You Can't VPN Out of On-Device Scanning
A practical look at moving to GrapheneOS: what it prevents, and what it can't.
ambient_node
A connected body of technical writing and deep dives of networking, services, security, hardware, systems. Explore by recency, or as a graph.
ambientnode.uk<lab>
Deep dives, builds, and experiments.
REALITY and XTLS-Vision
Building a Proxy Server That Pretends to Be Someone Else
How I Bought a Locked Google Demo Unit (and Unlocked It)
What is Google's Denali Companion App?
Backing Up TrueNAS SCALE to a Secondary TrueNAS Using ZFS Replication
ZFS replication as a native backup strategy
<nodes>
Shorter notes, definitions, and concepts that support the lab.
<macros>
Short takes.
-
Supply chain attack on arrayref | Rust Blog 22/08
Lots of dependency poisoning lately. SCA + dependency pinning/lockfiles + isolated builds + sandboxing + EDR are a must for keeping third party code under control.
-
New Data Center Developments: August 2026 21/08
We're in an electricity infrastructure boom riding on GPUs.
-
Manic: Blend between Banking Malware & Spyware 20/08
Using Bluetooth/BLE to build a relay infrastructure and bypass network restrictions is actually genius. Scary, but smart. Now you have to walk around with an air-gapped brick.