redsolver

  Location: Darmstadt, Germany (CET/CEST)
  Remote: Preferred
  Willing to relocate: Prefer remote/local hybrid; occasional team visits OK
  Technologies: Rust, Linux, Object Storage, Iroh (QUIC), BLAKE3/Bao
  Profile: https://sifa.id/p/redsolver.dev
  Résumé/CV: Available upon request via email
  Email: [email protected]

For the past few years I've been building and operating distributed systems, mostly in Rust: real-time event ingestion, custom query engines and memory-efficient data structures. As a founder and sole engineer, I built and still run a product whose infrastructure handles around 40 million requests per week.

My query-engine work includes Roaring-bitmap indexes and lock-free index swaps, so queries don't wait for index refreshes. I've built event-driven systems with deterministic replay, idempotent outputs and crash-safe checkpoints.

I've also designed and implemented content-addressed storage protocols, including verified streaming and end-to-end-encrypted, versioned filesystems over multiple storage backends. I've used Rust/WebAssembly, WebTransport and service workers for verified, encrypted browser streaming, and FFI to integrate native libraries and expose Rust functionality to other runtimes.

I'm looking for a full-time Rust-first role in distributed systems, storage, networking or systems-heavy AI infrastructure, and I'm available to start immediately.

well, I'm mostly concerned about this change not being visible in Wikipedia's edit history for that page, hinting at this being a very sophisticated attack that could hit a lot more pages / domains.

Here's an archive link in case it gets fixed: https://web.archive.org/web/20260417145243/https://en.wikipe...

It seems like the Wikipedia page for Polymarket now links to the domain polymarcet [dot] com as official website, which seems like it could be a targeted attack. How does one report something like that?

Check out https://www.xn--pnvkarte-m4a.de/ for a good global map of all connections everywhere (based on OSM data)

Afaik all 2-letter TLDs are ccTLDs, which means they must be a country code of some country and are managed by it. There's no country with "os" yet, so to make the TLD available one would need to found a new country first!

I like what they are trying to do, but unfortunately it breaks the E2EE (end-to-end-encryption) and their website isn't clear about that.

You can run your own instance in the official sandbox network today: https://atproto.com/blog/federation-developer-sandbox

There are of course significantly less users compared to the main instance, but it should give you some confidence that federation dev work is on the right track.

Well, for one you can download all data on the network (posts, likes, follows, ...) using a free public API, even in real-time. If you want to try Bluesky without an invite code, you can run your own PDS (personal data server) today and federate with the official sandbox network, there are already 100 servers doing that: https://atscan.net/pds

Beeper uses the Matrix API, so yes!

There's https://pub.dev/packages/fluent_ui

which one are you using? I could not find an up-to-date one on GitHub. thanks!

I am working on a very similar project (decentralized app distribution on Android) called SkyDroid (https://skydroid.app/), with the difference that it is based on Sia Skynet (a Filecoin/IPFS competitor) and uses the DNS system for global app discovery - so for example the SkyDroid app itself is available on the skydroid.app domain inside of it. I'm curious about how they will try to solve the discovery issue, because if they just have one global decentralized pool of apps, it will be very hard to ensure that no malicious apps get in. But if they keep it a central repository of apps trusted by F-Droid by default, there's not really much decentralization going on. Most developers would still publish their apps in the main repo directly.

SkyDroid can update apps without user interaction (even on non-rooted devices) using a workaround which requires a one-time ADB setup. You however still need to open SkyDroid and click a button to start the mass-update process, but this is an intentional design decision - it makes sense to check which app updates are available before blindly updating everything.

It does prove that you own the specific matrix id you are logging in with to the website. It can for example be used as an alternative everywhere where "Sign in with Google" is used, so I don't understand why it should be useless for applications.

The implementation is very simple, it just uses the Matrix SDK to create a direct chat and send a message.

Maybe you are interested in this little PoC I made a while ago which instead sends a one-time-auth code using Matrix: https://loginwithmatrix.tiktalk.space/

With technologies like DNSSEC, the authenticity of every record down from the root-level can be verified (SkyDroid doesn't do this yet). If you want total security and don't trust the root servers, you can use a Handshake domain name which basically moves the root zone to a blockchain and prevents unauthorized modifications.

An additional concept I considered is that DNS lookups are quite cheap, so your client could just ask 10 different DoH servers for a domain and validate that they all return the same response.

Tusky is also available on SkyDroid (https://skydroid.app/), a decentralized domain-based App Store: https://to.skydroid.app/com.keylesspalace.tusky.fdroid-app

I developed this little tool because I always find some great compilations available exclusively on YouTube and looked for a way to download and categorize the individual tracks. I could not find an existing tool which uses the new YT chapters feature and is focused on audio, so I built my own. Please make sure that you're using an up-to-date version of youtube-dl with chapter support if you want to try it.