61
The British empire's resilient subsea telegraph network
subsea cables, internet infrastructure, telecom infrastructure, 2Africa, new subsea cable projects, layer 1 pricing on key international routes,
62
Modern messaging: Running your own XMPP server
Since a years we know, or might suspect, our chats are listend on, our uploaded files are sold for advertising or what purpose ever and the chance our social messengers leak our private data is incredibly high. It is about time to work against this.
63
Making RSS More Fun
I wrote a browser extension to try and make finding random, independent websites more fun.
64
My Own DNS Server at Home – Part 1: IPv4
“It’s always DNS” is a famous meme among network people. Name resolution is technically quite simple. It’s “just” translating a hostname like jan.wildeboer.net to an IP address. What could possibly go wrong? I am a radical optimist and detail-obsessed knowledge collector, so I decided to find out. As part of my goal…
65
Negotiating PoE+ Power in the Pre‑Boot Environment
Solving a boot-time power challenge on PoE+ x86 systems by creating our own UEFI app to handle LLDP power negotiation at the firmware level, allowing our machines to request higher power from network switches before the OS loads.
66
67
Thoughts on Cloudflare
Thoughts on its role and impact on the web’s landscape.
68
It seems that OpenAI is scraping [certificate transparency] logs
lol. I minted a new TLS cert and it seems that OpenAI is scraping CT logs for what I assume are things to scrape from, based on the near instant response from ...
69
The Internet Slum: is abandoning the Internet the next big thing? (2004)
The Internet Slum
70
A story about bypassing air Canada's in-flight network restrictions
1 Prologue A while ago, I took a flight from Canada back to Hong Kong - about 12 hours in total with Air Canada. Interestingly, the plane actually had WiFi: However, the WiFi had restrictions. For Aeroplan members who hadn’t paid, it only offered Free Texting, meaning you could only use messaging apps like WhatsApp…
71
How to Get a North Korea / Antarctica VPS
.admonition { margin: .75em 0; padding: .6rem; overflow: hidden; font-size: 12px; page-break-inside: avoid; border-left: .3rem solid #42b983; border-radius: .3rem; box-shadow: 0 0.1re
72
How I block all 26M of your curl requests
A journey in packet filtering
73
Kerberoasting
I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy (“oh, why didn’t I think of that”) or else they impress me w…
74
Spinning Up an Onion Mirror Is Stupid Easy
I recently spun up a .onion mirror of this website.
75
Moving from OpenBSD to FreeBSD for firewalls
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
76
Images over DNS
Some places say 255 bytes. They are wrong . Within a TXT record there are multiple character-strings (RFC 1035 section 3.3.14 ) and those are limited in length (because a single byte is used for their length), however there can be many of them.
77
Introduction to AT Protocol
Walkthrough of the various parts and concepts in Bluesky's AT Protocol (ATProto), the types of servers involved and how it all fits together
78
Yep, Passkeys Still Have Problems
Firstyear's blog
79
My other email client is a daemon
I have a slight problem wherein every time I start up a game of NetHack, I completely lose touch with my surroundings for hours on end. Thankfully The DevTeam Thinks Of Everything and there’s a solution that allows communication with the outside world without breaking immersion: the mail daemon!
80
Memories of .us
How much do you remember from elementary school? I remember vinyl tile floors, the playground, the teacher sentencing me to standing in the hallway. I had a teacher who was a chess fanatic; he painted a huge chess board in the paved schoolyard and got someone to fabricate big wooden chess pieces. It was enough of an…
81
82
Starlink in the Falkland Islands – A national emergency situation?
In yesterday’s (Thursday) OpenFalklands blog, I noted that while a week may seem long in politics, even a single day can feel like an eternity […] Read More
83
HTTP Caching, a Refresher
Let’s relearn web caching together.
84
PureVPN IPv6 Leak
Two findings in PureVPN on Ubuntu 24.04. After a reconnect the system takes a default IPv6 route outside the tunnel, and the ip6tables OUTPUT policy is still ACCEPT, so traffic leaves in the clear while the client reports connected.
85
More than DNS: Learnings from the 14 hour AWS outage
A thorough review of a major cloud outage.
86
A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS
I’ve used Mullvad as my VPN provider for a few years. Their service is good, they provide keys for 5 devices, rely on the Wireguard protocol, and offer alternative configurations as well. Despite that, my needs have changed and I wanted to be able to have granular control over DNS queries and the ability to connect my…
87
Stop Breaking TLS
Rant ahead: I hate TLS “Inspection” software with a burning passion and I wish we collectively as an industry would just knock it the fuck off and stop pretending it’s some great security benefit. Every time I encounter it, in whatever form, it’s a gigantic headache that makes everyone’s life worse off and as far as I…
88
89
A M.2 HDMI capture card
Have you ever looked at an NVMe drive and thought to yourself, 'Hey, this would be 31.7% cooler with HDMI ports?'
90
From 400 Mbps to 1.7 Gbps: A WiFi 7 Debugging Journey
Upgraded to WiFi 7 expecting 1.7 Gbps speeds. Got 400 Mbps instead. Here's what was actually wrong and how I fixed it.