@sean@scoat.es
@sean@scoat.es avatar

sean

@sean@scoat.es

Tricking software into working since the 1980s.

I do all kinds of tech things. Here you'll find: rants, ops/devops, web, iOS, microcontrollers, electronics, food, beer, opinions, and whatever else is on my mind + in the conversation.

Doing brain stuff as VP of Technology at Matter: https://matter.xyz/

I've opted in to making my posts searchable.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

sean, to random
@sean@scoat.es avatar

It is disturbing how easy it is to overwhelm Contentful’s API rate limit by simply clicking more than a couple tabs open, at once, from their own UI.

The rate limit must be hilariously low (and the number of on-page API calls hilariouslhy high).

sean, to random
@sean@scoat.es avatar

“Starting April 24, any communications you will receive about your domains will come from noreply@registrar.amazon email address instead of route53-dev-admin@amazon.com”

Whoopsie? Who among us hasn’t accidentally left a dev configuration in production? I am Spartacus!

sean,
@sean@scoat.es avatar

@derickr Somehow, in the context of “registrar emails come from here”, an individual seems even worse. (-:

evan, (edited ) to random
@evan@cosocial.ca avatar

Do you say "Fediverse" or "Social Web"?

sean,
@sean@scoat.es avatar

@preinheimer @evan I wouldn’t refer to them that way, but I agree that normals would conflate “social media” and “social web”.

sean, to random
@sean@scoat.es avatar

Vendor Security: why I've mostly given up on the practice of forcing vendors to regnerate insecurely-transmitted credentials

(and a ridiculous conference call)

✍️ https://seancoates.com/blogs/vendor-security

sean, to random
@sean@scoat.es avatar

201x: user clicks link; browser blanks; new HTML loads; browser displays rendered HTML + JS + CSS + images.

2024: user clicks link; main work area blanks; browser displays “loading” spinner; new HTML never loads; user clicks “reload”; browser blanks; HTML loads; browser displays rendered HTML etc.; user is at a different page than before they clicked reload; user clicks X to close 4 on-page CTA prompts to join mailing lists, pay for content, chat with “support”, and opt out of tracking.

preinheimer, to php
@preinheimer@phpc.social avatar

Hey PHP Folks, question for you!

Back in the early 2000s, I feel like there was two big PHP development methodologies.

The "Yahoo! System" where they did all their front end in PHP, and had a lot of built in extensions to handle their business logic.

The "Facebook System" that used PHP for everything.

Is anyone still using the Yahoo! system? Do they talk about it much?

#php

sean,
@sean@scoat.es avatar

@preinheimer @mwop I’m not suggesting you haven’t read this… but if you haven’t, I am suggesting that you do: https://www.goodreads.com/book/show/54716655-kill-it-with-fire

ringmaster, to random Swahili
@ringmaster@mastodon.social avatar

I just had a great idea: Use a git branch to store data for my blog that the site generates while it runs. I can keep a branch that has files for ActivityPub subscriptions and it can merge in main as I write and push posts. I’ve been looking for this answer for a while -- no “database” persistent storage with the ability to push back to the repo periodically for portability. I can set the token access to that branch only to protect my main branch. Yessss...

sean,
@sean@scoat.es avatar

@ringmaster Sounds cool. Beware of concurrency issues when using the file system as a datastore (before it gets to git). Apologies if this is already firmly on your radar. (-:

sean, to random
@sean@scoat.es avatar

Tonight: look up (sorry southern hemisphere friends). I’m stuck in the city but this is the highest level of activity I’ve seen since I started paying attention, so I’m hopeful despite being in a very light-polluted area.

sean,
@sean@scoat.es avatar
sean, to random
@sean@scoat.es avatar

I absolutely love seeing the momentum of “keep users’ sensitive data on their own devices/in their own control only” as a technology + security + privacy strategy.

https://criticalmoments.io/blog/how_to_target_users_without_collecting_data

At work (http://matter.xyz) we don’t target users like this (we do occasionally cohort users to e.g. exclude Matter staff from analytics), but refusing to hold highly personal information is the core of our privacy stance.

(via @nicksloan via @heyjaywilson)

sean, to random
@sean@scoat.es avatar

Learned that (allegedly) Ukraine is using a repurposed Stuxnet (or at least a Stuxnet-like system) against Russia. It’s called Fuxnet.

I’m not sure attacking [potentially civilian] infrastructure is the right move (lots of pro and cons there), but who can argue with a name like Fuxnet?

sean, to random
@sean@scoat.es avatar

I keep hearing about Google paying Apple $20B/year to make it the default search engine in Safari. “They must make at least that much on search from Apple devices in order to justify the cost.”

This is wrong.

They must make at least that much from search OR from preventing others from eroding their monopsony. The REAL value is to prevent someone else from being the default.

It’s similar to regulatory capture, and we should tax the shit out of it.

(harnessing my inner @pluralistic)

sean, (edited ) to random
@sean@scoat.es avatar

Oh, I see you were in the middle of a 7-step process investigating a bug that’s probably on our side and WOULD YOU LIKE TO SCHEDULE A CALL WITH OUR CTO ABOUT AN EXCITING NEW PRODUCT LINE WE’VE LAUNCHED? IT PROBABLY HAS AI.

—web apps in 2024

sean,
@sean@scoat.es avatar

YOU DID NOT CLICK ON SCHEDULE A CALL LAST TIME WE INTERRUPTED YOU SO WE ARE NOW INTERRUPTING YOU AGAIN. IT HAS BEEN 9 MINUTES. CLICK THAT X AGAIN AND WE’LL SEE YOU IN 9 MORE MINUTES.

(I’m tempted to schedule a call to tell them how disruptive this abusive behaviour is to me actually using their product and that it makes alternatives much more viable.)

sean,
@sean@scoat.es avatar

@andreiz Yeah, and they’ll probably also harrass and interrupt me, but I can hope…

(this complaint is not about AI directly; that’s just what they’re (probably) peddling this time)

CmdrTaco, to random
@CmdrTaco@federated.press avatar

Today I tried something called a dragon chilli taki. If this is my last transmission, the takis have won: avenge me.

sean,
@sean@scoat.es avatar

@CmdrTaco Too soon for spicy twicey?

sean, to random
@sean@scoat.es avatar

Have to admit I’m a little bummed this didn’t trigger something fun.

sean, to random
@sean@scoat.es avatar

Feeling a weird paradox of…

…the optimism of how everything is better because we’re moving away from the decades-old mess of poor memory management with protections that C/C++ can’t enforce, and even improving on models like Garbage Collection (with Automatic Reference Counting and Borrow Checking), strong typing, powerful and accessible high-level languages…

…and the pessimism that actually using software feels so much worse nearly every day—especially on the web.

wez, to random
@wez@fosstodon.org avatar

As an OSS maintainer, a pet peeve of mine is when someone asks why something is a particular way, when what they really mean is "I don't want to configure it to my preferences and I want you to change the way this works".

The "why" question sets things up for the maintainer to be on the defensive, which implies that the answer needs to be well researched and reasoned, which takes extra effort.

Ultimately the person asking doesn't care about any of this, making the whole thing a waste.

sean,
@sean@scoat.es avatar

@wez I can certainly understand that position, but I sometimes ask that kind of “why” question to truly understand if/why that way is better than my preference, or to even find out if it wasn’t really thought about and it was just a choice without good backing (and maybe it could change). I see developers make “we’ve always done it this way but I don’t really know why” decisions all the time.

Good prompt to be more careful about that, though.

dotjay, to random
@dotjay@mstdn.social avatar

Friends with ADD/ADHD/VAST: Do any of you have any good resources or tools for directed attention fatigue?

sean,
@sean@scoat.es avatar

@dotjay Not sure this is what you’re looking for, but the pomodoro technique works pretty well (vs not using it at least) with Kid 2.

saramg, to random
@saramg@fosstodon.org avatar

Enshittification As A Service.

sean,
@sean@scoat.es avatar

@saramg Private Equity.

sean, to random
@sean@scoat.es avatar

I have Mailchimp set up to use MFA via TOTP and I have 2FA via SMS turned off.

I just logged in for the first time in a while. It made me verify by SMS and didn’t ask me for my TOTP number. In the settings, I have this configured correctly, but there’s a “We’ll use this to confirm your identity if we spot any unusual activity on your account.” phone number.

This seriously lowers my confidence that they’re doing this right at all. Everything seems to have gotten worse over the past few years.

preinheimer, to random
@preinheimer@phpc.social avatar

I didn't realize it until I came upon it in a podcast.

I view people calling twitter "X" without mentioning its former name a negative signal for how much I want to interact with that person.

sean,
@sean@scoat.es avatar

@preinheimer How about people who say “Xitter”? Those people are usually a little better. (-;

sean, to random
@sean@scoat.es avatar

GANDI seems to have lost all ability to process existing credit cards, due to a botched migration.

Always happy to see when AWS / Route 53 adds new TLDs so I can avoid external registrars.

sean,
@sean@scoat.es avatar

I just had a different problem where it wouldn’t let me add two different credit cards for payment. I don’t like paying for a service relationship where I have to do so much work, so I transferred my domains out of Gandi.

This kind of screwup has a cost. I’m sure my few domains are barely a rounding error, but I’m not going to recommend them anymore, either. It’s just not worth it.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • Leos
  • everett
  • magazineikmin
  • Youngstown
  • thenastyranch
  • rosin
  • slotface
  • ngwrru68w68
  • Durango
  • PowerRangers
  • kavyap
  • cisconetworking
  • tsrsr
  • DreamBathrooms
  • anitta
  • mdbf
  • tacticalgear
  • khanakhh
  • ethstaker
  • vwfavf
  • InstantRegret
  • modclub
  • osvaldo12
  • cubers
  • GTA5RPClips
  • normalnudes
  • tester
  • provamag3
  • All magazines