Neil

Neil

@neil.bsky.social

Senior Engineer at Synadia working on NATS | Yggdrasil Network developer | All-round network enthusiast | 🏳️‍🌈 North East, United Kingdom

472 followers95 following146 posts

Will someone PLEASE tell me why the Bluesky app is still asking me to verify my age with KWS instead of using the iOS Declared Age Range API

This aligns pretty much perfectly with my own thinking, and I'm increasingly wondering to what extent we should even treat LLM-generated security reports as private. If an LLM tells one person about it, it can tell any number of others. Is it better in that case just to fix in public on main ASAP?

Filippo Valsorda@filippo.abyssdomain.expert

We know vulnerability reports are not like ordinary issues. But why? It comes down to needing the scarce insight and temporary confidentiality to protect users. However, now that LLMs can find more or less the same bugs for everyone, none of that matters, and vuln reports are not special anymore.

@filippo.abyssdomain.expert I'm feeling especially sensitive about this because I've spent the whole of the last two weeks dealing day in day out with security reports from AI vuln hunters and I am absolutely and utterly mentally drained. The current standard for dealing with this isn't sustainable.

I believe it is important to use the term "identity verification" instead of "age verification". Every conversation about age verification is really about identity verification.

Service providers underestimate my stubbornness when it comes to age verification. No, I won't send you a scan of my ID. No, you can't scan my face through my webcam. What I will do happily is stop using your service instead.

As pained as I am to side with Farage, this is an extremely dangerous precedent. The UK Government would rather brand anyone who opposes the Online Safety Act as a predator than actually admit that the legislation is deeply and fundamentally flawed.

James Heale@jaheale.bsky.social

Extraordinary moment on Sky News as Peter Kyle hits out at criticism of the Online Safety Act: “If people like Jimmy Savile were alive today he’d be perpetrating his crimes online, and Nigel Farage is saying that he’s on their side" Told that Zia Yusuf will be responding shortly on the programme

Surreal seeing what Twitter/X has become. It's now nothing more than people making absurd claims followed by endless replies like "@grok is this true", "@grok explain", "@grok what's this post about". Basically an unchecked human-scale experiment of whether AI will fight disinformation or worsen it.

If anything highlights the sheer toxicity of the Hacker News crowd, it's a new Apple operating system announcement. Every year, commenters shit from a great height on each and every change under this delusional but predictable belief that talking something down enough makes them look smart.

Also the addition of Wi-Fi Aware to iOS 26 and iPadOS 26 was without fanfare but is extremely welcome either way, finally making it possible to build peer-to-peer Wi-Fi connections between iPhones/iPads and devices from different manufacturers. An enabler of true edge computing anywhere you are.

It’s extremely rare for me to install a beta operating system, but in the case of iPadOS 26, I had to try it out. The windowing and multitasking changes are a huge step up and, except for usual early beta bugs, it works pretty well. This is much closer to what the iPad should have been all along.

In a roundabout way, Apple unknowingly created a bastion of sanity in the computing world with iOS and iPadOS. They are both platforms where Electron/Tauri etc didn’t catch on, where the developer tooling and ecosystem encourages developers to build using non-web languages and native UI frameworks.

Apple’s decision to restrict browser rendering engines, for better or worse, probably had quite a lot to do with this, in the same way that refusing to implement Flash really kicked HTML5 into life. I can’t say I’m mad at the result though, the result has been thousands of high-quality native apps.

Neil reposted

Three Trail of Bits engineers audited core Go cryptography for a month and found only one low-sev security issue... in unsupported Go+BoringCrypto! 🍾 Years of efforts on testing, limiting complexity, safe APIs, and readability have paid off! ✨ Yes I am taking a victory lap. No I am not sorry. 🏆

go.devGo Cryptography Security AuditGo's cryptography libraries underwent an audit by Trail of Bits. Read more about the scope and results.

One of the best feelings is rediscovering old songs & albums that I used to love and finding they have been remastered into Dolby Atmos. *chef's kiss*

There’s a very good reason why a lot of social companies don’t publicise who their T&S people are: if they do, they end up with massive targets painted on them. They end up getting challenged and abused and it is relentless. I have such massive respect to anyone taking on this scale of problem.

Over the last few days, I have watched as the community has beaten down the Bluesky team over an admittedly unfortunate issue that they addressed in under an hour. The proportion of the negative response was really disappointing to see, as is unfortunately so common in all spheres of social media.

In case you're thinking about trying out Threads, it turns out that if you change your mind, you can't just delete your Threads account. You have to delete your entire Instagram with it. It is a literal trap.

I can't decide if the downfall of Twitter and Reddit will serve to actually elevate new platforms like Bluesky or Lemmy in a meaningful way, or whether people will simply scatter and social media as a concept will just start to collapse as a result

Today is sponsored by lemon iced tea because it's unbearably warm in my home office and Carly Rae Jepsen just because she's a ✨ star ✨, end of list

Update: There are baby great tits shouting from within the bird box! 🪺

Neil@neil.bsky.social

I have new neighbours! A pair of great tits are building a nest in the bird box in my garden and I am very excited about this. 🐣🪹

Neil reposted

Hey everyone! Want to let you know we’re not all going to be on bsky.social forever. We’ve been making progress towards federation, and will start off with a sandbox environment to prioritize safety and stability as we move towards distributing out control over the ecosystem.

Bluesky@bsky.app

We'll soon be launching a sandbox environment to begin the testing phase of federation for the AT Protocol with allow-listed servers. In advance of this launch, here are some technical details about our design decisions. https://blueskyweb.xyz/blog/5-5-2023-federation-architecture

If there’s one thing that can reliably upset me on any given day, it’s Apple’s total inability to make iCloud Safari bookmark syncing work reliably, or indeed at all