The video of my talk last month on scanning the Internet using Node.js has been published by Cascadia Fest.
I’m quite excited to be talking at CascadiaFest this summer about the work I’ve been doing on scanning the Internet.
I’ve updated this domain to include the new HPKP mechanism and a stronger intermediate cert. HPKP supplements the previous HSTS mechanism to define a specific signing key that must be present on subsequent HTTPS interactions with the server, helping to mitigate one class of man in the middle attacks.
I started ip2country over the last few days, as a self contained npm module for determining the country of an IP address.
WebRTC continues to develop towards an evolving standard, requiring some additional leg work to use it in projects. In yet another attempt at bridging that gap, I’ve been working on maintaining an adapter lessening some of the deviation from standard in current browsers.
It currently fixes
- Response of format of getStats in Chrome
- Translation to ‘url’ from the standard ‘urls’ when configuration is passed to Firefox
- Emission of the ‘negotiationneeded’ event when a data channel is created in Firefox
The main hope is that this will be easier to include in projects than previous attempts.
I spent a bit of time last month looking at Open Proxies. They’re are one of the dark corners of the internet that have been around forever but which we still don’t really understand.
It was really cool to get a view into the largely international nature of the servers, get a sense of where they are running, and start to see the SEO fraud and surveillance entities which are co-opting the mechanism.
Work over the last month has largely focused on using freedom.js as a platform for server security. I’m very happy with the submission we made to OSDI yesterday describing that work.