Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Dns, Security, Attack. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Cybersecurity, Privacy, Technology ... > Cybersecurity, Encryption, Malware,... > Cybersecurity, Attack, Privacy, Int... > Dns, Security, Attack

Articles

Down the Cloudflare / Stripe / OWASP Rabbit Hole
See discussion (127 comments, 269 points) - Archive
A Docker footgun led to a vandal deleting NewsBlur's MongoDB database (2021)
See discussion (114 comments, 119 points) - Archive
IPinside: Korea’s Mandatory Spyware
See discussion (80 comments, 331 points) - Archive
Bypassing Gmail's spam filters with ChatGPT
See discussion (120 comments, 207 points) - Archive
How Asus and a Microsoft Bug Almost Broke Remote Work
See discussion (83 comments, 122 points) - Archive
Analyzing Carbon Dioxide levels while attending IETF-115 in London, UK
See discussion (218 comments, 183 points) - Archive
UK Government scans all web servers hosted in the UK for vulnerabilities
See discussion (239 comments, 406 points) - Archive
Was the internet designed to survive a nuclear attack?
See discussion (115 comments, 108 points) - Archive
You don’t want to be on Cloudflare’s naughty list
See discussion (330 comments, 484 points) - Archive
Hijacking Email with Cloudflare Email Routing
See discussion (83 comments, 262 points) - Archive
Considered "18+"
See discussion (152 comments, 391 points) - Archive
I discovered thousands of open databases on AWS
See discussion (73 comments, 199 points) - Archive
Who's Attacking My Server?
See discussion (225 comments, 212 points) - Archive
Newer TP-Link Routers send large volumes of requests to Avira servers
See discussion (113 comments, 345 points) - Archive
TCP Middlebox Reflection: Coming to a DDoS Near You
See discussion (8 comments, 83 points) - Archive
Who is squatting IPv4 addresses?
See discussion (200 comments, 309 points) - Archive
I got pwned by my cloud costs
See discussion (641 comments, 1398 points) - Archive
A public letter to CloudFlare to fix their snoopy vendor
See discussion (104 comments, 417 points) - Archive
New differential fuzzing tool reveals novel HTTP request smuggling techniques
See discussion (33 comments, 169 points) - Archive
Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS
See discussion (26 comments, 158 points) - Archive
An inside look into the illicit ad industry
See discussion (85 comments, 211 points) - Archive
AS13335 doing SSH scanning
See discussion (102 comments, 166 points) - Archive
Weaponizing Middleboxes for TCP Reflected Amplification
See discussion (29 comments, 176 points) - Archive
HAProxy vulnerability enables HTTP request smuggling attacks
See discussion (25 comments, 119 points) - Archive
A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
See discussion (264 comments, 554 points) - Archive
Regexploit: DoS-Able Regular Expressions
See discussion (13 comments, 83 points) - Archive
We found and fixed a rare race condition in our session handling
See discussion (192 comments, 585 points) - Archive
Cname / DNS based third party tracking
See discussion (47 comments, 108 points) - Archive
The CNAME of the Game: Large-scale Analysis of DNS-based Tracking Evasion
See discussion (82 comments, 115 points) - Archive
Wikimedia narrows down the app sendin 90M requests to a pic of flower
See discussion (97 comments, 190 points) - Archive
Sad DNS Explained
See discussion (5 comments, 92 points) - Archive
Samsung phones force Mainland China DNS service upon Hong Kong WiFi users
See discussion (58 comments, 209 points) - Archive
DigitalOcean's Hacktoberfest Is Hurting Open Source
See discussion (386 comments, 816 points) - Archive
Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks
See discussion (26 comments, 241 points) - Archive
Emergency Directive 20-03 – Remote code execution vulnerability in Windows DNS
See discussion (46 comments, 102 points) - Archive
ReDoS: Regular Expression Denial of Service
See discussion (37 comments, 83 points) - Archive
Where is the DNS headed?
See discussion (53 comments, 81 points) - Archive
eBay is port scanning visitors to their website
See discussion (143 comments, 478 points) - Archive
Thai Database Leaks 8.3B Internet Records
See discussion (74 comments, 166 points) - Archive
Post Mortem on Salt Incident
See discussion (65 comments, 118 points) - Archive
Show HN: Explore Wikipedia edits made by institutions, companies and governments
See discussion (59 comments, 246 points) - Archive
Analyzing the attacks on my website
See discussion (59 comments, 104 points) - Archive
Xfinity Is Man-in-the-Middle Attacking My Internet
See discussion (296 comments, 599 points) - Archive
DNS Security: Threat Modeling DNSSEC, DoT, and DoH
See discussion (97 comments, 132 points) - Archive
HTTP/2 Denial of Service Advisory
See discussion (39 comments, 191 points) - Archive
Authentication and the Have I Been Pwned API
See discussion (123 comments, 209 points) - Archive
Post-mortem and remediations for the Matrix.org security breach
See discussion (64 comments, 183 points) - Archive
I scanned Austria
See discussion (67 comments, 326 points) - Archive
A DNS hijacking wave is targeting companies at an almost unprecedented scale
See discussion (101 comments, 112 points) - Archive
We busted a fake Chrome extension that was trying to steal data
See discussion (32 comments, 108 points) - Archive
Problems caused by Google crawlers
See discussion (49 comments, 142 points) - Archive
Someone used my IPFS gateway for phishing
See discussion (40 comments, 170 points) - Archive
A Recycled IP Address Caused Me to Pirate Books by Accident
See discussion (98 comments, 260 points) - Archive
Show HN: Generating fun Stack Exchange questions using Markov chains
See discussion (36 comments, 178 points) - Archive
Amazon threatens to suspend Signal's AWS account over censorship circumvention
See discussion (496 comments, 1224 points) - Archive
Oblivious DNS: Plugging the Internet’s Biggest Privacy Hole
See discussion (54 comments, 124 points) - Archive
CloudFlair: Bypassing CloudFlare using Internet-wide scan data
See discussion (48 comments, 151 points) - Archive
Issue with TLS-SNI-01 and Shared Hosting Infrastructure
See discussion (77 comments, 160 points) - Archive
Targeting HTTP's Hidden Attack-Surface
See discussion (13 comments, 207 points) - Archive
How hackers abused satellites to stay under the radar (2015)
See discussion (60 comments, 232 points) - Archive
Show HN: Recursive DNS Server Fingerprint
See discussion (13 comments, 120 points) - Archive
Quantifying the Impact of “Cloudbleed”
See discussion (128 comments, 287 points) - Archive
Cloudflare bug data leak exposed
See discussion (43 comments, 94 points) - Archive
Incident report on memory leak caused by Cloudflare parser bug
See discussion (11 comments, 115 points) - Archive
Comcast uses MITM JavaScript injection to serve account related information
See discussion (56 comments, 219 points) - Archive
New attack that cripples HTTPS crypto works on Macs, Windows, and Linux
See discussion (68 comments, 250 points) - Archive
Sad news today: systemd-resolved to be deployed in Ubuntu 16.10
See discussion (169 comments, 103 points) - Archive
Decommissioning a free public API
See discussion (59 comments, 170 points) - Archive
My Experience With the Great Firewall of China
See discussion (57 comments, 156 points) - Archive
Anatomy of an Attack: How I Hacked StackOverflow (2012)
See discussion (20 comments, 83 points) - Archive
The New York Times uses WebRTC to gather local IP addresses
See discussion (121 comments, 247 points) - Archive
SIGAINT email service targeted by 70 bad TOR exit nodes
See discussion (53 comments, 181 points) - Archive
China's Great Cannon
See discussion (169 comments, 264 points) - Archive
Pin-pointing China's attack against GitHub
See discussion (138 comments, 305 points) - Archive
Why Baidu Has Been Hijacked to Attack GitHub
See discussion (194 comments, 254 points) - Archive
What happens when DNS in China is poisoned and pointed at your server
See discussion (55 comments, 158 points) - Archive
When security goes right
See discussion (99 comments, 336 points) - Archive
A Shark on the Network
See discussion (49 comments, 182 points) - Archive
Google disables SSL search at BT’s request
See discussion (111 comments, 307 points) - Archive
NSA/GCHQ: The HACIENDA Program for Internet Colonization
See discussion (49 comments, 116 points) - Archive
Combatting illegal abuses of ngrok
See discussion (59 comments, 143 points) - Archive
Were Intelligence Agencies Using Heartbleed in November 2013?
See discussion (80 comments, 290 points) - Archive
I fought my ISP's bad behavior and won
See discussion (108 comments, 400 points) - Archive
How to lose and recover your blog in 30 minutes
See discussion (30 comments, 95 points) - Archive
Reply to Aphyr attack on Redis Sentinel
See discussion (40 comments, 171 points) - Archive
Rack Attack: Protection from abusive clients
See discussion (27 comments, 92 points) - Archive
Shodan: The scariest search engine on the Internet
See discussion (144 comments, 504 points) - Archive
Researcher sets up illegal 420,000 node botnet for IPv4 Internet map
See discussion (63 comments, 254 points) - Archive
Uncovering an advertising fraud scheme (NSFW) (2011)
See discussion (47 comments, 268 points) - Archive
Popular sites with Apache server-status enabled (leaking internal details)
See discussion (46 comments, 95 points) - Archive
Find His Porn: Evil Website of the Week
See discussion (110 comments, 98 points) - Archive
I Accidentally Deleted All Our Data
See discussion (74 comments, 97 points) - Archive
Frickin' Awesome: CloudFlare Automatically Learns How to Stop DDoS Attacks
See discussion (46 comments, 86 points) - Archive
Is it normal to get hundreds of break-in attempts per day?
See discussion (76 comments, 199 points) - Archive
Uncovering an advertising fraud scheme
See discussion (26 comments, 112 points) - Archive
An apology...
See discussion (189 comments, 367 points) - Archive
Infiltrating a Botnet - A Conversation With a Botmaster
See discussion (21 comments, 126 points) - Archive
Google's new Ajax-powered search results breaks search keyword tracking for everyone
See discussion (80 comments, 88 points) - Archive
Fail2ban Sucks (2020)
See discussion (123 comments, 97 points) - Archive
Big Tech's role in enabling link fraud
See discussion (51 comments, 135 points) - Archive
I looked through attacks in my access logs
See discussion (284 comments, 516 points) - Archive
The Disappointing Tea.xyz
See discussion (85 comments, 167 points) - Archive
Tea.xyz causes a flood of spam pull requests to open source projects
See discussion (33 comments, 107 points) - Archive
The Lost Worlds of Telnet (2019)
See discussion (50 comments, 89 points) - Archive
Google Public DNS's approach to fight against cache poisoning attacks
See discussion (69 comments, 212 points) - Archive
Visualizing malicious IP addresses
See discussion (116 comments, 169 points) - Archive
It's Been a Year and Georgia.gov Continues to Be Hacked
See discussion (44 comments, 162 points) - Archive
Big Tech's role in enabling link fraud – take 2
See discussion (51 comments, 101 points) - Archive
70% of new NPM packages in last 6 months were spam
See discussion (111 comments, 225 points) - Archive
Was the Internet created to survive a nuclear strike? (2022)
See discussion (141 comments, 224 points) - Archive