800 Followers
220 Following
2.4K Posts
Senior LDAP/IDM Tech Debt Collector
@SUSE. Supermarket Thought Leader. Author of Kanidm, concread and webauthn-rs. he/him
For a few months I thought I was going deaf in my left ear - turns out it's just that when my cat it's on his desk-bed, his floof absorbs a lot of sound. 7kg of sound proofing I guess.
IMPORTANT! We have released Kanidm v1.9.3 which contains six security fixes, two rated HIGH for remote unauthenticated denial of service. Please upgrade immediately! https://github.com/kanidm/kanidm/releases/tag/v1.9.3
Release v1.9.3 · kanidm/kanidm

2026-04-30 - Kanidm 1.9.3 Patch (Security: HIGH) This update resolves 6 security issues, 2 of which allow unauthenticated remote Denial of Service. We have no evidence that these are in active expl...

GitHub
Went to a talk awhile ago that was looking into the total environmental impact of sites and how to reduce, from client side JavaScript usage, data transfer and backend processing. Kind of wild how that concept is just so far away now
IMPORTANT - In the coming days we will be releasing an important security update for Kanidm which will resolve six issues. Two of these advisories are rated HIGH. You should be ready to upgrade to 1.9.3 / 1.10.0 asap once they are released.
IMPORTANT - In the coming days we will be releasing an important security update for Kanidm which will resolve six issues. Two of these advisories are rated HIGH. You should be ready to upgrade to 1.9.3 / 1.10.0 asap once they are released.

RE: https://gamerstavern.online/@jamie/116392126448903323

This lady may be one of the best vocalists I've heard in a long time god damn.

A friend just asked me a few more questions about the reasons I decided to try and move to *BSD, given that these systems are, generally, far less polished than Linux, and do not support as many packages/programs. I vaguely gestured at the situatuion with genAI/LLM uprooting the trust in the Linux kernel, core system components and so on. She wasn't convinced; AI is everywhere these days, and avoiding it is a lot like trying to avoid other unethical things: very hard and probably will affect your quality of life.

And I get it. The situation is actually quite similar with "just install Linux": running Windows is bad, and for many people, moving to Linux (or BSD) is impossible. But there are _also_ many people who don't know they could run Linux - sometimes with more comfort than their obsolete and buggy Windows.

So I want to try and run *BSD and share how it feels, and maybe this way I could remove a few roadblocks for others. Ultimately, I just want to feel better about my computing habits.

Gawd sometimes I hate passkeys.

I have to deal with some fairly old people - people who have lost much of their vision and who have never been particularly technically minded.

The modern race-to-lock-everything has moved a lot of services (such as outlook) to move to passkeys.

That's nice - unless one is trying to deal with problems for an old person who is 800 miles away.

It appears that many of these services treat having a passkey as a one-way ratchet. Once someone (me) has set up a passkey (limited to my computer and phone) then the service switches to demand a passkey rather than the password to get in - but the old person's phone/computer does not have the passkey nor knows how to use it even if they did.

Our present Internet - largely programmed by young people with tech knowledge and good eyesight - is becoming increasingly hard to use by older people while things (like medical services) increase security that these people do not know how to use and can't be managed remotely.

Passkeys are just sparkling TLS client certs
Actually, looking into it a bit more, I think Kanidm and OpenLDAP might be the only two large opensource IDP's left that don't accept AI slop.