The Story Just about every significantly-sized deployment on the Internet makes use of reverse proxy software, and the most commonly deployed reverse proxy software is not memory safe. This means that most deployments have millions of lines of C and C++ handling incoming traffic at the edges of their networks, a risk that needs to be addressed if we are to have greater confidence in the security of the Internet.
datum-cloud/app
A desktop app for safely exposing local services on the Internet via Iroh tunnels using QUIC. Built in rust.
Header Accordions: QPACK amplification attacks against HTTP/3 servers - FoxIO | Cyber Innovation
We solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.
Opinion | The Great Firewall of Santa Cruz
A funny computer science class assignment from UC Santa Cruz.
Someone Is Learning How to Take Down the Internet
Over the past year or two, someone has been probing the defenses of the companies that run critical pieces of the Internet. These probes take the form of precisely
tholian-network/stealth
:rocket: Stealth - Secure, Peer-to-Peer, Private and Automateable Web Browser/Scraper/Proxy
Platform
Secure workloads with Identity-First Reachability. NetFoundry closes inbound ports and replaces VPNs for simpler, zero-trust networking.
Hacking Millions of Modems (and Investigating Who Hacked My Modem)
Two years ago, something very strange happened to me while working from my home network. I was exploiting a blind XXE vulnerability that required an external HTTP server to smuggle out files, so I spun up an AWS box and ran a simple Python webserver to receive the traffic from the vulnerable server.
Blooym/porxie
[Mirror] A correct and efficient ATProto blob proxy for secure content delivery.
Daytona - Secure Infrastructure for Running AI-Generated Code
Deploy Al code with confidence using Daytona's lightning-fast infrastructure. 90ms environment creation, stateful operations, and enterprise-grade security.
mitmproxy - an interactive HTTPS proxy
mitmproxy is your swiss-army knife for debugging, testing, privacy measurements, and penetration testing. It can be used to intercept, inspect, modify and replay web traffic such as HTTP/1, HTTP/2, HTTP/3, WebSockets, or any other SSL/TLS-protected protocols. You can prettify and decode a variety of message types ranging from HTML to Protobuf, intercept specific messages on-the-fly, modify them before they reach their destination, and replay them to a client or server later on.
blooym.dev/porxie
[MIRROR ONLY] A correct and efficient ATProto blob proxy for secure content delivery.
The Deceptive Complexity of P2P Connections and the Solution We Found
Discover how ARK Builders navigated a maze of p2p network technologies, comparing WebRTC, libp2p, and Iroh to find the perfect fit.
8-bit website
On the other end of the wire, there's a linux box which bridges the serial link to the internet. It doesn't do any processing or run custom software: the microcontroller has its own TCP/IP stack and HTTP server.
Proxies
Resources for learning about & safely using proxies
Porxie - a correct, fast ATProto blob proxy - Blooym
IP Intelligence, Bot Detection, Fraud Detection | IPQS