home IPv6 Network
One of the recent experiences of Linux Plumbers Conference convinced me that if you want to be part of a true open source WebRTC based peer to peer audio/video interaction, you need an internet address that’s not behind a NAT. In reality, the protocol still works as long as you can contact a stun server to tell you…
A look at Chang’e 5 telemetry
Chang’e 5 is a Chinese lunar sample return mission. It was launched a few days ago on 2020-11-23 from Wenchang and is estimated to perform lunar orbit injection on Saturday. Since then, a number of Amateurs such as USA Satcom , Paul Marsh M0EYT , Scott Tilley VE7TIL , Fer IW1DTU and others have been receiving the…
Beginners guide to gateways and proxies
Have you heard of gateways, proxies, load balancer, API gateways? This article explains what gateways are, what is their purpose and how they work with pract...
Decentralize Messaging
Twitter is funding a team to decentralize social media. I think they should start with messaging.
DisplayPort and 4K
The Problem Video playback looks better with a higher scan rate. A lot of content that was designed for TV (EG almost all historical documentaries) is going to be 25Hz interlaced (UK and Australia)…