Top all-time · #236
Netcraft
Company blog · news.netcraft.comsecuritydata
Netcraft is the company blog at news.netcraft.com, writing about security and data. Since 2008, 205 different Hacker News readers have linked it 272 times, most often “October 2021 Web Server Survey”. No feed was found, so read it on the site itself.
Explore thought leadership, industry insights, and other resources related to cybercrime detection, disruption, and takedowns.
Most-linked posts?
- October 2021 Web Server Survey9 people · 9 mentions · first linked 2016-12-09
- How certificate revocation (doesn’t) work in practice9 people · 9 mentions · first linked 2013-05-13
- Gov security falters during U.S. shutdown8 people · 8 mentions · first linked 2019-01-10
- IIS is 0.15% away from beating Apache as most popular web server6 people · 6 mentions · first linked 2010-06-09
- SSL: Intercepted today, decrypted tomorrow4 people · 4 mentions · first linked 2013-06-25
- The Meteoric Rise of DigitalOcean4 people · 4 mentions · first linked 2013-06-13
- Nginx Overtakes IIS for number of "Active Sites" according to Netcraft3 people · 4 mentions · first linked 2012-01-03
- Phishing attacks already using the .zip TLD3 people · 4 mentions · first linked 2023-05-17
- Netcraft – April 2019 Web Server Survey3 people · 3 mentions · first linked 2019-04-22
- DigitalOcean becomes the second largest hosting company in the world3 people · 3 mentions · first linked 2015-05-02
What Hacker News says?
"Microsoft’s most recent growth in hostnames since mid-2013 has, for the most part, been caused by a large number of Chinese linkfarms (泛站群). The sites in question provide advertising for gambling sites, online product listings, and normally make use of affiliate schemes. Yet they are hosted in the USA, on generic TLDs such as .com and .net to bypass China’s TLD and internet content provider (ICP) license requiremen…
Comment linking /archives/2014/07/31/july-2014-web-server-survey.html
on “Microsoft Launches Visual Studio Code, a Free Cross-Platform Code Editor”Submitted The Meteoric Rise of DigitalOcean as a story · 253 points
HN discussionNadella did have a few softballs lined up for him, but they were likely no more than a few years old. Don't overestimate what can be done in two years, but don't underestimate what can be done in three. Let's not paint Ballmer as an Ozymandias, though, secretly architecting the salvation of the company for 10 years while on the face it looked like they were teetering toward annihilation. You're right, he wasn't an i…
Comment linking /archives/2014/02/03/february-2014-web-server-survey.html
on “Microsoft Launches Visual Studio Code, a Free Cross-Platform Code Editor”Submitted SSL: Intercepted today, decrypted tomorrow as a story · 231 points
HN discussionWhat is the "largest customer base" relative to? In the early 2000s, most Fortune 100s used Solaris [1]- presumably this trend started in the 90s, so I don't know why you think that a manager during that time period would choose Microsoft over Sun except for specific use cases (e.g., smaller hosting providers). Let's look at yesterday's equivalent to AWS- Sun Grid. Sun was viewed back during the first dotcom era in…
Comment linking /archives/2004/11/16/solaris_remains_top_choice_among_fortune_100.html
on “Twitter ‘smytes’ customers”Submitted The Meteoric Rise of DigitalOcean as a story · 224 points
HN discussion"I'm not sure many web developers can get away without visiting the command line." IIS has significant market share. I'll bet most web developers who deploy on it get away without having to use the command line interface very often if at all. https://news.netcraft.com/archives/2018/08/24/august-2018-we...
Comment linking /archives/2018/08/24/august-2018-web-server-survey.html
on “CLI: Improved”Submitted Chrome users oblivious to Heartbleed revocation tsunami as a story · 116 points
HN discussionAnd it's not like IIS is a minor player. IIS is fully 30% of the market, according to this recent Netcraft report: http://news.netcraft.com/archives/2016/01/26/january-2016-we...
Comment linking /archives/2016/01/26/january-2016-web-server-survey.html
on “Leaving Beta, New Sponsors”Submitted Nginx now within 1% of IIS's Active Site Market Share as a story · 82 points
HN discussionActually, the most serious reason (and the reason why not displaying images was introduced in the first place for unknown senders) was the potential for exploits triggered via embedded images, e.g. http://news.netcraft.com/archives/2004/09/17/exploit_for_mic... or even just using it to bypass firewalls by having someone inside an organization execute a GET request (via img src=) from a browser inside the firewall. (…
Comment linking /archives/2004/09/17/exploit_for_microsoft_jpeg_flaw_is_published.html
on “Gmail blows up e-mail marketing by caching all images on Google servers”Submitted June 2011 Web Server Survey as a story · 81 points
HN discussionparent is joking around but I got curious and wanted some data on this and found rather surprisingly that IIS isn’t doing so well these days and seemed to have dropped even more in the last year: https://news.netcraft.com/archives/2020/04/08/april-2020-web... https://news.netcraft.com/archives/2019/04/22/april-2019-web...
Comment linking /archives/2019/04/22/april-2019-web-server-survey.html
on “Ubuntu 20.04 LTS (Focal Fossa)”Submitted GitHub moves to SSL, but remains Firesheepable as a story · 72 points
HN discussionThere are a large number of web applications running in IIS under the .NET platform: http://news.netcraft.com/archives/2014/04/02/april-2014-web-... Also, Microsoft has made some announcements recently to get on the containerization bandwagon: http://azure.microsoft.com/blog/2015/04/08/microsoft-unveils...
Comment linking /archives/2014/04/02/april-2014-web-server-survey.html
on “Docker, CoreOS, Google, Microsoft, Amazon to Develop Common Container Standard”Submitted Amazon Web Services’ growth unrelenting as a story · 53 points
HN discussionAlso, cert revocation just barely works, in some browsers, with EV certificates, after old CRLs expire over a course of months: http://news.netcraft.com/archives/2013/05/13/how-certificate...
Comment linking /archives/2013/05/13/how-certificate-revocation-doesnt-work-in-practice.html
on “CloudFlare's Heartbleed challenge cracked”Submitted PHP Just Grows And Grows as a story · 46 points
HN discussionAccording to Netcraft [0] there are currently 171,432,273 active websites. However there were 1,436,724,046 host names on the net. A total of 6,225,374 web-facing computers was reported. Interestingly the number of active sites hasn't materially changed in 5 years, but host names have skyrocketed. [0] https://news.netcraft.com/archives/category/web-server-surve...
Comment linking /archives/category/web-server-survey/
on “Saving the Internet 2000TB a Day: Fixing Font Awesome’s Fonts”Submitted Secure Websites Shun HTTP Public Key Pinning as a story · 45 points
HN discussion> The Linux distribution can be positively identified in around 30% of cases, and of these 1.39 million Linux computers, just over half are running Ubuntu Linux, nearly a quarter are running CentOS, and around fifth are running Debian Linux. https://news.netcraft.com/archives/2017/09/11/september-2017...
Comment linking /archives/2017/09/11/september-2017-web-server-survey.html
on “Linux Kernel Developer Criticizes Intel for Meltdown, Spectre Response”Submitted April 2014 Web Server Survey as a story · 43 points
HN discussion> Browsers verify SSL certificates for revocation (OCSP). This is an ongoing service that has a direct impact on latency - so SSL is an ongoing service very much like DNS. However, most people don't realize this. Inconsistently and sporadically, it seems: http://news.netcraft.com/archives/2014/04/24/certificate-rev... That article is a few months old though. Have Firefox/Chrome changed their tune due to Heartbleed?
Comment linking /archives/2014/04/24/certificate-revocation-why-browsers-remain-affected-by-heartbleed.html
on “FFS SSL”Submitted WikiLeaks attack escalates as a story · 34 points
HN discussionWide adoption of SPDY also seems like quite an overstatement, a few big players have been trying it, but the only number we have so far is 339 SSL certificates used with SPDY-enabled servers in may 2012. http://news.netcraft.com/archives/2012/05/02/may-2012-web-se...
Comment linking /archives/2012/05/02/may-2012-web-server-survey.html
on “HTTP 2.0”Submitted Heartbleed certificate revocation tsunami yet to arrive as a story · 30 points
HN discussionIn fact, Heartbleed helped a lot: http://news.netcraft.com/archives/2014/05/05/sha-2-very-cryp... But there's a long way to go.
Comment linking /archives/2014/05/05/sha-2-very-cryptographic-so-secure-such-growth-wow.html
on “Why Google is Hurrying the Web to Kill SHA-1”Submitted Nginx Overtakes IIS for number of "Active Sites" according to Netcraft as a story · 30 points
HN discussionAlso the Netcraft Extension gives you this information: http://news.netcraft.com/archives/2013/09/06/perfect-forward...
Comment linking /archives/2013/09/06/perfect-forward-secrecy-in-the-netcraft-extension.html
on “Lavabit SSL Cert Revoked”Submitted "Apache now serves twice as many hostnames as this time last year" as a story · 26 points
HN discussion
