31
Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
a post going over 4 exploits for CVE-2024-20017, a remotely exploitable buffer overflow in a component of the MediaTek MT7622 SDK.
32
About the Tailscale.com outage on March 7, 2024
On March 7, 2024, tailscale.com was unavailable for approximately 90 minutes due to an expired TLS certificate. We were able to identify and address the issue quickly, and the downtime was mostly limited to our marketing materials and documentation; still, we would like to explain exactly what happened, what the…
33
IBDNS: Intentionally Broken DNS server
Afnic, the association in charge of the .fr top-level domain and several other French overseas and generic TLDs, announced today the release as free software of its tool named IBDNS, standing for Intentionally Broken DNS.
34
usbredir: A protocol for sending USB device traffic over a network connection
usbredir is the name of a network protocol for sending USB device traffic over a network connection. It is also the name of the software package offering a parsing library, a usbredirhost library and several utilities implementing this protocol.
35
Sans-IO: The secret to effective Rust for network services
Learn how Firezone uses the sans-IO pattern to build testable, deterministic Rust networking code. A deep dive into our connlib design.
36
The Nearest Neighbor Attack
In early February 2022, notably just ahead of the Russian invasion of Ukraine, Volexity made a discovery that led to one of the most fascinating and complex incident investigations Volexity had ever worked. The investigation began when an alert from a custom detection signature Volexity had deployed at a customer site…
37
We improved the performance of a userspace TCP stack in Go
Learn how we enhanced TCP performance in Coder to achieve 5X faster throughput by optimizing buffer sizes, implementing the HyStart algorithm, and minimizing packet loss, significantly improving remote development experiences.
38
FIDO Alliance publishes new spec to let users move passkeys across providers
The FIDO Alliance has published a working draft of a new set of specifications for secure credential exchange that, when standardized and implemented by
39
Timeliness without datagrams using QUIC
Media over QUIC: Rethink your approach. *Unless you're doing something dope.
40
We build X.509 chains so you don't have to
For the past eight months, Trail of Bits has worked with the Python Cryptographic Authority to build cryptography-x509-verification, a brand-new, pure-Rust implementation of the X.509 path validation algorithm that TLS and other encryption and authentication protocols are built on. Our implementation is fast…
41
Simple Precision Time Protocol at Meta
While deploying Precision Time Protocol (PTP) at Meta, we’ve developed a simplified version of the protocol (Simple Precision Time Protocol – SPTP), that can offer the same level of clock syn…
42
Stalwart mail server (self-hosted all-in-one mail server) now as an admin webui
We're thrilled to announce the release of Stalwart Mail Server version 0.7.0, a significant update that brings a wealth of features and improvements to enhance the performance and manageability of...
43
Tailscale SSH is now Generally Available
Tailscale SSH is now generally available, offering seamless SSH authentication and authorization with SSO, MFA, and ACLs. Enjoy robust security, zero trust remote access, and tools like session recording and VS Code integration.
44
Google Public DNS's approach to fight against cache poisoning attacks
Tianhao Chi and Puneet Sood, Google Public DNS The Domain Name System (DNS) is a fundamental protocol used on the Internet to translate hum...
45
Off-path TCP hijacking in NAT-enabled Wi-Fi networks
Guest Post: New off-path TCP hijacking attack in Wi-Fi networks that exploits vulnerabilities in the NAT mapping strategies of routers discovered.
46
ATProto for distributed system engineers
In this article we're going to explore atproto from the perspective of distributed backend engineering.
47
Proton announces release of a new VPN protocol, "Stealth"
Stealth is a new VPN protocol from Proton VPN that overcomes censorship in restrictive countries.
48
49
Remembering the LAN (2020)
Learn more about the early days of LAN.
50
A transport protocol's view of Starlink
How TCP interacts with the characteristics of the Starlink service.
51
Discord Reduced WebSocket Traffic by 40%
How we rolled out zstandard and other improvements across our gateway cluster to reduce the amount of bandwidth that’s used by our clients.
52
Load is not what you should balance: Introducing Prequal
Bartek Wydrowski, Google Research; Robert Kleinberg, Google Research and Cornell; Stephen M. Rumble, Google (YouTube); Aaron Archer, Google Research
53
RISC-V HiFive Premier P550 Development Boards with Ubuntu Now Available
With strong initial reviews, the HiFive Premier P550 Development Boards with pre-installed Ubuntu are in stock and available for purchase. We’re excited to announce the general availability of the Premier P550 in both 16GB & 32GB configurations.
54
Does the Internet Route Around Damage? – Baltic Sea Cable Cuts
This week's Internet cable cuts in the Baltic Sea have been widely reported, even as attempts to understand their cause and impact continue. We turn to RIPE Atlas to provide a preliminary analysis of these events and ask to what extent the Internet in the region has been resilient to them.
55
New standards for a faster and more private Internet
Cloudflare's customers can now take advantage of Zstandard (zstd) compression, offering 42% faster compression than Brotli and 11.3% more efficiency than GZIP. We're further optimizing performance for our customers with HTTP/3 prioritization and BBR congestion control, and enhancing privacy through Encrypted Client…
56
Ham Radio 101: What is WSPR?
Learn how WSPR (weak signal propagation reporter) technology is a fascinating facet of the Ham radio hobby in this easy-to-follow article.
57
Riot Games: Peeking into Valorant's Netcode (2020)
We’re Matt deWet, gameplay tech lead on VALORANT , and David Straily, project tech lead on VALORANT - and we're beyond excited to be here with you all to share some of the technical details behind how we’re addressing som…
58
Improving Network Performance with Linux Flowtables
We’re building an open source alternative to AWS. For IPv4 assignment and firewall rules, we use Linux’s Netfilter / Nftables. This subsystem provides a powerful way to handle packets addressed to the host. We recently came across flowtables - a network acceleration feature in the Linux kernel that works like a…
59
Framing Frames: Bypassing wi-fi encryption by manipulating transmit queues
Domien Schepers and Aanjhan Ranganathan, Northeastern University; Mathy Vanhoef, imec-DistriNet, KU Leuven
60
Europe's Internet resilience mitigates impact of submarine cable cuts
Two recent cable cuts that occurred in the Baltic Sea resulted in little-to-no observable impact to the affected countries, in large part because of the significant redundancy and resilience of Internet infrastructure in Europe.