Top all-time · #371
tedunangst.com
Personal blog · tedunangst.comprogrammingsystems
tedunangst.com is a personal blog at tedunangst.com about programming and systems. Since 2013, 144 different Hacker News readers have linked it 331 times, most often “Analysis of openssl freelist reuse”. No feed was found, so read it on the site itself.
Sometimes recommended · 8 of 40 sampled comments recommend it?
Why HN links it
HN readers link Ted Unangst's blog for OpenBSD and security writing, and for his posts on miniwebproxy, OpenSSL, Heartbleed and Wasabi.
- Recommended for · 8 comments
- One commenter calls his link roundup and blog great; others say posts are interesting, worth a read, or worth reading.
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Analysis of openssl freelist reuse11 people · 11 mentions · first linked 2014-04-10
- Heartbleed in Rust10 people · 10 mentions · first linked 2015-02-02
- Moving to https8 people · 8 mentions · first linked 2017-07-19
- Reop – reasonable expectation of privacy6 people · 6 mentions · first linked 2014-04-01
- Now or never exec6 people · 6 mentions · first linked 2015-03-10
- Technical debt and tacking into the wind5 people · 6 mentions · first linked 2015-06-25
- String interfaces5 people · 6 mentions · first linked 2015-09-29
- Features are faults redux5 people · 5 mentions · first linked 2017-02-21
- GoreSSL4 people · 5 mentions · first linked 2014-09-10
- Signify - openbsd sign & verify tool4 people · 4 mentions · first linked 2014-01-14
What Hacker News says?
and this one ? ctrl+f replay https://www.tedunangst.com/flak/post/openbsd-changes-of-note...
Comment linking /flak/post/openbsd-changes-of-note-627
on “Key Reinstallation Attacks – Breaking WPA2 by Forcing Nonce Reuse”Submitted A brief history of one line fixes as a story · 264 points
HN discussionSounds a bit like tedunangst's miniwebproxy[0]. I've been wondering about writing either something like it or a youtube-dl-like "article-dl" for my own use, but haven't quite been annoyed enough into doing it yet. [0] https://www.tedunangst.com/flak/post/miniwebproxy (self-signed cert)
Comment linking /flak/post/miniwebproxy
on “The Bullshit Web”Submitted Efficient music players remain elusive as a story · 249 points
HN discussionYou might be interested in Ted Unangst's miniwebproxy: https://www.tedunangst.com/flak/post/miniwebproxy
Comment linking /flak/post/miniwebproxy
on “Does anyone remember websites?”Submitted Heartbleed in Rust as a story · 245 points
HN discussionTed Unangst does a great job aggregating links to tech content over at http://www.tedunangst.com/inks/ . His own blog is great as well. Also, previously: https://news.ycombinator.com/item?id=11563516 .
Comment linking /inks/
on “Ask HN: What are some good technology blogs to follow?”Submitted Firefox vs. rthreads as a story · 220 points
HN discussionOpenBSD related - http://www.tedunangst.com/flak/ Weekly aggregations: - http://chneukirchen.org/trivium/ - http://www.dragonflydigest.com/ (Look for the weekly "Lazy Readings" post)
Comment linking /flak/
on “Ask HN: What are some good technology blogs to follow?”Submitted Invented by OpenBSD as a story · 212 points
HN discussionOuch! And I thought the OpenBSD people were paranoid for sticking with CVS. (because Git is too bloated and complex in their view, so they weren't able to review it thoroughly, which would have been the only way for them to trust it.) I always get a strange, uneasy feeiling when the tin foil hats turn out to be right. I wonder if they are right on GPG, too. For those who don't know this: The OpenBSD people refuse to…
Comment linking /flak/post/signify
on “Git client vulnerability announced”Submitted Cloudflare and RSS as a story · 207 points
HN discussionNext option is a PC, which adds at the minimum 200W of 24/7 power requirement, not exactly cheap given today's electricity prices. I've got just the hardware for you: http://www.tedunangst.com/flak/post/new-home-router https://www.newegg.com/Product/Product.aspx?Item=N82E1685620... There are various other NUC type devices based on laptop chipsets (or you could just use an old laptop with hardware Ethernet and a larg…
Comment linking /flak/post/new-home-router
on “A Thank-You Note to the Hacker News Community from Ubuntu”Submitted Long term support considered harmful as a story · 207 points
HN discussionTed Unangst had a few posts where time getting featured heavily, e.g. https://www.tedunangst.com/flak/post/firefox-vs-rthreads and the linked mailing list thread https://marc.info/?l=openbsd-ports&m=144649333120401&w=2 There's a few more related articles on his blog if you search, and I've read of it being implicated elsewhere, that's not to say the software calling that much was doing the right thing, just that it…
Comment linking /flak/post/firefox-vs-rthreads
on “Fuchsia is not Linux”Submitted The future is arriving too fast as a story · 189 points
HN discussionI doubt the web will ever be fully encrypted. There will always be tons of people who don't care enough. I've come across dozens of high information static websites that were set up like 10+ years ago where the author will probably never be back to configure tls. It's so strange that you have to ask someone's permission to use encryption[0]. Certificate authorities should've been (should be?) optional. SSH came out…
Comment linking /flak/post/moving-to-https
on “Let's Encrypt now holds 35% of the market”Submitted Watt time is left as a story · 181 points
HN discussion> It also uncovered a "bug" (performance weakness?) in v8 that they were able to fix so less CFG blocks were allocated. They implemented a freelist, it's a common workaround for problematic allocators, but has its own issues ( https://www.tedunangst.com/flak/post/analysis-of-openssl-fre... )
Comment linking /flak/post/analysis-of-openssl-freelist-reuse
on “24-core CPU and I can’t type an email”Submitted It’s hard work printing nothing as a story · 179 points
HN discussionThe Qualsys analysis states that keys provided by an agent are not disclosed, and that encrypted keys are disclosed in their encrypted form. https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-077... Quoting from above: Finally, for these three reasons, passphrase-encrypted SSH keys are leaked in their encrypted form, but an attacker may attempt to crack the passphrase offline. On the other hand, SSH keys that…
Comment linking /flak/post/new-openssh-key-format-and-bcrypt-pbkdf
on “OpenSSH: client bug CVE-2016-0777”Submitted OpenBSD laptops as a story · 177 points
HN discussionWoT works well for some things like #bitcoin-otc IRC trading channel but still most users aren't checking sigs. I like how they wanted to completely remove identifying info and similar signature schemes from signify http://www.tedunangst.com/flak/post/signify
Comment linking /flak/post/signify
on “GPG and Me”Submitted Rough idling as a story · 174 points
HN discussionExcuse the formatting above, it seems to have eaten my whitespace. Just for further reference i recommend reading about OpenSSLs freelists implementation. Essentially if you have an object that uses a specific amount of space it will be stored in a specific location. Which is why private key extraction is possible. You just need to craft a request that puts your_actual_payload in a location so that the 65536 bytes t…
Comment linking /flak/post/analysis-of-openssl-freelist-reuse
on “CloudFlare's Heartbleed challenge cracked”Submitted Random in the wild as a story · 173 points
HN discussionTed Unangst BSD dev. http://www.tedunangst.com/flak/
Comment linking /flak/
on “Ask HN: Which developers do you closely follow?”Submitted Using Yubikeys Everywhere as a story · 165 points
HN discussionThere's also a nice Open Source project which implements that using a proxy: https://www.tedunangst.com/flak/post/miniwebproxy
Comment linking /flak/post/miniwebproxy
on “Crooked Style Sheeding – Webpage tracking using only CSS”Submitted Accidentally nonblocking as a story · 164 points
HN discussion
