1
Iroh 1.0
Iroh 1.0 is out. Now is the time to build.
2
Quad9 to exit France
A public and free DNS service for a better security and privacy
3
4
Apple's git still trusts the compromised eMudhra certificates
Eleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.
5
A joke domain purchase turned in geopolitical warfare
Why is the military and a cheese fortune teller contacting me about SondeHub.org
6
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
7
There were BGP anomalies during the Venezuela blackout
The Low Orbit Security Radar is a weekly security newsletter from an offensive practitioner's perspective. One idea, curated news, and links worth your time. News: There Were BGP Anomalies During The Venezuela Blackout When watching the situation in Venezuela unfold, the phrase "It was dark, the lights of Caracas
8
We’re making Bunny DNS free
Your DNS bill shouldn't scale with your traffic. So we removed query fees from Bunny DNS entirely. No per-request billing and no query limits.
9
Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache
Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
10
Mobile carriers can get your GPS location
In iOS 26.3, Apple introduced a new privacy feature which limits “precise location” data made available to cellular networks via cell towers. The feature is only available to devices with Apple’s in-house modem introduced in 2025. The announcement1 says https://support.apple.com/en-us/126101 ↩
11
Migrating from DigitalOcean to Hetzner
A real-world production migration from DigitalOcean to Hetzner dedicated, handling 248 GB of MySQL data across 30 databases, 34 Nginx sites, GitLab EE, Neo4j, and live mobile app traffic — with zero downtime.
12
13
How to turn anything into a router
I don’t like to cover “current events” very much, but the American government just revealed a truly bewildering policy effectively banning import of new consumer router models. This is ridiculous for many reasons, but if this does indeed come to pass it may be beneficial to learn how to “homebrew” a router…
14
BirdyChat becomes first European chat app that is interoperable with WhatsApp
We are excited to share that Balsio is the first chat app in Europe that can exchange messages with WhatsApp under the Digital Markets Act. This is a big step forward for anyone using Balsio for work.
15
Dead Internet Theory
I had a wierd experience which made me realize that the internet is probably dead.
16
Discord Alternatives, Ranked
Building an online community takes more than tools. But the right tool can make all the difference.
17
Why does SSH send 100 packets per keystroke?
I made my next game twice as fast by forking go's crypto library
18
New 10 GbE USB adapters are cooler, smaller, cheaper
For years, the best way to get 10 gigabit networking on laptops was to buy an expensive, large, and hot 10 GbE Thunderbolt adapter. With new RTL8159-based 10G USB 3.2 adapters coming onto the market, the bulky adapters might be a thing of the past. Just look at the size of the thing in comparison to my Thunderbolt…
19
Setting up a free *.city.state.us locality domain (2025)
In the US, you can get a domain name like `somename.city.state.us` for free. If your town has its own domain, you can get nameservers from Amazon Lightsail, send the *Interim .US Domain Template* to the delegated manager for your locality, then point DNS entries at your webhost.
20
Mullvad exit IPs are surprisingly identifying
Update 5/29: Mullvad has begun rolling out a mitigation feature on their servers that scrambles exit IP positions, thereby fixing this issue. IPs are still deterministically selected based on the pubkey. Mullvad is one of the few VPN providers that offers multiple exit IPs for its servers. If two people connect to the…
21
Major European payment processor can't send email to Google Workspace users
Viva.com, one of Europe's largest payment processors, sends verification emails without a Message-ID header — a requirement of RFC 5322 since 2008. Google Workspace rejects them outright. Their support team's response to my detailed bug report: your account has a verified email, so there's no problem.
22
We need a federation of forges
Git is decentralized, but what of the rest?
23
Web Search API
Search the web from your AI agents and applications through AI Gateway with Ceramic.ai, Exa, and Linkup.
24
The Post-American Internet
On December 28th, I delivered a speech entitled " A post-American, enshittification-resistant internet " for 39C3, the 39th Chaos Communications Congress in Hamburg, Germany. This is the transcript of that speech.
25
Tether: iMessage, SMS, etc. on Linux
No AirPlay kinda sucked, but the one thing I kept wishing I had was what Apple calls "Continuity" : the ability to send and receive iMessages and SMS, share files, sync clipboard, and see notifications from my iPhone on my computer.
26
Somebody used spoofed ADSB signals to raster the meme of JD Vance
This, if it is still visible: Via: Next up, age verification for ADSB?
27
Why Switzerland has 25 gbit internet and America doesn't
The Free Market Lie: Why Switzerland Has 25 Gbit Internet and America Doesn't
28
What your Bluetooth devices reveal
Building Bluehood, a Bluetooth scanner that reveals what information we leak just by having Bluetooth enabled on our devices.
29
There are no instances in ATProto
Like RSS and Google Reader.
30
An Introduction to Meshtastic
Discover Meshtastic: a community-driven, open-source project using LoRa radios for long-range, off-grid communication.