Setec Astronomy’s Shield is a turnkey RTBH (Remote-Triggered Black Hole) service that lets a single BGP-capable router drop malicious traffic upstream within minutes. It provisions a private ASN and a GRE or WireGuard tunnel to one of SATIS PoPs (Los Angeles, Dallas, Buffalo), generates copy-paste BGP configs for common platforms (Cisco, Juniper, pfSense, OpenWrt, VyOS, BIRD/FRR, OpenBSD, etc.), and shares a live, community-driven blackhole feed from AS23026 so attacks observed by other peers get auto-blocked for you. Blackholing works by announcing more-specific routes with a community tag so upstream routers silently drop traffic before it reaches your network.
Setup is self-service and auto-approved: a 14-day free trial with no card required, after which Shield is $59/month or a limited lifetime license at $9,995. No multihoming or prior BGP relationship is required; one router and a private ASN (64512-65534) suffice, and residential connections work if you place your own router behind the ISP gateway. Shield is effective against connection-completing attacks (brute force, exploit attempts, C2 callbacks) but not volumetric floods unless you enable uRPF or additional measures on your router. An API (2,000 req/day) and higher-tier Professional/Enterprise plans are available for larger deployments.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A U.S. immigration advocate sued the government after a border agent searched his phone without a warrant and copied data. He believes the government targeted him due to his activism and political work on immigration rights. (arstechnica.com)
Over 44,000 legal objections have been filed against Palantir's NHS data platform, demanding it be blocked from handling medical data. The campaign follows backlash over the company's involvement with the Israeli military and US immigration enforcement. (theguardian.com)
OpenAI claims that a Chinese AI model stole its intellectual property. The company alleges that it had previously appropriated IP from other sources. (theregister.com)
Android developers face new requirements to publish apps, including a $25 verification fee and identity verification, even for small-scale projects. These policies have caused frustration among developers who want to share their apps freely without extensive registration processes. (twitter.com)
Christa Pike, the only woman on Tennessee's death row, was reportedly still alive after receiving two lethal injections. Her lawyers are seeking to halt her execution, citing that she remained conscious and had a heartbeat despite the injections. (nbcnews.com)
Sandboxing alone may not be enough to contain rogue agents, as advanced attackers can find ways to bypass these security measures. Additional cryptographic and security strategies are necessary to effectively limit malicious activities. (blog.cryptographyengineering.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.