Technical notes on Linux, sysadmin, development and devops.
Passkeys replace passwords with a cryptographic key pair. Since January 2025, the ones saved in Google Password Manager also sync to iPhone and iPad, on top of Android, Windows, macOS, Linux, and…
The IETF has published RFC 9700, the updated Best Current Practice for OAuth 2.0 security: what it is, what changes and why it matters for logins and APIs.
Anthropic has introduced MCP, an open standard for connecting AI assistants to data and tools. What it is, the problem it solves, and why a standard matters, explained simply.
A new CSS feature lets you natively tether one element to another, like a tooltip to its button. What it is, the problem it solves, and why it cuts the reliance on JavaScript libraries.
Chrome enables hybrid post-quantum key exchange by default on desktop. Why it matters, what 'harvest now, decrypt later' means, and why some network gear breaks.
As of March 12, 2024, Interaction to Next Paint (INP) replaces First Input Delay among Google's Core Web Vitals. What it measures, the good threshold under 200 ms, and why it matters for user…