Tessera
Folgen

Matthew Miller

@iamkale.millerti.me

#passkeys expert. Creator of SimpleWebAuthn, maintainer of py_webauthn, steward of webauthn.io. Video games and 3D printing fill my downtime. Oh and I blog sometimes over at blog.millerti.me 😎 My opinions are my own.

370 Posts1558 Follower183 Folgt
Tim Cappalli@timcappalli.me · 2w ago

Just posted the slides and audio recording from my session with @iamkale.millerti.me from #Identiverse 2026 which talked through some of the biggest misconceptions about #passkeys throughout 2025. blog.timcappalli.me/p/preso-idv26/

The Passkey Reality Check: Addressing 2025's Biggest Misconceptions @ Identiverse 2026

Another session on passkeys? Well we're entering year four, and passkeys are available to billions of users. However, widespread availability hasn't necessarily led to widespread understanding. From c...

blog.timcappalli.me

Matthew Miller@iamkale.millerti.me · 4mo ago

I'd probably cancel my Claude Pro if they remove Code from the $20 tier, I wasn't using it enough to run into limits and I can't see myself ever using it enough personally to upgrade to the Max 5x plan.

Simon Willison@simonwillison.net · 4mo ago

This is so confusing. Did Anthropic really just drop Claude Code from their $20/month plan? Why would they do that through a pricing page update without making a proper announcement? Plus, $20/month still gets you Cowork, which is really just Claude Code wearing a non-threatening hat!

Screenshot of the Claude pricing page - Claude Code is now listed for just Max 5x and Max 20x, but Claude Cowork is also listed for Pro
Matthew Miller@iamkale.millerti.me · 9mo ago

I had to make a "Politics" list and move some follows over to it because my Following timeline has not been good for my mental health. To the point my wife is concerned that I seem tired or depressed all the time...this also happened to me in 2017. Gotta dial it back like I had to back then too 🫠

Matthew Miller@iamkale.millerti.me · 9mo ago

Holy smokes, Affinity Photo, Designer, and Publisher are all now just a single app, and it's FREE? This is seriously great news, it might get me to switch back from Pixelmator Pro 🤔

Mike Hindle@mikehindle.uk · 9mo ago

Yessssssssssss! I had a sneaking feeling they may do this 🙌🏻 Affinity (now all three apps in one) is FREE 🤑 No restrictions, other than the AI tools (that nobody wants) only being available to Canva subscribers. www.affinity.studio #photography #art #design #illustration

The landing page for Affinity, showing it's now free of charge.
Tim Cappalli@timcappalli.me · 10mo ago

At Authenticate, @iamkale.millerti.me, @nishantkaushik.com, and I decided to mix up the usual "Passkeys 101" and cover common misconceptions about #passkeys. Topics around cloud sync, phishing resistance, workforce usage, and concerns about vendor lock in. blog.timcappalli.me/p/preso-auth...

Passkey Mythbusters: Short Takes on Common Misunderstandings @ Authenticate 2025

Passkeys promise to replace passwords with a simpler, more secure login experience, but myths and confusion still hold many organizations back. This session at Authenticate 2025 tacklea some commonly ...

blog.timcappalli.me

matt@stavola.xyz · 10mo ago

The more I play with this, the more I love it. Even if I'm the only one using mlf.lol to generate #atproto lexicons, it has been worth it. It really hits the pleasure centers of my brain just right.

A screenshot of the mlf.lol playground, displaying an example of ATProto lexicon generation from a source MLF file. The MLF source uses inline types, def types, tokens, records, constraints, references, and references to a "standard library." Thematically, the source refers to posters on an old school forum.
Don Moynihan@donmoyn.bsky.social · 10mo ago

RIFs can’t be done without agency leadership so this is RFK Jr extending his purge of CDC scientists to help Vought’s shutdown agenda. Genuine public health risks created by aggrieved men.

Sheryl Gay Stolberg@sherylnyt.bsky.social · 10mo ago

BREAKING: Friday night massacre underway at CDC. Doznes of "disease detectives," high-level scientists, entire Washington staff and editors of the MMWR (Morbidity and Mortality Weekly Report) have all been RIFed and received the following notice:

ProPublica@propublica.org · 10mo ago

Heather Honey, a high-profile denier of Donald Trump’s loss in the 2020 election, was appointed to a senior DHS position in which she’ll help oversee election security. “DHS now appears poised to become a primary amplifier of false election conspiracies pushed by our enemies,” one expert said.

She Pushed to Overturn Trump’s Loss in the 2020 Election. Now She’ll Help Oversee U.S. Election Security.

Heather Honey has been appointed to a senior position in the Department of Homeland Security. State election officials and voting experts are concerned.

propublica.org

Jake Gold@jacob.gold · 10mo ago

A ~$6/mo VM rented from any decent cloud provider will (typically) run a small private PDS for years with uptime approaching 100%. K.I.S.S. github.com/bluesky-soci...

GitHub - bluesky-social/pds: Bluesky PDS (Personal Data Server) container image, compose file, and documentation

Bluesky PDS (Personal Data Server) container image, compose file, and documentation - bluesky-social/pds

github.com

Anirudh Oppiliappan@anirudh.fi · 10mo ago

actually low key considering migrating back to bsky hosted pds because i'm soooo afraid this longhorn k3s setup will shit the bed (and it has once; wasn't pretty)

Matthew Miller@iamkale.millerti.me · 10mo ago

SimpleWebAuthn packages now feature build transparency logs on NPM and JSR! I achieved this by publishing from GitHub Actions workflows now instead of from my local machine. Check out the release notes for more info: github.com/MasterKale/S...

Release v13.2.2 · MasterKale/SimpleWebAuthn

Changes [browser] [server] In the spirit of contributing to increased software supply chain transparency, both libraries are now published via GitHub Actions workflows. Package listings on JSR and...

github.com

Matthew Miller@iamkale.millerti.me · 10mo ago

This is why the changes to sideloading rules on Android (sideloaded apps must now be signed by a Google-Play-registered developer account) sucks. It means not even Android is resistant now to the government applying pressure on Google to take down apps it doesn't like 😫

Alejandra Caraballo@esqueer.net · 10mo ago

This was done at the direction of Pam Bondi. The US government is now dictating what apps you can have on your phone. The underlying threat here is if Apple didn't comply, they'd slap billions in tariffs on Apple products.

Alt text: Screenshot of a Fox News Digital article reporting that Apple removed the ICEBlock tracking app from its App Store after the Department of Justice raised safety concerns. The article states DOJ officials, under Attorney General Pam Bondi, asked Apple to take down the app, claiming it endangered law enforcement officers and shielded illegal immigrants. Bondi confirmed the removal in a statement, saying ICEBlock put ICE agents at risk and emphasized DOJ’s commitment to protecting federal officers.