← Feed

Posts

• Post #4203099

  RE: https://mastodon.social/@fj/117003167043669505 Happy birthday to Signal!

• Post #4137639

  Hi Mastodon! I’m looking for help trying to understand more about how bulk email sending works in practice. To improve the experience of signing users in to websites, I’m thinking about working to introduce a standard email header for authentication-related one-time codes, so that, just from headers, email clients are aware of contained codes. What I don’t know: Do bulk email sender facilitators allow setting custom headers? Or would they be open to allowing a *value* for a custom header if it...

• Post #4107269

  This is the way. https://ottawa.place/@stephanie/113352754042936499

• Post #4102733

  “You saw [speedrunner] climb up those rocks? That’s a trick that we call ‘rock climbing’.” I love Summer Games Done Quick. :)

• Post #4102732

  Sunday night (derogatory)

• Post #4102731

  I have a weird feeling that Graham Platner is going to fuck us all one day.

• Post #4102730

  all my Senate gone

• Post #4102729

  I’m not sure I’ve ever purchased an upgrade to software faster than with Soulver 4. Soulver helps me with so many little things in my life. https://soulver.app/

• Post #4102728

  We been spending most our lives shitting with a tummy parasite.

• Post #4102727

  I love taking my socks off.

• Post #4102726

  I’ve been to lots of outdoor shows over the years, but this is the first with an AQI over 200. Thank goodness for N95s. (Death Cab, Philly.)

• Post #4102725

  “What’s the matter, trainer?”

• Post #3583359

  A reminder: If we are internet or IRL friends, and you have a fast internet connection, I will happily house sit for you if that’s something you ever want or need. See my website for more details: https://rmondello.com/housesitting/

• Post #3381622

  If you’re not on the grind to promote your content to make a living, I think it may be morally bad to post on X.

• Post #3347379

  I recently learned about the existence of the Anthropic employee polycule. I want it on the record that I _would_ go to one of their parties, but only with a very trusted friend, and I explicitly would not eat or drink anything there. The goal would be to experience the most interesting people-watching of all time. It’d be like staring directly into the sun, but with human behavior.

• Post #3322868

  I’m in Las Vegas for the next few days to give a keynote at the Identiverse conference and learn as much as I can from everyone else. My talk is about how to think about passkeys from the perspective of doing the most good for the most people, while avoiding potential harms. Vegas isn’t exactly my scene, and it’s hot as hell here, so expect some interesting posting. 🔥🙃 (Also, it’s wild to be featured on a website next to a sitting congressman. https://identiverse.com)

• Post #3156706

  RE: https://mastodon.social/@anon_opin/116702557377738985 The ship has sailed on this, but this is a good opinion.

• Post #2650966

  Have you ever gotten that notification from Uber when you land at a major airport that encourages you to open the app to book a ride and wonder how they figured out your location? The first time I saw this I wondered who betrayed me and shared this data with them. It turns out that it might be nobody. iOS can publish notifications for an app based on a geographic region and that app doesn’t know the wiser unless and until you interact with it. I figured that if I didn’t know this, some of y’al...

• Post #2515865

  smol dog goes awoo (quietly)

• Post #2359377

  RE: https://tacobelllabs.net/@ultranurd/116545694379699205 A TOTP provides very little value on top of a passkeys if it’s saved in the same place, with the same access control as your passkey. So in practice, no, you don’t need one. Importantly, note that a TOTP is just as easily phished as a password or an SMS one-time verification code. Now, if your TOTP is stored and accessed separately, it may provide some value, but at that point, your threat model should be pretty advanced and off the be...

• Post #2359376

  RE: https://mastodon.social/@brandonbutler/116544219969179883 Today, you cannot save an Apple Account passkey to an arbitrary passkey manager. If that were to change, I will yell it from the rooftops, because it will eliminate a lot of confusion for folks, especially in the Apple Developer community and better model how passkeys should ideally work.

• Post #2315218

  I wrote a shortcut to make it easier to look up credit card information saved for AutoFill in Wallet. Some of y’all might find it useful: https://rmondello.com/credit-cards-shortcut/ And don’t forget that if you tap on any text area on iPhone and iPad > AutoFill > Credit Card, you can fill details into fields.

• Post #2235775

  I am going to be giving some public talks about passkeys in the next few months. What questions do you have about passkeys and what topics do you want covered in me exploring passkeys?

• Post #2128616

  Simply put, AI-generated images undermine trust. https://mastodon.social/@glyph/113148088389991104

• Post #2113742

  Which kind of person is a “Baby On Board” bumper sticker supposed to change the behavior of? People aren’t thoughtfully and defensively driving 100% of the time??

• Post #1924452

  There’s an awesome new tool in the journey to replace passwords: Automatic passkey upgrades. For a short window after a user signs in using Password AutoFill, apps and websites can “conditionally” request passkey creation for that same account. The Passwords app then creates a new passkey and notifies the user. No upsells or speed bumps. All credential managers can support this! (There’s lots of new API for credential managers this year!) More information (WWDC video): https://developer.apple...

• Post #1869124

  Announcing CrowdStrike AI

• Post #1863890

  Exciting news! The Authentication Experience team at Apple, which brings you the Passwords app, passkeys, AutoFill of codes from Messages and Mail, and more, is hiring a software engineer! This is the team that I founded, grew, and managed for years that I still work with daily. It’s a phenomenal team. If you are interested, please apply through the website. People of all backgrounds are encouraged to apply. The role is in Cupertino, California. https://jobs.apple.com/en-us/details/200577341/s...

• Post #1863883

  I gave an opening keynote at the FIDO Alliance’s “Authenticate” conference a few weeks ago! Although it featured timely strategies and tips for professionals deploying passkeys, my primary goal was to explain, as clearly as I can, why passkeys are important and how we should use them to reduce the harm that passwords cause. YouTube link: https://www.youtube.com/watch?v=otObbUSxcqs I’m really proud of this talk and I hope you’ll watch it and share it with others. I put care in to making it appr...

• Post #1810152

  Every weekend should be a three day weekend.