It’s an established fact on the internet that we have ran out of IP(v4) addresses , and we are starting to see the pressure on obtaining IPv4 space. For example if you want to get a /24 block from RIPE NCC when you sign up as a member, then you are currently looking at a 2 month wait for a recycled IPv4 /24 block .
Today, Let's Encrypt announced that they are enabling an extension to DNS CAA records known as ACME-CAA ( RFC 8657 ). This came as a surprise to me, but a very pleasant one, since I wrote the ACME-CAA specification back in 2016 with Let's Encrypt in mind, and it was finally published as RFC 8657 back in 2019. To my…
The long-running BBC sci-fi show Doctor Who has a recurring plot device where the Doctor manages to get out of trouble by showing an identity card which is actually completely blank. Of course, thi…
As I've previously blogged in Pure Rust Implementation of Apple Code Signing (2021-04-14) and Expanding Apple Ecosystem Access with Open Source, Multi Platform Code signing (2022-04-25), I've been hacking on an open source implementation of Apple code signing and notarization using the Rust programming language. This…
Missouri Governor Mike Parson made headlines last year when he vowed to criminally prosecute a journalist for reporting a security flaw in a state website that exposed personal information of more than 100,000 teachers. But Missouri prosecutors now say they will not pursue charges following revelations that the data…
This document provides the GNU Name System (GNS) technical specification. GNS is a decentralized and censorship-resistant domain name resolution protocol that provides a privacy-enhancing alternative to the Domain Name System (DNS) protocols. This document defines the normative wire format of resource records…
I hate to write a piece just saying Someone Is Wrong On The Internet. But Reid Blackman’s The Signal App and the Danger of Privacy at All Costs (in the NYTimes , forsooth) is not just wrong but dangerously misleading. I haven’t seen a compact explainer on why, so here goes.
Using Google Analytics in a legally compliant way is still possible in Europe. Here we explain how.
Explore Tailscale SSH Console, a web-based SSH client that simplifies connecting to your devices. Learn how Tailscale integrates WebAssembly, WireGuard, and SSH for secure, password-free access right from your browser."
Just about everybody who has ever used a service on the web has experienced the following account creation follow:
Xe Iaso's personal website.
Your email provider owns your online identity by controlling your email address. You can’t port your email address to another provider as with phone numbers.
Or how to play YouTube videos on you SONOS, easy and for free.
This morning I woke up to an official-looking email from YouTube in my inbox, addressed to an address that isn't mine.
The U.S. Department of Justice (DOJ) today seized four-dozen domains that sold “booter” or “stresser” services — businesses that make it easy and cheap for even non-technical users to launch powerful Distributed Denial of Service (DDoS) attacks designed knock targets offline. The DOJ also charged six U.S. men with…
Hacking on a plane, by Midjourney AI
The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.
A review of the /e/ OS Android-alternative operating system for mobile devices, as used on the Teracube 2e smartphone.
A test that hijacked the Chrome back button to send visitors to a fake Google results page, then to mirrored competitor pages where heatmaps, sessions and typing were recorded. Google de-indexed the whole domain.
This post lists the internet communication targets of the Microsoft Windows operating system, including its various services and UWP apps. This post is a part of my application network connection monitoring series, a group of articles that explain how to analyze the network traffic of any Windows or macOS app.
Anyone can build their own amusement park here, or find one that's just right for them. A city of parks by Levan Kvirkvelia.
OAuth2 is one of the most popular specifications for API authentication today, though wrapping your head around it can be a challenge.
Dutch Personal Data Authority raised concerns about Google's GDPR compliance.
Certificate transparency is superb improvement to HTTPS certificate security on the web that's great for users and businesses, but on Android it creates a huge...
Password requirements are weird. It seems impossible to set a new password in many websites. Why?
In this post, we want to share a little bit of Tor Browser history with you, the origins of our features and designs, and how many of our innovative privacy and security features have been adopted by other browsers.
