Matthew Miller :donor:

Full Stack web dev, WebAuthn expert. Creator of SimpleWebAuthn, maintainer of py_webauthn, steward of webauthn.io. Duonaut @ Cisco.

I also like video games and gadgets 👾

My toots are my own.

Matthew Miller :donor: boosted:
2025-05-02

“Microsoft says it’s seeing “nearly a million passkeys registered every day,” and that passkey users have a 98 percent success rate of signing in versus 32 percent for password-based accounts.” theverge.com/news/659929/micro

Matthew Miller :donor: boosted:
2025-04-29

This is the only place I can post this where someone might actually get it.

An altered version of https://wikipedia.org/wiki/Alice_und_Bob where the names of the communication participants are replaced by "Hegseth" and "Waltz" and the name of the intercepting party changed to "Goldberg".
Matthew Miller :donor:iamkale@infosec.exchange
2025-04-28

Do "Digital Credentials API", "OID4VP", "mdoc", and "SD-JWT-VC" mean anything to you? If so, I've got a new open source project that might interest you 👀

npm install @simpledigicreds/server
deno add jsr:@simpledigicreds/server

Features include:

  • Unencrypted requests
  • Unencrypted responses
  • Encrypted responses (following OID4VC HAIP)
  • Stateless presentation verification

A docs site is Coming Soon™, so for now check out the README for a Getting Started guide:

Feedback welcome at github.com/MasterKale/SimpleDi 😀

#digitalcredentials #oid4vp #mdoc #sdjwtvc

Matthew Miller :donor: boosted:
2025-04-23

I was just laid off! If you are looking for a web dev with 20+ years of experience, most recently five years doing #Elixir and #PhoenixLiveview, please hit me up! linkedin.com/in/angela-quinton

Matthew Miller :donor:iamkale@infosec.exchange
2025-03-27

@netopwibby These look great, I'm flashing back to my middle school Geocities days! What software did you use to create them that also supports animations?

Matthew Miller :donor:iamkale@infosec.exchange
2025-03-27

Ah, there's official docs available now:

nintendo.com/us/gaming-systems

...Just connect to your family group member’s system via local wireless when you want to lend a game. Both systems must also be connected to the internet.

Well, this is still nice to have as a member of a gaming family!

Matthew Miller :donor:iamkale@infosec.exchange
2025-03-27

Family Lending of Virtual Game Cards on Switch sounds great, but it's unclear if physical proximity is a hard requirement when lending to a member of the Family 🤔

The Direct said the consoles have to be proximate, but later some fine print says it's possible to connect online to start a lent game?

#nintendo #nintendoswitch #nintendodirect

A Nintendo Switch lends a game to a Family Members' Switch LiteFine print at the end of the Family Member lending segment states, "By navigating to User Settings → Online-License Settings and turning the setting to ON, you can instead opt to connect to the internet to start up software."
Matthew Miller :donor:iamkale@infosec.exchange
2025-03-23

My Logitech MX Vertical started acting up tonight, producing phantom left-clicks which aborted my attempts to click-and-drag. Thanks to Reddit I discovered that blowing under the mouse buttons fixes the problem.

I know Logitech uses some cheap switches but this is just icing on the cake 😒

#logitech

Matthew Miller :donor:iamkale@infosec.exchange
2025-03-20

@mttaggart Discord's gotta start making more money, the gravy train was always going to end in either bankruptcy or this.

I think looking back Discord's been pretty light-handed about incorporating ads. Desktop has had these same "campaign" ads that are, yes, annoying relative to before their arrival, but they're also permanently dismissable when they appear. If it helps keep the lights on I'm alright with ads that let me opt out.

Now if Discord IPOs and the ads become a permanent fixture...oh who am I kidding, I'm still using the official Reddit app and its sponsored posts in between every four real ones 🫠

Matthew Miller :donor:iamkale@infosec.exchange
2025-03-17

I've embarked on an L-shaped desk build! Two weekends ago I got the cabinets built, the countertops cut to size, and the legs attached. Then it got cold and rainy, the worst possible conditions to try and finish the countertops with some water-based polyurethane!

Rather than rush things I waited for the rain to stop. This week's weather is nice enough that I can finally apply the polyurethane onto the surface of the desk. It's important to sweat the details especially since I work remote and will be stationed at this new desk 40+ hours a week (including time I sit in front of a computer doing my open source schtick, balancing the books, etc...) when it's done.

Pics coming soon!

Matthew Miller :donor:iamkale@infosec.exchange
2025-03-14

I've been an iPhone user for six or seven years straight now and I gotta say, I'm getting real bored of them as I see all of the variety and trial-and-error going on in Android land around foldables. Everyone else is experimenting and is on Generation 5 of foldable form factors, but who the heck knows what Apple has planned around this.

That and the fact that Apple gets absolutely petrified at the notion of using saturated hues when they color their devices, especially their "Pro" hardware lines.

Meanwhile that Oppo Find N5 and Nothing 3a are calling out to me... 👀

Matthew Miller :donor:iamkale@infosec.exchange
2025-03-12

We hit peak VS Code two or three months ago, it's all been downhill since then

Release notes for the February 2025 release of VS Code highlight Copilot-related changes in six of 11 bullet points.
Matthew Miller :donor:iamkale@infosec.exchange
2025-03-02

Alright, I've got mdoc verification over OID4VP figured out. Time to dig into SD-JWT 📚

#digitalcredentials #mdoc #oid4vp #sdjwt

Matthew Miller :donor:iamkale@infosec.exchange
2025-02-26

@tbroyer Hey, that's not a bad idea. That might paint me into a corner later, though, if I want to for example publish lower-level utility libraries aren't specifically about working with credentials...

Naming things continues to be hard, who knew 😂

Matthew Miller :donor:iamkale@infosec.exchange
2025-02-26
Matthew Miller :donor:iamkale@infosec.exchange
2025-02-26

I'm playing around with the idea of a GitHub org, one that could contain SimpleWebAuthn and the second "Simple"-prefixed library I'm getting off the ground to try and simplify use of the Digital Credentials browser API. What all do you think of "SimpleDX", short for "Simple Developer Experience," as a name? I've already realized the "simple dicks" reading, yet I am convinced it's a perfect amount of tongue-in-cheek to make it memorable 🤔

A plan that's forming is, if I can move libraries like these into an org then I can kick off a GitHub account rename and diminish the chances of someone taking my old username and claiming the repo name. It's unclear if my repos would qualify for GitHub's retirement of currentUsername / repoName if I simply changed my username. But maybe I'm too concerned about repo name squatting?

#github

Matthew Miller :donor:iamkale@infosec.exchange
2025-02-22

@nyquildotorg What if you assumed the use of a perfectly spherical knife in a vacuum?

Matthew Miller :donor:iamkale@infosec.exchange
2025-02-22

Well this is quite the surprise! Passkeys in epic-stack, brought to you by SimpleWebAuthn 🔥

github.com/epicweb-dev/epic-st

I can consider this a feather in my cap, no?

#javascript #typescript #epicstack #webauthn #passkeys

Matthew Miller :donor: boosted:
2025-02-21

Bullshit euphemisms.
"questionable salute"
"controversial salute"
"provocative gesture"

Say it. These are Nazi salutes.
Why did Bannon seig heil?
Because he's a Nazi and because the press let Musk get away with the same thing by not calling it what it is.

thedailybeast.com/bannon-does-

Matthew Miller :donor:iamkale@infosec.exchange
2025-02-20

Today I found out about X509Store.set_time() in pyOpenSSL. This might be how I can stop mocking successful cert chain validation in py_webauthn due to certificate expiration 🤩

pyopenssl.org/en/stable/api/cr

Investigating...

#python

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst