61
Gnutella: A Protocol Outliving the World That Created It
Gnutella Explanation
New
The latest blog posts to take off on Hacker News. 1,615 posts.
62
Are we self-sovereign PKI yet?
Every end-to-end encrypted messenger ships a fingerprint UI. Almost nobody opens it. A note on what's actually missing.
63
Wi-Wi is wireless time sync at 1 nanosecond
At NAB, I found a demo of Wi-Wi STAMP, a wireless time synchronization protocol that came out of Japan's NICT. Wi-Wi stands for Wireless 2Way interferometry, and it uses the 900 MHz band for picosecond-level time sync, and mm-level distance accuracy, in a tiny box, currently the size of a smartphone. The system is…
64
Anyone on the Internet Can Ring Your Doorbell
Behind a cheap Temu doorbell sits an IoT backend where device IDs are sequential and requests are forgeable with a string baked into every firmware. One signed call lifts any device's persistent password and lets anyone on the Internet hijack the next live call.
65
Mullvad exit IPs are surprisingly identifying
Update 5/29: Mullvad has begun rolling out a mitigation feature on their servers that scrambles exit IP positions, thereby fixing this issue. IPs are still deterministically selected based on the pubkey. Mullvad is one of the few VPN providers that offers multiple exit IPs for its servers. If two people connect to the…
66
Gaining control of every projector and camera on campus
While starting my first year at the Colorado School of Mines, I came across a rather interesting fact: the local DNS servers will assign a subdomain to each device that connects to the network. This means that a device called “meow” will be visible as “meow.mines.edu” on any campus wifi, though the network still…
67
Setting up a free *.city.state.us locality domain (2025)
In the US, you can get a domain name like `somename.city.state.us` for free. If your town has its own domain, you can get nameservers from Amazon Lightsail, send the *Interim .US Domain Template* to the delegated manager for your locality, then point DNS entries at your webhost.
68
Extremely Low Frequencies
The submarine is a surprisingly ancient technology—at least in its early, primitive forms. The idea is quite simple, that a well-enough-sealed boat ought to be able to submerge and resurface. It's the practicalities that make the whole thing difficult. It is generally considered that the US Civil War was the first use…
69
How Fast Does Claude, Acting as a User Space IP Stack, Respond to Pings?
Here is a fun thought: if we ask Claude Code to act as a user space IP stack, how quickly will it be able to respond to a ping?
70
FastCGI: 30 years old and still the better protocol for reverse proxies
For FastCGI's 30th birthday, let's look at how it avoids the security problems inherent in HTTP reverse proxying
71
10Gb/s Ethernet: what I did to get it working in my home
I already had 2.5Gb/s working. Here's how I upgraded the whole house to 10Gb/s Ethernet -- including real iperf3 numbers, MikroTik switches, scary thermals, and what actually worked.
72
Networking changes coming in macOS 27
We are under warning that macOS 27 is likely to remove support for AFP, and lately some additional requirements for connection to certain servers. This explains how these could affect you.
73
New 10 GbE USB adapters are cooler, smaller, cheaper
For years, the best way to get 10 gigabit networking on laptops was to buy an expensive, large, and hot 10 GbE Thunderbolt adapter. With new RTL8159-based 10G USB 3.2 adapters coming onto the market, the bulky adapters might be a thing of the past. Just look at the size of the thing in comparison to my Thunderbolt…
74
Email could have been X.400 times better
X.400 promised recallable, scheduled, self-destructing email. Why simple SMTP won instead, and what we lost and gained when it did.
75
Migrating from DigitalOcean to Hetzner
A real-world production migration from DigitalOcean to Hetzner dedicated, handling 248 GB of MySQL data across 30 databases, 34 Nginx sites, GitLab EE, Neo4j, and live mobile app traffic — with zero downtime.
76
77
Blackholing My Email
How Counter-Strike map credits led to my email address being harvested by worms, and why I had to ask my ISP to blackhole it.
78
Understanding Traceroute
I never understood how traceroute discovers each hop. Turns out it's a clever TTL trick, and about 80 lines of Rust.
79
80
Build your own Dial-up ISP with a Raspberry Pi
Last year my aunt let me add her original Tangerine iBook G3 clamshell to my collection of old Macs1. It came with an AirPort card—a $99 add-on Apple made that ushered in the Wi-Fi era. The iBook G3 was the first consumer laptop with built-in Wi-Fi antennas, and by far the cheapest way to get a computer onto an 802.11…
81
SSH certificates: the better SSH experience
When I ssh into a server for the first time, I’m confronted with a dialog which asks me to verify I’m actually talking to the machine I expect to be talking to. $ ssh -l jp 192.0.2.65 The authenti...
82
I traced my traffic through a home Tailscale exit node
A practical deep dive into Tailscale exit nodes: route changes, traceroute evidence, DERP fallback, trust boundaries, and why this model can be free.
83
What changes when you turn a Linux box into a router
I think it is incredibly cool that we can change a Linux system into a networking device. But have you ever wondered:
84
How to turn anything into a router
I don’t like to cover “current events” very much, but the American government just revealed a truly bewildering policy effectively banning import of new consumer router models. This is ridiculous for many reasons, but if this does indeed come to pass it may be beneficial to learn how to “homebrew” a router…
85
86
My home network observes bedtime with OpenBSD and pf
The files mentioned in this article are available for viewing or cloning here: the 'pf-bedtime' repo .
87
The Social Smolnet
The Social Smolnet par Ploum - Lionel Dricot.
88
You can run a DNS server (2025)
In case you were wondering whether this would mean... writing zone files with some arcane syntax that BIND 9 is apparently famous of, I hereby present the main point of this post a recommendation for which DNS server to choose.
89
Starlink Mini as a failover
I recently picked up a Starlink Mini to use as a backup connection for my home network. The underlying technology is fascinating - thousands of satellites in low Earth orbit delivering broadband almost anywhere. With the new £4.50 standby plan, it's an excellent way to keep things online.
90
Cert Authorities Check for DNSSEC from Today
From 15 March 2026, CAs must validate DNSSEC on CAA lookups and ACME checks. I've run DNSSEC for 14 years; see if your registrar supports it.