Stephen Downes

This is a good comprehensive article reviewing the security breaches there have been recently (and there have been a lot) and discussing what we should expect, and do, in the light of AI-assisted service compromises. If you're wondering why everyone was making '4' jokes recently, it's this: "eMudhra broke this trust in the most blatant way: its private keys turned out to be single-digit numbers. A private key is a 384-bit key, which means that it would be a number between 0 and 2^384, (a number with 116 digits!) Except, the key turned out to be the number '4.'" Author Gergely Orosz expects the security problems to get worse before they get better, not the least because of security handled the eMudhra way. But here's my own take: for the most part, what we're seeing are not new compromises (the PHP issue, for example, was known for quite a while beforehand), but rather, compromises by new players. Before now, you had to be a government or large company to breach security like this; now many more people can do it. As we repair these breaches (and they are being repaired, because they have to be) we reduce the ability of everyone to breach our systems, including especially the governments and companies that have been doing it all along.

It's like the internet publishing world took a deep breath and then said, "let's get on with this then." Human-authored content, it turns out, is still valuable. Geoff Graham announces via this post that he has acquired CSS-Tricks back from Digital Ocean, so it's now an independent site again. Jeffrey Zeldman of A List Apart reflects on this and mentions Smashing as a great place to get similar content as well. Piccalilli adds, "Let's buck up our ideas and get cracking, everyone. There's lots to teach and I know we've got plenty of fight left in us." All of these are among my regular reads and I like this new energy.

This was fun to play. "A business strategy game for consumer brands. Take the CEO, CMO, CFO or Chief Customer Officer seat, with AI colleagues in the others, rivals that answer back and real-world shocks on your plan. Free, no account." It moves along at a good pace, presents what I assume are real scenarios, and charts your progress against rivals and board expectations. The idea is to use it with teams or in a full class session. There's probably a business model behind it, but it seems pretty open for now.

Sometimes we don't even notice the history of technology as it passes by. Case in point: rqlite. "The idea was simple: take SQLite, put a Raft log in front of it, and replicate every write to a cluster so that the loss of a node did not mean the loss of the data." A few years later: "SQLite as a storage engine, with replication added on the outside, has been reinvented by at least eight teams with different needs and different protocols. Nobody has found a reason to stop doing it." But the upshot: "The money went to the platforms. rqlite, dqlite, and Litestream are open source and free. The projects that raised the capital or got acquired are the ones that turned replicated SQLite into a service with a bill."

I'm not sure how I would use this but I can certainly imagine some ways. Overland "logs your location in the background and sends it to a server of your choosing." Sadly it's only available for iPhone, which makes it useless to me. It's available on Github, though, so migrations to other platforms can't be far behind. It's from the venerable aaronpk. Via Alan Levine.

I'm going way out of my wheelhouse with this link because it caught my imagination. One of the really interesting things about international conferences is that people arrive from all over the world and bring their culture with them. This is reflected in their fashion choices, and the people at OEB have cleverly caught on to this with this post. What I like is that the fashion is far more than suits and ties (finally!) and features both men and women in bright, unique and colourful apparel. Now I had this same sense of internationalism in a Zoom meeting yesterday, but of course fashion addresses the physical presence specifically, something in-person conferences depend on. If I had my way, everybody would be able to enjoy an international experience first-hand. Not sure how that would work, though.