The results are in: Our first crowdfunding round in partnership with @FundingCommons has raised more than $200k for projects working across privacy, censorship circumvention, secure communications, and public-interest digital infrastructure. @web3privacy @unredacted_org @OpenObservatory @PasKoocheh @SecureDrop @open_archive @r2refresh

The write-up goes from bootrom to full control of a crypto phone, then digs into offline lock-screen PIN brute-forcing and wallet private key extraction.

While we were in there, we rebuilt the monitoring for @torproject Snowflake (Updated to 2.14.1), the bandwidth you donate to help others reach the open internet. People served, countries reached, relay throughput. All live now 🌍

Most VPNs can see every site you visit. The real question is what they do with it. We audited MoaV, our own censorship-circumvention stack, and found it was quietly storing exactly that: each user's IP against the sites they reached. We fixed it. Here's the whole story 🧵

A year ago, Offline Protocol was a thesis: software should not stop working when the internet disappears. Currently, that thesis runs across 350,000+ devices in 80+ countries and 10,000+ active mesh clusters. Our SDK has crossed 9,000 downloads this year and now supports deployment paths across iOS, Android, Linux, macOS, and Windows. Today, we are open sourcing the Mesh SDK behind it. This is infrastructure for the present, but also for what comes next. As agents, robots, drones, vehicles, sensors, and on-device models multiply, billions of new peers will need to discover, verify, communicate, and coordinate without routing every local interaction through the cloud. The disconnected edge needs a programmable peer layer for identity, privacy, transport, trust, and coordination. Offline Protocol is that layer, and now our infrastructure is open. Read the full announcement: Explore the SDK: For companies looking to build with us, we are opening scoped design-partner evaluations for teams building mobile applications, wallets, logistics systems, remote telemetry, industrial devices, DePIN hardware, and bandwidth-constrained infrastructure. Reach out here:

Watch the first public talk on MoaV, from the Neo-Cypherpunk Summit in Berlin. At times we felt like we were banging our heads against the wall, building against nation-state censorship. @web3privacy reminded us we’re not alone. Freedom isn’t far if we build toward it together

🎉 MoaV v2 is out. 🍾 Same 16+ protocols, rebuilt underneath. Mother of all VPNs - v2.0.0 🧬 100 PRs · 190 commits · 162 files 🫧 +16,801 / −25,987 lines (net −9,186) 🧪 tests 3 → 24 Keys, users and certificates are preserved on upgrade. 🧵 👇

It's been a few months of non-stop shipping. Since this talk in Berlin, more than 9500 lines of code has been removed from @MotherofallVPNs. You wonder why? read this post for some details:

You can follow @MotherofallVPNs for all the updates and new links. برای آپدیت جدید MoaV و لینک‌های جدید از جمله llms.txt رشته توییت زیر رو بخونید. This was more than 1 month of full time work, and I'm really happy with it.

Mother of all VPNs - v2 release Upgrade: #⃣# moav update && moav build && moav start Fresh install: #⃣# curl -fsSL | bash ---

Running an AI coding agent? Hand it the project. Paste this: "Read and set MoaV up on my VPS" Install steps, DNS records and safety caveats included. llms.txt indexes every doc page, llms-full.txt has all the docs.

You can follow @MotherofallVPNs for all the updates and new links. برای آپدیت جدید MoaV و لینک‌های جدید از جمله llms.txt رشته توییت زیر رو بخونید. This was more than 1 month of full time work, and I'm really happy with it.

🧅 MoaV 1.9 is out. Mother of All VPNs -- one command, a $5 VPS, 16+ censorship-circumvention protocols on a single box. Run MoaV and you're not just getting yourself out; you're part of the free internet's infrastructure, carrying your loved ones, and strangers behind the wall, out with you. Enable @PsiphonConduit + @torproject Snowflake and someone breathes through your bandwidth tonight. The design philosophy isn't elegance, it's redundancy: the censor has to block every protocol; you only need one to get through. ---- Since 1.8.4, a major anti-DPI + reliability upgrade for server and client 👇 🏗️ Project maturity • Server and client now both under the MotherofallVPNs org. • CONTRIBUTING guide • Server: • Client: • 🛡️ Harder to detect • wstunnel now wraps WireGuard in real TLS (wss://): the WebSocket upgrade used to travel in cleartext and was trivially DPI-fingerprintable. Now it just looks like HTTPS. • New AnyTLS protocol (opt-in). • XDNS can tunnel over AAAA records, not only TXT. • telemt anti-DPI MSS-clamping knobs for Fake-TLS. 📡 Network tuning, built in • moav net: BBR + fq, RAM-aware socket buffers • moav doctor net now flags packet drops, PMTU black holes, CGNAT and MTU issues 🔐 Reliability that actually bit operators • TLS certs were silently expiring at ~90 days: auto-renewal is fixed, and moav cert manages it. • Killed a class of "everything breaks after an update" bugs: Reality short_id blanking, and users hitting "unknown UUID" after a re-bootstrap. nobody gets cut off by a maintenance step. 🖥️ The native client grew up too: moav-client Feed it one MoaV subscription bundle and it: • delegates real crypto to sing-box + optional sidecars (MasterDNS, AmneziaWG, Psiphon, TrustTunnel, Tor), • latency-probes every endpoint end-to-end through its own tunnel and load-balances across the healthy ones, • exposes a single local SOCKS5 / HTTP proxy: point your browser or anyone in your network at it and you're always on the fastest working endpoint, • ships a React dashboard: live endpoint health, per-protocol throughput, streaming debug log. One command to install (moavc). No config wrangling import once, it auto-falls-back across protocols. 👉 🧪 Actually tested now • Full CI on every PR: shellcheck, Go tests, compose validation. • A real end-to-end harness stands up the whole server stack and connects through every protocol: Reality, Trojan, Hysteria2, AnyTLS, Shadowsocks-2022, XHTTP, XDNS, wstunnel, WireGuard, AmneziaWG, telemt. verifying real exit IPs. moav-client got its own full test suite + CI, and the e2e now does a true server↔client round-trip. • Component bumps: sing-box 1.13.12, xray v26.6.27, wstunnel 10.6.1, telemt 3.4.23. — Spin up the server, hand out a bundle, point the client at it.

Looking forward to mentoring at @ETHGlobal Lisbon this July. Excited to see what hackers build. Apply to hack →  Build the mad scientist shit you’d like to see in the world! We should be the crazy ambitious builders now