Botnet that hid for 18 months boasted some of the coolest tradecraft ever

 https://arstechnica.com/information-technology/2022/05/how-hackers-used-smarts-and-a-novel-iot-botnet-to-plunder-email-for-months/

scary under-the-radar botnet on network applicances

6 Lessons we learned when debugging a scaling problem on GitLab.com

https://about.gitlab.com/blog/2019/08/27/tyranny-of-the-clock/
Yes, wireshark has a wealth of info

The Maturing of QUIC

https://www.fastly.com/blog/maturing-of-quic
The origin and history of http/3 aka QUIC

DNS Encryption Explained

https://blog.cloudflare.com/dns-encryption-explained/
The two ways to encrypt DNS

Cloudflare, Google and Firefox to add support for HTTP/3, shifting away from TCP

https://www.techspot.com/news/82111-cloudflare-google-firefox-add-support-http3-shifting-away.html
UDP, anyone?

So You Want To Be a Pentester?

https://jhalon.github.io/becoming-a-pentester/
good read from a practitioner

How to set up an easy and secure reverse proxy with Docker, Nginx & Letsencrypt

https://medium.freecodecamp.org/docker-nginx-letsencrypt-easy-secure-reverse-proxy-40165ba3aee2
Wish they'd used a standard webserver, rather than a plex server.

The Lost Worlds of Telnet

https://thenewstack.io/the-lost-worlds-of-telnet/
Yes, some things still answer to Telnet.

Introduction to IPFS: Run Nodes on Your Network, with HTTP Gateways

https://medium.com/@rossbulat/introduction-to-ipfs-set-up-nodes-on-your-network-with-http-gateways-10e21ea689a4
One of the latest buzzy things is the InterPlanetary File System: IPFS. Here's some howtos.

The D in Systemd stands for 'Dammmmit!' A nasty DHCPv6 packet can pwn a vulnerable Linux box

https://www.theregister.co.uk/AMP/2018/10/26/systemd_dhcpv6_rce/
More fodder for those of us who aren't big systemd fans.

Tcpdump Primer and Tutorial With Examples

https://danielmiessler.com/study/tcpdump/
Very nice TCPdump tutorial.

Welcome to Solid

https://solid.inrupt.com/
SIr Tim B-L's latest project. I'm still not sure I get it, or what the uptake will be.

WireGuard VPN review: A new type of VPN offers serious advantages

https://arstechnica.com/gadgets/2018/08/wireguard-vpn-review-fast-connections-amaze-but-windows-support-needs-to-happen/
If it's easier than OpenVPN, I'm in.

Critical Linux Flaw Opens the Door to Full Root Access

https://threatpost.com/critical-linux-flaw-opens-the-door-to-full-root-access/132034/
Time to start assigning static IP's folks: linux distros with critical security flaw in DHCP client. 

ss command: Display Linux TCP / UDP Network/Socket Information

https://www.cyberciti.biz/tips/linux-investigate-sockets-network-connections.html
ss as a replacement for netstat

DNS Resolvers Performance compared: CloudFlare x Google x Quad9 x OpenDNS

https://medium.com/@nykolas.z/dns-resolvers-performance-compared-cloudflare-x-google-x-quad9-x-opendns-149e803734e5
New CloudFlare DNS resolver is a good, albeit unfiltered, option. 

Hacker Lexicon: What Is Sinkholing?

https://www.wired.com/story/what-is-sinkholing/
Send hackers into a network blackhole.

Wi-Fi WPA2 security cracked: Android & Linux most vulnerable, but iOS and macOS too [U]

https://9to5mac.com/2017/10/16/wifi-wpa2-hacked/
The Linux and Android versions of this are particularly troubling. 

Open Source Security Secure networks start here.

https://www.pfsense.org/
PfSense seems to be one of the leading open source firewalls 

How to browse Tor

https://thehiddenwiki.pw/how-to-browse-tor-everything-about-tor/
how to browse via tor