If you look at the table of contents for my book, Other Networks: A Radical Technology Sourcebook, you’ll see that entries on networks before/outside the internet are arranged first by underl…
Our sans-IO WireGuard implementation in Rust, optimized for ease of use, security and performance through a parallel-friendly and idiomatic API.
We investigated a bug where CUBIC's congestion window became pinned at its minimum floor, causing a performance to plummet. The fix involved correctly measuring idle periods to distinguish RTT wait times from actual application idleness.
Dotted around London, there are a number of private hotels that aren’t the sort of hotel you might expect – they’re needed to make mobile phones work on the London Underground.
Proceed at your own risk! (... it's worth it)
A practical deep dive into Tailscale exit nodes: route changes, traceroute evidence, DERP fallback, trust boundaries, and why this model can be free.
This was unavoidable, given my post from the other day about how to make traceroute display (almost) arbitrary strings.
In October, my Dad and I got to go behind the scenes at two St. Louis Blues (NHL hockey) games, and observe the massive team effort involved in putting together a modern digital sports broadcast. I wanted to explore the timing and digital side of a modern SMPTE 2110 mobile unit, and my Dad has been involved in studio…
Solving the conflicting subnet problem with overlay addressing, WireGuard, and 1:1 NAT.
EDIT 2026-07-08: Gizmohub, despite the announcements, did not stop working on the 7th. Instead, a Verizon tech called me, and told me that they were not going to take Gizmohub down until they'd resolved these issues. They also walked me through getting set up, including getting me the 2FA code that was not coming…
Run away while you still can, it's not too late for you to avoid the curse of knowledge.
arXiv, and the scientific community at large, are facing a watershed moment. Scholarly publishing is currently changing at a rapid pace, and we are seeing a…
Protect the conversations that matter with a secure, end-to-end encrypted video conferencing from Proton.
Our presence in the ATmosphere – Bluesky’s protocol – is no longer dependent on the platform’s standard infrastructure. Instead, our data now runs on Eurosky’s Personal Data Server (PDS).
In case you were wondering whether this would mean... writing zone files with some arcane syntax that BIND 9 is apparently famous of, I hereby present the main point of this post a recommendation for which DNS server to choose.
Secret NSA documents showed that NSA pushed DES in the 1970s to "drive out competitors" while knowing that DES was "weak enough" to break; meanwhile NSA publicly claimed that it would use DES . NSA used export-law exceptions in the 1990s to entrench RC4 and RSA-512, causing security problems for decades . NSA in the…
Finger from 1971, Gopher from 1991, and Gemini from 2019. These protocols offer decentralized, terminal-based alternatives to the modern web. The small web…
The IPv4 "exhaustion" is not real. The addresses got hoarded and the market devolved into a wild sub-leasing economy where anyone can choose where their IPs appear from, who owns them on paper, and scrub them clean of any history.
The Social Smolnet par Ploum - Lionel Dricot.
At NAB, I found a demo of Wi-Wi STAMP, a wireless time synchronization protocol that came out of Japan's NICT. Wi-Wi stands for Wireless 2Way interferometry, and it uses the 900 MHz band for picosecond-level time sync, and mm-level distance accuracy, in a tiny box, currently the size of a smartphone. The system is…
When to reach for a well-known URI — and the traps that catch most protocol designers.
Defend yourself against tracking and surveillance. Circumvent censorship. | Good Bad ISPs
DMARC verifies a domain owner authorised an email; it does not verify the email is safe. Where DMARC helps, where it falls short, and why authentication is not trust.
Blue Origin today announced TeraWave, a satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth.
Transport Layer Security (TLS) is the protocol involved in getting the lock icon to appear in your browser next to the URL. Under the hood it uses a bunch of really cool numbers for encryption. Some numbers are considered private and need securing; some are considered public and are fine for sharing. You can mix your…
The files mentioned in this article are available for viewing or cloning here: the 'pf-bedtime' repo .
Internet Protocol Version 8 (IPv8) is a managed network protocol suite that transforms how networks of every scale -- from home networks to the global internet -- are operated, secured, and monitored. Every manageable element in an IPv8 network is authorised via OAuth2 JWT tokens served from a local cache. Every…
