A simple SKILL . md to help you make a security assessment before installing code. blog.vrypan.net/2026/07/14/c...

Check your shell history for leaked secrets. Also, your Codex, Claude Code, etc memory, your python, mysql, pgsql history, and so on. A simple, small, local, open source, tool that may save you from leaking credentials. blog.vrypan.net/2026/07/13/2...

Most of the public opposition to CSAR boils down to "no surveillance" as a first principle, full stop. I wanted something more concrete. blog.vrypan.net/2026/07/11/2...

Yeap, looks fine. blog.vrypan.net/2026/07/10/2...

This was fun: A "Where Is Waldo" game for QR codes. Can you find it? Your phone can! blog.vrypan.net/2026/07/07/w...

listnr is an ActivityPub bridge for static blogs. Why I built it, how it works, and why not ATProto or Farcaster. blog.vrypan.net/2026/07/05/2...

LLMs should be common carriers and distillation blocking should be illegal. blog.vrypan.net/2026/07/03/2...

What's wrong with EU age verification? Nothing, to be honest. blog.vrypan.net/2026/06/29/2...

Contact your MEPs! fightchatcontrol.eu

The cryptographers on this app will talk about how awesome RCS is because it is standards-based E2EE without acknowledging that the underlying standards are a recipe for centralizing the operators. We need a different way forward.

If you're looking for a static site generator, check bckt. blog.vrypan.net/2026/06/18/2...

VT320 allowed programs to write to a special “status line” using DECSSDT/DECSASD. Can we bring it back? blog.vrypan.net/2026/06/13/2...

I support Wikipedia, where information is still human-created, fact-checked, and 100% free. Join me! donate.wikimedia.org

For decades, the IRS has been required to audit every sitting president annually; a critical safeguard to ensure no president has a secret financial stake in betting against the American people they swore to serve. Every president accepted those audits without question. - Until now.

I updated the Pi, ported the microdot Python library (which was no longer working) to Zig, and added some flavor to my desk clock. blog.vrypan.net/2026/05/22/m...

I really enjoyed writing this one, and I love the result: When Subtitles Were Contraband blog.vrypan.net/features/the...

What do you think? blog.vrypan.net/2026/05/11/t...

I built "shg" that helps you keep secrets out of shell history. blog.vrypan.net/2026/05/09/s...

@blaiseaguera.bsky.social I have not read "What is intelligence" yet, it's on my desk waiting for the summer. But I've watched a couple of your presentations and I'm really fascinated. I have a question: Does intelligence converge?

I'm building my library of agent-friendly specs. blog.vrypan.net/2026/04/30/a...

If you care about privacy in this digital world you need to learn about Third Party Doctrine and Bailment. Thankfully, @naomibrockwell.bsky.social puts the cookies on the lower shelf for you. www.youtube.com/watch?v=iakg...

Using stash in agentic workflows (not just agentic, but feels like agents are some of the heaviest cli users these days). github.com/vrypan/stash...

The simplest way to stash config files before editing them. github.com/vrypan/stash...

Ex Deputy National Security Advisor for Strategic Communications and Speechwriting under Obama👇🏽

Why make 2>&1 | stash tee is better than make 2>&1 | tee build.log github.com/vrypan/stash...

Forget /tmp/aaa stash is a cli tool that lets you stash and retrieve piped output, or files and works with both text and binary data. github.com/vrypan/stash

1976: The Year Greece Took Cyprus to Eurovision A folk song about loss that became one of the most politically charged performances in the contest’s history eurovisionsearch.substack.com/p/1976-the-y...

The lesson in this article is simple. Do not trust ANY company to protect your private communications. The protocol itself must ensure this, and must be geographically distributed so no one legal jurisdiction can override it. This is why we should push to adopt a standard for AT Protocol DMs.

I was in a 2 hour briefing today on the Iran War. All the briefings are closed, because Trump can't defend this war in public. I obviously can't disclose classified info, but you deserve to know how incoherent and incomplete these war plans are. 1/ Here's what I can share:

I don’t know who needs to hear Jesse Jackson leading the kids on Sesame Street in this beautiful call-and-response reminding them that every child is somebody, but here it is

Did Trump just stop one more war, between Greenland and US? That's nine wars PLUS now! Wen Nobel Peace Prize?

Great discussion on Trump's policy towards Europe. www.youtube.com/watch?v=yJ0P...

Immigrant detention deaths reach 20-year high under Trump

Privacy matters

It's cringe when you hear Epstein's best friend call a country "the hottest" and the "sexiest".

This is honest to god so inspiring. Look at this community absolutely and without hesitation say "NOPE, NOT TODAY" to these chuds

Ticket prices to the FIFA World Cup final game. ⚽

A friend in Minneapolis just sent me this video. Looks like thousands have come together for a vigil after an ICE agent shot and killed 37-year-old Renee Nicole Good. This was my neighborhood for several years before coming to Portland.

@coolsweng.bsky.social Hi Diomidi! I've built this new (?) PRNG. It behaves extremely well (both speed and BigCrush test scores), but it needs proper study to be used in production. I was wondering if you now someone who is interested in studying it. github.com/vrypan/ring3...

How I built my own PRNG -and it's quite good! blog.vrypan.net/2025/12/30/d...

Can a totally predictable pattern show more entropy than a randomly generated one? This algorithmically generated image seems to have more entropy than images generated with crypto/rand. I would love to hear from people who have better and deeper understanding of the topic.

Any entropy experts here? I have an algorithmically generated, 100% reproducible image. 250x250 pixels, with 5 colors. The calculated Shannon entropy is 2.112490 bits, when 100% randomness would have something close to 2.321928 bits, i.e. 91% uncertainty. (Right?) Is this something noteworthy?

TIL mentioning privacy preserving money on 🦋 is walking a tightrope

experimenting with a lexicon for crypto address verifications. it uses eip.tools/eip/7930 for cross-chain compatibility and supports smart contract accounts only tested with ethereum so far atproto-address-verifications.vercel.app github.com/stephancill/...

@vitalik.ca donated 128 ETH to chat apps Session and Simplex to further "(i) permissionless account creation and (ii) metadata privacy" 👀 x.com/VitalikButer...

Stay vigilant Europe www.patrick-breyer.de/en/chat-cont...

What do you think? blog.vrypan.net/2025/10/13/b...