Bye-Bye Mastodon, our account on Fosstodon.org was deleted yesterday
We discovered the Mastodon peer to peer social network in February 2019 from a customer suggestion and we loved it. The idea of having a decentralized social network, not dependent on one source is…
Why Not WireGuard
The latest thing that is getting a lot of attention is WireGuard - the new shooting star in terms of VPN. But is it as great as it sounds? I would like to discuss some thoughts, have a look at the implementation and tell you why WireGuard is not a solution that will replace IPsec or OpenVPN.
Hacking Ethernet out of Fibre Channel cards
This story, like another in the past , started as an eBay purchase that I would soon regret. I was scrolling through my favorite eBay supplier when I found a listing titled Job Lot Of Roughly 350 Various Network Cards . This of course piqued my interest. Some close photo inspection identified a whole load of cards in…
The German Problem with Tor
EAs of the 5th July 2020, there are 1357 Tor bridges available for users in countries who censor the Tor network to use. Having just over 1,000 IP addresses is not a lot for such a big privacy network as Tor is, especially considering that the number of Tor Bridges peaked at 4,227 on the 4th January 2015. That means…
Pleroma 2.0: a free, federated social networking server built on open protocols
Long-awaited and finally ready, just in time for FOSDEM International Women’s Day, Pleroma 2.0.0 is here! There have been a lot of changes, including breaking ones, so let me give you a quick tour of this release.
IPv6 WireGuard Peering
Documentation and guides from the team at Fly.io.
Galileo's Ground Segment Problem
The European Global Navigation Satellite System Galileo has recently been suffering from frequent "almost disruptions", most likely partially due to Corona, and possibly also due to Brexit, but in any case due to some historical stinginess. Before I explain what is going on, I should hasten to say that most days of…
Together: New version of Jami (alternative to Zoom and Jitsi)
Jami facilitates share, freely and privately.
An Android 8.0-9.0 Bluetooth Zero-Click RCE
Nowadays, Bluetooth is an integral part of mobile devices. Smartphones interconnect with smartwatches and wireless headphones. By default, most devices are configured to accept Bluetooth connections from any nearby unauthenticated device. Bluetooth packets are processed by the Bluetooth chip (also called a…
Tin Can Phone Modem
Mike Kohn's music, software, and electronics projects.
The text adventure game of exiting a Telnet session
We've all been there, right? You debug something, you try telnet to see if a port is open, and now you're stuck in a telnet session.
Dissecting an SSL Certificate (2017)
Dissecting an SSL certificate
ActivityPub Could Be the Future
You’ve heard of stuff like Twitter, Facebook, and Instagram. Make an account on one, and it only works there. You can’t send a DM to your friend on Twitter from Facebook Messenger. You can’t browse your friend’s Instagram feed from Twitter. Each one is closed off
Facebook reveals 'SuperCell' tower to increase connectivity in rural areas
As part of our efforts to help expand connectivity around the world, Facebook Connectivity has been prototyping SuperCell, a wide-area coverage solution for increasing mobile connectivity in rural …
Fuck Cloud Messaging
Ever tried to send a push notification to your phone? How hard can it be? I was surprised when I tried to push a simple push notification without involving a third party. It's not just hard they have made it near impossible to send a simple push notification without subscribing to their service. Moreover it doesn't…
TCP Performance problems related to Nagle’s Algorithm and Delayed ACK (2005)
This page describes a TCP performance problem resulting from a little-known interaction between Nagle’s Algorithm and Delayed ACK. At least, I believe it’s not well known: I haven’t seen it documented elsewhere, yet in the course of my career at Apple I have run into the performance problem it causes over and over…
Only distributed fact-checking can keep up with democratized distribution
Tragedy of the comments
Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period
We're crowdsourcing ideas and recommendations to help us enhance the privacy and security benefits of DNS-over-HTTPS (DoH) for users around the world
DKIM: Show Your Privates
If you’re like most people, there’s a good chance that it’s been years since you’ve sent an email that wasn’t cryptographically signed. You don’t use PGP, you say? Well, even if you are…
FritzFrog: A New Generation of Peer-to-Peer Botnets
A Akamai é a empresa de cibersegurança e computação em nuvem que potencializa e protege negócios online.
WebAssembly brings extensibility to network proxies
With the Istio 1.5 release we are happy to introduce WebAssembly (Wasm) extensions in Envoy, built with our long running collaborators Lyft and IBM. With partners like Solo.io deepening their engagement as well, we are excited to see the community and ecosystem developing around this segment of the open source world.
eBPF Summit Day 1 Recap
Day 1 of the eBPF Summit delivered insightful talks on how eBPF is reshaping Linux networking, observability, and security — with ove...
How CDNs Generate Certificates
Say Hi to Thomas. Thomas's first weeks at Fly have been hectic, but he's been taking notes, copious notes that can teach you all about the wild world of certificate infrastructure. Read on to discover more...
How does a TCP Reset Attack work?
A TCP reset attack is executed using a single packet of data, no more than a few bytes in size. A spoofed TCP segment, crafted and sent by an attacker, tricks two victims into abandoning a TCP connection, interrupting possibly vital communications between them.