Jan Wildeboer
jan.wildeboer.net · Personal blog · on HN since 2011
Jan Wildeboer, a Red Hat open source evangelist, who writes about botnets, self-hosted DNS and email, and EU software law.
What HN saysCommenters cite his post on stealthy botnets to explain why blocking by ASN fails, and link his Mastodon comments setup for static sites.
20HN people shared it
9linked it in comments
16stories submitted
1.2Kstory points
7 months agolast shared
2011people per year2026
Most-shared posts
- 1The Web Is Broken – Botnet Part 24 people · 411 points · first shared 2025 · 274 comments on HN
- 2Email Done My Way, Part 0 – The Journey4 people · 145 points · first shared 2022 · 12 comments on HN
- 3Those Stealthy Botnets2 people · 7 points · first shared 2025 · discussion on HN
- 4Client-side comments with Mastodon on a static Jekyll website2 people · 1 points · first shared 2023 · discussion on HN
- 5My Own DNS Server at Home – Part 1: IPv41 people · 220 points · first shared 2025 · 94 comments on HN
- 6Apple actually lost in Dutch court, not the opposite1 people · 167 points · first shared 2011 · 12 comments on HN
- 7Microsoft: No GPLv3 Software for Windows Phone and Xbox Apps.1 people · 131 points · first shared 2011 · 131 comments on HN
- 8EU court: Reverse engineering OK, API not protected by (c) and more1 people · 116 points · first shared 2012 · 40 comments on HN
- 9My Cute Homelab1 people · 23 points · first shared 2025 · 9 comments on HN
- 10My doorlock and my digital sovereignty1 people · 3 points · first shared 2025 · discussion on HN
- 11Be the LetsEncrypt in your homelab with step-ca1 people · 3 points · first shared 2025 · discussion on HN
- 12OCT – My Framework for Digital Sovereignty, Part 11 people · 2 points · first shared 2025 · discussion on HN
- 13Philosophy of Home Automation1 people · 1 points · first shared 2016 · discussion on HN
- 146 things to know about patents, the short form (2012)1 people · 1 points · first shared 2014 · discussion on HN
- 15Conway: Think Networks First, Actors Second1 people · 1 points · first shared 2026 · discussion on HN
What HN people wrote when they linked it
m-hodges · 2025-09-30
There are similar¹𝄒²𝄒³ ideas for Mastodon / ActivityPub:
¹ https://jszym.com/blog/mastodon_blog_comments/
² https://jan.wildeboer.net/2023/02/Jekyll-Mastodon-Comments/
³ https://carlschwan.eu/2020/12/29/adding-comments-to-your-static-blog-w…
jwildeboer · 2025-09-06
No. Both MacOS and iOS happily resolve and connect to the machines in my homelab.jhw domain. I did add the root cert of my CA (Certificate Authority) to the trust store on MacOS and iOS, so I can also enjoy TLS connections. Scroll to the "Add the certificate" part of https://jan.wildeboer.net/2025/08/Create-SMIME-Cert-stepca/ for the HOWTO that worked for me.
trod1234 · 2025-06-04
Unfortunately nowadays, blocking by ASN is not going to help you out much in solving this type of issue.
The reason for this is stealthy botnets.
For a brief rundown, I'd suggest this article.
https://jan.wildeboer.net/2025/04/Web-is-Broken-Botnet-Part-2/
eGQjxkKF6fif · 2025-06-02
Read this: https://jan.wildeboer.net/2025/04/Web-is-Broken-Botnet-Part-2/
Basically everybody's a bot in a hidden botnet now. And we agreed to it. Phones, tablets, Windows appstores add the SDK in, and then drone. One of the big ones is "Infatica" - devs get paid to put this in legitimate 'apps'
AI companies, and whoever and whatever else use the reputation-good IPs to hammer sites and well, it's fair game for all malicious people.
andelink · 2025-04-20
This is a hilariously optimistic, naive, disconnected from reality take. What sort of "proof" would be sufficient for you? TFA includes of course data from the authors own server logs^, but it also references real SDKs and business selling this exact product. You can view the pricing page yourself, right next to stats on how many IPs are available for you to exploit. What else do you need to see?
^ edit: my mistake, the server logs I mentioned were from the authors prior blog post on this topic, linked to at the top of TFA: https://jan.wildeboer.net/2025/02/Blocking-Stealthy-Botnets/
weinzierl · 2022-11-07
A bit related: If you want to show the verified status for GitHub on your Mastodon profile, here is how to do it:
https://jan.wildeboer.net/2022/06/Quick-Fix-Verified-Mastodon-Github/
Courtesy of https://news.ycombinator.com/user?id=jwildeboer
gigatexal · 2022-09-05
Funny seeing this on the top of HN when this is also on the top of HN: https://jan.wildeboer.net/2022/08/Email-0-The-Journey-2022/
JPLeRouzic · 2022-06-12
"But some IT experts have pointed to a different possible cause: an expiring security certificate. The problem, it seems, is that the Verifone H5000 is a rather old albeit robust model whose so-called “End of Life” was officially announced by Verifone in 2019. "
...
"That is the hypothesis of Jan Wildeboer, a self-described “EMEA Evengelist” at IBM-owned Red Hat who began informing the English-speaking public about the issue in a rapidly expanding Twitter thread."
https://jan.wildeboer.net/2022/06/H5000