Hacker News with Generative AI: Network Security

D-Link won't fix critical flaw affecting 60k older NAS devices (bleepingcomputer.com)
More than 60,000 D-Link network-attached storage devices that have reached end-of-life are vulnerable to a command injection vulnerability with a publicly available exploit.

Cybersecurity, Network Security, Hardware, Vulnerabilities, End-of-Life Products

4 points by benkan 9 days ago | 3 comments

Mitigating IP spoofing against Tor (torproject.org)
At the end of October, Tor directory authorities, relay operators, and even the Tor Project sysadmin team received multiple abuse complaints from their providers about port scanning. These complaints were traced back to a coordinated IP spoofing attack, where an attacker spoofed non-exit relays and other Tor-related IPs to trigger abuse reports aimed at disrupting the Tor Project and the Tor network.

Security, Network Security, Tor Network, IP Spoofing

49 points by 0xggus 12 days ago | 5 comments

How to inspect TLS encrypted traffic (apnic.net)
Do you want to analyse decrypted TLS traffic in Wireshark or let an Intrusion Detection System (IDS), like Suricata, Snort or Zeek, inspect the application layer data of potentially malicious TLS encrypted traffic?

Network Security, TLS, Traffic Analysis, Intrusion Detection

14 points by belter 20 days ago | 0 comments

Ask HN: What ist your AdBlock strategy? (ycombinator.com)
Hi, Just installed OpenWRT. Which solutions for ad blocking and other trackers would you recommend?

Open Source, Network Security, Privacy, Ad Blocking

99 points by laserstrahl 24 days ago | 183 comments

Top Cloudflare Tunnel Alternatives in 2024 (pinggy.io)
Cloudflare Tunnel provides a seamless way to connect applications and services to the Cloudflare infrastructure without needing a public IP address. While it’s a powerful tool, several alternatives offer similar capabilities with unique features and benefits. In this article, we’ll explore the top 10 Cloudflare Tunnel alternatives in 2024, covering their Pros, Cons,Uses, Installation process, and pricing to help you find the best solution for your needs.

Cloud Computing, Network Security, Software, Comparisons, Alternatives

12 points by AbhilashK26 31 days ago | 1 comments

Dito – an advanced Layer 7 reverse proxy server written in Go (github.com/andrearaponi)
Dito is an advanced Layer 7 reverse proxy server written in Go.

Network Security

181 points by andrearaponi12 43 days ago | 95 comments

IPv6 Secure Neighbor Discovery (wikipedia.org)
The Secure Neighbor Discovery (SEND) protocol is a security extension of the Neighbor Discovery Protocol (NDP) in IPv6 defined in RFC 3971 and updated by RFC 6494.

Network Security, IPv6, Networking

4 points by harporoeder 45 days ago | 0 comments

The fix for BGP's weaknesses has big issues of its own, boffins find (theregister.com)
The Resource Public Key Infrastructure (RPKI) protocol has "software vulnerabilities, inconsistent specifications, and operational challenges" according to a pre-press paper from a trio of German researchers.

Network Security, Internet Protocols, Research, Cybersecurity

5 points by LinuxBender 50 days ago | 1 comments

Cloudflare auto-mitigated world record 3.8 Tbps DDoS attack (cloudflare.com)
Cloudflare's DDoS protection systems have been combating a month-long campaign of hyper-volumetric L3/4 DDoS attacks.

Cybersecurity, DDoS Attacks, Cloudflare, Internet Security, Network Security

10 points by syck 50 days ago | 0 comments

Ping Storms at GreyNoise (darthnull.org)
Earlier this month, I attended BSidesNoVA in Arlington, where the keynote was presented by Andrew Morris of GreyNoise. Using sensors distributed all over the world, GreyNoise collects…background noise…on the Internet.

Cybersecurity, Network Security, Internet, Research, GreyNoise

74 points by jkamdjou 52 days ago | 9 comments

Network Traffic Analysis of ICMP "Love" Noise Storms (darthnull.org)
Earlier this month, I attended BSidesNoVA in Arlington, where the keynote was Andrew Morris of GreyNoise. Using sensors distributed all over the world, GreyNoise collects…background noise…on the Internet. Basically, they watch and monitor activity that hits lots of hosts randomly – network mapping, port scanning, doorknob rattling. If you see someone trying to break into your SSH server, you can check GreyNoise to see if that person (well, their IP, anyway) has been seen doing such things in the past.

Network Security, Internet, Data Analysis, Security Research

9 points by a_morris 55 days ago | 2 comments

WiFi suspended at big UK train stations after 'cybersecurity incident' (theguardian.com)
Wifi networks at a number of train stations across the UK have been suspended after a “cybersecurity incident”.

Cybersecurity, Technology, UK, Transportation, Network Security

77 points by chrisjj 56 days ago | 77 comments

Excel spreadsheet caused network equipment's physical failure (twitter.com)

Network Security, Hardware Failure, Data Errors

49 points by __rito__ 58 days ago | 29 comments

Notes and Receipts (PCAPs) for TCP and ICMP Noise Storms (github.com/GreyNoise-Intelligence)
Notes and receipts (PCAPs) for TCP and ICMP Noise Storms

Network Security, Security Research, TCP/IP, ICMP

16 points by jayhoon 62 days ago | 1 comments

Cloudflare misidentifies Hetzner IPs as being located in Iran (gitlab.com)
We've recently (2-3 weeks?) started experiencing high failure rates in our CI build jobs https://gitlab.com/prpl-foundation/prplos/feed-prpl/-/jobs?statuses=FAILED and subjectively it seems, that it's getting worse each week, there is one such example https://gitlab.com/prpl-foundation/prplos/feed-prpl/-/jobs/3418282471.

Cloud Computing, Network Security, Germany, Iran

204 points by doruk101 64 days ago | 231 comments

Defend against vampires with 10 gbps network encryption (synacktiv.com)
Discover how attackers can sniff your data on network cables and how you can defend against it, by encrypting on-the-fly all your ethernet traffic with very good performance.

Cybersecurity, Network Security, Data Protection, Encryption

270 points by alxjsn 69 days ago | 81 comments

TUI for sniffing network traffic using eBPF on Linux (github.com/pythops)
🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

Network Security, Linux, eBPF, TUI, Open Source

11 points by pythops 74 days ago | 0 comments

Check for malicious IPs using DNS (ipshield.dev)

Security, DNS, Network Security

26 points by shivam-dev 75 days ago | 11 comments

NetAlertX: Detect Intruders on Your WiFi/LAN Instantly (github.com/jokob-sk)

Network Security, Cybersecurity, Tools

34 points by AgileVenture 99 days ago | 0 comments

The Night Watch (2013) [pdf] (usenix.org)