Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Making dns_erlang Fast: Binary Tricks for the BEAM
Nelson Vides of DNSimple explains how binary pattern matching, append-friendly accumulators, staying in the match context, chunked matching and SWAR cut CPU per query in their Erlang name server erldns by 12%, what didn't work, and lessons for any BEAM application.
17 min · 3,980 words
A Very Fast IPv4 Parser, in Swift
Mahdi Bahrami presents a new IPv4 parsing algorithm built for swift-endpoint that uses SWAR tricks instead of lookup tables, SIMD or out-of-bounds reads, explains why existing fast parsers' contracts don't fit Swift, and benchmarks it at around 3 nanoseconds, ranking second on Apple M6 and third on AMD Zen 5.
14 min · 3,226 words
RPKI Now Protects 70% of Internet Routes, Up From 54% a Year Ago
IPinfo reports that Route Origin Validation coverage via RPKI has reached about 70% of Internet routes, up from 54% a year earlier—explaining what RPKI does for BGP hijack resistance and where coverage still lags.
14 min · 3,216 words
What was a Token Ring network?
Dave Farquhar explains Token Ring, the IBM networking technology announced on October 15, 1985 that competed with Ethernet through the 1980s and 1990s. He covers why Ethernet won, how to tell Token Ring cards from Ethernet ones today by connectors, speed markings and brand, whether the old hardware is worth using, and why anyone chose it.
7 min · 1,584 words
End-to-end encrypted relays for OCapN
Jessica Tallon of the Spritely Institute describes end-to-end encrypted relays for OCapN: how capability-secure networked objects can communicate through untrusted relays without exposing plaintext, and what that unlocks for peer connectivity.
12 min · 2,721 words
Better HTTP/1 connection reuse
The Go team explains why HTTP/1 connections often fail to be reused when response bodies are closed without being drained, how costly that is, the tricky manual workarounds developers have used, and how Go 1.27's net/http Transport now drains unread bodies automatically so closing the body is enough.
6 min · 1,453 words
Daniel Stenberg explains CVE-2026-92392, a HIGH-severity HTTP/2 upload use-after-free in curl fixed in 8.23.0 that could be turned into remote code execution, how it was found and handled, and why the release cycle was shortened.
6 min · 1,317 words
Wanted to download an ISO, ended up writing a kernel exploit
deafbeef bought a TP-Link EAP770 Wi-Fi 7 AP that corrupts large downloads; with the device already EOL, TP-Link's shell blocked the sysfs fix, so he wrote a kernel exploit against his own access point to flip two zeros and make transfers reliable.
13 min · 3,102 words
The history of the Hetzner Cloud network stack
First part of a Hetzner series on the evolution of the network stacks behind Hetzner Cloud: how the stack developed to date and how the current Open vSwitch-based design works, including Private Networks and Cloud Firewalls.
9 min · 2,105 words
tapo speaks TPAP: Third-Party Compatibility can stay off
Mihai Dinculescu explains how v0.11.1 of tapo, his unofficial Rust and Python client for TP-Link Tapo devices, now logs in over TP-Link's TPAP protocol so users no longer need the Third-Party Compatibility switch, and covers new H200/H500 camera hub recording downloads plus plug schedules and timers.
10 min · 2,290 words
Hacking the Go compiler to efficiently map IPv4 to IPv6
Go maintainers declined a netip.Addr.Map() method, saying the compiler should optimize netip.AddrFrom16(ip.As16()) instead. Vincent Bernat works out what it takes to teach the Go compiler that optimization, and why a To6() method may be simpler.
22 min · 4,962 words
Google Summer of Code 2026 Reports: Improving and Stabilizing the racoon2 IKE Daemon in NetBSD
Artem Belan's GSoC 2026 report on modernizing the racoon2 IPsec key exchange daemon for NetBSD and Linux: reliable RFC 7383 IKE fragmentation, NAT-OA and NAT traversal fixes for IKEv1 and IKEv2, working IPv6 by default, cleanup of the address-macro mess, and a new unit test framework running under sanitizers, merged upstream between June and September 2026.
11 min · 2,489 words
All I wanted was a custom domain email
Jacob Goldstein recounts trying to get cheap, verified sending and receiving at his own domain with Apple Mail support, from Cloudflare Email Routing through self-hosted options to the service he settled on, and why sending mail reliably is the hard part.
4 min · 987 words
Headers Up! What's New in httpd and relayd
Rafael Sadowski details new features in OpenBSD's revived httpd and relayd: httpd header set, add and remove directives for response headers, header-based block and drop rules for filtering scrapers and scanners, and patterns(7) matching in relayd alongside glob, with config examples and a preview of upcoming glob ignorecase support.
7 min · 1,680 words
Archiving The World's Oldest Webcam Feed
Hackaday covers Fog-Bank, Justin Earl’s multi-network scraper that preserves FogCam—the San Francisco State University webcam that has been uploading images since 1994—now holding hundreds of thousands of frames.
1 min · 249 words
Rüdiger Klaehn of the iroh team shows how to discover content globally with iroh using the BitTorrent mainline DHT, motivated by IPFS Shipyard winding down, covering the transfer protocol, a minimal DHT record design, announce and discovery, and a demo of hosting websites with names and a browser plugin.
15 min · 3,395 words
Hijacking the PS5's RTMP Stream
How the PS5 Broadcast RTMP pipeline can be intercepted and redirected: reverse-engineering the stream path and what that unlocks.
4 min · 1,016 words
August 27 TCRF DDoS Attack Postmortem
The Cutting Room Floor’s postmortem on a sustained August 2026 DDoS: what broke, how mitigation unfolded, and the infrastructure changes made to keep a volunteer game-preservation wiki online.
17 min · 3,930 words
We just shipped support for the ugliest part of HTTP: Vary
Cloudflare Cache Rules now support HTTP Vary on every plan—normalize negotiation headers, pass exact values to origin, or bypass cache when variance is too wild.
12 min · 2,727 words
Tailscale performance updates cut memory use, raise throughput, and speed startup via multi-queue, writev, and netmap caching—how the team measured and shipped the gains.
7 min · 1,640 words