I’m scheduled to give a talk at toorcamp next month about packet spoofing and SP^3.
At the 2015 Chaos Communication Congress, Florian and Niklaus presented an analysis of Red Star OS 3.0, the system which leaked online a year ago. In their talk they provide technical backing for several observations about the system which have gained some press attention. The first is that the Operating System is designed without obvious… Continue reading Contextualizing RedStar OS
I started running a public sp3 server today. It’s a small side-project I’ve hacked together over the last couple weeks to make it easier for people to play with packet spoofing. The server works similarly to a public proxy, but with the trade-off that while it won’t send high-volumes of traffic, it will allow you… Continue reading SP3
I had the privilege last week of talking at the 32nd Chaos Communication Congress about the state of Internet Censorship in 2015 and the major developments in blocking and measurements last year. The talk is now online and available for streaming. It’s meant as a primer on the topic, and to show the growing normalization… Continue reading Internet Censorship
I’ll be presenting next week at 32C3 on the state of Internet access, transparency, and measurement. Lots of the work is done each year on measuring and learning about the state of access, but this phenomenon with growing relevance to many countries is poorly publicized. Much of this is a fear that being too public… Continue reading The state of Internet Censorship
The Internet Engineering Task Force, the multi-stakeholder organization which shepherds the standards process for many of the technologies used on-line, is continuing to evolve that process. Protocol standards are already expected to include discussions on their security and privacy implications, in order to force an explicit conversation on those issues and hopefully encourage the development… Continue reading IETF and the HRPC working group
I’ve begun to transition this site to use Lets Encrypt! for signing of SSL. Because the site has specified an HPKP previously, a transition period is needed where clients can see the old certification signing the intention to transition to the new certification.
That process has started, and the full transition will happen in a couple months. The good news is that the letsencrypt setup process was otherwise painless.
Having spent the last few days at CCCamp, I am incredibly jealous of the community that exists in Germany. cbase, the physical center of the community, has existed for 20 years, and has created a really powerful movement. One of the aspects of the berlin free software community is the tight connection between technologists and… Continue reading Tech Community
I’ll be giving a talk next week at CCCamp on the Open Proxy ecosystem, following up on some work I did last year looking at the operators, users, and traffic.
The video of my talk last month on scanning the Internet using Node.js has been published by Cascadia Fest.