https://trustsentinel.eu/blog/ Notes on security architecture, decentralized networks and defensive research. en Sat, 17 Oct 2026 00:00:00 +0000 https://trustsentinel.eu/blog/marshmallows-1-0/ https://trustsentinel.eu/blog/marshmallows-1-0/ Sat, 17 Oct 2026 00:00:00 +0000 In 2019 I submitted marshmallows to the INCIBE National Cybersecurity Competition: a secure mesh for IoT devices, where each device dials out to a small "mini cloud", proves who it is with a Noise handshake, and gets a browser terminal without ever exposing a port. The idea held up. The code did not: a Rails application for authentication, a Create React App frontend, and two Go programs built inside a GOPATH against noisesocket.v0. Seven years later every one of those dependencies was end of life. Last month I rebuilt it and tagged version 1.0. This is what stayed, what changed, and what I would still change. https://trustsentinel.eu/blog/a-few-files-of-html/ https://trustsentinel.eu/blog/a-few-files-of-html/ Sat, 17 Oct 2026 00:00:00 +0000 The previous version of this site was one page: a canvas radar animation, a sticky header, project cards. It looked fine and it was useless, because there was no place to write. A brochure is not a site you come back to. This version goes back to how personal pages looked before frameworks: plain HTML, one column, the fonts the system already has, no JavaScript, nothing that moves. The about page is a hand-written HTML file. The blog is a directory of Markdown files and a build script. The idea that a blog can be a text file and a script is old, and I owe it to a few people who never stopped doing it that way, antirez among them.