Remote attestation is a heavily underdiscussed threat to computing freedom. People often mistakenly dismiss it with "I will run my own fork (of the OS or browser) / Magisk", not understanding that with hardware attestation, you're literally unable to 1/

🎉 The first RC of @iroh.computer 1.0 is here, we made it! Yes it is real, after more than 50 releases, it is time for [email protected] Thank you everyone for making this a reality! www.iroh.computer/blog/iroh-1-...

Slay the Spire 2 combines the very best of game design with the very worst of gamer toxicity How do I send @megacrit.com an "I'm sorry people are assholes" cake

Introducing bab-hash.org. A cute little website about a family of hashing functions designed for partial data verification in peer-to-peer systems. You can learn what it does, how to use the Rust implementation, and read its specification (with interactive diagrams, ofc).

Part of the problem here is everything from the way LLMs are packaged as chatbots to the marketing and thought leadership about their “proper” use is telling the user explicitly that if they use an LLM they don’t *have* to care; in fact that’s why they should use the LLM even.

v0.98 is live! www.iroh.computer/blog/iroh-0-...

me, while my 3D printer is printing and my dishwasher is running and my robot vacuum buddy is mopping my floors so I'm free to play more factorio

The ATmosphere correctly adopted content-addressed storage and decentralized identity, something I have been arguing that the fediverse needed since before ActivityPub finished standardization, but which by and large the fediverse developer ecosystem seemed uninterested in until recently

Woot. I missed that servo had an android app? TIL

Two exciting developments: A. intoverflow bug found and fixed in the Lean runtime 😍, B. an AI rewrote zlib into Lean and there is now a proven-correct implementation of zlib!? 😍😍😍 kirancodes.me/posts/log-wh...

> One performance-related change we are pursuing is "split mode". This is where — after the TLS handshake — a connection can be split into sender and receiver objects. The sender can send TLS-protected data, while the receiver can receive it. I've wanted this in the past :)

⚠️ An active phishing attack is targeting crate owners by asking them to "confirm that your email address is still active". These messages are not from crates.io, and should be ignored. (We will never ask you to confirm that your e-mail address is still active.) ⚠️

🦀🔐☠️ Tired of deadlocks? Me too! Here's a post about a library that I've been working on to help wrangle the problem in Rust notes.brooklynzelenka.com/Blog/Surelock

ECH exposed a hard truth about privacy technology: you can win at the protocol layer and still lose at the deployment layer. I wrote about it here: cdt.org/insights/do-...

When I was at my first job, I found a glaring hole in the security of our product. I opened a Bugzilla bug titled "Our security is a joke". I didn't mean anything by it, I was just trying to be funny. But my colleague told me how much it hurt his feelings. I've never forgotten it. Wording matters.

Ooooooh

may i interest you in our lord and savior atproto-over-media-over-quic

"commoditization and decentralization shift the balance of power. Dependency creates leverage, whether it's a country's gas supply or a company's cloud provider, and the engineering choices we make determine who holds that leverage"

@piss.beauty I... do you have some kind of dedicated notification set up for anytime @iroh.computer posts? :D Or maybe you're just on another level of online... 👀

Fantastic work by Daniel, as always.

v0.97 is out & it's a biggie: custom transports, preset API, embeddable relay server, address filtering, and a switch to our own QUIC implementation! www.iroh.computer/blog/iroh-0-...

Ok [*rolls sleeves*] I want to properly understand money. What do I read?

How do we get to more than just three web engines owned by three US companies? It's a gargantuan question, with no easy or right answer. I've put together a draft report, thinking about it through a very specific approach - please enjoy: Servo Readiness Report webtransitions.org/servo-readin...

I have a lot of worries, but one is that expectations of speed increase to the extent that I can't either take the time to handwrite it if I want, or take the time to do it in collaboration with an LLM at a level of quality that would have been prohibitively time consuming before.

I think it's often overlooked that AVIF is also really good at flat colour & sharp edges. Don't go straight for a lossless format just because it's the kind of image that would look bad as a JPEG. Here's an 11kb image as an AVIF, vs JPEG XL.

I'm strongly in team "any markdown field could have been a facet" Many plates spinning right now, but I keep feeling like I need to port/rewrite some of the atjson tooling, because atproto facets really need better tooling.

making software that’s good and durable and solves a user problem remains hard architecture remains an essential consideration and thinking through it is a job while you can speed them up, you cannot replace an engineer with a robot their skills and insights… Remain special.

need to figure out adding friends in an easier flow (right now you both have to have added each other to the friend list to start getting status pings) but p2p chat is very easy to build with iroh

Friendly folks wrote a great article about Privacy Pass, a way of cryptographically unlinking the issuance and redemption of auth tokens: research.chainbound.io/private-api-...

inspired by CLAUDE.md, I’ve started putting markdown files named after coworkers into work code repos so I can remind them to stop doing shit to the codebase that annoys me for some reason they’re all mad at me now, which means ill be adding commands to JEREMY.md for an attitude adjustment

BTW, this may be uncharitable and ignorant of me but I totally interpret this arbitrary 16 GiB limit in the browser as "That one mistake—virtual mem is a proxy for real mem—that people keep making", which the entire smalloc project is kind of an attempt to dispel. github.com/zooko/smallo...

Kind of short notice today. But I'm in Brussels for #FOSDEM until this evening. So if anybody wants to link up and talk iroh, QUIC, CRDTs or cryptography, let me know :)

Best description I've read so far of all the different levels of "self-hosting" there are on atproto.

Learned a new QUIC API trick from a coworker yesterday. It's a way to make sure connections close gracefully in a particular protocol pattern (because of course it's about graceful close). The case we're looking at are clients that want to do a bunch of requests that upload data (no HTTP3 btw).

We are excited to announce that we can successfully use Rust's standard library from the GPU. This has never been done before. www.vectorware.com/blog/rust-st... Supporting Rust's standard library enables existing Rust code to work on the GPU and makes GPU programming feel normal.

A lot of my own sweat went into writing the "Using QUIC" page: docs.iroh.computer/protocols/us... If you wanted to write your own iroh protocol in the past but struggled with getting your QUIC together, check it out :)

we have an all new docs site! More examples! Better Explainers! Come check it! docs.iroh.computer

Working on an absolutely cracked project idea involving zero-trust federation, MLS, paxos, @iroh.computer and CRDTs 👀 I hope this works out because the idea is really really cool

TIL: serde's borrowing can be treacherous yossarian.net/til/post/ser...

🧵 Could Bitchat have 5x the range and 100x the throughput for the same power expenditure? I explored how Wi-Fi Aware could improve the reliability and throughput of Bitchat and mobile ad-hoc networks in the absence of internet connectivity. #bitchat 👇

Lab Note on our new *mentions* feature! We'd love to hear if folks are finding this useful so far — and ideas for other things that should be mentionable. For example @tangled.org repos and @cosmik.network Semble collections could be very cool to support!

John Davis is an absolutely amazing resource for running science: runningwritings.com/2025/12/tiss...

John Davis is an absolutely amazing resource for running science: runningwritings.com/2025/12/tiss...

Wrote my first leaflet! This is about the threat-model of PLC & the current work we're doing to address that including making the directory more auditable

I've been hacking a bit: peer-to-peer videostreaming over iroh! github.com/n0-computer/...

cloudflare's on-duty IT staff bangs on the doors which I have padlocked from the inside as I calmly break open lava lamp after lava lamp and drink the contents

Phoenix R&D is working on decentralized MLS and have built a prototype with OpenMLS. I said it before and I'll say it again: I need to get more familiar with puncturable cryptography primitives (e.g. PPRFs). blog.phnx.im/making-mls-m...

Recently there has been a lot of dividing & heated discourse about ActivityPub and AT Protocol. Yesterday at the Social Web CG meeting, I proposed releasing a statement on this discourse, you can read the full statement here: github.com/swicg/genera... #activitypub #atprotocol #atproto #SocialWeb

✨🤝 Thanks to everyone that joined us this week for the Automerge Community Call! If you weren't able to make it, here's the recording, including talks by @patternist.xyz and @matheus23.com 🍿 www.youtube.com/watch?v=mhV4... 📆 Call calendar: lu.ma/automerge 🍂 Next call is September 24!