Remember your old favorite, Brianna Wu? Have you kept up with her online presence?
If yes: I am so sorry. You can and should mute/block and never look that way again.
If no: I recommend you keep it that way. The broken floodgates of dopamine from attention-seeking have poisoned a mind beyond repair. It’s horrible.
Exciting news! The Authentication Experience team at Apple, which brings you the Passwords app, passkeys, AutoFill of codes from Messages and Mail, and more, is hiring a software engineer!
This is the team that I founded, grew, and managed for years that I still work with daily. It’s a phenomenal team.
If you are interested, please apply through the website. People of all backgrounds are encouraged to apply. The role is in Cupertino, California. https://jobs.apple.com/en-us/details/200577341/software-engineer-authentication-experience?team=SFTWR
how’s everybody doing?
Trust me. I know.
Me, whenever I hear good news these days: Are we sure this isn’t actually somehow bad news?
“I disagree with Kamala’s position on the war in Gaza. How can I vote for her?”
This video from Bernie Sanders is good. https://www.youtube.com/watch?v=Vf5MThSniiY
My reaction to far too many things happening right now.
Chick-fill-A Play sounds a lot more like an activity between consenting adults than a streaming service.
https://www.salon.com/2024/10/22/chick-fil-a-to-launch-new-family-friendly-app-and-streaming-service-chick-fil-a-play-in-november/
@skinnylatte that’s so cool! 
A second version of the Credential Exchange Protocol and the Credential Exchange Format have been published. https://fidoalliance.org/specifications-credential-exchange-specifications/
@mjtsai @bynkii For people who are using a password manager and strong passwords, several things are true:
1. A sufficiently convincing phishing attack can convince someone to fill or paste their password to the wrong entity.
2. The website can have passwords stolen from them. This happens regularly.
3. Websites have bizarre rules around password composition that are frustrating to people.
4. They can keep using passwords if they want. Nobody is taking their passwords away.
@mjtsai They won’t work for everyone. There are tradeoffs. But making every credential “strong”, eliminating phishing as we know it today, and jettisoning the possibility of “leaked” credentials is a big deal, in my opinion.
And for the websites and apps that have deployed passkeys, the folks using them have largely enjoyed the experience, and found sign-in to be faster and easier than before.
But again, nothing is perfect. But again^2, the people working on this stuff are open to feedback.
@mjtsai I am open to talking about the issues with passkeys and solving them. I am not unaware of their issues — I spend a lot of time working to address the issues with passkeys.
I don’t want anyone to feel like passkeys are being shoved down their throats. The reason people excitedly talk about them is that they are currently our best hope of addressing the ways that passwords hurt people.
Just because you know how to use a password manager, it doesn’t mean that most people ever have a hope of understanding even the best version of password management. Passkeys are a break from that world and a concept that lots more people can understand: you sign in to websites and apps the same way you unlock your phone. And in the process, you’ll be safe from the forms of phishing that plague us all today and from servers leaking passwords.
