I spent a recent flight finding out what I could do with a connection to the flight’s wifi, but without access to the internet. I was on my way home from Strange Loop, a direct flight from St. Louis to Oakland. It’s a long enough flight that I planned to purchase the $8 internet access and get some work done, but…
Entrusting our speech to multiple different corporate actors is always risky. Yet given how most of the internet is currently structured, our online expression largely depends on a set of private companies ranging from our direct Internet service providers and platforms, to upstream ISPs (sometimes...
Apple TV and iOS YouTube ads are not blocked by Pi-hole, so I researched this and discovered a flaw in Protobuf that allows me to restrict YouTube ads.
Why the MyQ integration will be removed in Home Assistant 2023.12
A bottom-up, animated guide to HTTP load balancing algorithms.
The macOS 14 Sonoma betas and release candidate contain a bug that causes the firewall to not filter traffic correctly. As a result, our app does not work.
Some notes about the UK air traffic control meltdown
With iOS and iPadOS 16.4 beta 1 comes support for Web Push for Home Screen web apps, Badging API, Manifest ID, and more.
This week I was in Rotterdam for a RIPE meeting . On Friday morning I gave a lightning talk called where does my computer get the time from? The RIPE meeting website has a copy of my slides and a video of the talk; this is a blogified low-res version of the slides with a rough and inexact transcript.
Google Cloud stopped the largest known DDoS attack to date, which exploited HTTP/2 stream multiplexing using the new “Rapid Reset” technique.
Network data confirm the restriction of Twitter on multiple internet providers in Turkey as of Wednesday 8 February 2023. The incident comes as authorities raise concerns over disinformation online, although ...
Update on 2023/05/19: ASUS has publicly acknowledged the issue and provided an explanation and workaround of their own (rebooting, or a hard reset if the reboot doesn’t fix it). The original post is below:
TL;DR: we have discovered XMPP (Jabber) instant messaging protocol encrypted TLS connection wiretapping (Man-in-the-Middle attack) of jabber.ru (aka xmpp.ru) service’s servers on Hetzner and Linode hosting providers in Germany. The attacker has issued several new TLS certificates using Let’s Encrypt service which were…
Modern email is a patchwork of protocols and extensions. Here is one article to understand them all.
tldr: Swing VPN is using its user base to DDOS sites using its users as a an attack botnet. Introduction It all started with a friend of mine complaining that his phone was doing a request to a specific app every few seconds. Initial assumption was that the phone was infected with a virus but a 2 minute investigation…
Reverse engineering an Android app for a Bluetooth connected car battery monitor with some startling discoveries ...
Firstyear's blog
Guest Post: What problems HTTP/3 solves, how it performs, why it’s seen such swift adoption, and what limitations it is still working to overcome.
Well, it finally happened to me. I was blocked out of a website I use for work because of Cloudflare. And I have no idea if or when I'll be...
Matrix, the open protocol for secure decentralised communications
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
Have you ever tried to download videos from YouTube? I mean manually without relying on software like youtube-dl, yt-dlp or one of “these” websites. It’s much more complicated than you might think.
Learn how Tailscale's partnership with Mullvad enables secure, private browsing with Mullvad’s VPN servers as exit nodes. Protect your internet traffic, maintain privacy, and enjoy fast, encrypted browsing worldwide. Discover how to configure Mullvad with Tailscale for ultimate security.
I am frequently away from home (whether on family vacation, a business trip, or out around town), but I have a number of important resources on my home network—as any homelabber does. There are services I like to access remotely like my NAS with my giant media library, my edit server with all my active projects, and…
New talk: Learning DNS in 10 years
So numerous brands are giving up on Threads by Instagram, allegedly due to lack of engagement (ironically, most of them are still using...
