Arian van Putten

Arian van Putten

@arianvp.me

Working on banking infra at @mercury@twitter.com prev: @feeldco@twitter.com, @wire@twitter.com Opinions are my own and do not reflect that of my (past) employer(s)

487 followers93 following160 posts

I’m actually very tired of all the Americans having takings in Ceuta. Both on left and right (or whatever you call your weird ideologies over there) the takes are so off with so little respect of history that I can only conclude you’re all brainwashed to the max.

The problem with OIDC and SSO in general is that it only solves identifying the person but most clients all implement their own session management. This is is why I think an auth proxy is a way better strategy than configuring SSO on all your services as you have centralized session management

I guess I can talk about this now :D You should be able to sign in with Passkeys on mercury.com and the iOS app since today

Arian van Putten@arianvp.me

We just merged a feature for mercury.com that I've been working on (on and off) for the past 2 years and it's my first and only customer-facing feature I ever built. Can't wait to talk more about it once it rolls out to general public :D

The entshitification of GitHub is happening at record pace since they've replaced all their engineers with AI. The website literally is not usable anymore on slightly bad network connections. We need to abandon ship before we're all going down with it

Programmers uncovers inscriptions from an ancient civilization and they provide useful insights (User commenting on a thread that was created pre-AI boom)

OpenSSF is actively harmful to the open source ecosystem. Death by bureaucracy whilst actual core library maintainers with enormous impact on our supply chain security are unemployed, unpaid, and burning out.

1. Linux Torvalds writes git to develop linux 2. GitHub starts business on top of git 3. GitHub gets acquired by trillion-dollar MicroSoft 4. GitHub enshitifies so much you can't even browse the linux kernel on GitHub anymore Seriously???? I'm so done man.

Dear @github.com please for the love of... Fix the CSS for Github Actions when using matrix jobs and reusable worfklows How is this readable at all? And this is a trivial matrix. I'm not doing anything complicated

10x engineers from DOGE have reduced the amount of CVEs in government infrastructure by 1000%. This is an amazing accomplishment that could only have been achieved with the brilliance of Elon Musk

Hey @rmondello.com when I only implement conditional mediation for passkeys on Safari; there doesn't seem to be a button for people to use their Security Keys . In Chrome they do give this option when pressing "Use nearby device". Is this expected? It feels like a bug.

View full thread

Firefox works too. Albeit with more clicks as they use Apple's AuthenticationServices more and we need to click through more modals to find the Security Key option.

Hey @rmondello.com when I only implement conditional mediation for passkeys on Safari; there doesn't seem to be a button for people to use their Security Keys . In Chrome they do give this option when pressing "Use nearby device". Is this expected? It feels like a bug.

Both Chrome and Firefox **do** allow security keys in this scenario. I'm trying to ship Passkeys at mercury.com and UX research shows that a dedicated "Sign in with Passkeys" button is confusing to users but we also want to keep support for Yubikeys for power-users. Safari is the odd one out.

One thing im excited about with these kind of minimal“everything embedded in a UKI” distros like frood, particleos, and Bocaditos, is that you can precompute PCR values during build time and use TPM attestation as your bottom turtle to bootstrap trust in your network

Filippo Valsorda@filippo.abyssdomain.expert

Very grateful to past me right now. $ ./frood build Building image frood.2025041301.efi --- FAIL: TestExecutable (0.00s) perms_test.go:34: File "/etc/monitor.d/zfs-get.sh" is not executable FAIL FAIL filippo[.]io/mostly-harmless/frood/tests 0.295s Wish we had a large reusable library of these.

Heck you don’t even need a centralized CA per se. Can just use attested TLS extension of tls 1.3 when. Clients connecting to control plane build control plane image from source and calculate PCRs then ask control plane to send a quote and compare before connecting.

After hunting down obscure heap corruption bugs that only happen when using certain libraries together in production this week I am reminded of the following quote: "Follow these two simple rules to run stable production systems: 1. Never update your system 2. Always keep your system up to date "

Hope it goes better than NixOS. Moving to Discourse was a terrible idea. Works too much like social media and running social media is hard.

Chris Short@chrisshort.net

Ubuntu Developers Discuss Abandoning Mailing Lists For Discourse #SuggestedRead #devopsish www.phoronix.com/new...

TFW you're Security Observability SaaS that boasts CCPA and GDPR compliance as main selling point on your website; but your sales person cold-calls me at night on my personal, private number that I don't share publicly and then hangs up mid-sentence when I ask where she got the number.

Like the only way they could've obtained this information is from an illegal data dump (the phone number has been leaked on the dark-web before). I don't think you can use that data legally to enhance your SalesForce database lmao.

Them: We want an accurate SBOM with all the build time dependencies. It has to be *accurate* Me: *Emails 10 megabytes of .drv files* Them: It's too big! How can we deduce anything from this. Me: I'm sorry for using the only package manager that's actually honest about this.

When talking about Free Speech I think the chokehold US has on EU culturally isn't talked enough about in US "pro-freedom" circles. Ya'll basically algorithmically killed and demonetized entire internet cultures out of existence because it didn't fit your definition of culture and correct language

The standardization of language (only English) and speech (no cursing; no "controversial" topics) basically killed every European country's scene. I find it ironic that right-wing circles are yelling about lack of "free speech" in EU whilst your advertising industry literally silenced a continent