91
ICMP, Ping, and Traceroute – What I wish I was taught (2020)
I wanted to write a post and do a bit of a deepdive into ICMP, ping and traceroute. I’ve found that having a good networking foundation has been a tremendous…
92
FreeBSD on the Raspberry Pi
How to install FreeBSD on a Raspberry Pi, one step in building an Active Directory server with Samba and FreeBSD.
93
The perils of the “real” client IP
This post ended up being incredibly long comprehensive. I’m afraid that many people won’t read enough to get everything that’s important, so here are the key points:
94
95
5G Skeptic
When I was working at AWS, around 2017 we started getting excited pitches from companies who wanted to be part of the 5G build-out, saying that obviously there’d be lots of opportunities for public-cloud providers. But I never walked away convinced. Either I didn’t believe the supposed customers really needed what 5G…
96
Exploring Mastodon
With the current uncertainty over Twitter, I'm starting to explore using Mastodon
97
98
Ultrasonic Payments
Experimenting with ultrasonic data transmission in JavaScript as a payment method.
99
Police CyberAlarm Uses Alarming Cryptography
Today we’re going to be talking about this code, shared on Twitter by Paul Moore. It’s worth noting that this code snippet was after Paul attempted to alert them to security issues with…
100
Understanding modern Linux routing (and wg-quick)
Back in the old days, I could just type route (or, later, ip route) in my Linux terminal and get an accurate picture of all my routes. This is no longer the case.
101
Things we finally know about network queues (2017)
How big should your queue be, and what should you do when it fills up? Many times, we implement or even deploy a networking system before w...
102
The most backdoor-looking bug I’ve ever seen (2021)
This is the story of a bug that was discovered and fixed in Telegram’s self-rolled cryptographic protocol about seven years ago. The bug didn’t get any press, and no one seems to know about it, probably because it was only published in Russian.
103
The Trouble with 5G
Science News, Physics, Science, Philosophy, Philosophy of Science
104
Running an Open Source Home Area Network
Insights on running a Home Area Network (HAN) nearly completely on open source software, including configurations and metrics.
105
UK telecom EE blocks archive.org
Well at first that looks weird. It pings and all so I jump to incognito mode, and…
106
Protocols that have not changed in the last 30 years
Are you tired of heavy web pages, browser pop-ups, flashing banners, N-factor authentication, user tracking and analytics? Well, there are…
107
Your Organization should run its own Mastodon server
Run your own Mastodon server to control your social media presence
108
109
110
IDN is crazy
IDN, International Domain Names, is the concept that lets us register and use international characters in domain names, and by international we of course mean characters outside of the ASCII range. Recently I have fought some battles against IDN and IDN decoding so I felt this urge to write a lot of words about it ……
111
Don't send to Gmail over IPv6
Yes, some people do it, and yes, for some people, it works fine. But..... If you're standing up a new server and it has an IPv6 IP address, ...
112
IRC technology news from the second half of 2021
Technical summaries of developments in IRC software and protocol specifications during the second half of 2021.
113
Who controls the Internet? And should they? (2021)
This is a lightly edited transcript of my keynote over at NANOG 83, so please accept my apologies if some of the wording is not (yet) as clear as it should be! The original video, including Q&A can be found on NANOG’s Youtube channel Hello, and welcome to this presentation on who controls the internet, and if they…
114
Security concerns with the e-Tugra certificate authority
Certificate authorities (CAs) are a critical backbone of internet security; when they are compromised, users lose the ability to securely connect to websites without fear of interception. Websites cannot insulate themselves against a fully-compromised CA, even if they normally use other CAs.
115
When did POP and IMAP become a “legacy protocol?”
So when did POP and IMAP become a “legacy protocol?”
116
Outlook.com is silently discarding email messages (2015)
Outlook.com and hotmail.com is silently discarding email messages from our SMTP server.
117
118
Sufficient Decentralization for Social Networks
A design pattern to reduce centralized control and change incentives in social networks.
119
What I learned from making a DNS client in Rust
A lot about sockets, syscalls and bits
120
Extracting TLS keys from an unwilling application (2020)
I want to be able to inspect the traffic of programs running on my computer. I don’t really trust those programs and ideally I’d like to put nearly all of them into a high security jail. One of those programs is Oculus software. There are a few reasons why I want to be cautious about Oculus software.