Patrick O'Doherty

380 Followers
298 Following
1,059 Posts
Irishman in San Francisco. Amateur photographer, musician, artist and electronics tinkerer. Professional security computer comrade. Security @ Tailscale. Only together can we defeat the computers.
pronounshe/him
locationSan Francisco, California
bloghttps://patrickod.com
githubhttps://github.com/patrickod
instagramhttps://www.instagram.com/podoherty/
yeah github is the ai powered... hold up the page isn't loading ... yeah so github is ... yeah i'm just going to open this in a new tab, there we go yeah so github is the world's leading ai powered platform for collaboration, and yeah i think the page has almost loaded now, one sec
shot, chaser
As computer keyboards get smaller and smaller, I can't help thinking, that eventually we'll reach a point of no return
was rummaging through my bookshelves for something and out pops a hand drawn postcard sent by a since deceased close friend of mine from secondary school. I thought I had lost it and I'm so glad that it is found. A perfect time capsule of their amazing presence and art in the world. We miss you Andy.

Yep. I saved hundreds or even thousands of dollars a month just from switching from Substack to self-hosted Ghost.

https://digiday.com/media/former-substack-creators-say-theyre-earning-more-on-new-platforms-that-offer-larger-shares-of-subscription-revenue/

I pay a roughly flat $85/month now (~$75 for mailsending, $10 for hosting), vs. 10% of all my subscription income.

Here’s some napkin math for how expensive Substack is compared to its competitors, assuming that roughly 7% of all subscribers will pay for their subscriptions, and that subscriptions cost $5/month.

Former Substack creators say they’re earning more on new platforms that offer larger shares of subscription revenue

Former Substack writers who exited the platform in early 2024 are making more money on Beehiiv and Ghost thanks to their fixed pricing models.

Digiday
Could someone please help me understand why dpop (where every request requires its own signature) is preferable to mTLS (where multiple requests can be made in one authenticated channel) other than being able to implement it without having to engage with browser authors?
Everyone should be so lucky as to have a colleague as wonderful as @creachadair whose code reviews are so educational and kind and have the rarest property of making me actually want to write _more_ software.
Sufficient time has passed and I'm excited to share a demo and details of a CSRF vulnerability that I discovered in the popular gorilla/csrf library that has been present since its creation 😲 https://patrickod.com/csrf
gorilla/csrf CSRF vulnerability demo

A demonstration of a novel CSRF vulnerability in the gorilla/csrf Go library.

Think we’ve forgotten about the time that Elon was booed so badly by fans of Dave Chapelle (of all people) that he locked himself in his office and Twitter employees considered calling the cops to do a wellness check.

What I’m saying is we can go harder.

https://www.mercurynews.com/2023/11/08/elon-musk-almost-needed-sfpd-wellness-check-after-breakdown-getting-booed-at-dave-chappelle-show/

Elon Musk almost needed SFPD wellness check after ‘breakdown,’ getting booed at Dave Chappelle show

‘He got to a point where he locked himself in his office, was so upset’ that Twitter employees feared he would hurt himself, the author of a new book says about the billionaire.

The Mercury News

Sometimes when I talk to homeless people in the Bay Area, I ask them how they became homeless.

Sometimes, they say that they lost their homes in a wildfire.

More painful than seeing people lose their homes in a forest fire, is watching them lose their humanity, as our empathy for them evaporates.

https://www.redding.com/story/news/2019/06/11/annual-count-helps-identify-some-origins-homelessness/1409772001/

In the immediate days after someone loses their home in a wildfire, our talk is full of empathy.

But as days turn to weeks and months, we stop caring *why* someone doesn't have a home, and only care *that* they don't have a home.

We start planning to throw away their remaining possessions.

https://www.calhealthreport.org/2022/08/03/as-wildfires-grow-so-does-californias-housing-and-homelessness-crisis-here-are-some-solutions/

Homeless people aren't different people than us. They are us.

Many homeless people just experienced a sequence of unfortunate events that led them to this place.

"No! They're drug addicts! They did this to themselves!"🤡

Again, ask people with addiction how they became addicted.

They'll tell you

https://www.sfcityattorney.org/2023/05/17/san-francisco-city-attorney-announces-230-million-settlement-with-walgreens-after-victory-in-opioid-litigation/

There's a pervasive myth that people still believe about California homeless: that homeless people "come to California for the weather."

That's a lie that fortunate people 🙋🏿‍♂️ tell ourselves.

California homeless are almost all California residents (90%) who just had a bunch of bad luck in a row.

https://homelessness.ucsf.edu/our-impact/studies/california-statewide-study-people-experiencing-homelessness

Anyway, I skipped the "burrito taxi" discourse, AKA the meal delivery discourse.

Because if tomorrow you lost your home and your job to wildfire, and only had your car and a few hastily gathered possessions, and you needed to earn some money?

Your car would become a burrito taxi too.

I don't care if you know how to cook food for yourself for cheap, or if you treat yourself by having burritos delivered to your house.

I care that we live in a country so cruel, that some people deliver food in the cars that they live in, while those receiving the food don't even know or care.

Updated count shows homelessness rose in Shasta County and the Carr Fire affected some

The annual count gives a one-day glimpse at who's living in shelters or on the street. Nearly 40 people said they'd been impacted by the Carr Fire.

Record Searchlight