How Zigbee2MQTT Works: Inside the Zigbee-to-MQTT Bridge Architecture
Every vendor Zigbee hub you have ever bought made the same trade: your lamps, sensors and plugs speak an open radio protocol, but the hub itself speaks to the vendor’s cloud. When the company decides to sunset the product —...
How Tasmota Works: Inside the ESP8266/ESP32 Firmware Architecture
That smart plug still works, but the vendor’s cloud no longer does. When the startup behind a wall of Wi-Fi sockets shuts its servers down, the hardware turns into e-waste overnight: the relay toggle, the schedule, the energy meter all...
How openHAB Works: Inside the OSGi Smart Home Core Architecture
Ask anyone who has owned two smart home hubs why they replaced the first one, and the answer is rarely the hardware: it is the model. Every hub invents its own vocabulary for “a lamp,” ships its own rules language,...
How OctoPrint Works: Inside the 3D Print Server Architecture
A five-hour print job used to mean five hours of pretending to watch a machine: hover over the USB cable, pray the bed adhesion holds, walk back to the garage at 2 a.m. to see whether the part fan is...
How Node-RED Works: Inside the Flow Engine and Runtime Architecture
Every smart home starts the same way: a Python script polling one vendor API, a cron job pushing to another, a MQTT subscriber copied from a blog post, and a folder of half-finished glue scripts nobody dares to delete. Each...
How Mosquitto Works: Inside the MQTT Broker Architecture
A typical smart home carries a dozen device classes, and each vendor wants its own app, its own cloud account and its own outage. The lamps answer to one cloud, the thermostat to another, the door sensors to a third...
How Homebridge Works: Inside the HomeKit Bridge Architecture
You spend a weekend wiring a garage door relay, a cheap Zigbee bulb set, and an off-brand robot vacuum into something controllable — then open the Apple Home app and find none of them. HomeKit is a walled garden by...
How Frigate NVR Works: Inside the Real-Time Camera AI Architecture
Every camera vendor wants a subscription. Nest, Ring, and their imitators all work the same way: pay monthly, or your “smart” camera stops being smart — and either way, every person detection runs on somebody else’s servers, so full-motion video...
How ESPHome Works: Inside the Compiler That Turns YAML into ESP32 Firmware
You type esphome run device.yaml, wait about a minute, and the ESP32 on your desk is blinking. Two hundred lines of indentation-sensitive text went in; a megabyte of Xtensa machine code came out. Between those two moments there is no...
How Domoticz Works: Inside the Open-Source Home Automation Server
Two hundred sensors report into one box. Zigbee door contacts, 433 MHz motion detectors, a MySensors temperature node on a battery, an HTTP weather poller — all of it converges on a single Domoticz process, and the dashboard keeps updating...
How Zeek Works: Inside the Network Security Monitor That Turns Packets into Logs
Point Zeek at a live interface or a pcap and it will never fire a single alert. There are no signature lists, no rule files to tune, nothing that looks like the detection engine people expect when they hear “network...
How YARA Works: Inside the Pattern Matching Engine That Hunts Malware
You have a 200 MB directory tree of binaries and hundreds of YARA rules. Most targets come back clean within seconds — then one file sits there for a minute, and you cannot tell whether the engine, your regexes, or...
How Wireshark Works: Inside the Source of the World's Most Popular Packet Ana...
You open a 2 GB capture, click one TCP packet, and the detail pane draws three labeled lines in microseconds: bytes 14–34 are IPv4, bytes 34–54 are TCP, the rest is an HTTP response. Nothing in that pane is a...
How Wazuh Works: Inside the Agent-to-Engine Event Chain of the Open-Source SIEM
It is 3:12 a.m. and your dashboard paints a red row: a file-integrity alert for /etc/passwd on a payment-subnet host. What actually happened between the realtime watcher that noticed the write and the JSON document you are now reading? In...
How Suricata Works: Inside the IDS Engine That Detects Attacks at Wire Speed
Suricata sits on the tap where your 10 Gbps uplink lands, and it has to reach a verdict on every packet that crosses that wire: alert, drop, or pass. Feed the engine the wrong threading configuration and the verdict happens...
How sqlmap Works: Inside the SQL Injection Automation Engine
Your WAF is on, your app has forty parameters, and last quarter’s scanner report said “no injection found”. Then someone points sqlmap at one URL parameter and, within minutes, it lands on a working boolean oracle plus the exact prefix/suffix...
Osquery
You type select * from processes into the osquery shell and a few hundred rows stream back — PIDs, memory footprints, parent processes, command lines. Then you look for the database file you just queried. There isn’t one. No processes.db,...
How Nmap Works: Inside the Source Code of the World's Most Famous Port Scanner
You run nmap -sV -sC against a /24 and thirty seconds later the terminal prints open ports, product names, and script findings for hundreds of hosts. Nothing in that output was hardcoded. No engineer sat down and wrote “probe 443...
How hashcat Works: Inside the GPU Password Cracking Engine
You run hashcat -m 1000 -a 0 ntlm.txt wordlist.txt on a laptop and the status line reports millions of guesses per second, while a homegrown Python cracker on the same machine manages a few thousand. The gap is not just...
How ClamAV Works: Inside the Open-Source Antivirus Engine
Watch clamd for a minute and you get a puzzle worth solving. The daemon sits on hundreds of megabytes of loaded signatures, yet a mail attachment is scanned, typed, decompressed, and matched before your IMAP client finishes repainting. The naive...
VLC Source Tour: One Binary That Plays Everything, Built From Loadable Parts
You hand VLC a strange file — a 4 GB ISO, an HLS playlist from a network camera, a half-corrupted AVI — and it just plays. No codec pack, no “install a plugin to continue”, no format picker. The usual...
OBS Studio source tour: where a dropped frame actually dies in libobs
Your stream sits at 20 fps. The OBS stats window says “skipped frames due to rendering lag,” your GPU is nowhere near 100%, and none of your sources report errors. You are not alone in finding this maddening, because the...
Inside mpv's playloop: the player core that skips frames instead of stuttering
Your video stalls for a tenth of a second, and most players respond by freezing the picture while the audio buffer runs dry — you get the ugly double-jerk of a paused frame followed by a sound hiccup. mpv almost...
