Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Bark: The Toll-Free BBS for 90s Teens
Topics: Retrocomputing The other day I was thinking about the first communities I found online and, perhaps tangentially, to what degree they influenced the amount of therapy I now require to function normally as an adult. Our family's second computer came from Sam's Club. It was a 386DX with Windows 3.0 but my inner nerd would have nothing to do with cheerful bit-mapped color schemes, preferring instead to exit to MS-DOS and do all necessary computing and gaming from a command prompt and text-based GUIs. Hardware-wise, it looked and felt cheap. The machine was less reliable than the…
19 min · 4,358 words
Turn a WiFi 7 Router into a 320Msps Software Defined Radio Receiver
A GitHub project that repurposes a WiFi 7 router as a ~320 Msps software-defined radio receiver, documenting the hardware path, sampling approach, and how to get RF samples out of commodity WLAN silicon.
5 min · 1,059 words
Wanted to download an ISO, ended up writing a kernel exploit
deafbeef bought a TP-Link EAP770 Wi-Fi 7 AP that corrupts large downloads; with the device already EOL, TP-Link's shell blocked the sysfs fix, so he wrote a kernel exploit against his own access point to flip two zeros and make transfers reliable.
13 min · 3,102 words
The history of the Hetzner Cloud network stack
First part of a Hetzner series on the evolution of the network stacks behind Hetzner Cloud: how the stack developed to date and how the current Open vSwitch-based design works, including Private Networks and Cloud Firewalls.
9 min · 2,105 words
Chrome's Response to Recent ccTLD Registry Hijacks
Google's Chrome security and networking team explains how attackers hijacked the .gh, .sl and .as country-code TLD registries to obtain unauthorized HTTPS certificates, how Chrome blocked them via CRLSets and worked with CAs on revocation, and why domain owners should monitor Certificate Transparency and publish restrictive CAA records.
2 min · 574 words
tapo speaks TPAP: Third-Party Compatibility can stay off
Mihai Dinculescu explains how v0.11.1 of tapo, his unofficial Rust and Python client for TP-Link Tapo devices, now logs in over TP-Link's TPAP protocol so users no longer need the Third-Party Compatibility switch, and covers new H200/H500 camera hub recording downloads plus plug schedules and timers.
10 min · 2,290 words
Hacking the Go compiler to efficiently map IPv4 to IPv6
Go maintainers declined a netip.Addr.Map() method, saying the compiler should optimize netip.AddrFrom16(ip.As16()) instead. Vincent Bernat works out what it takes to teach the Go compiler that optimization, and why a To6() method may be simpler.
22 min · 4,962 words
Google Summer of Code 2026 Reports: Improving and Stabilizing the racoon2 IKE Daemon in NetBSD
Artem Belan's GSoC 2026 report on modernizing the racoon2 IPsec key exchange daemon for NetBSD and Linux: reliable RFC 7383 IKE fragmentation, NAT-OA and NAT traversal fixes for IKEv1 and IKEv2, working IPv6 by default, cleanup of the address-macro mess, and a new unit test framework running under sanitizers, merged upstream between June and September 2026.
11 min · 2,489 words
All I wanted was a custom domain email
Jacob Goldstein recounts trying to get cheap, verified sending and receiving at his own domain with Apple Mail support, from Cloudflare Email Routing through self-hosted options to the service he settled on, and why sending mail reliably is the hard part.
4 min · 987 words
Self-hosted HTTP tunnels with SSH and nginx
Vincent Bernat shows how to expose a localhost preview to a friend with only a plain SSH client and an nginx server you control: ssh -R with a dynamic port, an nginx server_name regex mapping per-port subdomains, wildcard TLS via ACME DNS-01, and a helper script plus NixOS module.
4 min · 998 words
Headers Up! What's New in httpd and relayd
Rafael Sadowski details new features in OpenBSD's revived httpd and relayd: httpd header set, add and remove directives for response headers, header-based block and drop rules for filtering scrapers and scanners, and patterns(7) matching in relayd alongside glob, with config examples and a preview of upcoming glob ignorecase support.
7 min · 1,680 words
Announcing Cloudflare OHTTP Gateway
Cloudflare announces OHTTP Gateway, expanding access to its privacy-preserving Oblivious HTTP infrastructure so apps and services can route requests without exposing client IPs to origin servers.
9 min · 2,100 words
Archiving The World's Oldest Webcam Feed
Hackaday covers Fog-Bank, Justin Earl’s multi-network scraper that preserves FogCam—the San Francisco State University webcam that has been uploading images since 1994—now holding hundreds of thousands of frames.
1 min · 249 words
Announcing Cloudflare K2: serverless event streams
Cloudflare K2 is a serverless event streaming service built directly on top of R2 object storage for high-scale data movement and long-term retention. By decoupling producers and consumers at the edge, K2 enables durable, ordered log streams without the operational overhead of traditional broker clusters.
7 min · 1,546 words
From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities
SEC Consult's Timo Longin, known for SMTP smuggling, details two From-header smuggling flaws in Apple iCloud's email infrastructure (line-break parsing and dot-peeling) that allowed sending mail as arbitrary icloud.com addresses, plus detection and defense advice and the responsible disclosure timeline through Apple's fix.
16 min · 3,641 words
Monetization Gateway beta: charge AI agents for consumption with HTTP 402
Cloudflare’s AI Gateway, Ceramic.ai, Stocktwits, and more are using the Cloudflare Monetization Gateway today to charge agents for access to tokens, APIs, and MCP tools. U.S.-based sellers can now app
9 min · 1,997 words
Rüdiger Klaehn of the iroh team shows how to discover content globally with iroh using the BitTorrent mainline DHT, motivated by IPFS Shipyard winding down, covering the transfer protocol, a minimal DHT record design, announce and discovery, and a demo of hosting websites with names and a browser plugin.
15 min · 3,395 words
IANA's email about why example.com changed
I emailed IANA (Internet Assigned Numbers Authority) earlier today to ask about the new content on example.com. To my surprise, their VP replied.
1 min · 314 words
Building a certificate authority for the whole Internet
Cloudflare announces intent to become a public CA: root-program applications, a GlobalSign root acquisition for device reach, ACME-first free issuance, fail-small design, and plans for Merkle Tree Certificates in 2027.
8 min · 1,814 words
Hijacking the PS5's RTMP Stream
How the PS5 Broadcast RTMP pipeline can be intercepted and redirected: reverse-engineering the stream path and what that unlocks.
4 min · 1,016 words