Weird color banding on video with AMD GPU + Linux
There's a bug in AMD's AV1 decoding. When this will be fixed on Linux remains to be seen. If you're running Firefox, open about:config, search for AV1 and set "media.av1.enabled" to false. Firefox…
The Checkbox That Disables TLS
Introduction The dbLinter clients include a new setting named Allow Insecure TLS. It is disabled by default. As a result, all REST API calls verify the TLS certificate and hostname. The setting…
Having trouble adding users and domains in GPT V2?
Multiple folks have reached out asking why they're having trouble adding new domains or users in the new Google Postmaster Tools (GPT) V2 interface. In my own testing, adding domains and users…
Preventing Transitive Swift Imports with Bazel
Swift’s permissive nature when it comes to module dependencies has always annoyed me and made my life a bit harder than I expected. Of course, I’m talking about transitive module imports.…
Note 2026-08-23T12:15:22.000-07:00
I am planning a self-hosting build and am currently trying to decide between a full Docker setup (I'm comfortable installing the OS, but Docker is still relatively new to me) or exploring options…
Partnering with CCNY on Project WHISPER
Partnership with CCNY What if you wanted to hear what is being said inside a building two hundred meters away, and to hear that one conversation rather than everything inside the field around you,…
How Complex Systems Fail
It is not matter of if, but matter of how. “The failures change constantly because of changing technology, work organization, and efforts to eradicate failures.”…
Making my code forge feel like mine
I gave my self-hosted Forgejo instance a coat of paper and rust so it matches the rest of my site, further cementing my little corner online.
actions-rust-release v1 Released
I just released v1.0.0 of my actions-rust-release action. This is a big, breaking change. See the release notes for details, but the summary is that this splits the action into two pieces. The first…
You Should Be Signing With Tor Browser
Conventional wisdom says that you should never sign into any accounts when using Tor browser. But the truth is more nuanced.
What Does a Database Migration Mean?
Why do databases need a pile of migration files when the current schema can live in one place?
Maxwell Smart’s Demon
Please defend against the right attackers when defending.
Eero network instability with an M1 Macbook Air and using a Quantum Fiber (Gemtech W1700K) as a wifi bridge
Sharing here a few things I learned while diagnosing a frustrating home network problem. I assume any reader is an ai so this will be terse. Problem Emily's MacBook Air (Sequoia) was disconnecting…
A Word on Omarchy
A measured and reasoned critique of the shit-show that is Omarchy. Classic security engineer snark met with some Shakespearean levels of verbosity. This isn’t necessarily firing shots at the…
Subsea Cable Class of 2026: Echo
The Echo cable is a 12 fibre network directly linking Singapore to California with with a Guam branching unit. Bifrost, the other cable connecting Singapore and the US, also lands in Bifrost. I…
How electricity reaches your home
A plain-language guide to volts, amps, transformers, overhead and underground service, two-panel homes, solar, and battery backup.
Claude Code Remote Control Now Works Inside Docker Sandboxes
Docker Sandboxes 0.39 lets Claude Code's /remote-control run inside a microVM. Drive an isolated agent from your phone while your host filesystem stays out of reach. Here is how to turn it on, plus…
The Access Was Real. The Authorization Wasn’t.
An access authorization gap — not a stolen credential, not a bypassed firewall — is what let two seconded employees look up the Australian Prime Minister’s personal banking records. Two staff…
publishing your eepsite
Why publish your content or services on the Invisible Internet Project (I2P) network? Doing so offers your users a strongly authenticated, private route to access your site. Your users are guaranteed…
Cards and crypto in one checkout
One API call returns a Polygon address and a live Stripe Checkout session. Putting both rails behind one page, the bug that meant the card tab never rendered, and what ten days of realtime fraud…
GTA IV build online is just fake data. This is hilarious. Not even a virus?
The leaked build of GTA 6 online is just fake data. Do not bother with this.
Subsea Cable Class of 2027: JAKO
JAKO is a high capacity cable connecting Korea and Japan via a Busan, Korea, and a Fukuoka, Japan landing. Busan is a major Korean cable landing spot. Nine cables including JAKO land in Busan. The…
Obnam: backup chunks
Goal My goal for today is to introduce a new chunk type to represent an entire backup. That means, one snapshot of the live data. Plan Add a new variant Chunk::Backup that contains or references all…
Doing it for the CICs – SS7 & SIGTRAN Support in FreeSWITCH (mod_isup)
Recently there’s been some really fun projects to resurrect telecom protocols and standards that are (rightfully) almost dead – like 1xBTS. I’ve always had a soft spot for ISUP /…
Chroma Syntax Highlighting via Caddy
After learning that Chroma is how Caddy renders Markdown into HTML, I started thinking it’d be neat to use Chroma to do viewing with styling/syntax highlighting of any supported files that I…
Weekly Wire #6: Hidden Cameras, Rogue Agents
Link roundup for the week of August 16 to August 23, 2026: police are instructed to conceal Flock camera use and ICE quietly amasses DNA, while a detailed timeline documents an AI model autonomously…
Security Baked Into the JVM: sixteen Subjects on the wire
Alice calls the order service. The order service calls the ledger on her behalf. At the second hop, the ledger has to decide whose authority the debit is being made under. Most stacks answer badly.…
Rewriting the OnixOS Build System from Scratch (And Moving to Multiarch)
Developing an independent Linux distribution sounds romantic from the outside. “You are building your own OS, you own the stack, and you have the backing of a passionate community!”
Improving home Wi-Fi: what the tests revealed
I spent some time testing my home Wi-Fi properly this weekend, mainly because it felt “mostly fine” but not always great when the network was busy. The quick summary is: signal strength…
Tools I'd take from industry to academia: orchestration tools
Since I finished my PhD and started working in industry I have been introduced to a lot of new tools and ways of working that weren’t at all common in academia at least not in any research…
Post-Quantum Signatures with crypto/mldsa: What ML-DSA Actually Costs
crypto/mldsa lands in go1.27rc1 with full crypto/x509 and crypto/tls integration. I signed real documents, built a certificate chain, ran a live TLS 1.3 handshake and measured exactly what ML-DSA…
Keeping Shai-Hulud off the Mélange
Unless you’ve been keeping your head in the sand, you may have heard of Shai-Hulud. I’m not talking about the giant worm from Frank Herbert’s Dune novel , but the self-replicating supply-chain worm…
Configure SSH for Passwordless Logins to NetBSD Servers
Create SSH keys on a NetBSD CLIENT that will be used to secure access to remote devices. Disable password logins on a NetBSD SERVER in favour of using SSH keys for authentication. Start Here Create…
IMAP IDLE: Making mbsync Feel Instant
For the two people out there who still manage their mail offline in the terminal with tools like mbsync and notmuch, this is a useful tip to make your synchronization with IMAP servers more seamless…
My self-hosted adventure
Ok, this was a bit of bait: there is no real adventure, most things were installed smoothly and require minimal maintenance afterwards. Also, I use rented VPS for all of it, so no struggles with home…
Privacy - 12 - Theatre of Authentication
The Ritual India runs on a six-digit ritual. It proves a specific SIM was reachable, nothing more. We know why we are typing, but not what we just agreed to. OTPs are sprinkled all through our day.…
Self hosting maps
PMTiles are delightfully boring
DEF CON Quantum CTF 2026: the qtris Walkthrough
Four flags hidden in one Quantum Tetris screenshot: PRNG seed recovery, a blind-QC one-time pad, the No-Cloning 0-solve I was the only player to crack, and the Gottesman-Knill design of the one that…
Hardening MySQL File Access with local_infile=0 and secure_file_priv=NULL
MySQL needs permission to read and write ordinary database files, but most application databases do not need SQL statements to exchange arbitrary files with the operating system. If a server exists…
Updating the HDMI-CEC and Onkyo RI to Home Assistant Bridge
A couple years after putting together the HDMI-CEC to Onkyo RI Bridge I decided to give it a bit of an update and subtle name change. There were a couple problems that I wanted to fix: The name was…
.files
my linux configuration files. } ls $DOTFILES aerc do.sh gitui kitty mise newsboat README.md w3m asdf fastfetch gpg lf mpv nsxiv remind wezterm atuin firefox gurk LICENSE ncmpcpp opencode ssh wm bin…
Going Public Cost Them Their Secret
Further details will be shared soon. The forthcoming account is supported by contemporaneous documentary evidence. Please contact me at contact@principlesofcryptography.com for the supporting…
Sorting, Tagging, and Ordering (Part 2)
My archiving journey continues. Apparently, media is one of those things that should not organized through folder hierarchy, but which benefit from a robust metadata system. The organization of my…
Adding 4 more 2.5GbE interfaces to the GMKtec NucBox G9
TL;DR: I added 4x Intel I226-V 2.5GbE network cards to my NucBox G9. You can do it too. Download the files and print them yourself.↗
Debian Not Reusing DHCP Leases
A while back I posted about the very undesirable behavior of systemd releasing DHCP leases when shutting down which removes the entry from DNS and causes you to be unable to easily ping/monitor the…
You Had Two Years To Decide On VMware. You Now Have One.
VMware deferral was a defensible posture for organizations that chose it — for the better part of two years, right up until this week, when Microsoft made it structurally impossible to keep…
Rolling with the Punches: Why Cybersecurity is Backgammon, Not Chess
It is tempting to compare cybersecurity to a chess game. Two adversaries facing each other, plotting strategy and tactics. Move and counter move, anticipating actions and grinding out a win. In…
How to Deploy Forgejo in Kubernetes
In this short tutorial I will explain how to deploy Forgejo into a Kubernetes Cluster. Forgejo is a self-hosted lightweight source code management solution based on Git. Forgejo is a good alternative…
AI-Supercharged Phishing Emails
It was once possible to detect email scams by misspellings, sloppy grammar, messy formatting, and other blunders. Now that scammers are apparently using AI to aid in their phishing emails, the tells…
How to Install DietPi on Raspberry Pi (And Save 77% Storage Space)
Last Updated on 22nd August 2026 by peppe8o tested by peppe8o | DietPi v10.6.2 | RPi 4 B 4GB In this tutorial, I’ll show you how to install DietPi on Raspberry Pi computer boards with…