No more “Root” features in Orbot… use Orfox & VPN instead! (guardianproject.info)

guardianproject/orbot-android

The Github home of Orbot: Tor on Android (Also available on gitlab!)

blog.torproject.org

Tor VPN Beta: What we've learned building our own VPN for Android from scratch | Tor Project

Last fall, we soft-launched Tor VPN Beta as a way to extend Tor's privacy protections beyond the browser to an entire Android device. Since then, we've been able to learn from how people are actually using it in real-world scenarios. This post walks through what makes our per-app circuit isolation different from commercial VPNs, the surprising UX lesson when trying to bypass blocks, and the mobile foundation we're building for what's next.

https://blog.torproject.org/tor-vpn-beta/ social preview image

deta.notion.site

Surf 1.0 (early access-beta) — notebooks for the internet | Notion

Changelogs

https://deta.notion.site/surf-beta-testing social preview image

github.com

imputnet/helium

Private, fast, and honest web browser

hackernoon.com

The Web 3.0: The Web Transition Is Coming | HackerNoon

Transitioning from web 2.0 to the 3.0 version is going to likely go unnoticed by most people. The applications are going to look almost exactly like what you are currently using, but the change will be on the back-end. If you are a betting man you will want to consider Siacoin for Cloud, Steemit as a platform for social media, and even Augur as the way to check out future betting events.

https://hackernoon.com/the-web-3-0-the-web-transition-is-coming-892108fd0d social preview image

x.com

🚨 AI News | TestingCatalog on Twitter / X

Perplexity Comet browser will get a native VPN support soon! ICYMI, it also got a native integration with 1Password recently, to help Comet agents to operate. https://t.co/7x4wpXqZqv pic.twitter.com/nzetLz8IQ7— 🚨 AI News | TestingCatalog (@testingcatalog) September 18, 2025

https://x.com/testingcatalog/status/1968684007257682067?s=46 social preview image

www.holochain.org

Holochain | Distributed app framework with P2P networking

Holochain delivers beyond the promises of blockchain by providing a lightweight, secure and versatile framework for everyday distributed apps.

https://www.holochain.org/ social preview image

play.google.com

Surf - Apps on Google Play

Join the Surf beta and design your own social experience.

https://play.google.com/store/apps/details?id=com.flipboard.surf social preview image

tailscale.com

Tailscale: How it works

Understand the entire Tailscale system, how it works, how we built it, and its benefits compared to legacy VPNs. Use this article as a guide to quickly build your own Tailscale replacement.

https://tailscale.com/blog/how-tailscale-works social preview image

atproto.com

OAuth Improvements - AT Protocol

We've been making improvements to the end-user and developer experiences with atproto OAuth.

https://atproto.com/blog/oauth-improvements social preview image

luma.com

Hackathon on Decentralised Media - TEP (Trusted European Platforms) Bluesky, Nostr · Luma

Every year, thousands of developers of free and open-source software from all over the world gather at FOSDEM. For two weeks around this event – from the 26th…

https://luma.com/9f10yt6f social preview image

whtwnd.com

ATProto OAuth Quickstart Guide | Artur | Looking for work

Setting Up Bluesky OAuth in Your Web App: A Developer's Guide If you're building an app that needs to authenticate with Bluesky, you'll need to implement their OAuth flow. While the official docs are comprehensive, they can be a bit overwhelming. Let's break down the process into manageable steps. ...

orbstack.dev

OrbStack · Fast, light, simple Docker & Linux

Say goodbye to slow, clunky containers and VMs. The fast, light, and easy way to run containers and Linux. Develop at lightspeed with our Docker Desktop alternative.

infosec.exchange

⠠⠵ avuko (@avuko@infosec.exchange)

@elena@aseachange.com @aral@mastodon.ar.al I couldn't resist, so I've wasted my precious time looking at "W Identity" today. Things are not right. It is basically a repurposed https://github.com/PeterWaher/IoTGateway Just look here: https://root.widentity.eu/Settings/Master.md It has a socks4(?) open on port 1080, some xmpp stuff on 5222 and 5269, another (seemingly broken) version of the website on 8088. The following pages are accessible without auth: (found by a simple "`egrep -LR 'Privilege:|Login:' * |grep md | grep Root`" through the source) ``` /Settings/PersonalData/LocalDatabase.md /Settings/PersonalData/LocalSensorsAndDevices.md /Settings/PersonalData/EventLogs.md /Settings/PersonalData/NetworkIdentity.md /Settings/PersonalData/WebPages.md /Settings/PersonalData/Backups.md /Settings/Master.md /Copyright.md /Starting.md [http response 307] /Login.md /Entities.md /Templates/Repeat.md /AdminDropdownComponent.md /Script.md /AdminDropdown.md /AlertPopup.md /Master.md /PromptPopup.md /ConfirmPopup.md /Markdown.md /Emojis.md /Smileys.md /Index.md /MarkdownEditor.md /ScriptColors.md /Master.md ``` Others pages also exist (no 404), but are only available after login. Which brings me to the biggest problem of all. This is an **ADMIN** interface. Nobody should **ever** put an admin interface to an identity management platform on the internet. #WSocial #Widentity