this post was submitted on 03 Aug 2025
3 points (54.5% liked)

Technology

7148 readers
101 users here now

News community around technology, social media platforms, information technology and governmental policy surrounding it.

What doesn't fit here?

The core of the story has to be technology focused.


Post guidelines

Title formatPost title should mirror the news source title. If you don't like the title of article, look for an alternative source instead of editorializing it.
URL formatPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
[Opinion] prefixOpinion (op-ed) articles must use [Opinion] prefix before the title. Opinion articles refer to articles that their publisher doesn't explictly endorse.
Country prefixCountry prefix can be added to the title with a separator (|, :, etc.) if the news is from a local publisher who doesn't clearly mention the country.


Rules

1. English onlyTitle and associated content has to be in English.
2. Use original linkPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
3. Respectful communicationAll communication has to be respectful of differing opinions, viewpoints, and experiences.
4. InclusivityEveryone is welcome here regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
5. Ad hominem attacksAny kind of personal attacks are expressly forbidden. If you can't argue your position without attacking a person's character, you already lost the argument.
6. Off-topic tangentsStay on topic. Keep it relevant.
7. Instance rules may applyIf something is not covered by community rules, but are against lemmy.zip instance rules, they will be enforced.


Companion communities

!globalnews@lemmy.zip
!interestingshare@lemmy.zip


Icon attribution | Banner attribution


If someone is interested in moderating this community, message @brikox@lemmy.zip.

founded 2 years ago
MODERATORS
 

About 34% of the web is still powered by HTTP/1.1 and that protocol will likely come under severe attack starting on Wednesday. Get a preview of what's in store for the latest security headache.

top 5 comments
sorted by: hot top controversial new old
[–] fullofredgoo@lemmy.world 42 points 1 year ago (1 children)

First comment on the post:

James Kettle: Hi, I’m the author of this research. It’s great to see interest and I can promise some quality research and a strong argument to kill HTTP/1.1 but the headline of this article goes a bit too far. The specific CDN vulnerabilities have been disclosed to the vendors and patched (hence the past tense in the abstract) – I wouldn’t drop zero day on a CDN! That said I do expect to see fresh critical CDN vulnerabilities in future – hopefully found by a white hat!

[–] 9point6@lemmy.world 21 points 1 year ago

Blogs and misreporting research to drive clicks

Name a more iconic combo

[–] floofloof@lemmy.ca 11 points 1 year ago* (last edited 1 year ago)

If we know about these attacks, then the bad guys know too. Even if they weren't yet given the details they've been told where to look and could quickly figure them out. Why then would they wait until Wednesday to start attacking? We have to assume they're already attacking, and 1/3 of the web has not gone down.

Besides, the author of the research says the vulnerabilities have been disclosed to CDN providers and patched already. So it's a significant discovery but the headline is doubly silly.

[–] PleaseLetMeOut@lemmy.dbzer0.com 6 points 1 year ago* (last edited 1 year ago)

I remember people on IRC doing something similar to Cloudflare years back. Using a malformed HTTP header to get a server's real host IP. It didn't give you admin panel access or anything like this does, but you could deanonymize sites.

And to sit on this for 6 years?! I don't even know what to say about that...