181
The “S” in MCP Stands for Security
Spoiler: it doesn’t. But it should.
New
The latest blog posts to take off on Hacker News. 223 posts.
182
Matrix.org Will Migrate to MAS
Matrix, the open protocol for secure decentralised communications
183
How IMAP works under the hood
Learning how the IMAP protocol actually works
184
DIY PTP Grandmaster Clock with a Raspberry Pi
tl;dr: I set up an open source Time Pi project to build a stratum 1 PTP and NTP timeserver using a Raspberry Pi. Time is important to modern society, and most of us have a clock on our wrist that's more accurate than at any time in human history. But highly precise time is important in many industries, especially…
185
Cross-Platform P2P Wi-Fi: How the EU Killed AWDL
This post investigates how we got from Wi-Fi Direct to AWDL to Wi-Fi Aware, what makes Wi-Fi Aware technically superior, and why this shift unlocks true cross-platform peer-to-peer connectivity for developers.
186
If you get the chance, always run more extra network fiber cabling
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
187
Noise cancellation improves turn-taking for AI Voice Agents
Turn-Taking is a big challenge AI Voice Agents are rapidly evolving, powering critical use-cases such as customer support automation, virtual assistants, gaming, and remote collaboration platforms. For these voice-driven interactions to feel natural and practical, the underlying audio pipeline must be resilient to…
188
The Internet Slum: is abandoning the Internet the next big thing? (2004)
The Internet Slum
189
Alphabet spins out Taara – Internet over lasers
Taara is now an independent company with a mission to bring high-speed, affordable and abundant connectivity to people everywhere using beams of light.
190
Launching RDAP; sunsetting WHOIS
The Registration Data Access Protocol (RDAP) is the successor to WHOIS, which is being sunsetted on 28 January 2025.
191
ESP32 WiFi Superstitions
The ESP32 is a popular microcontroller to use for do-it-yourself home automation, sensors, and a variety of other bits and bobs that you might want to take care of around the house. It’s the successor to the venerable ESP8266 which has found its way into many of our WiFi connected devices (seriously, open up a device…
192
HTTP/3 is everywhere but nowhere
HTTP/3 has been in development since at least 2016, while QUIC (the protocol beneath it) was first introduced by Google way back in 2013. Both are now...
193
The insecurity of telecom stacks in the wake of Salt Typhoon
Towards the end of last year, we learned that a group (allegedly affiliated with the Chinese government, referred to as “Salt Typhoon”) breached T-Mobile and other telecommunications co…
194
Ecosia is teaming up with Qwant to build a European search index
We are proud to share the next step in our journey towards tech independence: building our very own search index!
195
How to distrust a CA without any certificate errors
A “distrust” is when a certification authority (CA) that issues HTTPS certificates to websites is removed from a root store because it is no longer trusted to issue certificates. This means certificates issued by that CA will be treated as invalid, likely causing certificate error interstitials in any browser that…
196
Tailscale is pretty useful
It's probably old news for most, but I've recently started using Tailscale and wanted to share my experience with it.
197
Chrome Returns 206 when the Server Returns 403
Chrome Returns 206 when the Server Returns 403 Postmortem It is a feature not a bug! I got detailed explanation from chrome developers which is very helpful. You may find the complete response in the bug ticket. Also this blog post draws a lot of attention after I post it on Hackers News. You may find comments here…
198
199
The Miserable State of Modems and Mobile Network Operators
This is a story of the complexities of cellular connectivity, the perils of closed ecosystems, and how to debug what you cannot see.
200
There isn't much point to HTTP/2 past the load balancer
I want to write a post about Pitchfork, explaining where it comes from, why it is like it is, and how I see its future. But before I can get to that, I think I need to share my mental model on a few things, in this case, HTTP/2.
201
Matrix Foundation to shut down bridges if it doesn't raise $100K
Matrix, the open protocol for secure decentralised communications
202
When imperfect systems are good: Bluesky's lossy timelines
By examining the limits of reasonable user behavior and embracing imperfection for users who go beyond it, we can continue to provide service that meets the expectations of users without sacrificing scalability of the system.
203
IPv6 Is Hard
Yesterday I read this toot (German) over on mastodon which starts with “IPv6 is hard.” No it’s not. It’s different. I ran across this multiple times: There is an A and an AAAA-record for a FQDN, but the web server is only reachable via IPv4. You can easily test this with curl $ curl -4 https://github.com -o /dev/null…
204
NAT Is the Enemy of Low Power Devices
If you have ever tried communicating with a device on a private network, you may have encountered Network Address Translation (NAT). Because the number of connected devices has long outpaced the number of unique addresses in the IPv4 address space, public IP addresses have to be shared between devices. This introduces…
205
Residential Networking over Telephone
Recently, I covered some of the history of Ethernet's tenuous relationship with installed telephone cabling . That article focused on the earlier and more business-oriented products, but many of you probably know that there have been a number of efforts to install IP networking over installed telephone wiring in a…
206
Starlink in the Falkland Islands – A national emergency situation?
In yesterday’s (Thursday) OpenFalklands blog, I noted that while a week may seem long in politics, even a single day can feel like an eternity […] Read More
207
208
Avoid ISP Routers (2024)
Avoid ISP routers
209
Push Notifications for Decentralized Services
How mobile push notifications currently bring centralization to decentralized services, and how we can avoid it, even for mainstream configurations. Published the 31/01/2025 This post will focus on Android. We all know decentralized applications: emails, Mastodon (and the Fediverse), Nextcloud and other clouds, Git…
210
Morse Code in Tubular Bells (2021)
A quick look at how the movie The Exorcist from 1973 has links to the late great Alan Turing via Mike Oldfield’s album Tubular Bells, Scotland and Amateur Radio. It’s Halloween so figured why not throw some horror in the mix.