GM ☕ It is a thoroughly satisfying feeling seeing the FIPS mesh networking software enable so many different use cases, especially ones I would never have thought of in the first place. But it's not without a bit of anxiety--real world usage means real world consequences of screwing up. I put a lot of effort into specification, review, adversarial testing, and documentation, but that of course isn't always enough. Your bug reports, feature requests, and code contributions are the kind of "closed loop" feedback needed to keep things on track. Anyway, thanks to everyone for deploying FIPS and helping make it better.

GitHub

Release v0.1.1 · jmcorgan/fips-initramfs

fips-initramfs v0.1.1 Released: 2026-09-11 v0.1.1 fixes one defect in v0.1.0. A machine booted with no network link showed no passphrase prompt unt...

Bug fix release. Thanks @hzrd149 for the report and testing.

I was supposedly retired from open source but something happened.

Fallacies of distributed computing: The network is reliable. Latency is zero. Bandwidth is infinite. The network is secure. Topology doesn't change. There is one administrator. Transport cost is zero. The network is homogeneous. - L. Peter Deutsch, Sun Microsystems, 1994.

Learning Chinese geography, one distillery at a time.

GitHub

Release v0.1.0 · jmcorgan/fips-initramfs

fips-initramfs v0.1.0 Released: 2026-09-06 v0.1.0 is the first release of fips-initramfs. It unlocks a LUKS encrypted root filesystem over a FIPS m...

fips-initramfs 0.1.0 is out. Unlock a LUKS-encrypted server over a FIPS mesh, from anywhere. No static IP, no port forwarding, no inbound reachability at all. The machine dials out to its peers during early boot and comes up at the same mesh address every time. You record that address once at install, then unlock with a single ssh command. Console passphrase entry always still works, so a failure leaves you at the normal prompt instead of stranded. Tested end to end on Debian 12 and 13 and Ubuntu 22.04, 24.04 and 26.04: real encrypted machines, booted and unlocked over a live mesh. MIT licensed, .deb for amd64:

GitHub

Release v0.1.1 · jmcorgan/fips-initramfs

fips-initramfs v0.1.1 Released: 2026-09-11 v0.1.1 fixes one defect in v0.1.0. A machine booted with no network link showed no passphrase prompt unt...

#fips #linux #luks

FIPS v0.5.0 released View article →

running whitenoise

GM ☕ "Now, here, you see, it takes all the running you can do, to keep in the same place. If you want to get somewhere else, you must run at least twice as fast as that!" - Unknown maintainer, after his fifth unsolicited LLM security review

GM ☕️

GM ☕

GM 🍺

GM ☕️

GM ☕️🇪🇸🛫➡️🛬🇵🇹😎

GM ☕ In spite of the somber mood surrounding recent events, I'm pretty excited to be traveling this week to join the second half of @Sovereign Engineering eighth cohort. I have found my tribe again 😀

I kind of feel sorry for anyone who in their natural speech end up using one of the many Claude LLM verbal tics (load-bearing, belt-and-suspenders, worth sitting with, etc.)

It's quite amusing to have Claude pass judgement on code it wrote itself. I've taken to a workflow where after every step of a development plan, it immediately switches roles to a crusty old graybeard (ahem) and critiques the code and sends it back for improvement.

GM ☕ The recent news on EU chat control is unsurprising. This is why we Nostr. This is why we Bitcoin. This is why we FIPS. Don't fight the politicians; make them irrelevant.

Dark mode is what separates us from the animals.

Violence is the last refuge of the incompetent. - Isaac Asimov