211
What I learned from making a DNS client in Rust
A lot about sockets, syscalls and bits
212
Extracting TLS keys from an unwilling application (2020)
I want to be able to inspect the traffic of programs running on my computer. I don’t really trust those programs and ideally I’d like to put nearly all of them into a high security jail. One of those programs is Oculus software. There are a few reasons why I want to be cautious about Oculus software.
213
A Primer on Proxies
A technical dive into traditional TCP proxying over HTTP
214
215
IPFS and Their Gateways
The InterPlanetary File System (IPFS) is according to the Wikipedia description: "a protocol, hypermedia and file sharing peer-to-peer network for storing and sharing data in a distributed file system.". It works a little like bittorrent and you typically access content on it using a very long hash in an ipfs:// URL…
216
How I learned about corporate firewalls
This is story about how I learned to be a little bit less naive about the web and how it works. But it's also a story of user experience and what we owe our users in terms of error handling - even when the problem isn't our fault.
217
Encrypted DNS and NTP = Deadlock
I recently found out the hard way that encrypted DNS can deadlock with NTP on embedded devices without a battery-backed clock.
218
219
Large scale Internet SSH brute force attacks seem to have stopped here
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
220
Using SNI proxying and IPv6 to share port 443 between webapps
I hate HTTP reverse proxies and want my webapps to listen directly on port 443. How can I make this work in a world of IPv4 scarcity?
221
How and why Daily is using Rust for our WebRTC APIs
Exploring why Rust is our preferred language for a core WebRTC library
222
Email Done My Way, Part 0 – The Journey
Warning. This whole series is not a simple HOWTO. This series is about how I run my mail server. I go through the configuration, line by line and explain. It’s not going to be a simple Copy/Paste to run your own mail server. You have been warned.
223
A guide to IPFS connectivity in web browsers
A minimal chat example using js-ipfs in the browser.
224
Pages that didn't make it into “How DNS Works”
Pages that didn't make it into "How DNS Works"
225
The State of AV1 Playback Support
Apple keeps adding AV1 codec support! iPad Pro joins iPhone 15 Pro and Macbooks with dedicated AV1 hardware decoders! Learn everything you need to know about AV1 playback support.
226
Pulling MikroTik into the Limelight Demystifying and Jailbreaking RouterS
A comprehensive guide to MikroTik internals, including IPC, hand-rolled cryptography, and a novel post-authentication jailbreak
227
IETF Draft: Centralization, Decentralization, and Internet Standards
Despite being designed and operated as a decentralized network-of-networks, the Internet is continuously subjected to forces that encourage centralization. This document offers a definition of centralization, explains why it is undesirable, identifies different types of it, catalogues limitations of common approaches…
228
229
A lock with many keys: Spoofing DNSSEC-signed domains in 8.8.8.8
We discovered that, until recently, Google Public DNS was theoretically vulnerable to a DNS cache poisoning attack on DNSSEC-signed domain names. Google fixed the vulnerability as a result of our report
230
Tailscale’s human-scale networks are still controlled by Google and Microsoft
I’m not sure if they realize it yet, but Tailscale seems to work extremely well for polycules. Each user can have their own single-user Tailnet and explicitly share specific machines with other people. Both parties have to consent to sharing a device; either party can revoke this consent. The device owner can further…
231
The mechanics of a sophisticated phishing scam and how we stopped it
Yesterday, August 8, 2022, Twilio shared that they’d been compromised by a targeted phishing attack. Around the same time as Twilio was attacked, we saw an attack with very similar characteristics also targeting Cloudflare’s employees
232
Getting started with nmap
Sysadmin doing syadmin stuff
233
XMODEM in 2022
Let's start at the beginning: it all started with me trying to boot a system which receives its initial ramdisk over XMODEM.
234
Whois: Fragile, Unparseable, Obsolete
A rather unstructured look at one of the older and infuriatingly trivial internet protocols: WHOIS
235
Cloudflare Pub/Sub: Programmable MQTT Message Brokers
Announcing the beta of Cloudflare Pub/Sub, our programmable, serverless message broker built on the open MQTT messaging standard
236
About adding a static route to my DOCSIS modem
You may think this is an easy task but let’s find out. One would expect such functionality in a web interface …
237
AWS Lambda now supports IPv6 endpoints for inbound connections
Discover more about what's new at AWS with AWS Lambda now supports Internet Protocol Version 6 (IPv6) endpoints for inbound connections
238
Where is every IP Address?
Benchmarks & Tips for Big Data, Hadoop, AWS, Google Cloud, PostgreSQL, Spark, Python & More...
239
Using SSH_config Match to connect to a host using multiple IP or Hostnames
My main computer is a MacBook Pro from 2017, but I have some servers laying around and one other laptop connected at home with ArchLinux installed that I use mainly for development. I connect to it remotely either directly using a SSH/Mosh + Tmux + Emacs/Vim combination, or using the pretty convenient VSCode Remote…
240
How Does NTP (Network Time Protocol) Work?
The Network Time Protocol (NTP) is a system for synchronizing the clocks of hosts and clients across the Internet. NTP is a protocol intended to synchronize all computers participating in the network to within a few milliseconds of Coordinated Universal Time (UTC). The core of the protocol is NTP’s clock discipline…