1
Why Is This Website Port Scanning Me?
Investigation of the practice of port scanning site visitors for fingerprinting and tracking.
2
Zoom rolled their own encryption scheme, transmit keys through servers in China
This report examines the encryption that protects meetings in Zoom and finds that they have made their own encryption scheme and has significant weaknesses.
3
BitTorrent v2
libtorrent-2.0 has just been released with a few major new features. One of them is support for BitTorrent v2 .
4
A Facebook crawler was making 7M requests per day to my stupid website
Francesco Napoletano is a highly competent staff software engineer with 20+ years of experience developing a wide range of tools and applications for the web stack.
5
Turns out half the internet has a single-point-of-failure called “Cloudflare”
On Friday a large chunk of the internet went off the air when Cloudflare apparently fat-fingered a routing update and sent all of their global traffic to a single POP, vaporizing it almost instantly. This affected their DNS service, and of course, as everybody knows, when your DNS is gone,…
6
Zoom to bring end-to-end encryption to all users, including non-paying
Learn more about how to use each Zoom product to connect with coworkers, customers, businesses, and more with insights and best practices.
7
A Google Cloud support engineer solves a tough DNS case
How a Google Cloud support engineer found one customer’s missing DNS packets
8
9
Another free CA as an alternative to Let's Encrypt
Let's Encrypt is an amazing organisation doing an amazing thing by providing certificates at scale, for free. The problem though was that they were the only such organisation for a long time, but I'm glad to say that the ecosystem is changing. It's always a good idea
10
Cloudflare and the Wayback Machine, joining forces for a more reliable Web
Cloudflare now populating and using the Internet Archive’s Wayback Machine in its content distribution network application Cloudflare and the Internet Archive are now working together to help make the web more reliable. Websites that enable Cloudflare’s Always Online service will now have their content automatically…
11
Gitter is joining Matrix
Matrix, the open protocol for secure decentralised communications
12
Mozilla’s DNS over HTTPs
The current insecure DNS system leaves billions of people around the world vulnerable because the data about where they go on the internet is unencrypted. We’ve set out to change ...
13
Jitsi Meet features update
Learn about Jitsi Meet features update including a new systems audio update and new translations features. Click here for more information.
14
Does Apple really log every app you run? A technical look
Apple’s launch of macOS Big Sur was almost immediately followed by server issues which prevented users from running third-party apps on their computers. While a workaround was soon found by people on Twitter, others raised some privacy concerns related to that issue.
15
Proof of concept: end-to-end encryption in Jitsi Meet
Check out our progress in end-to-end encryption calls in Jitsi. Give us your crypto knowledge feedback with the code and learn how to demo it here.
16
Cross-signing and end-to-end encryption by default
Matrix, the open protocol for secure decentralised communications
17
A detailed look at the router provided by my ISP
I have been living in my current apartment for more than a year now and I noticed I have never inspected my router which was provided by my ISP when I moved in. The only thing I changed in router is
18
Wireless Is a Trap
Over and over again, I’ve seen people fix some wireless-related problem and go “wow, I had no idea how much better this could be!" • Wireless protocols often silently operate in an extremely degraded state that makes them substantially worse than wired equivalents.
19
20
How to SSH Properly
This post explains security best practices to use SSH properly and securely
21
Ok Google: please publish your DKIM secret keys
The Internet is a dangerous place in the best of times. Sometimes Internet engineers find ways to mitigate the worst of these threats, and sometimes they fail. Every now and then, however, a major …
22
Building a Simple VPN with WireGuard with a Raspberry Pi as Server
Now that wireguard will be part of the upcoming Linux 5.6 Kernel it’s time to see how to best integrate it with my Raspberry Pi based LTE-Router/Access Point Setup. What is my scenario? Raspberry Pi 3 with a LTE hat, using a public IP address. This will be the VPN server (called edgewalker in this post) An Android…
23
NAT Slipstreaming
exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT
24
Riot is now Element
Hi everyone, We are incredibly excited to announce that Riot is now Element! In fact we have simplified all our naming: Element is also the name for New Vector (the company behind Riot) while Modular, our flagship Matrix hosting service, has become Element Matrix Services. For those discovering us for
25
72% of smart TVs and 46% of game consoles hardcode DNS settings
Welcome Hacker News readers!• Thank you to M. Hammad Mazhar for his research that inspired this guide.• @healyio made some great additional suggestions in th...
26
Improving DNS Privacy with Oblivious DoH
Oblivious DoH (ODoH) makes secure DNS over HTTPS (DoH) queries into private queries which prevent the leakage of client IP addresses to resolvers. The new proposed ODoH standard addresses this problem and today we are enabling users to use this protocol with 1.1.1.1
27
Running your own secure communication service with Matrix and Jitsi
Matrix, the open protocol for secure decentralised communications
28
Fun with IP address parsing
A quick rundown of the many text representations of IP addresses.
29
Critical Bluetooth vulnerability in Android
On November 3rd, 2019, we have reported a critical vulnerability affecting the Android Bluetooth subsystem. This vulnerability has been assigned CVE-2020-0022 and was now patched in the latest security patch from February 2020. The security impact is as follows:
30
eBay is port scanning visitors to their website
Websites are scanning for open ports on your PC to help fight fraud, but this data also flows into a massive, global tracking database.