Today’s #WASSUP tip:

Turn on DNS over HTTPS (DoH) in your Firefox Preferences. Advanced Settings.
Custom: Always use secure DNS with control over your provider and fallback behavior.
[x] Always warn me if secure DNS isn’t available.

There are both security and privacy reasons to use DoH.

Step-by-step instructions:

1. open Firefox Preferences ("Firefox" menu, "Preferences" item)
2. Type “DoH” in the auto-activated search box
3. Scroll down to where it says “DNS over HTTPS” under “Privacy and Security”
4. Click “Advanced Settings”
5. Choose the “(•) Custom” radio button that says “Always use secure DNS with control over your provider and fallback behavior” right under it
6. Check “[x] Always warn me if secure DNS isn’t available.”

Privacy: the domain name of every website you browse is sent to the local router (e.g. WiFi), and on up to whatever internet service provider you’re connected to. Everything along the way has the ability to track what domains / websites you are using, how often, and build a profile accordingly, perhaps even matching it with stored profiles.

The sites you use, how frequently, what time of day, may all be enough information to create a unique fingerprint of you, to uniquely identify you, and perhaps target you.

By using DoH exclusively, every one of those domain names is sent only to your DoH provider (e.g. Cloudflare or NextDNS) blocking your local router, WiFi, and internet service provider from making a list of which websites you visit, or at least making it much harder (and both privacy and security are about making it harder for adversaries). They can still track what IP addresses you access, but that‘s much less information, and much less reliable over time.

Security: if your local router, WiFi, or internet service provider is compromised by an attacker, they can theoretically pretend to be any website you are trying to access (DNS hijacking), and then capture your credential as you login (username, password, even 2FA), and instantly re-use them to pretend to be you (credential stuffing) and sign-in to that website. Once they do that, they usually get a "long-lived" session token (like a session cookie) that they can re-use to pretend to be you, repeatedly, until that session token expires. Some don't expire for months or even years.

For example, if you’re using public WiFi, at a cafe, or a hotel, or airport, you have no idea if their routers or internet service providers are secure, and increasingly, unfortunately, we know that they are often compromised by various network attackers.

We know this is actively happening from both frequent news reports:
* https://news.google.com/search?q=wifi+dns+hijack
And from Anthropic’s report published mere days ago:
* https://www.anthropic.com/threat-intelligence-report-september-2026
* full PDF: https://www-cdn.anthropic.com/e50be2e51e7695dc4b1366a37a245a597377d3b5/Anthropic-Detecting-and-countering-091026.pdf

E.g.:

  “They used compromised admin credentials to modify DNS records so that they pointed to services owned by the actor (a technique known as DNS hijacking). Guests of hotels using the compromised vendors who connected to the hotel WiFi had their traffic, device identifier and IP address sent to the actor’s servers. At that point, ClickFix-style lures were staged to deliver Windows, Android and iOS malware to the victim’s device. The actor was able to use a combination of guest information stolen from the hotel management systems with the data stolen from individual guests’ devices to focus additional targeting efforts.”
 
And it only gets worse from there.

When you activate exclusive DoH use, Firefox skips using those local DNS services, and instead directly contacts the DoH provider for DNS queries (to connect to the websites you access).

For more about how DoH works in Firefox, see the FAQs:
* https://support.mozilla.org/en-US/kb/dns-over-https-doh-faqs

Glossary:

ClickFix
  https://en.wikipedia.org/wiki/ClickFix
Credential stuffing
  https://en.wikipedia.org/wiki/Credential_stuffing
DNS hijacking  
  https://en.wikipedia.org/wiki/DNS_hijacking
DNS over HTTPS (DoH)
  https://en.wikipedia.org/wiki/DNS_over_HTTPS
Replay attack
  https://en.wikipedia.org/wiki/Replay_attack

This is my seventh #WASSUP2026 post, and fifth useful web tip for September.
✨ Weekly Tipster (https://tantek.com/2026/244/t1/september-blogging-challenge-wassup)

#DoH #DNSoverHTTPS #Firefox #tip #webTip #browserTip #webBrowserTip #security #privacy #cyberSecurity #DNS #DNShijack #DNShijacking #hotelWifi
#WASSUP #WASSUP2026 #DoH #DNSoverHTTPS #Firefox #tip #webTip #browserTip #webBrowserTip #security #privacy #cyberSecurity #DNS #DNShijack #DNShijacking #hotelWifi
Concourse D

at Concourse D

Steam Frame pricing and thoughts

#VR #SteamVR #Steam Frame #virtual reality #VRChat
Happy #8bitday!

And happy Progammer’s Day! (https://en.wikipedia.org/wiki/Programmer%27s_Day) — one of the rare annual ordinal date observations, based on the day of the year, rather than day of a specific month of the year.

Piano Day is another, celebrated on the 88th day of the year:
* https://en.wikipedia.org/wiki/Piano_Day
* https://tantek.com/2024/088/t1/world-piano-day-ordinal-date-iso-8601

Do you know of any other annual ordinal date observances?
Besides New Year’s Day of course.

Previously, previously:
* https://tantek.com/2025/257/t1/happy-8bitday-255-bytes-max
* https://tantek.com/2024/256/t1/happy-8bitday-binary-byte (more previous posts there)

#ProgrammersDay #ordinalDate #dayOfTheYear #ordinalDateObservance #annualObservance #annualEvent
#8bitday #ProgrammersDay #ordinalDate #dayOfTheYear #ordinalDateObservance #annualObservance #annualEvent
If you've been using my https://webmention.io service, you'll notice a few changes today.

Everything should be transparent from a user and API perspective, all your webmention endpoints and API queries should still be working. Please let me know if you run in to any problems!

I replaced the aging Ruby codebase so that I can more easily fix bugs and make it more secure going forward. Stay tuned for some much-needed UX improvements in the near future as well.

LOL OSU*

Man, I’ve missed college football. Two top ten teams knocked off by unranked opponents, one of which had a double digit losing streak.

Harder Day Coffee Co.

at Harder Day Coffee Co.

Phrase of the year: "emotional support typewriter"! h/t Elisa Cristina Makoon-Singh A typewriter case in an airport's personal item measuring device with meme description at the top which reads "If your typewriter doesn't fit as a personal item" and the meme description at the bottom which reads "Tell them it's your emotional support typewriter".
#Photo #Social Stream #Typewriters #emotional support typewriters

Brief weekend notes

#music #song fight #song fight live #chronic pain #fatigue

Yeesh, Miami’s WR room is deeeeeep. True freshman Vance Spafford with an absolutely absurd TD catch while getting mugged by two defenders. Guy is probably 8th on the depth chart.

I pay ESPN for their streaming service. Just now getting a chance to watch the Miami game and am trying to catch up, but they have unskippable 3 minute ad breaks at every single opportunity. Such bullshit. I think I’m just going to cancel and stream from sketchy sources instead.

Hoo-boy, just seeing the Automattic drama. Not surprised…

My XTEINK X4 got me reading again. My new X4 Pro arrived last week. Great little device, and the addition of a front light and touch screen make it nearly perfect. Those pogo pins, tho…

Finished my re-read of Mistborn era one earlier this week. I had forgotten just how satisfying the ending is. It’s equal parts emotional, beautiful, and surprising. Everything fits together neatly and you’re left with a deep mythology of gods, forces in opposition, and harmony. 🤘🔥

Today’s #WASSUP tip: a search shortcut for saving pages in the Internet Archive’s Wayback Machine.

Yes this is a lot like yesterday’s tip, except for archiving a page, rather than looking it up.

For example if you try looking up a page in the Internet Archive and it’s not there.

Or if you find an “interesting” page, and want to blog it later, you may want to save a copy of it in the Internet Archive as you are seeing it today, because when you look later it may have changed (or gone away).

I used to do this by typing "https://web.archive.org/save/" into the browser address bar and then pasting the link I want to save in the archive.

Again this is not really a “search engine”, however Firefox’s search engine shortcuts simplifies this greatly (less typing).

Here’s how to create a save shortcut for the Internet Archive Wayback Machine:

1. open Firefox Preferences ("Firefox" menu, "Preferences" item)
2. select "🔍 Search" from the left column
3. click the [ + Add search engine ] button
4. enter "Internet Archive Save" into the Search engine name field (without quotes)
5. enter "https://web.archive.org/save/%s" into the URL field (without quotes)
6. enter "ias" into the Keyword field (without quotes)

When viewing a page that I want to save in the Internet Archive:

1. copy its link
2. activate the browser address bar (cmd-L does this in Firefox and Safari)
3. type "ias " (without the quotes)
4. paste the link I had copied earlier, and press return

Wait a few seconds (could take up to a few minutes) and the Internet Archive should save the page and show you the saved version.

If it fails for any reason (happens sometimes), likes takes a while and then displays something like:

"Sorry / Job failed"

You can click the "Return to Save Page Now" link on the page, and try pasting the link one more time into the text input box and pressing return.

If it says something like

"The target server blocks access to [URL]. (HTTP status=403)"

(literally happened to me today)

or some other HTTP status error code (5xx or 4xx), then you can try emailing the IT staff of the site you were trying to archive by emailing "webmaster@" the domain of that URL and perhaps CC: help@ that domain.

E.g. if the URL was https://example.com/some-path then you would email "webmaster@example.com, help@example.com".

With something like:

----

Dear [Domain Name] Webmaster,

Could you check your server configuration and explicitly allow the Internet Archive’s Wayback Machine to make historical archive copies of your pages?

This is important for the history of the open web, and greatly helps journalists, bloggers, and historians.

Please allow their User Agent: "archive.org_bot" to crawl and archive your site. More info on their "archive.org_bot" here: https://archive.org/details/archive.org_bot

Thank you for your consideration!

[sign your name]

----

Replace the two [ bracket phrases ] the domain name of the link you were trying to archive and your name respectively.

Good luck and happy internet archiving!

Previously: https://tantek.com/2026/249/t1/internet-archive-wayback-machine-search-shortcut

This is my sixth #WASSUP #WASSUP2026 post, and fourth useful web tip for September.

#InternetArchive #WaybackMachine #save #searchShortcut #Firefox #FirefoxSearch #archive #archives #tip #webTip #browserTip #webBrowserTip #archiveTip
#WASSUP #WASSUP2026 #InternetArchive #WaybackMachine #save #searchShortcut #Firefox #FirefoxSearch #archive #archives #tip #webTip #browserTip #webBrowserTip #archiveTip

Hey San Diego, come out to a Mutual Aid Comedy Show on September 19th! All proceeds benefit We All We Got SD.

Lineup: Shannon Hardy, Geoff Grooms, Max Kerwien, Pedro Martinez, Lauren Gural.

Info/tickets and original Instagram post.

#comedy #SanDiego #MutualAid
Today’s #WASSUP tip: a search shortcut for looking up pages in the Internet Archive’s Wayback Machine.

Ever click on a link for an article or photo and it’s not found (404), or redirects to a home page, or otherwise is not what you expect?

The Internet Archive’s Wayback Machine archives webpages (that allow it) and quite often you can lookup broken links in the archive.

I often do this by typing "https://web.archive.org/web/" into the browser address bar and then pasting the link I want to lookup, because I know some of the Internet Archive’s URL patterns.

Though it’s not really a “search engine”, I realized I could use the search engine shortcuts feature of Firefox to simplify this greatly.

Here’s how to create a search shortcut for the Internet Archive Wayback Machine:

1. open Firefox Preferences ("Firefox" menu, "Preferences" item)
2. select "🔍 Search" from the left column
3. click the [ + Add search engine ] button
4. enter "Internet Archive" into the Search engine name field (without quotes)
5. enter "https://web.archive.org/web/%s" into the URL field (without quotes)
6. enter "ia" into the Keyword field (without quotes)

Now if a link I follow fails to load (404) or is otherwise broken, I can:

1. copy that link (I may have to go back to the previous page and right-click choose "Copy Link")
2. activate the browser address bar (cmd-L does this in Firefox and Safari)
3. type "ia " (without the quotes)
4. paste the link I had copied earlier, and press return

Presto, an Internet Archive result for that link.

If you’re a frequent user of the Wayback Machine, hopefully this will save you some time.

And if not, try it anyway for the next time you click on a link and it seems broken.

This is my fifth #WASSUP #WASSUP2026 post, and third useful web tip for September.

#InternArchive #WaybackMachine #search #searchShortcut #Firefox #FirefoxSearch #searchEngine #archive #archives #PageNotFound #404 #404Error #Error404 #tip #webTip #browserTip #webBrowserTip #searchTip
#WASSUP #WASSUP2026 #InternArchive #WaybackMachine #search #searchShortcut #Firefox #FirefoxSearch #searchEngine #archive #archives #PageNotFound #404 #404Error #Error404 #tip #webTip #browserTip #webBrowserTip #searchTip

Kimi Antonelli is absolutely incredible. One of the best drives I’ve ever seen. #F1

O'Reilly Auto Parts
Battery drop off