2026-06-14
Cartography as Practice
On treating the public internet as a single, continuously shifting subject — and the discipline that follows from doing so.
Read →
2026-06-02
The Relational Record of the Internet
Why we hold our collection as a graph of entities and relationships rather than a flat list of observations.
Read →
2026-05-20
On Longitudinal Observation
A snapshot is a moment; a record is a position. Notes on the practical difference, and why it changes the kind of question that can be answered.
Read →
2026-05-04
Attribution at Scale
Clustering, pivoting, and the limits of inference when the adversary owns the operational tempo.
Read →
2026-04-18
Observing the Edge
The global edge is heterogenous, noisy, and indifferent to your inventory. A short essay on what continuous observation actually looks like.
Read →
2026-04-02
Naming the Unnamed
Bringing structure to the parts of the internet that do not advertise themselves. On unindexed infrastructure and the question of provenance.
Read →
2026-03-21
Routing as Evidence
What autonomous-system behaviour tells us — and does not tell us — about the operators behind it.
Read →
2026-03-05
Time as a Dimension
On treating time as a first-class axis of the dataset rather than a metadata column. Some of the better questions only resolve in motion.
Read →
2026-02-17
The Shape of an Incident
Incidents have geometry. Notes from years of watching the same patterns recur across different actors, different sectors, and different decades.
Read →