Vegan version works great too!
Double the olive oil
Double the salt
Sautee a bunch of garlic and onions (or any generic sofrito/masala)
This was my formula before I moved to Catalunya, but there, I learned that you can actually put *even more* oil and salt and it keeps getting better.
I'm excited to go to Brussels for Code & Compliance this week! I'll be in town Monday to Wednesday, so please DM me if you want to meet for a coffee or beer etc.
We're hiring a Technical Product Manager for Web Platform & Frameworks infrastructure at Bloomberg in New York.
You'll be working with me and @jonkuperman.com plus a whole bunch of folks excited by web technologies ✨
Feel free to DM with questions.
bloomberg.avature.net/careers/JobD...
Aki Rose Braun (@akiro.se) and Daniel Ari Ehrenberg Goldberg (@littledan.dev) talk about "The EU Cyber Resilience Act: what is it, and how does it affect web browsers?" at the Web Engines Hackfest 2026
www.youtube.com/watch?v=nVfN...
This is such a cool role on one of the greatest teams I've ever worked with. Feel free to message me if you have questions about Bloomberg or their infrastructure org.
bloomberg.avature.net/careers/JobD...
Bloomberg uses a lot of C++ & contributes to the standard as well as various industry conferences and libraries.
I’m looking for an experienced engineer to join a distributed systems team in New York working on our core Deployment Infrastructure for the Bloomberg Terminal 🗽
🧵
The past years have seen horrendous attacks towards trans people. We have a duty to protect the most vulnerable members of our communities.
There is no Haskell without the trans people who have shaped it through the years.
This June is a month of celebrations, but the struggle continues. ✊🏳️⚧️λ
I realize I sound like old man yelling at clouds but...
...in my day WE READ ALL THE CITATIONS BEFORE WE CITED THEM. That's how you GAIN THE KNOWLEDGE TO CITE THEM IN THE FIRST PLACE.
Signed: Someone who literally read two whole books on the color blue just to write a single 1000 word article.
I'm sorry, what? In writing my first monograph, I spent six weeks trying to track down a citation in TWO languages I didn't know. And good thing too, because the citation was wrong. That's scholarship. That's research. You know, the thing we're trained to do?!?
As @littledan.dev points out to me, the standards to back this up are still in development and there is a push to water them down; we should resist that
For April Fools, I told the ETSI CYBER EUSR rapporteur group on web browsers that the European Commission was giving us until April 15th to submit our final draft. Got them good! Well, some requests for clarification but actually no laughs… (Real timeline: edit through May, then more review stages)
Ve a aquest esdeveniment gratis aquest dijous a CTTC a Castelldefels per a sentir-me xerrar del Cyber Resilience Act i els navegadors web.
Ven a este evento gratis este jueves en CTTC en Castefa para escucharme charlar del Cyber Resilience Act y los navegadores web.
Come to this free event this Thursday in CTTC in Castelldefels (Barcelona) to hear me talk about the Cyber Resilience Act and web browsers.
Registra't aqui: cyberstand.eu/events/cra-s...
(Background music: Jennifer by Els Catarres)
JavaScript's date object has been tricky for years, but that is changing.
The NEW Temporal API brings,
🌍 Easily handle time zones
📆 Precise date math
🕒 Parse ISO strings without errors
⌛ Durations, date ranges, and more.
Start experimenting 👇
developer.mozilla.org/en-US/docs/...
I spoke at FOSDEM about the new European web browser security standard, under development in ETSI, as part of the Cyber Resilience Act. Video here: mirror.as35701.net/video.fosdem...
This standard is still in development, at labs.etsi.org/rep/stan4cra... , with weekly meetings freely accessible to open source developers, as well as ETSI members. Please get in touch with me if you want to be involved.
At ETSI, we're developing a new European standard about web browser security to support the Cyber Resilience Act. Come read the draft at labs.etsi.org/rep/stan4cra...
Be the first to file an issue! No one from outside ETSI administration has done so yet, so this is a prize you can claim. labs.etsi.org/rep/stan4cra...
In addition to development in GitLab, we have regular calls. The next one is tomorrow, Feb 3rd at 3 PM (CET). If you want to join this or a future call, please DM me and we can discuss how that works.
The Cyber Resilience Act mandates that commercial software handle vulnerabilities well. What does that mean exactly? The CRA names sound principles in Annex I Part II, but applying them in practice is another thing.
For this reason, there's an ongoing standardization effort translate these principles into more clear requirements to meet, to make it easier to demonstrate compliance.
The draft standard now entering a public review phase, so *we need your opinions, thoughts and analysis to improve it*. This article explains where things are, and how to get involved.
www.agoria.be/en/services/...
My FOSDEM talk:
The Cyber Resilience Act and web browsers
The Cyber Resilience Act defines web browsers as an important product requiring special attention to cybersecurity requirements. What does this mean? How can you participate in defining in what it means for a web browser to be secure?
RESCHEDULED: Please join Daniel Thompson-Yvetot and me on Tuesday the 27th, at 1 PM Central European Time for an interactive deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...
Please join @denjell.bsky.social and me on Thursday, 3:30 PM Central European Time for a deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...
Please join @denjell.bsky.social and me on Thursday, 3:30 PM Central European Time for a deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...
Please join @denjell.bsky.social and me on Thursday, 3:30 PM Central European Time for a deep dive into the draft standard for BROWSERS under the Cyber Resilience Act (CRA). www.stan4cra.eu/event-detail...
I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.
If you want to get involved, or have ideas for how to spread the word and get others involved, I’d love to be in touch. Please DM me here, or see other contact methods at littledan.dev
This work is co-funded by the EC and EFTA.
I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.
- In FOSDEM on January 31st in Brussels, in the “CRA in practice” dev room will be open Saturday from 15:00-19:00 in room UA2.114 (Baudoux) fosdem.org/2026/schedul...
I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.
If you’re interested in getting involved, there are a number of free-to-join, publicly streamed conferences coming up which discuss CRA and the “vertical” standards for particular high-risk products including web browsers:
I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.
We’re very interested in feedback. The easiest way to provide feedback is in a GitLab issue. File issues in labs.etsi.org/rep/stan4cra... . Anyone can sign up for an account and post issues. Please apply the template carefully to give the committee all it needs to address on your comment.
This effort isn’t about mandating new practices from an ivory tower, but rather collecting best practices deployed today and encouraging their consistent usage more broadly. We need browser engineers and web security experts to be involved to accurately document these security best practices.
I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.
ETSI (a European Standards Organization, like Ecma or W3C but specifically authorized to write standards referenced by EU law) is developing a standard for one way to demonstrate that a browser meets these additional cybersecurity requirements.
This browser security standard is in active development, with the work in progress published on ETSI’s website. You can find the current draft in docbox.etsi.org/CYBER/CYBER/... . Look for “browser” within that directory.
I’m getting involved in security standards for web browsers as part of my new role at CrabNebula! It’s important to ensure that the web’s security model is not compromised, as browser engines evolve, new browser derivatives become more popular, and brand new web engines emerge.
The European Union’s new law, the Cyber Resilience Act (CRA) requires all commercial software made available in Europe to meet essential cybersecurity requirements, and correctly calls out web browsers as a high-risk type of product with additional security requirements.
I take a deep dive into Interop 2025; why the project is there, how it picks what browser features to focus on each year, how well it's doing and what the big areas for this year are - a mix of cleaning up existing features and making sure new features arrive already interoperable
It’s concerning me how overconfident people who want Pierre Poilievre to lose are sounding right now.
It’s reminding me how sure people were that Trump would lose.
Dont let Trump win in Canada.
POLLS DON’T WIN ELECTIONS. TURNOUT DOES.
Don’t assume.
Vote.
#CanadaStrong#ElbowsUp#VoteCarney
If there is a sale of Chrome, the buyer should be required to spend at least 25% of their revenue on the core browser engine and standards development. Browsers are enormously profitable, but a new owner might try to run things for the short term.
American friends: here are some resources on how to seek asylum in Spain as a trans person under the Trump admin.
help.unhcr.org/spain/en/sol...
Even if your application is denied, if by then you have a legal residency permit (work, studies...), you can stay.
www.igualdad.gob.es/wp-content/u...
European Union Vulnerability Database (EUVD) by European Union Agency for Cybersecurity (ENISA) is valid Option as compensation of the MITRE #CVD.
We will see, if and how this will work to address the fashists way of disruption via #Project2025
I whish all the best for #EUVD ❤️
euvd.enisa.europa.eu
Everyone is going crazy trying to implement software supply chain security so that they aren’t deploying code with known vulnerabilities. But with the MITRE news, that might become helpfully scoped down:
You can’t ship any new vulnerabilities if there are no more CVEs!
Crazy but not so surprising given the context. Computer security will suffer from continued degradation of the CVE system.
Various EU laws mandate the creation of cybersecurity institutions that, in principle, should play a similar role. I hope that can work.