iamkale

@iamkale@infosec.exchange

Full Stack web dev, WebAuthn expert. Creator of SimpleWebAuthn, maintainer of py_webauthn, steward of webauthn.io. Duonaut @ Cisco.

I also like video games and gadgets 👾

My toots are my own.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

cendyne, to random
@cendyne@furry.engineer avatar

Google discovered and indexed my sticker archive. Oops. Time to Noindex that

iamkale,
iamkale, to random

Where tf are all these campaign text messages coming from? I know elections are coming up but when did I consent to receive these?? And is the best way to stop them to really respond STOP to each? Seems that just gives them confirmation that a real person is on the other end.

krypt3ia, to random

So, I’ve been creating posts again, but, I think I’ve sussed something out. People aren’t reading anything anymore. Unless it’s 240 characters or less…

iamkale,

@jwgoerlich @krypt3ia This is a crazy drop. Is this definitely people engaging less with your content? Has your content grown shorter over the years? That's one other possibility I could read out of the chart 😅

BTW what analytics setup are you using to collect the data for this chart? I'm curious about my own blog now, but I've relied on CloudFlare's barebones analytics over Google's for many years now. I can't imagine ever being able to pull out an insight like this from the data I've ever collected through them.

iamkale, to javascript

Once again another problem solved with a webpackIgnore.

was a mistake 🫠

iamkale, to random

Random thought while making lunch today:

"Hotdog Water Grease Fire" would make a great band name

iamkale, to random

What new CA or federal law came to be in 2024 that has everyone pushing for whole-home water treatment? Yeah, it's Orange County, our water supply is hard as diamonds but now we all want to do something about it?

Anyway Home Depot is visiting tonight to trial for us some new at-home water analysis service they're kicking off. Takes a half hour, we give our opinion after for $25. But I can't help thinking most of the time will be taken up by some sales pitch.

Too late to back out now 🤞

nsa, to random
@nsa@hachyderm.io avatar

I should revive satragno.com, put a blog there and post solely about touhou and smash

iamkale,

@nsa Livestream when??

matthiasott, to RSS
@matthiasott@mastodon.social avatar

Citizens of the open web! 💚

Does your website or blog have an feed? Let me – and my newsletter subscribers – know the URL(s) below.
👇

iamkale,

@matthiasott Sure, let's do it!

https://blog.millerti.me/index.xml

I blog about this and that, mostly about passkeys but I also keep track of the list of games I've played throughout a given year.

iamkale, to random

We bought Just Dance 2024 on sale on Switch yesterday and they only use a single joycon in your right hand to gauge your dancing? 🤨

Dance Central with a Kinect for full-body dance tracking were the pinnacle of dancing games and I have to spend the rest of my life knowing we'll never again be graced with such gaming perfection 😭

iamkale,

@Pibble Look, I'm with you - I'll get as many people into Beat Saber as I can too. But I'd say it's an apples-and-oranges comparison between it and Dance Central 🤔

iamkale, to passkeys

I couldn't help myself, I documented the level of passkeys support on the Meta Quest 3's Browser as of v60. The results are...not good 😂

https://blog.millerti.me/2024/02/05/passkeys-support-on-the-meta-quest-3-build-60/

iamkale, to vr

Credit card cashback is burning a hole in my pocket and Apple Vision Pro hype has me THIS close to buying a Quest 3.

Any reason not to? I've done VR before, with an OG Vive I eventually upgraded to wireless and fancy Valve Index controllers, but things have come a long way since then...

iamkale, to random

I'm currently on Year 4 of 100% remote work, which has now beaten my previous record for remote work (I think in the last 10 years I've been remote for 7 of them.) The isolation is slowly getting to me again, though, so send VR (or positive vibes while I search nearby coworking spaces and/or local corporate branches to start visiting a couple times a week.)

Man, I really miss post-lunch walks with coworkers...

Happy Friday everyone 😂

iamkale, to passkeys

This is the future that stole from us 😤

iamkale,

@danblondell In 2011 MFA meant "Multiple Forced Authentications"

tk, to random en-us
iamkale,

@tk I'm sorry but it looks like they didn't hit a single stud when installing that swivel mount! What did they expect would happen when they extended it out so far? 😂

iamkale, to random

Slightly related to all the discourse about the disappearance of square checkboxes over the years, but I'm looking at these screenshots of iPhone OS from the early 00's and I can't help but think, "look at what designers took from us": gradients and obviously tappable targets and header bars and visual hierarchies...so much UI character has been lost to the sands of time for sake of FLAT DESIGN 😭 https://mastodon.social/@jncn/111833539089777639

carrickdb, to random

Wow, there is something so refreshing about working on your own personal project and getting to push directly to main. Getting to label your commits "blah" if you want.

iamkale,

@carrickdb It's great not having to write tests for everything too if you aren't in the mood to write them just yet 😌

iamkale, to random

Has anyone gone all in on Verizon's 5G home internet service? The clock's started on my 30-day free trial bur I haven't even cracked the box open. I have reservations already and not as much free time to experiment...

The main issue is I've read stories of people like me (who work from home) suffering from intermittent 30-second windows of dropped internet throughout their workdays. I don't have that problem with my current ISP, and I don't know if I want to even bother seeing if I'll have that same issue.

But the price is a bit cheaper and I'm not sacrificing any speed we couldn't live without before (currently paying $60/mo for 500/50, Verizon promises $45/mo for 380/50), and maybe "5G as a path to fiber-like speeds" has come far enough that it's worth it? The theory being it's 380Mbps now, maybe it'll hit 1Gbps at some point?

Anyway I'm hoping someone here can help me understand better what I might be getting myself into if I do try out the service.

iamkale, to apple

Apple's rationale for the Core Technology Fee feels odd to me:

...reflects the value Apple provides developers through ongoing investments in the tools, technologies, and services that enable them to build and share innovative apps with users around the world.

Isn't Apple's investment in tools for building software for their devices a driver of device sales? This almost seems like Apple is trying to expand their services-centric narrative to make tool development into even more services revenue so as hardware sales slow down Apple can make more money.

But the Mac platform seems "fine" without such a fee, so why does iOS need one now? Notarization would be an ongoing cost but can't macOS apps get notarized just by the developer having paid the $100/yr developer fee? If that continues to work for macOS then why does iOS need the new fee?

I've heard this described as malicious compliance and it's hard to disagree.

iamkale, to random

Lawful Neutral, "userID", compared to "userId" a.k.a. "why would I want to store whether the user has instinctual desires?" https://mastodon.social/@nixCraft/111814188367227644

iamkale, to random

Watching minmax character builds for Baldur's Gate 3 on YouTube knowing my current play style of "explore every possible nook and cranny" will leave little for me to discover on any subsequent playthrough 🗺️

zak, to linux

I made a tier list. I'm sure there will be some hot takes in here. In doing this, I realized how many distros I know nothing about at all.

iamkale,

@zak This is a good list because my favorites are at the top. Mint was the first desktop Linux OS I fell in love with, but nowadays I'd roll Pop_OS (if I wasn't so entrenched in Apple stuff.) And Debian makes for a good VPS OS ✨

iamkale, to node

I can't believe Deno gets you a testing framework AND coverage reports without any additional downloads. 2010's me would have killed for something like this instead of the weird soup that was mocha and sinon no wait now let's use jest oh and don't forget nyc er wait it's istanbul now and...

https://fosstodon.org/

Love to see it 😍

iamkale, (edited ) to microsoft

I'm trying to manage my Microsoft Account protections, with an ultimate goal of protecting it with a passkey and maybe dropping my password to make the account truly paswordless. However I'm running into some weird idiosyncracies on https://account.live.com/proofs/manage/additional that have prevented me from achieving this:

  1. I couldn't actually see the WebAuthn option at all in the latest macOS Safari - I had to switch to macOS Chrome before the "Windows Hello" option appeared that let me then register an iCloud Keychain-synced passkey.
  2. I removed my phone number as a second factor because SIM jacking is a thing. However the next time I tried to log in I was prompted to add my phone number to "never lose access to your Microsoft account"...but I have other BETTER second-factors configured, so why would I want to continue to allow use of weak SMS OTP? At least I could cancel out and continue on without giving them my phone number again...
  3. Attempting to turn on "Passwordless account" forces you down a path that wants you to set up the Microsoft authenticator app. But I already have a synced passkey in the mix, so why are you bothering with app-based push? Push bombing is also an easy way to get past 2FA protections.

Another example of how the left hand doesn't know what the right hand is doing...

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • rosin
  • ngwrru68w68
  • Durango
  • DreamBathrooms
  • mdbf
  • magazineikmin
  • thenastyranch
  • Youngstown
  • khanakhh
  • slotface
  • everett
  • vwfavf
  • kavyap
  • provamag3
  • osvaldo12
  • GTA5RPClips
  • ethstaker
  • tacticalgear
  • InstantRegret
  • cisconetworking
  • cubers
  • tester
  • anitta
  • modclub
  • Leos
  • normalnudes
  • JUstTest
  • All magazines