Patrick O'Doherty

380 Followers
298 Following
1,060 Posts
Irishman in San Francisco. Amateur photographer, musician, artist and electronics tinkerer. Professional security computer comrade. Security @ Tailscale. Only together can we defeat the computers.
pronounshe/him
locationSan Francisco, California
bloghttps://patrickod.com
githubhttps://github.com/patrickod
instagramhttps://www.instagram.com/podoherty/
yeah github is the ai powered... hold up the page isn't loading ... yeah so github is ... yeah i'm just going to open this in a new tab, there we go yeah so github is the world's leading ai powered platform for collaboration, and yeah i think the page has almost loaded now, one sec
shot, chaser
As computer keyboards get smaller and smaller, I can't help thinking, that eventually we'll reach a point of no return

Anyone surprised by this has not been paying attention. Israel his routed Gaza, killing or displacing its residents in order to empty it and reduce resistance, and its intention all along was to use this as a pretense to seize the Gaza strip.

https://apnews.com/article/israel-palestinians-gaza-war-plan-reaction-e11aa45f829100c6e9b8afdaa4b2567f

An Israeli plan to seize the Gaza Strip is met with alarm

An Israeli plan to seize the Gaza Strip and expand the military operation has alarmed many in the region. Palestinians are exhausted and hopeless, pummeled by 19 months of heavy bombing. Families of Israeli hostages still being held in Gaza are terrified that the possibility of a ceasefire is slipping further away. Israeli officials said Monday that Cabinet ministers approved the plan to seize Gaza and remain in the Palestinian territory for an unspecified amount of time. Details of the plan were not formally announced. It may be another measure by Israel to try to pressure Hamas into making concessions in ceasefire negotiations.

AP News
was rummaging through my bookshelves for something and out pops a hand drawn postcard sent by a since deceased close friend of mine from secondary school. I thought I had lost it and I'm so glad that it is found. A perfect time capsule of their amazing presence and art in the world. We miss you Andy.

Yep. I saved hundreds or even thousands of dollars a month just from switching from Substack to self-hosted Ghost.

https://digiday.com/media/former-substack-creators-say-theyre-earning-more-on-new-platforms-that-offer-larger-shares-of-subscription-revenue/

I pay a roughly flat $85/month now (~$75 for mailsending, $10 for hosting), vs. 10% of all my subscription income.

Here’s some napkin math for how expensive Substack is compared to its competitors, assuming that roughly 7% of all subscribers will pay for their subscriptions, and that subscriptions cost $5/month.

Former Substack creators say they’re earning more on new platforms that offer larger shares of subscription revenue

Former Substack writers who exited the platform in early 2024 are making more money on Beehiiv and Ghost thanks to their fixed pricing models.

Digiday
Could someone please help me understand why dpop (where every request requires its own signature) is preferable to mTLS (where multiple requests can be made in one authenticated channel) other than being able to implement it without having to engage with browser authors?
Everyone should be so lucky as to have a colleague as wonderful as @creachadair whose code reviews are so educational and kind and have the rarest property of making me actually want to write _more_ software.
Sufficient time has passed and I'm excited to share a demo and details of a CSRF vulnerability that I discovered in the popular gorilla/csrf library that has been present since its creation 😲 https://patrickod.com/csrf
gorilla/csrf CSRF vulnerability demo

A demonstration of a novel CSRF vulnerability in the gorilla/csrf Go library.

Think we’ve forgotten about the time that Elon was booed so badly by fans of Dave Chapelle (of all people) that he locked himself in his office and Twitter employees considered calling the cops to do a wellness check.

What I’m saying is we can go harder.

https://www.mercurynews.com/2023/11/08/elon-musk-almost-needed-sfpd-wellness-check-after-breakdown-getting-booed-at-dave-chappelle-show/

Elon Musk almost needed SFPD wellness check after ‘breakdown,’ getting booed at Dave Chappelle show

‘He got to a point where he locked himself in his office, was so upset’ that Twitter employees feared he would hurt himself, the author of a new book says about the billionaire.

The Mercury News