795 Followers
216 Following
2.3K Posts
Senior LDAP/IDM Tech Debt Collector
@SUSE. Supermarket Thought Leader. Author of Kanidm, concread and webauthn-rs. he/him
Imagine if you payed someone to build you a house and they just put up the basic structure and said they'd come back every 6 months to add a window or paint a wall. This is how software companies operate now and somehow keep getting away with it

RE: https://social.treehouse.systems/@wwahammy/116264430375745593

US government in 1996: strong encryption is a munition and you can go to prison for years if you export

FOSS engineers: hey so only use this if you're in the US but we'll give instructions for how to do it otherwise 😉

California in 2026: we're passing a law that allows the AG to sue OS providers in civil court if they don't implement age verification in order to restrict Apple, Google, Facebook and the worst companies in the world.

FOSS Engineers: OMG THEY MIGHT COME AFTER OUR LINUX LAPTOP VENDORS WHO HAVE LIKE 3 TOTAL CUSTOMERS WE SHOULD HAVE IMPLEMENTED AGE GATING YESTERDAY I PROMISE WE'RE NOT CHALLENGING YOUR AUTHORITY GOVERNOR NEWSOM

The laws of distributed systems are very commendable, but the only law that applies in Australia is the law of Australia.
https://social.treehouse.systems/@kouhai/116260046930683625
kouhai, of the health issues (@[email protected])

Consistency! Australia! Partition tolerance! These are the three legs of distributed systems!

Treehouse Mastodon

TIL about "kanidm" from @firstyear (I must have over read it in the bio):

A small IDM solution that seems to be a perfect fit for small organisations:
- It seems small and simple enough to deploy easily
- Provides identities for Unix systems (Kerberos, SSH keys) and web (OpenID Connect).

At first glance, the documentation looks well written, too.

Oh, and finally there is a proper separation for the username, display name and legal name, where the latter is not readable by default, and the display name can be changed at anytime.

https://github.com/kanidm/kanidm

GitHub - kanidm/kanidm: Kanidm: A simple, secure, and fast identity management platform

Kanidm: A simple, secure, and fast identity management platform - kanidm/kanidm

GitHub
Consistency! Australia! Partition tolerance! These are the three legs of distributed systems!
It's been a monumental effort, but we are finally OpenSSL free in the whole Kanidm stack - compact_jwt, hsm/tpm, webauthn-rs, kerberos/libkrimes and today Kanidm itself.
Multiple societies throughout history all came to the conclusion that charging interest on loans was immoral. Punishable by death in some cases. Now we've all done a collective 180 and decided it's the glue holding the world economy together? I think we got it right first time.

Call for Locks!

Our lock-picking crew are having some shipping dramas and may not have the usual gear in Brisbane in time for the workshops on Saturday!

If anyone is a member of a lock lock-sport club that may be able to come along with some gear and help out the crew (who are arriving with prizes and enthusiasm!) please reach out to us!

Droppy & The Sleuth

Researchers from Cornell University have developed what they call "the Corporate Bullshit Receptivity Scale," a tool designed to measure how impressed people are by business school-style jargon that sounds strategic but says very little.

The findings, described in a recent study, suggest that employees who rate this sort of language as insightful are more likely to struggle with analytical thinking and workplace decision-making.

https://www.theregister.com/2026/03/15/corporate_jargon_research/

#Bullshit #IntelligenceTest

Those who 'circle back' and 'synergize' also tend to be crap at their jobs

: Cornell Uni researchers pivot to pluck low-hanging fruit to optimize bandwidth

The Register

In France, we don't say "vibe-coded contribution" but "merde request" and I think it's beautiful 💩

#AISlop #ChIAsse #NoAISlop