Pistachio Musings

Telemetry is worth collecting well.

Migration Assistant can't count sparse files and why using AI assistants is making me dumb.

A review of Octavia Butler's Parable of the Sower, our latest book club read.

Mozilla is experimenting with Brave's adblock engine, here's how to turn it on.

My talk at Global Privacy Leaders Summit @ RSA 2026 on why privacy leadership roles are changing, and why that's a good thing.

Combining the two things I love most.

Spoiler-free review of The Correspondent, a novel I read and loved recently.

Shaving off 45 MB in the Brave app via FlatBuffers and other perf optimizations.

Preventing Claude Code from exhausting macOS process limits with a wrapper script.

Reflections on another year.

Turn off Claude Code’s feedback questions using an env var.

Turning an HLS stream into an MP4 using browser tools and ffmpeg.

There's no way to disable Comet leaking your entire browsing history to their backend.

Turning off Paste Bracketing in iTerm2.

Yearn-maxxing in Before Sunrise and In The Mood for Love.

The who, what, why and how of browser fingerprinting.

How browsers protect against fingerprinting and how users can protect themselves.

Ignore all previous instructions.

Reflections on the year.

A review of Salman Rushdie's latest novel.

A review of 2012 film Valley of Saints set in Kashmir.

The 5 privacy engineer archetypes hired by companies.

My essay from the Meatspace Press book 'Eaten by the Internet'.

Bye, Canada!

Annual conference on privacy engineering.

Collecting records for our new record player.

How CDNs use CNAMEs to automate certificate renewal.

Best Practices for doing domain verification using DNS.

Establishing the Protocol Police.

Chrome extension to prevent FLoC ad-targeting code from running in Chrome.

Fixing Jekyll architecture issues.

Have had this post on representing Sudoku puzzles as exact cover problems in my drafts for a long time.

Given a key or a certificate, how to generate a TLS pin for key-pinning purposes.

Arguably the most fundamental principle when it comes to automated contact tracing There are several challenges involved in building true privacy-preserving and trust-inspiring contact tracing systems, and many organizations have released principles that…

Some musings on the differences between (assisted) contact tracing and exposure notification.

Mapping meaning to names is hard.

Current strategy for keeping in touch with friends & family.

Recovering from IETF 104.

This year was interesting.

Short rant on how cool radios are, inspired by the book All The Light We Cannot See.

Examining browser-based user consent using WebRTC as a case study.

Get user feedback through Google Forms.

Why C makes me appreciate the other things in life.

Some notes on automata theory.

Read the latest headline every time you open a new tab.

Generate pretty typewriter-style images from text.

The normalization of privacy violation.

Spoofing MAC addresses for fun and profit.

Git alias to quickly start developing new feature.

Building a compiler for a small domain-specific language in Haskell with Parsec, for a university compilers course.