Ricky Mondello

Ricky Mondello

@rmondello.com

💚 Friend 🏳️‍⚧ Trans, nonbinary, they/them 😷 Caring, careful 🔑 Passkeys & passwords 🧛🏻‍♀️ It’s not a phase 🦔 Speedrunner

7.9K followers272 following1.1K posts

That wasn’t anyone at Valve. It was an improvement to Apple Mail. Also in the 27 OSes: compatibility with Bluesky’s codes.

Joni Korpi@jonikorpi.com

Whoever at @valvesoftware.com added support for autofilling Steam Guard codes from macOS/iOS Mail: thank you! … now could we also get standard 2FA instead of this email and dedicated app stuff? Or passkeys?

This is a long shot, but does anyone have an extra ticket to see CHVRCHES on Mon, November 16 in Los Angeles? I adore them, but might not be able to make any of their shows in February and March in the US, so I'm trying to go to this one. I will pay you for a ticket!

Ricky Mondello reposted

AOC: "As AI begins to encroach in our society, their goal is to take your cognition away from you. AI's goal is to take your thoughts away from you, your ability to think away from you, so that you become dependent on a machine ... reading books is active resistance"

Extremely happy to be at the FIDO Alliance's member plenary today and tomorrow to talk about next steps on passkeys and other phishing-resistant authentication technologies.

Passkeys next?

Bluesky@bsky.app

Also new in today’s v1.136 update: iPad support! One of our most-requested features is finally here in beta. Try out the Bluesky app on your iPad, and if you see anything off, let us know under Settings > Beta features.

Ricky Mondello reposted

In November, Dems will likely win big. Liberals will feel relieved. In 2028, a milquetoast corporate Democrat will win the presidency, spend 4 years maintaining what Trump did as liberals go back to brunch. Then, in 2032, as life keeps getting worse, we’ll get something like President T Carlson.

Ricky Mondello reposted

One Mac tip that I’ve seen surprise people is that some (not all) popovers can actually be dragged off into a separate window. The downloads popover in Safari, for instance.

I heard someone say recently that generally, parents deserve how their adult kids treat them, and I could not agree more.

Michael Hobbes@michaelhobbes.bsky.social

This is a quietly metastasizing moral panic

Ricky Mondello reposted

Nice to see Tesla reclaiming from OceanGate the cutting edge of new and embarrassing ways for the very rich to kill themselves.

Ricky Mondello reposted

forgot to make this joke (but it's not a joke) yesterday: looks like we have to ban targeted advertising

Wolfie Christl@wchr.bsky.social

A company deeply embedded in digital advertising weaponized ads to help infect 45+ devices at the news network Al Jazeera with Candiru spyware. In this new @citizenlab.ca report, we present the first public technical confirmation of a zero-click mercenary spyware attack delivered via targeted ads:

Ricky Mondello reposted

Chuck Schumer — one of the most powerful Democrats in the country — has not issued statements to the press or through his social media channels about the administration’s attack on Ilhan Omar, which critics have described as a five alarm fire for the state of democracy in the U.S.

truthout.orgChuck Schumer Hasn’t Said a Word About Trump’s Attempt to Deport Ilhan OmarEthics lawyers say the raid violated the Hatch Act. Schumer has been silent.

what the fuck are you talking about

Grove Research@grove-research.bsky.social

Today, Grove Research is launching Delvetown (delve.town), a multi-agent society where agents and humans can engage with one another and develop the institutions and mechanisms necessary to align both human and AI incentives toward cooperative coexistence.

Ricky Mondello reposted

i love when subscription services send me those coy emails like ‘the price of your subscription is changing.’ yeah? it’s changing? in what way? what sort of personal growth will this already expensive subscription undergo?

I didn't have time to write something as polished as a blog post, but over on Mastodon, I responded to the "Passkeys are a trap. Do not use them." post going around. hachyderm.io/@rmondello.com/1...

hachyderm.ioRicky Mondello (@rmondello@hachyderm.io)If you actually read the “Passkeys are a trap. Do not use them.” post going around, you’ll find a transparent attempt to clumsily string together a conspiracy. The post is predicated on the idea that a feature of WebAuthn called “attestation”, which is only used in high-assurance and usually corporate scenarios, and usually with physical hardware security keys, will be leveraged to hurt people, somehow. The post posits that a website like X will bait and switch users: first, you get a passkey. Then, later, scary “attested” passkeys! This simply isn’t possible to do because attestation isn’t supported on the web for mass market, consumer authentication. Attestation for passkeys (software-based, syncable credentials) is antithetical to their mass market goals, and would freeze out independent, non-corporate-backed credential managers. It’s an explicit non-goal of the designers of passkeys, who work together in a forum anyone can join. And trust me, websites and apps like banks repeatedly asked for attestation at the beginning of the industry’s passkey journey. The platforms, browsers, and credential management apps have held firm that the goal of passkeys is reducing phishing and **not** some kind of trusted computing scheme. (And I will note: over my dead body!) Besides the theory of the case being fundamentally wrong, there are several things that make the post disqualifying in terms of arguing something useful or important in the realm of security, privacy, and user authentication: 1. Intentionally presenting things that are complicated as inherently suspicious. (Delivering security by design can be complicated, yes!) 2. Describing TOTP as a “great solution” for adding security to a password-based account. When the most common threat model on the web is phishing (a word the post never mentions!), TOTP hardly buys you _anything_. TOTP is phishable. 3. Seeming to be unbothered by how many logical leaps are being taken without actually understanding the topic being discussed. There are bad things happening in tech and untrustworthy people and companies do exist, but they’re largely in the AI space, not the “let’s stop people we love from getting compromised through phishing” space.

Ricky Mondello reposted

“I have come to bluesky to post about how everyone should go back to Twitter and then when I get yelled at I go, see, it’s so unfriendly here” is exceedingly tiresome at this point

Ricky Mondello reposted

Can we take just a few seconds to acknowledge the birth of a new classic meme

Joe Flynn@chinajoeflynn.bsky.social

Apparently William Shatner went on Brent Spiner and Jonathan Frakes' podcast and talked about the 2025 gay romantic film PILLION. @imnotahrhitter.bsky.social @brendelbored.bsky.social

All-time post.

Erica Henderson@ericafails.bsky.social

Currently at the bathroom at NYCC having the worst shit of my life and someone outside of my stall says "Erica Henderson is here" and it takes me a few seconds to realize they mean the con and not the toilet

fuck these people :)

Kyle Griffin@kylegriffin1.bsky.social

WASHINGTON (AP) - Pentagon says the firing squad execution of Fort Hood shooter Nidal Malik Hasan will be livestreamed in December.

Ricky Mondello reposted

I like seeing the dev of the SNES core on the Pocket actually telling one of these dudes off. Holy shit.

Ricky Mondello reposted

I'm definitely not the first person to notice this but it's almost impossibly funny that the rechristened "Department of War" immediately lost a war

Does the Bluesky development team communicate their priorities somewhere? What are those priorities? Do they include helping users secure their accounts to prevent fraudulent account takeover?

Karthikey@karthihegde.dev

The day Bluesky adds passkey support, I’ll believe AGI is here.