Cynthia 🐈

@cynthia.dev

24f. Computer scientist catgirl. Software efficiency, robustness, accessibility and sustainability advocate. Addicted to coffee and cookies. 🔗 https://cynthia.dev - 📍 Toulouse, France

What pisses me off the most about clanker garbage is that they give the most unoriginal common name imaginable, which makes it a PAIN to mute and not get exposed to this absolute steaming pile of garbage

One of my spicy takes is that in general you absolutely should link a Microsoft account to Windows. And you *absolutely* should store your Bitlocker keys in it The threat model of the average person doesn't include advanced threats or govt, forgetting their recovery key is much higher in the list…

The AUR and more broadly all open source registries of content I mentioned above are remains of an era where we could trust that random files put on a public FTP server had a high chance of being trustworthy. And that resources would be accessed in good faith. These days are gone, likely forever.

Blaming the recent AUR compromise on Arch, or commenting how other distros are supposedly "more secure" is completely stupid and irrelevant. That's like saying GitHub's compromised because some repos are malware, or that a 3rd party APT repo shipping malware is Debian's fault. Nonsense.

Roses are red Violets are blue Guillermo Rauch enjoyed his discussion with war criminal Benjamin Netanyahu Here's your unsollicited reminder that Vercel is not *just* making mediocre software 😇✌️

part of why I don't like AI is bc it's so often the antithesis of caring for the little things, the appreciation of the mundane, of seeing beauty where others haven't yet been able to, and seeking genuine fundamental understanding all in the name of "get product faster" I find it so disheartening

Blue Bottle Games, as a policy, does not use generative AI. It's something we've discussed as a team, weighing the pros and cons, and ultimately, we decided it was not for us. Recently, while chatting with a colleague, she mentioned it was useful hearing our reasoning. So: Sharing time! 1/12

Passkeys can be stored just like password hashes! I'm proposing an interoperable $webauthn$v=1$… format, and a Go API that uses these passkey records for authentication. I'm looking for feedback before proposing this as crypto/passkey for Go 1.28!

Opaque, Interoperable Passkey Records (and a Go API)

Passkey records are an interoperable format for WebAuthn credentials, similar to password hash strings. I propose a potential crypto/passkey Go API based on them.

words.filippo.io

This is a marketing piece for using AI models that is just another flavor of "use a diary" instead of actual coping mechanisms for AuDHD

CVEs and CVSS both suck for a lot of reasons, but the most significant gripe I have with them is that we have no way of identifying relevant vs irrelevant CVEs Some projects have issues scoring 10.0 on the CVSS scale, but are actually totally safe to use in 99.9% use cases. But flagged anyway...

The Internet is truly dying. I don't wanna use Twitter, I don't wanna use GitHub, I don't wanna use YouTube, I don't wanna use any of the websites I used to use regularly. I have no place to go. The Internet feels like giant wasteland...

The discourse I'm seeing on Bluesky requiring age verification is so disappointing I keep reading "nostr fixes this" while ATProto itself is immune to these kinds of problems. Just use an alternative AppView, problem solved. BLUESKY IS MORE THAN JUST BLUESKY FFS

Wait a minute, since Node 24 supports TypeScript `erasableSyntaxOnly`, if a project targets Node 24+ it doesn't even need to transpile to JS + d.ts anymore does it? Same DX than with dist + src + source maps + declaration maps, except you only need to ship src?? Am I missing something?

The joy and process of creation is a core part of being alive and human, when you outsource it to a machine the result is hollow and meaningless. Existence is pointless, but not even bothering existing is even more pointless.