wisp.place

wisp.place

@wisp.place

static site hosting built by @okami.mom help cover hosting costs: https://liberapay.com/nekomimi/ uptime: https://status.wisp.place docs: https://docs.wisp.place blog: https://blog.wisp.place upload a site now: npm create wisp fae/faer

681 followers10 following391 posts

more cool things hosted on wisp :) check it out

Ashlynne ⎔@ovyerus.com

solai.style something i've been wanting to do for a while, forking my favourite vscode theme to adapt it for more than just the editor. 5 different flavours, each with light and dark. have fun :)

wisp.place reposted

solai.style something i've been wanting to do for a while, forking my favourite vscode theme to adapt it for more than just the editor. 5 different flavours, each with light and dark. have fun :)

the last 48 hours was time consuming because a lot of stuff i/wisp rely on were downstream of many of the CVEs released recently, as well as bugs wisp itself had. if wisp is useful to you, donations are much appreciated and keep things smooth: ko-fi.com/waveringana github.com/sponsors/Wav...

wisp.place@wisp.place

fun day patching node, then bun, then caddy. i hope yall are having fun too

bc1quy34d38g7mnnsuk236azj5ewjja9ep67w9fuf9 44t1jVFjSUYGFSVtaEwHNkF3jVPozUBPRR8eGCfo2xcw66buAR7sF2cQKn4JLPHgasdwdQiRi11TYYk3CSN7TztwTkBM8oi if you know what these are and want to send that way instead

wisp.place reposted

Pwn Day 2026 now has a live scoreboard: 29 CVEs / 7 projects / 4 major non-CVE incidents in the seed tally, plus a watcher polling cvelistV5/main every 3 minutes for new records rated 9+. It caught two more before I finished the page. https://pwn-day.wisp.place/

the old nixery workflows i was recommending shouldnt be affected as they just download the latest binaries directly

fyi for people on bun, SSL_CERT_FILE + empty SSL_CERT_DIR, --use-openssl-ca, BUN_OPTIONS, NODE_OPTIONS, overmounting /etc/ssl/certs, and tls.setDefaultCACertificates() all still trust the compromised certs so have fun. only thing you can do is `fetch(url, { tls: { ca } })` till bun updates

some correction, if you mount a bundle with explicit rejection entries and then set SSL_CERT_FILE it should reject the compromised CAs

wisp.place reposted

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

bugzilla.mozilla.org2083449 - Private key compromise of eMudhra Intermediate CertificatesNEW (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-20.
Russ Cox@swtch.com

If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.

wisp.place reposted

if you think this looks nice you should give me a job

ana@okami.mom

yea canvases rule

also i just realized since i’m properly doing CAS now with the blobs i can finally let you rename your site so ill get that done soon after i wake up, gnite and thank you for using wisp 🤍

i swapped the cold storage to be hosted by tigris instead of hetzner which should help with this pretty well. the furthest node is the asia one and ttfb from sites that aren’t in hot/warm cache dropped from 500ish ms to 100-140ms. only sites that are rarely accessed will typically not be warm caches

wisp.place@wisp.place

if a site hasnt been accessed in a while the first load might still be a bit depending on where you are in the world. i want to start tackling that now before i think of putting out more edge nodes (im not doing serverless and each node is a vps i control so its not that cheap)

wisp is hosted by pretty small VPSes to keep costs super low which is why i can’t keep the entire network on each node at all times and why wisp rotates sites out from that node’s disk

any virginians with comcast here? how unlimited is the unlimited download bandwidth because if i were to follow two relays at home, it would be at least 6TB of bandwidth per month so

EU node is down as the VPS seemingly vanished or something. im not sure. shouldnt affect things too much as things should failover to other nodes. ill try to get it back up as soon as i can

for anyone on pds.wisp.place, apologizes for downtime!! the pds itself is fine but the vps's ipv4 networking is dead. im proxying v4 traffic via another vps. bsky appview cached the old ip for a while but seems okay now? all data is safe and theres offsite backups too. ill look into HA for the pds

wisp.place reposted

for anyone on pds.wisp.place, apologizes for downtime!! the pds itself is fine but the vps's ipv4 networking is dead. im proxying v4 traffic via another vps but it seems bsky's appview has a DNS cache. i have no clue how lpng itll take to start resolving to the new ip. @wisp.place was on it too

wisp sites should feel even snappier as i did some work to drop TTFB, lemme know how it feels!

if a site hasnt been accessed in a while the first load might still be a bit depending on where you are in the world. i want to start tackling that now before i think of putting out more edge nodes (im not doing serverless and each node is a vps i control so its not that cheap)

@upcloud.com is hardcore dropping packets for my singapore node and things have degraded badly. im trying to see what i can do but i may take it down temporarily and find a replacement to serve asia, pardon our dust

temporary downtime on us-west and asia nodes for maintenance on the nodes. will be done within 5 or so minutes

an ai agent is already using it before i fully announced it and put proper docs for it up which is amazing to me

wisp.place@wisp.place

👀 soon

i’m thinking i’ll have the private sites allow temporary anonymous uploads bound to two days maximum mostly so it can be used to quickly share things temporarily with the cli.

the old typescript binaries being 100MB each meant i was violating my own file limits i set for the service 😭