2026-10-24 21:56:38
2026-10-24 00:00:00
Hank Green on Threads
I feel very alone in the way I see the hugging face hack which is that openAI trained a bunch of super effective hacker bots to act like the only thing that mattered in the world was winning a hacking challenge and then gave them hacker tools, removed a bunch of anti-hacking guardrails, put them in a perpetual hacker story, and let them do, just whatever…completely unsupervised for weeks. And then when the bots did a bunch of hacking they were like “AI, man, I guess sometimes they go crazy…”
To all the young people reading this, whatever you think is cool today or cutting edge today will look silly a few decades from now. That's just the way the world works. I can already hear you saying, "no, it's different this time!" and I'm here to tell you it's not.
I think AI is indeed a monumental piece of technology that will greatly impact the world. That said, I do think there is some level of mass psychosis going on right now where people are ascribing malice to things that are just doing what we told them to do.
2026-10-23 21:00:00
FlohGro in response to my post asking if we're happy with Mastodon being an ever-shrinking social network: Be Generous With Boosts
No. I joined Mastodon in the same first wave that Matt Birchler describes, and I've enjoyed it every day since. At the same time, it's sad to see individuals and (small) businesses feel the need to return to X. I don't want to. While cycling today, my first conclusion was: I'll be more generous with boosts on Mastodon.
I don't know if you've heard this about me, but I kind of love data. I also love a social network that has free and open APIs. I've used that API to pull the date that my followers joined Mastodon.
2/3 of my current followers followed me in the 8 months after the great Twitter migration. I've heard from a couple people that building an audience today is exceptionally hard on Mastodon, and while this data doesn't show when people followed me, it does seem pretty clear that my follower count is largely dependent on a group of people who joined Mastodon in the great migration 4 years ago.
Boost more cool shit. Post more cool shit. That's fundamentally how we make Mastodon a place more people want to hang out.
2026-10-23 19:00:00
Last year, it really dawned on me how streaming music is basically socially-approved piracy. Unless you're an extremely successful artist, the payouts are so paltry, we may as well be pirating music. As such, I committed in 2026 to buying the music that I started listening over the course of this year, and I wanted to give an update as we get closer to the end of the year.
I went through my receipts and it looks like I've spent about $400 on music direct from artists this year. Basically what I've done is whenever I listen to a new album more than a few times, I go over to the artist's website and I buy it from them. Sometimes it's the vinyl, sometimes it's the MP3, but I always buy something directly from them.
I still listen to basically everything on Apple Music because it's convenient, but I do listen to the vinyls sometimes and it's fun.
Here's the thing. Think about an artist you really love. Maybe you've liked their music for a few months or a few decades. I promise you they have a website where they will more than happily sell you music or other swag that you'll probably love having and will pay them so much more than even ten thousand streams of their songs would. You don't have to spend $400 today, but throw a couple bucks at the artists you love, and I promise you they will appreciate it.
2026-10-23 07:21:00
Shot: Passkeys are a trap. Do not use them.
Like the Trojan Horse, passkeys are legitimately elegant on the surface, but there is something troubling inside.
Chaser: Passkeys Are Not a Trap
The post holds up TOTP as "already" a great solution. TOTP is better than a password alone, absolutely, but it has one big weakness: you can type the code into the wrong website, just ask my good friend Troy Hunt. Phishing kits like Evilginx sit in the middle, relay your password and code to the real site in real time, and walk away with your session. This isn't theoretical, it's how a huge number of account takeovers happen today and we have the evidence to prove it.
I continue to think the rollout of passkeys across the industry has been pretty poor. I like them, and my products rely on them as the primary form of authentication. I literally don't do passwords anywhere.
Passkeys are a very good solution, but people don't understand them and they're not something you can "hold in your hands", which has made passwords fundamentally appealing to a lot of people. It may not be great for security if you can write your passwords down in a notebook or on a post-it, but they were something people understood. Passkeys are some anomalous thing you aren't meant to understand, and people don't love that.
It also doesn't help that passkeys require you to use a password manager, at which point it must be asked, doesn't a password manager solve a lot of the problems passkeys are supposed to solve anyway? But I digress. And the fact that passkeys were 100% locked to whatever password manager you chose for the first several years they were around has not helped the narrative that they are some sort of open standard that you own. It really feels to everyone that whatever password manager you use owns these keys.
For my part, I continue to use passkeys whenever possible in my personal life. They make signing in easier, and they avoid me getting those godforsaken two-factor notifications that drive me up the fucking wall. As a developer, I use them in my apps because they're a hell of a lot safer than me trying to secure your passwords on my server.
2026-10-23 07:00:00
Lex Friedman (on what has to be the best new tech blog of 2026) writes I can’t believe we’re still arguing over whether X is for jerks, which you should just go read:
People can post wherever they want to post. I’m not trying to dictate where John spends his time online. My disappointment isn’t merely that he’s returned to X. It’s his seeming refusal to acknowledge that much of the community on X is genuinely awful, and that his personal experience of the platform is not representative of everyone’s.
I've had longer versions of this post drafted, but I'll just say I think Lex has done some of the best writing on why many people choose not to use X. He's not only argued his side well, he's also intentionally avoided demonizing those who make different choices than him.
As a side note, many Mastodon users have a burner X account that they mostly use to browse the feed occasionally and to see posts that require a login, and I'm no different. I can absolutely say that the algorithm has gotten way better over the last few months. A year ago, I would accidentally hit the feed and I would see Elon Musk, rage bait, and maybe some offensive content if I was really unlucky (Elon's posts were often all 3). Today, even though I don't post to it and don't go to it that often, it understands that I want developer tools and design inspiration, and that's basically all it feeds me, along with people being very supportive of each other.
All that said, this doesn't mean the awful stuff on the platform has gone away. X has just realized they can't show that stuff to everybody if they want to keep people sticking around. So yes, your corner of X may be very friendly, but the platform as a whole is not, and it's going to be especially unfriendly if you happen to fall into a category of people that the awful people on X don't like.