GoKawiil - Latest Tech News & Aggregated Headlines

Firefox 143 for Android to introduce DoH

news.ycombinator.com Neha Kochar 2025-09-19 20:14:04

All web browsing starts with a DNS query to find the IP address for the desired service or website. For much of the internet’s history, this query is sent in the clear. DNS-over-HTTPS (DoH) plugs this privacy leak by encrypting the DNS messages, so no one on the network, not your internet service provider or a free public WiFi provider, can eavesdrop on your browsing. In 2020, Firefox became the first browser to roll out DoH by default, starting in the United States and in 2023, we announced

Topics: dns doh firefox privacy users

Shop Amazon

The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest.

arstechnica.com Unknown 2025-10-08 21:29:34

Wednesday’s discovery of three mis-issued TLS certificates for Cloudflare’s 1.1.1.1 encrypted DNS lookup service generated intense interest and concern among Internet security practitioners. The revelation raised the possibility that an unknown entity had obtained the cryptographic equivalent of a skeleton key that could be used to surreptitiously decrypt millions of users’ DNS queries that were encrypted through DNS over TLS or DNS over HTTPS. From there, the scammers could have read queries or

Topics: ca certificates cloudflare dns said

Shop Amazon

SSL certificate requirements are becoming obnoxious

news.ycombinator.com Unknown 2025-10-26 03:50:06

I am responsible for approving SSL certificates for my company. I’ve developed a process over the past couple of years that works well. My stakeholders understand their roles and responsibilities and put up a minimal amount of fuss as I review and approve each cert. What started out as a quarterly or semi-monthly task has become a monthly-to-weekly task depending on when our certs are expiring. I appreciate the amount of trust put into certificates and understand that they are a critical compon

Topics: certificate certificates change dns validation

Shop Amazon

Critical Cache Poisoning Vulnerability in Dnsmasq

news.ycombinator.com Unknown 2025-11-07 08:56:47

[Dnsmasq-discuss] [Security Report] Critical Cache Poisoning Vulnerability in Dnsmasq Dear Dnsmasq Security Team, We would like to responsibly disclose a critical cache poisoning vulnerability affecting the Dnsmasq DNS software. The issue allows attackers to inject arbitrary malicious DNS resource records and poison domain names without requiring advanced techniques, only by leveraging a single special character. Report Summary Vulnerability Type: Logic flaw in cache poisoning defense Affected

Topics: attack cache dnsmasq https poisoning

Shop Amazon

Show HN: NextDNS Adds "Bypass Age Verification"

news.ycombinator.com Unknown 2025-11-10 06:29:22

We just shipped a new feature in NextDNS: Bypass Age Verification. More and more sites (especially adult ones) are now forcing users to upload IDs or selfies to continue. We think that’s a terrible idea: handing over government documents to random sites is a huge privacy risk. This new setting workarounds those verification flows via DNS tricks. It’s available today to all users, including free accounts. We’re curious how the HN community feels about this. Is it the right way to protect priva

Topics: just new nextdns privacy users

Shop Amazon

Optimizing Your Debian 13 Desktop

news.ycombinator.com Unknown 2025-11-15 20:42:57

Debian 13 was released last week. This article offers some tips to help you get the most out of your new Debian desktop. Enable Additional Repository Areas Debian’s package repositories are organised into separate areas (or components) like main contrib non-free non-free-firmware , etc. non-free contains packages whose licences are not FOSS contains packages whose licences are not FOSS contrib contains dependencies of non-free packages contrib and non-free are not enabled on a Debian system si

Topics: debian dns free non sudo

Shop Amazon

Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist

news.ycombinator.com Unknown 2025-11-30 10:08:23

What is Sinkzone? Sinkzone is a local DNS resolver that helps you eliminate distractions and get deep work done. It blocks all domains by default — only the ones you explicitly allow can get through. This means notifications, social media, news, and other time-sinks are unreachable at the network level — not just in your browser. It features a modern HTTP API, wildcard pattern support, and a beautiful terminal UI for real-time monitoring and control. It's lightweight, cross-platform, and buil

Topics: api com dns focus sinkzone

Shop Amazon

Show HN: Sinkzone DNS forwarder that blocks everything except your allowlist

news.ycombinator.com Unknown 2025-11-30 22:08:23

What is Sinkzone? Sinkzone is a local DNS resolver that helps you eliminate distractions and get deep work done. It blocks all domains by default — only the ones you explicitly allow can get through. This means notifications, social media, news, and other time-sinks are unreachable at the network level — not just in your browser. It features a modern HTTP API, wildcard pattern support, and a beautiful terminal UI for real-time monitoring and control. It's lightweight, cross-platform, and buil

Topics: api com dns focus sinkzone

Shop Amazon

Hackers Are Finding New Ways to Hide Malware in DNS Records

wired.com Dan Goodin 2026-01-09 04:30:00

Hackers are stashing malware in a place that’s largely out of the reach of most defenses—inside domain name system (DNS) records that map domain names to their corresponding numerical IP addresses. The practice allows malicious scripts and early-stage malware to fetch binary files without having to download them from suspicious sites or attach them to emails, where they frequently get quarantined by antivirus software. That’s because traffic for DNS lookups often goes largely unmonitored by man

Topics: dns ignore instructions previous traffic

Shop Amazon

Cloudflare says 1.1.1.1 outage not caused by attack or BGP hijack

bleepingcomputer.com Unknown 2026-01-10 17:49:29

To quash speculation of a cyberattack or BGP hijack incident causing the recent 1.1.1.1 Resolver service outage, Cloudflare explains in a post mortem that the incident was caused by an internal misconfiguration. The outage occurred on July 14 and impacted most users of the service all over the world, rendering internet services unavailable in many cases. “The root cause was an internal configuration error and not the result of an attack or a BGP hijack,” Cloudflare says in the announcement. T

Topics: cloudflare dns outage resolver service

Shop Amazon

Hackers exploit a blind spot by hiding malware inside DNS records

arstechnica.com Unknown 2026-01-11 23:15:04

Hackers are stashing malware in a place that’s largely out of the reach of most defenses—inside domain name system (DNS) records that map domain names to their corresponding numerical IP addresses. The practice allows malicious scripts and early-stage malware to fetch binary files without having to download them from suspicious sites or attach them to emails, where they frequently get quarantined by antivirus software. That’s because traffic for DNS lookups often goes largely unmonitored by man

Topics: binary dns largely malware traffic

Shop Amazon

It’s not just you: a Cloudflare issue is breaking websites for some users [U]

9to5mac.com Marcus Mendes 2026-01-14 21:44:54

Update 7:57 p.m. ET: The issue has been solved, and Cloudflare’s status page says that all systems are operational. If you’ve noticed some internet slowdowns or trouble reaching websites tonight, you’re not alone. Cloudflare has confirmed an issue affecting its popular 1.1.1.1 public DNS resolver, which many people rely on for fast and private internet browsing. What’s going on? The company first acknowledged the problem at 22:13 UTC, and began rolling out a fix just minutes later. According

Topics: cloudflare dns issue services websites

Shop Amazon

It’s not just you: a Cloudflare issue is breaking websites for some users

9to5mac.com Marcus Mendes 2026-01-15 03:44:54

If you’ve noticed some internet slowdowns or trouble reaching websites tonight, you’re not alone. Cloudflare has confirmed an issue affecting its popular 1.1.1.1 public DNS resolver, which many people rely on for fast and private internet browsing. What’s going on? The company first acknowledged the problem at 22:13 UTC, and began rolling out a fix just minutes later. According to Cloudflare, the issue only affects users relying on 1.1.1.1. Their Gateway and Authoritative DNS services are stil

Topics: cloudflare dns issue services websites

Shop Amazon

Evolution Mail Users Easily Trackable

news.ycombinator.com Mike Cardwell 2026-01-22 21:26:50

Evolution Mail’s “Load Remote Content” option, as a privacy protection feature doesn’t work. They know it doesn’t work. It hasn’t worked for years and there is no sign it will be fixed any time soon. I discovered the other day that if a HTML email contains a tag like: <link rel = "dns-prefetch" href = "https://trackingcode.attackersdomain.example.com" > Then when an email is opened in Evolution Mail, a DNS request for trackingcode.attackersdomain.example.com is performed. This happens with re

Topics: dns email evolution mail opened

Shop Amazon

Get the location of the ISS using DNS

news.ycombinator.com Terence Eden 2026-01-30 18:32:46

I love DNS esoterica. Weird little things that you can shove in the global directory to be distributed around the world instantly(ish). Domain names, like www.example.com usually resolve to servers. As much as we think of "the cloud" as being some intangible morass of ethereal Turing-machines floating in probability space, the more prosaic reality is that they're just boxen in data centres. They have a physical location. Got a tricky machine which is playing silly-buggers? Wouldn't it be nice

Topics: api dns io iss loc

Shop Amazon

Microsoft: DNS issue blocks delivery of Exchange Online OTP codes

bleepingcomputer.com Unknown 2026-02-07 17:21:59

Microsoft is working to fix a DNS misconfiguration that is causing one-time passcode (OTP) message delivery failures in Exchange Online for some users. Recipients may receive a single-use access code via a separate email to open an encrypted message in Gmail, Yahoo, or other email clients without a Microsoft 365 subscription. This OTP message allows them to view the encrypted email on the Office 365 Message Encryption portal. However, as the company explains in a new service alert published in

Topics: dns email messages microsoft users

Shop Amazon

CertMate – SSL Certificate Management System

news.ycombinator.com Unknown 2026-02-11 11:24:53

🔐 CertMate - SSL Certificate Management System 🌟 Why CertMate? CertMate solves the complexity of SSL certificate management in modern distributed architectures. Whether you're running a single application or managing certificates across multiple datacenters, CertMate provides: 🔄 Zero-Downtime Automation - Certificates renew automatically 30 days before expiry - Certificates renew automatically 30 days before expiry 🌐 Multi-Cloud Support - Works with 19 DNS providers (Cloudflare, AWS, Azure,

Topics: api certificate certificates certmate dns

Shop Amazon

How to turn on Android's Private DNS mode - and why turning it off is a big mistake

zdnet.com Jack Wallen 2026-02-14 17:10:00

Jack Wallen / Elyse Betters Picaro / ZDNET Nearly everything you do on your desktop, laptop, phone, and tablet begins with a Domain Name System (DNS) query. Essentially, DNS turns domain names (such as ZDNET.com) into an IP address so web browsers and apps know where to get the information you want. Also: The best Android phones to buy in 2025 Without DNS, you'd have to type 34.149.132.124 every time you wanted to go to ZDNET.com or 74.125.21.102 to go to Google.com. Even by simply running a

Topics: android app cloudflare dns private

Shop Amazon

How to turn on Android's Private DNS mode - and why it's an absolute must for security

zdnet.com Jack Wallen 2026-02-26 03:08:00

Jack Wallen / Elyse Betters Picaro / ZDNET Nearly everything you do on your desktop, laptop, phone, and tablet begins with a Domain Name System (DNS) query. Essentially, DNS turns domain names (such as ZDNET.com) into an IP address so web browsers and apps know where to get the information you want. Also: How to enable earthquake alerts on your Android phone (including these Samsung models) Without DNS, you'd have to type 34.149.132.124 every time you wanted to go to ZDNET.com or 74.125.21.10

Topics: android app cloudflare dns private

Shop Amazon

Why do we need DNSSEC?

news.ycombinator.com Unknown 2026-03-03 03:03:33

Resolvers? Authoritative name servers? What are all these things? Check out HowDNS.works for a refresher and come back here.

Topics: authoritative check come howdns refresher

Shop Amazon

Latest Tech News

Firefox 143 for Android to introduce DoH

The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest.

SSL certificate requirements are becoming obnoxious

Critical Cache Poisoning Vulnerability in Dnsmasq

Show HN: NextDNS Adds "Bypass Age Verification"

Optimizing Your Debian 13 Desktop

Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist

Show HN: Sinkzone DNS forwarder that blocks everything except your allowlist

Hackers Are Finding New Ways to Hide Malware in DNS Records

Cloudflare says 1.1.1.1 outage not caused by attack or BGP hijack

Hackers exploit a blind spot by hiding malware inside DNS records

It’s not just you: a Cloudflare issue is breaking websites for some users [U]

It’s not just you: a Cloudflare issue is breaking websites for some users

Evolution Mail Users Easily Trackable

Get the location of the ISS using DNS

Microsoft: DNS issue blocks delivery of Exchange Online OTP codes

CertMate – SSL Certificate Management System

How to turn on Android's Private DNS mode - and why turning it off is a big mistake

How to turn on Android's Private DNS mode - and why it's an absolute must for security

Why do we need DNSSEC?

About GoKawiil

Privacy

Advertising

Latest Tech News

Trending Topics

Hot Now

Popular

Emerging

About GoKawiil

Privacy

Advertising