Coda

Coda

@codahale.com

Standing athwart history, yelling Yes Daddy

816 followers151 following2.9K posts

Don’t ask me “Flávio, why’d you bitch out? Flávio, why’d you run away? Why did you flee to the US of A?” Stop and think it over Try to put yourself in my unique position If I dodge the stockade out in Miami-Dade It's a family tradition

“Where’s the volta?” during the code review

Computational Cosmetologist@dferrer.bsky.social

we use sonnet for commit messages no, not the model. 14 lines, with rhyme scheme and meter. no more empty claude speak. evocative imagery. erudite aura.

Hilarious to read someone characterizing the exaggeration of the severity of a discovered vulnerability as evidence of the malfeasance of AI companies and not, like, the established practice of the security industry for several decades now

“AI companies want you to be scared” or maybe spicy autocorrect has understood the assignment in ways which might not make us feel good about ourselves

Thanks for flagging that “yes, it’s available” response to a fucking Craigslist ghost as requiring a follow-up, Apple Mail, but I don’t think it matters

Mountain bikes are so fuckin’ good, goddamn

Social media loves talking about how everything is getting worse. But what’s something that you’ve seen get _better_ in your lifetime?

*dictating to laptop* Subject Liberty Biberty’s dentition is homodont, thus excluding it from Synapsida despite the superficial appearance of its pseudofur. Tooth morphology suggestive of an omnivore, but forward-facing, convergent orbits seem optimized for stereopsis. A hunter? But of what prey?

SCP-8716: The Record A phonographic recording of Hank Williams’s “Hey, Good Lookin’” in which the chorus is “Hey, good-looking / Whatcha got cooking? / How's about lettin’ me touch one of your boobs”. Unknown provenance.

Y’all mad at 4 because it’s not ideologically convenient for you to be mad at 31 zeros, wake up

It’s fucking wild to me that, in the case of Did Elizabeth Holmes Mean To Do A Fraud Or Not, folks are irretrievably horny for skating right past the entire evidentiary body of the case against her and going straight to just, like, trying to guess her vibe based on some video of her

You got to know how to hold em Know how to fold em Know where to put em When the laundry’s done

“We need to stay on X and out-argue the fascists” feels like the social media equivalent of Naruto-running into Area 51

The cool thing about Trump panicking about midterm gas prices and dropping sanctions on Russia is that gas prices are high because he started a war with Iran and Russia is a major supplier for Iran, so they got him to pay money to get kicked in the balls

In the backrooms, fleeing from a grotesque caricature of myself, but it’s easy because my Heelys are real and his are all lumpy and weird

*lugging around 120kg of compressed air and 40kg of pressure vessels and 200kg of multi-stage compressor* ok gimme a couple of hours for launch control to charge *track official sprints towards me waving a black flag, I can read “fuck no” on their lips through the gold-tinted windshield* but whyyyyy

Coda reposted

Replying to @ceej.online

engaging kickflip mode to pass a school bus and launching myself upside down into a freeway overpass

Coda reposted

I didn't have time to write something as polished as a blog post, but over on Mastodon, I responded to the "Passkeys are a trap. Do not use them." post going around. hachyderm.io/@rmondello.com/1...

hachyderm.ioRicky Mondello (@rmondello@hachyderm.io)If you actually read the “Passkeys are a trap. Do not use them.” post going around, you’ll find a transparent attempt to clumsily string together a conspiracy. The post is predicated on the idea that a feature of WebAuthn called “attestation”, which is only used in high-assurance and usually corporate scenarios, and usually with physical hardware security keys, will be leveraged to hurt people, somehow. The post posits that a website like X will bait and switch users: first, you get a passkey. Then, later, scary “attested” passkeys! This simply isn’t possible to do because attestation isn’t supported on the web for mass market, consumer authentication. Attestation for passkeys (software-based, syncable credentials) is antithetical to their mass market goals, and would freeze out independent, non-corporate-backed credential managers. It’s an explicit non-goal of the designers of passkeys, who work together in a forum anyone can join. And trust me, websites and apps like banks repeatedly asked for attestation at the beginning of the industry’s passkey journey. The platforms, browsers, and credential management apps have held firm that the goal of passkeys is reducing phishing and **not** some kind of trusted computing scheme. (And I will note: over my dead body!) Besides the theory of the case being fundamentally wrong, there are several things that make the post disqualifying in terms of arguing something useful or important in the realm of security, privacy, and user authentication: 1. Intentionally presenting things that are complicated as inherently suspicious. (Delivering security by design can be complicated, yes!) 2. Describing TOTP as a “great solution” for adding security to a password-based account. When the most common threat model on the web is phishing (a word the post never mentions!), TOTP hardly buys you _anything_. TOTP is phishable. 3. Seeming to be unbothered by how many logical leaps are being taken without actually understanding the topic being discussed. There are bad things happening in tech and untrustworthy people and companies do exist, but they’re largely in the AI space, not the “let’s stop people we love from getting compromised through phishing” space.

Finished this book last night and today I’ve been doing a lot of staring into the middle distance

Jeff VanderMeer@jeffvandermeer.bsky.social

Annihilation always makes Halloween lists, so I thought I'd do a thread of creepy reads. Starting today with a flat-out modern masterpiece, Max Lury's No Ghosts. Thoroughly contemporary and disturbing grounded in deep characterization, and, in part, outdoing Back Rooms while also its own thing. 1

I just realized that the hideous, low-effort AI aesthetic which has pervaded flyers and YouTube thumbnails is exactly the long-standing aesthetic of negative political advertising mailers.

To the attractive young man who made eye contact with me at the grocery store, gave me a charming smile, and then instantly looked disappointed: I’m sorry but I’m absolutely taking the compliment.

Why is my Apple TV defaulting every F1 race to the Sergio Perez camera feed?

New slimdan album out, if anyone wants to listen to some unapologetically earnest and sweet music

“FBI says it stopped a Mall of America terror attack by a teen after agents sold him an assault rifle” “The 18-year-old had been on the FBI's radar since December 2024” Soooo they groomed a 16 year old kid to be a Truman Show jihadi?

Just saw a picture of DHH today (whoops) and dude looks like Russell Brand and Ricky Gervais had a kid. RIP his 2010s “ugliest member of a boy band” look I guess

Brother, have you not heard the song? The men sing it in the mines as they trade their lives for the future. The women sing it in the crèches as they trade theirs. We are not of the people, Brother, but we must be among them. Your Spotify algorithm has turned from the Volk; you must be corrected.

I let my kid watch one (1) Miyazaki film and now she’s eating with chopsticks and demanding rice

I just went into my garage and turned on the light and Tilly Norwood was in there and hissed at me and then I had to open the garage door and use a broom to get her out of there

SE Gyges@segyges.bsky.social

I apologize for my earlier article, which did not undergo proper legal review, and will not be able to be present on social media for a while.

I know y’all are clowning on Harry Potter and the Methods of Rationality but there’s a plot arc where Harry is trying to manifest his patronus and it’s a surprisingly touching and emotional scene when he finally does and it’s a brilliant, shining waifu pillow