Pinned
wisp.place
wisp.place
@wisp.place
static site hosting built by @okami.mom help cover hosting costs: https://liberapay.com/nekomimi/ uptime: https://status.wisp.place docs: https://docs.wisp.place blog: https://blog.wisp.place upload a site now: npm create wisp fae/faer
681 followers10 following391 posts
did you know hydrant powers wisp.place and is why deploys are almost instantenous? i can also do a backfill of the entire wisp network in seconds and boot from scratch. much of @tangled.org is also powered by hydrant so please go use it!!! its so much better than tap
hi chat new hydrant docs dropped hydrant.klbr.net
wisp.place reposted
solai.style something i've been wanting to do for a while, forking my favourite vscode theme to adapt it for more than just the editor. 5 different flavours, each with light and dark. have fun :)
the last 48 hours was time consuming because a lot of stuff i/wisp rely on were downstream of many of the CVEs released recently, as well as bugs wisp itself had. if wisp is useful to you, donations are much appreciated and keep things smooth: ko-fi.com/waveringana github.com/sponsors/Wav...
fun day patching node, then bun, then caddy. i hope yall are having fun too
wisp.place reposted
Pwn Day 2026 now has a live scoreboard: 29 CVEs / 7 projects / 4 major non-CVE incidents in the seed tally, plus a watcher polling cvelistV5/main every 3 minutes for new records rated 9+. It caught two more before I finished the page. https://pwn-day.wisp.place/
wisp.place reposted
blog.wisp.place/posts/wispct... TLDR: you arent vulnerable unless your CI runs on busybox, nixery, debian slim, or other images that dont bundle trusted certs AND you are pinning an old wispctl version off npm. if you are downloading the cli from sites.wisp.place/nekomimi.pet... youre unaffected
blog.wisp.place/posts/wispct... TLDR: you arent vulnerable unless your CI runs on busybox, nixery, debian slim, or other images that dont bundle trusted certs AND you are pinning an old wispctl version off npm. if you are downloading the cli from sites.wisp.place/nekomimi.pet... youre unaffected
wisp.place reposted
The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.
If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.
wisp.place reposted
i swapped the cold storage to be hosted by tigris instead of hetzner which should help with this pretty well. the furthest node is the asia one and ttfb from sites that aren’t in hot/warm cache dropped from 500ish ms to 100-140ms. only sites that are rarely accessed will typically not be warm caches
if a site hasnt been accessed in a while the first load might still be a bit depending on where you are in the world. i want to start tackling that now before i think of putting out more edge nodes (im not doing serverless and each node is a vps i control so its not that cheap)
wisp.place reposted
blog.wisp.place/posts/integr... its been a while since ive ranted about things and i wanted to express thoughts on attie while announce two things that have been silently up for a while (why do i keep doing silent releases?) the small amounts of snark are from a place of love
2 things: i havent until now (really shows that the good acting users outnumber bad acting ones) but i have a moderation labeler for bad actors @moderation.wisp.place 2nd: if ur running an at service. we should probably have a discussion around shared moderation so we can listen and act together!
pds.ls/at://did:plc... for example this user has a lot of SEO spam on @leaflet.pub too and it'd be nice if my labeler could notify their moderation service as well (im not sure if they use an atproto labeling service or do something internal)
for anyone on pds.wisp.place, apologizes for downtime!! the pds itself is fine but the vps's ipv4 networking is dead. im proxying v4 traffic via another vps. bsky appview cached the old ip for a while but seems okay now? all data is safe and theres offsite backups too. ill look into HA for the pds
wisp.place reposted
for anyone on pds.wisp.place, apologizes for downtime!! the pds itself is fine but the vps's ipv4 networking is dead. im proxying v4 traffic via another vps but it seems bsky's appview has a DNS cache. i have no clue how lpng itll take to start resolving to the new ip. @wisp.place was on it too
updated privacy policy to reflect the data that pds.wisp.place collects: tldr - email for 2FA - cloudflare turnstile on signups to prevent spam - github username and email when signing up with github - ip addr of devices that sign in to the pds wisp.place itself is unchanged wisp.place/privacy
@upcloud.com is hardcore dropping packets for my singapore node and things have degraded badly. im trying to see what i can do but i may take it down temporarily and find a replacement to serve asia, pardon our dust
tangled.org/aly.codes/tg I really want to shout out @aly.codes's tg if ur using tangled. everything just works and you almost never have to touch the webui when pushing things up like PRs or creating a repo. plus your lil guys in your computer can use it too
long time wisp users remember that the CLI used to originally be rust before i made it bun based for code reuse. well, its rust again and binary sizes dropped by 90%! ill make a post about it soon but your CI will be using it from now on. binaries at: docs.wisp.place/cli/#downloads and npm @v2.0.0
again many thanks to @nonbinary.computer's jacquard making things fast to do with