Filippo Valsorda

filippo.abyssdomain.expert

19 August 2026 11:56

I am mostly done implementing crypto/passkey, but now I need YOUR help collecting real-world traces for its test suite! Please go to help-test-crypto-passkey.exe.xyz and click the buttons. It should take 1–3 minutes. 𝘌𝘴𝘱𝘦𝘤𝘪𝘢𝘭𝘭𝘺 if you have some unusual Linux-on-the-desktop xkcd 1987 passkey setup.

bunny.net

bunny.net

30 July 2026 18:52

We just added a small but powerful feature to Shield, and it's available on every plan. You can now allow, block, or ignore any verified bot, individually or by category. Docs: https://docs.bunny.net/shield/verified-bots Changelog: https://docs.bunny.net/changelog#2026-07-30

Claes de Vreese

claesdevreese.bsky.social

14 May 2026 13:35

German political parties leave X: should other European politicians follow? Yes. cybernews.com/tech/erman-p...

Filippo Valsorda

filippo.abyssdomain.expert

14 May 2026 13:30

Alright, wishlist for a GitHub replacement. Obvious: - actually read-only CI jobs - CI configs safer than interpolated shell in YAML - git pushes don’t just shell out under user git (!!) - uptime?? Less obvious: - git pushes tlog - unprivileged agent sub-accounts - decent vuln scanner

Filippo Valsorda

filippo.abyssdomain.expert

14 May 2026 13:30

Have we already moved on from the fact that the infrastructure we entrusted with basically all software supply chain security had a staggeringly simple unmitigated RCE two weeks ago? Did GitHub publish a longer post-mortem with deep root cause analysis and long-term mitigations? Will they?