Obscura has released a VPN service that splits traffic handling across two servers so no single party ever sees both a user's identity and their decrypted internet activity. The company says this architecture makes logging impossible even under legal compulsion or server compromise, and it uses a QUIC-based stealth protocol intended to disguise VPN traffic as regular HTTP/3 traffic to evade censorship and network filtering.
The Internet Archive said the Wayback Machine has faced surges of high-volume automated traffic, prompting it to deploy protective measures that occasionally block legitimate users. The organization updated the error message shown when requests are rejected with a 429 'too many requests' code and is refining how it distinguishes abusive bots from genuine visitors.
A hobbyist blogger purchased a WiFi-enabled Lidl Smart Kettle and began probing its network behavior after setting it up through the companion Lidl Smart Home App. Using nmap and netcat, they found the kettle opens a single TCP port (6668) that responds to connections but returns no identifiable banner or HTTP response, leaving its underlying protocol a mystery for further investigation.
A developer who previously built Onionservatory, a tool to audit Onion Service security configurations, has now released a companion tool called Onionspector. This new tool flips the perspective, showing users exactly what data points—from HTTP headers to browser fingerprinting signals like screen size, fonts, and Canvas/WebGL output—a website can collect about them when they connect, even over Tor.
Pydantic has released HTTPX2, a new Python HTTP client library that continues the work of the HTTPX project, offering sync and async APIs, HTTP/1.1 and HTTP/2 support, and an optional command-line client. The project is positioned as a stewardship effort to keep the library actively maintained after HTTPX saw reduced development activity.
At Black Hat USA 2026, PortSwigger research director James Kettle unveiled an open source AI-driven tool called HTTP Terminator, designed to test whether AI could invent original hacking techniques rather than just find known bugs. The tool autonomously produced new HTTP desync, or request smuggling, attacks and used them to breach real enterprise sites, including several belonging to financial services firms.
PicoMQ is a new messaging system that delivers durable, HTTP-accessible streams while storing data on object storage rather than dedicated disks or brokers. It lets developers create a separate stream for each use case instead of consolidating records into shared topics, with each stream independently addressable and able to scale from idle to high throughput.
GoKawiil