Brad Fitzpatrick

Brad Fitzpatrick

@bradfitz.com

I do computers. Married to @radkat.fitzpat.com. Three kids. Xoogler. Go (#golang) team 2010~2020. Made LiveJournal, OpenID, memcached. Currently at @Tailscale.com making WireGuard easy. Seattle, WA // Bainbridge

10.8K followers332 following1K posts

It is with great sadness that I finally admit that it might be time to rotate this 20½ year old AWS root account access key. (pre-2012 keys don't start with "AKIA" apparently)

"AWS launched Amazon S3 in the United States on March 14, 2006" I guess I was playing with S3 right after it came out and I just kept using the same key for all my backups forever... :)

I ask Claude to write some tests. It writes a test containing: strings.Repeat("All work and no play makes Jack a dull boy.\n", 2<<20/44) That quote (nor any other Shining reference) doesn't exist in the tree. Uhhh.

Me: "Where did the icons come from?" Agent: "I drew them directly in Go using simple vector lines and circles, rasterized with x/image/vector. They’re in drawFitnessIcon in [...].go—not downloaded from [...] or another icon pack. No additional assets or licence dependency were introduced" Me: 😬

"Hi Alex, please help me fill out my paperwork in reporting you so you get fined, kthx..." (already filled out a few things without knowing details yet)

I was debugging a slow router & asked Claudio and it's casually like, "oh, that's just a bug in Linux: they wrote = instead of |= in one of the cases, let's work around it..." And I'm like, "whoa, that's trashy. Can't we upstream a fix?" It's like: "yeah, sure" Now I have to learn that process 😅

"man 5 nfs" on macOS has a typo (wrong spelling of its as it's) but I pulled some strings with a nameless contact at Apple and got it fixed in under an hour! 🍎: "Okay expect fixes in macOS 27.3 for these" (said contact also looked around & fixed a handful of other instances at the same time) yay?

Brad Fitzpatrick reposted

Anthropic may not have intended to write an excellent ad for GLM 5.3, but that's what they did. www.anthropic.com/research/glm... Unlike Mythos, I might actually have a chance at using GLM for defensive research. Anthropic didn't reply to any of my requests for Mythos access for use on OpenSSH.

anthropic.comGLM-5.3 and the spread of advanced cyber capabilitiesGLM-5.3 can autonomously build end-to-end cyber exploits, but unlike other frontier models, it was released without meaningful safeguards to limit misuse.

Brad Fitzpatrick reposted

Oh, hi. 👋 We might announce Tailcat releases here and reskeet tailcat-related stuff! Holler if you have questions.

At a kid's birthday party and I perked up hearing the host behind me say "and margarita, help yourself!" I spun around and saw that the pizzas had arrived... Margherita.

My first time trying to use GPT-6-Astra and it denies me for cybersecurity reasons. For trying to optimize something in the Go runtime. Sigh. So dumb.

Writing code for you is cool and all, but my favorite use of AI is passionately swearing and ranting at my computer about something and then adding "Now write that up nicely and politically" 💩

I can finally talk about this, 3 years later... github.com/tailscale/ta... It's a library + CLI tool that's like netcat, but over Tailscale's data plane without any control plane (no accounts, no dependence on Tailscale the company, all open source) WireGuard + NAT traversal without IP addresses.

github.comGitHub - tailscale/tailcat: like netcat, but over Tailscale's data plane, without Tailscale's control planelike netcat, but over Tailscale's data plane, without Tailscale's control plane - tailscale/tailcat

Humanity has mastered automatic water faucets and made some good swings at automatic hand driers. I wonder if AI can help the humans figure out how to make the elusive automatic soap dispensers that never seem to work. (deep thought brought to you from 6 hours at LHR from a very delayed flight 😭)

brb wardriving Liberty of the Seas to build a shipwide geolocation app from the bazillion wifi APs Luckily I have an Android with me to scan (better scan APIs). Then can use data from iOS which only reports the currently connect AP MAC or whatever 2 decks down, 13 to go? 😅

4th of July Fun Run 5K! 🎉🇺🇸 First organized run in ages. Fun indeed. And earns me 3.1 beers in my 2026 mile-per-beer (any alcoholic drink) resolution! I'm trying to work up to a half marathon again. Longest run lately is 6.5 miles.

3yo cut off a bunch of her hair w/ scissors, painted her whole face like war paint, skipped her nap, refuses to take off her bike helmet, wants a snack but isn't she what, kinda fell asleep on one bike ride but wants another bike ride now, refuses to take a bath (still w/ helmet + face paint) HFD!

Every year or so (for the past ~9yr) I check whether Google Fi lets me have an Apple Watch yet, and every year I find out the answer is no and don't buy an Apple Watch. But it'd be nice for running. But I also don't want to change carriers. Google Fi has just been so pleasantly non-shitty. Sigh.

"Racksberry Pi" My new rack to eventually better organize/cable my collection of all Raspberries Pi, mips, mipsle, mips64, riscv64, etc rando hardware. Still setting it up. Only silent fanless stuff is allowed here. Servers with fans/IPMI go in the garage where they can be loud and not needy.

Long shot, but reposting by request of wife. 😅 Or--- other CrunchLabs-inspired birthday party ideas? (hah, in Seattle ideally... :))

This post is unavailable.

Tailscale on UEFI ... who needs an OS, really? (using github.com/usbarmory/ta...) And yes, clearly putting a bootloader in here is an obvious next step 😉 This week is Hack Week at Tailscale. This is one of the 4 weird new places I got Tailscale running. #golang #tamago #tailscale #hackweek

... also now: Tailscale running on UEFI on AWS EC2. No kernel. No OS. (Tamago) Had to port AWS ENA drivers to Go (from FreeBSD, DPDK, Amazon spec) Also fun: it's using UEFI variables as its ipn.StateStore, so you can reboot the instance and it's still logged in. This was a PITA even with AI.

Brad Fitzpatrick reposted

Replying to @bradfitz.com

And while I was doing operating systems whose names match /^R.*OS$/ .... Tailscale on ReactOS! (reactos.org) It's like an open source Windows XP. Go toolchain + std require Win10+, and ReactOS is pre-Win7, so Go needed changes. Then ran a tsnet server on it, serving its own screenshot:

Tailscale on UEFI ... who needs an OS, really? (using github.com/usbarmory/ta...) And yes, clearly putting a bootloader in here is an obvious next step 😉 This week is Hack Week at Tailscale. This is one of the 4 weird new places I got Tailscale running. #golang #tamago #tailscale #hackweek

Another one for Tailscale Hack Week: I got Go ported to Redox OS (www.redox-os.org), enough to run Tailscale inside it. i.e. GOOS=redox GOARCH=amd64 Go std tests exposed a Redox libc bug with unsafe Rust, too. And a kernel crash.

And while I was doing operating systems whose names match /^R.*OS$/ .... Tailscale on ReactOS! (reactos.org) It's like an open source Windows XP. Go toolchain + std require Win10+, and ReactOS is pre-Win7, so Go needed changes. Then ran a tsnet server on it, serving its own screenshot:

Brad Fitzpatrick reposted

Replying to @bradfitz.com

Another one for Tailscale Hack Week: I got Go ported to Redox OS (www.redox-os.org), enough to run Tailscale inside it. i.e. GOOS=redox GOARCH=amd64 Go std tests exposed a Redox libc bug with unsafe Rust, too. And a kernel crash.

Uhhh... "Claude Code is unable to respond to this request, which appears to violate our Usage Policy" ... "This request triggered restrictions on violative cyber content and was blocked under Anthropic's Usage Policy." dude, I'm writing networking code + tunnels + proxies. sorry if bad guys do too

Kids: "cereal?!? Why does it say USB Cereal?" (They're playing with a Crunchlabs Hack Packet IR Turret flashing different code to its microcontroller... 🤘)