The TikTok webapp is shockingly bad. There's no way to even change your password...

NPM supports switching from Authenticator App (TOTP) based 2FA to more phishing resistant WebAuthn based 2FA. Adding a WebAuthn security key and disabling the Authenticator App is a pretty quick process. For example Apple Touch ID & Windows Hello work! Physical keys work too, but aren't required.

A while ago I set up a passkey as my npm 2FA, instead of using an OTP. Highly recommend! www.npmjs.com/settings/......

The OCaml Renaissance: Why This Obscure Language is a Cybersecurity Powerhouse Introduction: In the ever-evolving landscape of cybersecurity, the tools and languages we choose form the bedrock of application security. While mainstream languages dominate, niche functional programming languages like…

Unpopular opinion but: most sites don't do dark mode correctly ie in an accessible way. They just shouldn't do it tbh

It would be funny if China presented Trump wth a taco truck after he gave them the tariff concession in exchange for rare earth minerals

"AI makes me so much more efficient" - the least productive person you know

Every year on Memorial Day, I share this video of French caretakers who take sand from Omaha Beach in Normandy, and scrub them into the letters to give them the gold coloring. They do this for all 9,386 US soldiers who died. France also gave us this land as American soil.

you can always do the “5 whys” in your incident review but be careful about going past that because after like 8 whys it’s just “capitalism”

I erroneously believed that HCWs weren’t permitted to proactively suggest MAiD. I assumed the patient had to make the request. I went home and researched and sure enough - they are actually encouraged to bring it up. Not only in terminal patients - but in those with disabilities as well /4

imo many react developers would benefit from learning astro and htmx

Proof this guy is full of SITH.

A conversation with Malcolm Matalka about the reasoning behind choosing OCaml and (almost) zero frameworks for the development of Terrateam. We also touch on some related topics, e.g., static vs dynamic typing, the use of monorepos, micro-types, and more. se-radio.net/2025/04/se-r...

Plenty of room on the web for everyone to use their preferred technologies & techniques!

Bluesky please implement passkeys and stop with the emailed confirmation code every two weeks lol

It's wild how many scam calls and texts I'm getting nowadays. There was always some amount of it, like background noise, but it's been ramping up steadily over the past few years. Something really needs to be done about this problem.

Surprised that no one has made a parser library called 'parsely'

Can’t – as they say – make this shit up.

This is Marco Rubio explaining how the USA promised to defend Ukraine forever if they got rid of their nuclear arsenal left after the Soviet Union fell. This is why lil marco was sinking into the couch. He was hoping we wouldn’t find it…so don’t RT right now this very second.

Finally - Relocatable OCaml in “fully relocatable” mode is also reproducible (as long as the C compiler is reproducible) and passes its testsuite 😮‍💨🥳🎉🍾🎊

Manager: "What's this milestone 'Living on a prayer' ?" Me: "That's the documentation deliverable." Manager: "What's the status of that?" Me: "We're halfway there" Manager: "Why is progress so slow?" Me: "You fired Tommy" Manager: "So?" Me: "Tommy used to work on the docs"

TIL there's a Sodium Chloride USP 🧐

One pretty cool thing about dictation (speech-to-text) with my phone is that I can speak very quietly, barely more than a whisper, and it understands and transcribes just as well as if I spoke loudly.

Microsoft Digital Defense Report 2024: www.microsoft.com/en-us/securi... 'Actionable Insights: (1) Retire passwords in favor of phishing- resistant, passwordless authentication methods such as passkeys.'

Public service announcement: when you tap on a link in the iOS Gmail app and it pops this screen, make sure to turn OFF the switch 'Ask me every time' and then select 'Default browser app' so that it opens the page in a new tab in your system-wide browser where you're signed in to your accounts.

Plutocracy:...government by the wealthy...an elite or ruling class whose power derives from their wealth: officials were drawn from the new plutocracy. mid 17th century: from Greek ploutokratia, from ploutos ‘wealth’ + kratos ‘strength, authority’. (Apple Dictionary)

What's the difference? www.nytimes.com/2025/01/22/m... islamqa.info/en/answers/1...

Yes, this administration is dangerous and cruel, but they are also shockingly dim and incompetent. Opportunities are everywhere. Make everything as hard as possible. Resist every demand. Refuse entry without a warrant. Don’t take the buyout. Their problem solving skills are 📉

I am convinced 99% of websites should use magic links + passkeys. It bypasses all (debatable) portability objections to passkeys, it’s at least as secure as email-based recovery, as fast as a password manager, it’s available to all users… and importantly, no passwords!

I started using NetNewsWire seriously on my laptop about a week ago, and I now have a pleasingly growing collection of RSS feeds. We're so back!

Wait, 'wait, X is a real thing' is a real thing that people post? I legitimately thought it was just a meme about how dumb it sounds to ask if something is real when search engines can tell you the answer in seconds.

It's easier to work in teams when you ask questions instead of making statements

'HTML isn’t only for people working in the tech field. It’s for anybody, the way documents are for anybody. HTML is just another type of document.'- www.htmlforpeople.com This is exactly why I feel that the 'HTML is a programming language, gatekeeper!' people are going down the wrong rabbit hole

I am seeing a lot of bad takes on passkeys by technologists and even security engineers that don’t work on end user authentication. I’m not an expert either, but if you trust my opinion on security, STFU and listen to people actually dealing with lockouts and ATOs on a daily basis.

In ten minutes I will start the webinar "getting started with #libcurl". You can still join here: https://us02web.zoom.us/webinar/register/4216747720523/WN_2Yazx8c5THuav0P2JTc2Zw#/registration

OCaml 5.3 has been released: discuss.ocaml.org/t/ocaml-5-3-... It brings syntax support for effect handlers. It also brings back statistical memory profiler and MSVC support.

I spent most of my adult life watching schools say they can't expel professors for sexually assaulting and harassing students and colleagues only to see how quickly they react over social media posts against genocide

Finally, The Marvel Art of Russell Dauterman is shipping–excited! Been a long wait haha

Man, the people roundly criticizing my suggestion to use device-bound passkeys and fallback to emailed OTP for registration and login flows sure went VERY quiet after auth and crypto security experts started saying the same thing 😂

Hi @kelseyhightower.com I had a question about Kubernetes vertical autoscaling with in-place resizing–does the Go runtime automatically detect and adjust its thread pool size in response? Or am I overthinking this?

Shocked by the power of applicative style. dream-html form decoding couldn't handle a dynamic number of structured values. I was afraid it was going to be complex, but: let rec multiple n form = match n with | 0 -> ok [] | _ -> let+ v = form (n - 1) and+ vs = multiple (n - 1) form in v :: vs

The real reason to choose OCaml is that you're comfortable and confident and can get things done with it

So my thought on OCaml's Eio async I/O system is that devs should write apps that work on a single domain (but are multi-domain safe) and Eio should take care of the detail of parallelizing it across all cores. It should expose this design decision upfront. github.com/ocaml-multic...

Am I just a dumb-dumb, because I really don't see the difference between Terminal dot app and Ghostty. Lol is this the nerdy dev equivalent of CD vs vinyl 😂

Just an FYI when talking about city/town budgets:

New generation of OCamlers are coming up now, and they are taking to it like ducks to water. Wagmi!

🚀 Ahrefs: OCaml at Web Scale 💻 Ahrefs, with just 120 people, uses OCaml to process 6B pages daily and power the 2nd largest web crawler after Google. Backed by a 475 PB SSD database, 4200 servers, and 660000 CPU cores, they showcase OCaml’s efficiency in massive-scale data processing. 👉 ahrefs.com