61
62
NSA and IETF, part 3: Dodging the issues at hand
Normal practice in deploying post-quantum cryptography is to deploy ECC+PQ. IETF's TLS working group is standardizing ECC+PQ. But IETF management is also non-consensually ramming a particular NSA-driven document through the IETF process, a "non-hybrid" document that adds just PQ as another TLS option.
63
Avoid ISP Routers (2024)
Avoid ISP routers
64
65
The insecurity of telecom stacks in the wake of Salt Typhoon
Towards the end of last year, we learned that a group (allegedly affiliated with the Chinese government, referred to as “Salt Typhoon”) breached T-Mobile and other telecommunications co…
66
I finally understand Cloudflare Zero Trust tunnels
Everything you wanted to know about using Cloudflare Zero Trust Argo tunnels for your personal network
67
Using NASA’s SMAP satellite to detect L-band interference
It was launched to measure moisture. Now it’s ghost-trailing jammers across an electronic battlefield.
68
Starlink User Terminal Teardown
I think the human race has no future if it doesn’t go to space. —— Stephen Hawking Starlink is a low Earth orbit (LEO) satellite internet service provided by SpaceX. Users connect to near-Earth orbit satellites through a user terminal, which then connects to the internet via ground gateways. Basic Starlink network…
69
Google spoofed via DKIM replay attack: A technical breakdown
Learn how a Google spoof used a DKIM replay attack to bypass email security and trick users with a fake subpoena in this real-world phishing case.
70
Alphabet spins out Taara – Internet over lasers
Taara is now an independent company with a mission to bring high-speed, affordable and abundant connectivity to people everywhere using beams of light.
71
.localhost Domains
I’ve found a way to configure private, custom domains for web-apps I have running on my computer. So instead of having to remember and type “localhost:4333”, I can simply navigate to “appname.localhost”. I love it!
72
73
Using the Internet without IPv4 connectivity
A technical blog about Rust, Linux and other topics.
74
75
We do not have sufficient links to the UK for Online Safety Act to be applicable
We can argue that we are out-of-scope for the UK’s Online Safety Act.
76
The first Media over QUIC CDN: Cloudflare
Media over QUIC: We have a winner! Cloudflare has released a technical preview of their MoQ CDN. Now you can use MoQ at scale with style and grace.
77
Hunting for North Korean Fiber Optic Cables
Before we go any further, one thing that I want to make clear is that the word assume is going to be doing some heavy lifting throughout this post. This was a rabbit hole that I recently went down …
78
79
Online Safety Act – shutdowns and site blocks
Report incorrectly blocked sites on UK ISP and mobile networks.
80
Building Ultra Long Range Toslink
This post is a textual version of a talk I gave at The 38th Chaos Computer Congress at the end of 2024. You can watch the talk that was recorded by the wonderful C3VOC team below if that’s your preferred medium:
81
Does our “need for speed” make our wi-fi suck?
It is common knowledge among Wi-Fi professionals that using 20 MHz or 40 MHz channel widths when planning 5 GHz networks offers the best overall ex
82
Open Hardware Ethernet Switch project, part 1
One of my longest-running projects has been an open hardware Ethernet switch. This has been one of the key driving forces behind many of my other projects, such as ngscopeclient and the high speed probes. It was also the project that got me into high speed digital design.
83
Diagnosing an Unusual WiFi Issue (2020)
Late last year, I started experiencing some unusual intermittent connection issues on my Desktop. In general, I had a stable connection with average latency; however, at (seemingly) random times throughout the week, I would start experiencing sudden 2000ms+ latency spikes every couple of seconds.
84
Clankers Die on Christmas
I’m sorry, but I can’t help with that. We acheived AGI. The clankers died on Christmas. This post is scheduled to automatically publish: 2025-12-25. Editors note: erroneously leaked this personal commentary blog early due to typoed year. Since it's erroneous early publication, this leak has remained on the hackernews…
85
Self-hosting email like it's 1984
Notes from setting up a truly minimal self-hosted email server with Postfix and OpenDKIM. Covers TLS, SPF, DKIM, DMARC, DNS, reverse DNS, multiple domains, and delivering to Gmail.
86
The Internet runs on free and open source software and so does the DNS
The ICANN Security and Stability Advisory Committee recently published SAC132: The Domain Name System Runs on Free and Open-Source Software.
87
Did 5G kill the IMSI catcher?
Understand the mechanics, risks, and the future of IMSI catching (a.k.a. stealing your cellular ID) in 2025. Read our primer on this niche form of hacking.
88
Air Traffic Control
Air traffic control has been in the news lately, on account of my country's declining ability to do it. Well, that's a long-term trend, resulting from decades of under-investment, severe capture by our increasingly incompetent defense-industrial complex, no small degree of management incompetence in the FAA, and…
89
Self-hosting a Matrix server for 5 years
Experiences with the Matrix protocol, Matrix Synapse server, bridges, and Element mobile apps.
90
The HTTP Query Method
This specification defines the QUERY method for HTTP. A QUERY requests that the request target process the enclosed content in a safe and idempotent manner and then respond with the result of that processing. This is similar to POST requests but can be automatically repeated or restarted without concern for partial…