Patrick O'Doherty

380 Followers
298 Following
1,059 Posts
Irishman in San Francisco. Amateur photographer, musician, artist and electronics tinkerer. Professional security computer comrade. Security @ Tailscale. Only together can we defeat the computers.
pronounshe/him
locationSan Francisco, California
bloghttps://patrickod.com
githubhttps://github.com/patrickod
instagramhttps://www.instagram.com/podoherty/
Custom OIDC is generally available

We’re pleased to announce that custom OIDC is now generally available for all users. With custom OIDC, users can sign into Tailscale using any identity provider that supports OpenID Connect (OIDC). To use a custom OIDC provider with Tailscale, you must verify domain ownership by setting up a WebFinger endpoint.

yeah github is the ai powered... hold up the page isn't loading ... yeah so github is ... yeah i'm just going to open this in a new tab, there we go yeah so github is the world's leading ai powered platform for collaboration, and yeah i think the page has almost loaded now, one sec
shot, chaser
As computer keyboards get smaller and smaller, I can't help thinking, that eventually we'll reach a point of no return
was rummaging through my bookshelves for something and out pops a hand drawn postcard sent by a since deceased close friend of mine from secondary school. I thought I had lost it and I'm so glad that it is found. A perfect time capsule of their amazing presence and art in the world. We miss you Andy.

Yep. I saved hundreds or even thousands of dollars a month just from switching from Substack to self-hosted Ghost.

https://digiday.com/media/former-substack-creators-say-theyre-earning-more-on-new-platforms-that-offer-larger-shares-of-subscription-revenue/

I pay a roughly flat $85/month now (~$75 for mailsending, $10 for hosting), vs. 10% of all my subscription income.

Here’s some napkin math for how expensive Substack is compared to its competitors, assuming that roughly 7% of all subscribers will pay for their subscriptions, and that subscriptions cost $5/month.

Former Substack creators say they’re earning more on new platforms that offer larger shares of subscription revenue

Former Substack writers who exited the platform in early 2024 are making more money on Beehiiv and Ghost thanks to their fixed pricing models.

Digiday
Could someone please help me understand why dpop (where every request requires its own signature) is preferable to mTLS (where multiple requests can be made in one authenticated channel) other than being able to implement it without having to engage with browser authors?
Everyone should be so lucky as to have a colleague as wonderful as @creachadair whose code reviews are so educational and kind and have the rarest property of making me actually want to write _more_ software.
Sufficient time has passed and I'm excited to share a demo and details of a CSRF vulnerability that I discovered in the popular gorilla/csrf library that has been present since its creation 😲 https://patrickod.com/csrf
gorilla/csrf CSRF vulnerability demo

A demonstration of a novel CSRF vulnerability in the gorilla/csrf Go library.

Think we’ve forgotten about the time that Elon was booed so badly by fans of Dave Chapelle (of all people) that he locked himself in his office and Twitter employees considered calling the cops to do a wellness check.

What I’m saying is we can go harder.

https://www.mercurynews.com/2023/11/08/elon-musk-almost-needed-sfpd-wellness-check-after-breakdown-getting-booed-at-dave-chappelle-show/

Elon Musk almost needed SFPD wellness check after ‘breakdown,’ getting booed at Dave Chappelle show

‘He got to a point where he locked himself in his office, was so upset’ that Twitter employees feared he would hurt himself, the author of a new book says about the billionaire.

The Mercury News