121
How to Get a North Korea / Antarctica VPS
.admonition { margin: .75em 0; padding: .6rem; overflow: hidden; font-size: 12px; page-break-inside: avoid; border-left: .3rem solid #42b983; border-radius: .3rem; box-shadow: 0 0.1re
122
How I block all 26M of your curl requests
A journey in packet filtering
123
Kerberoasting
I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy (“oh, why didn’t I think of that”) or else they impress me w…
124
Spinning Up an Onion Mirror Is Stupid Easy
I recently spun up a .onion mirror of this website.
125
Intel's Tofino P4 Software Is Now Open Source
Contributed by Deb Chatterjee, Intel We are excited to usher in the dawn of a new era for the P4 programming language. For many years, the Tofino family of programmable...
126
Moving from OpenBSD to FreeBSD for firewalls
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
127
Images over DNS
Some places say 255 bytes. They are wrong . Within a TXT record there are multiple character-strings (RFC 1035 section 3.3.14 ) and those are limited in length (because a single byte is used for their length), however there can be many of them.
128
Matrix.org Will Migrate to MAS
Matrix, the open protocol for secure decentralised communications
129
Introduction to AT Protocol
Walkthrough of the various parts and concepts in Bluesky's AT Protocol (ATProto), the types of servers involved and how it all fits together
130
Matrix v1.15
Matrix, the open protocol for secure decentralised communications
131
Yep, Passkeys Still Have Problems
Firstyear's blog
132
Unifying our mobile and desktop domains
How we achieved 20% faster mobile response times, improved SEO, and reduced infrastructure load.
133
My other email client is a daemon
I have a slight problem wherein every time I start up a game of NetHack, I completely lose touch with my surroundings for hours on end. Thankfully The DevTeam Thinks Of Everything and there’s a solution that allows communication with the outside world without breaking immersion: the mail daemon!
134
Memories of .us
How much do you remember from elementary school? I remember vinyl tile floors, the playground, the teacher sentencing me to standing in the hallway. I had a teacher who was a chess fanatic; he painted a huge chess board in the paved schoolyard and got someone to fabricate big wooden chess pieces. It was enough of an…
135
136
The Miserable State of Modems and Mobile Network Operators
This is a story of the complexities of cellular connectivity, the perils of closed ecosystems, and how to debug what you cannot see.
137
Starlink in the Falkland Islands – A national emergency situation?
In yesterday’s (Thursday) OpenFalklands blog, I noted that while a week may seem long in politics, even a single day can feel like an eternity […] Read More
138
NAT Is the Enemy of Low Power Devices
If you have ever tried communicating with a device on a private network, you may have encountered Network Address Translation (NAT). Because the number of connected devices has long outpaced the number of unique addresses in the IPv4 address space, public IP addresses have to be shared between devices. This introduces…
139
HTTP Caching, a Refresher
Let’s relearn web caching together.
140
Regulations Enabling 6 GHz Wi-Fi
Use the interactive map below to explore the latest global regulations enabling 6 GHz spectrum for Wi-Fi.
141
PureVPN IPv6 Leak
Two findings in PureVPN on Ubuntu 24.04. After a reconnect the system takes a default IPv6 route outside the tunnel, and the ip6tables OUTPUT policy is still ACCEPT, so traffic leaves in the clear while the client reports connected.
142
More than DNS: Learnings from the 14 hour AWS outage
A thorough review of a major cloud outage.
143
A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS
I’ve used Mullvad as my VPN provider for a few years. Their service is good, they provide keys for 5 devices, rely on the Wireguard protocol, and offer alternative configurations as well. Despite that, my needs have changed and I wanted to be able to have granular control over DNS queries and the ability to connect my…
144
Stop Breaking TLS
Rant ahead: I hate TLS “Inspection” software with a burning passion and I wish we collectively as an industry would just knock it the fuck off and stop pretending it’s some great security benefit. Every time I encounter it, in whatever form, it’s a gigantic headache that makes everyone’s life worse off and as far as I…
145
146
A M.2 HDMI capture card
Have you ever looked at an NVMe drive and thought to yourself, 'Hey, this would be 31.7% cooler with HDMI ports?'
147
From 400 Mbps to 1.7 Gbps: A WiFi 7 Debugging Journey
Upgraded to WiFi 7 expecting 1.7 Gbps speeds. Got 400 Mbps instead. Here's what was actually wrong and how I fixed it.
148
How to distrust a CA without any certificate errors
A “distrust” is when a certification authority (CA) that issues HTTPS certificates to websites is removed from a root store because it is no longer trusted to issue certificates. This means certificates issued by that CA will be treated as invalid, likely causing certificate error interstitials in any browser that…
149
Upcoming coordinated security fix for all Matrix server implementations
Matrix, the open protocol for secure decentralised communications
150
Tailscale Services
Tailscale Services is a new way to define available resources on your network and expand the granularity of your access controls to resources that may not have Tailscale installed on them.