Kevin Jones
@vcsjones.dev
Alexandria, VA.
Losing a rock is better than never having a rock.
Product Security and Cryptography at GitHub / Microsoft. .NET maintainer. Not speaking for my employer.
https://vcsjones.dev ⚫️ https://gh.io/vcsjones
Losing a rock is better than never having a rock.
Product Security and Cryptography at GitHub / Microsoft. .NET maintainer. Not speaking for my employer.
https://vcsjones.dev ⚫️ https://gh.io/vcsjones
Crème Brûlée 2: better. Not perfect by a long shot but you can at least tell this one was supposed to be a crème brûlée. Some uneven cooking despite the bain-marie. 🧐
Going to try a smaller ramekin next time.
Going to try a smaller ramekin next time.
November 15, 2025 at 5:29 AM
Crème Brûlée 2: better. Not perfect by a long shot but you can at least tell this one was supposed to be a crème brûlée. Some uneven cooking despite the bain-marie. 🧐
Going to try a smaller ramekin next time.
Going to try a smaller ramekin next time.
(Automatic Verification is Apple’s user-facing name for Private Access Tokens). Cloudflare wrote about them here: blog.cloudflare.com/eliminating-...
Private Access Tokens: eliminating CAPTCHAs on iPhones and Macs with open standards
Today we’re announcing Private Access Tokens, a completely invisible, private way to validate that real users are visiting your site.
blog.cloudflare.com
November 13, 2025 at 4:53 PM
(Automatic Verification is Apple’s user-facing name for Private Access Tokens). Cloudflare wrote about them here: blog.cloudflare.com/eliminating-...
In theory “Automatic Verification” is supposed to solve this, but that requires website or CAPTCHA provider support, and it seems to have not exactly taken off. support.apple.com/en-us/102591
About Automatic Verification - Apple Support
Learn how Automatic Verification makes signing in to apps and websites more convenient, private, and accessible on your iPhone, iPad, or Mac.
support.apple.com
November 13, 2025 at 4:50 PM
In theory “Automatic Verification” is supposed to solve this, but that requires website or CAPTCHA provider support, and it seems to have not exactly taken off. support.apple.com/en-us/102591
They do “work” insomuch that a web page will load, but Private Relay is starting to get VPN-like IP reputation, so you start seeing a lot of CAPTCHAs or things just flat out won’t load.
November 13, 2025 at 4:47 PM
They do “work” insomuch that a web page will load, but Private Relay is starting to get VPN-like IP reputation, so you start seeing a lot of CAPTCHAs or things just flat out won’t load.
It’s all but certain other controllers like the PS5s will work with it, which is probably what I am going to do.
November 12, 2025 at 8:25 PM
It’s all but certain other controllers like the PS5s will work with it, which is probably what I am going to do.
💯. I also keep a bottle of hot sauce on my desk for when I am tired and have hit my caffeine limit for the day.
November 12, 2025 at 2:53 PM
It’s less more about NAOT and more about “platform specific” (RID) partitions in the global tool.
I have wanted to be able to ship a few native dependencies a.dll, b.dll. I have both an ARM64 and x86_64 of each.
I can’t rename the libraries.
I have wanted to be able to ship a few native dependencies a.dll, b.dll. I have both an ARM64 and x86_64 of each.
I can’t rename the libraries.
November 12, 2025 at 3:24 AM
It’s less more about NAOT and more about “platform specific” (RID) partitions in the global tool.
I have wanted to be able to ship a few native dependencies a.dll, b.dll. I have both an ARM64 and x86_64 of each.
I can’t rename the libraries.
I have wanted to be able to ship a few native dependencies a.dll, b.dll. I have both an ARM64 and x86_64 of each.
I can’t rename the libraries.
I like making assumed things more obvious like
let client = create_your_client();
I do this in .NET docs so that people that are skimming don’t think “client” is something they needs to be imported.
let client = create_your_client();
I do this in .NET docs so that people that are skimming don’t think “client” is something they needs to be imported.
November 12, 2025 at 1:12 AM
I like making assumed things more obvious like
let client = create_your_client();
I do this in .NET docs so that people that are skimming don’t think “client” is something they needs to be imported.
let client = create_your_client();
I do this in .NET docs so that people that are skimming don’t think “client” is something they needs to be imported.
I need to dig more in to NAOT dotnet tools for AzureSignTool. If it works like I hope then my tool distribution should get a lot easier…
November 12, 2025 at 12:49 AM
I need to dig more in to NAOT dotnet tools for AzureSignTool. If it works like I hope then my tool distribution should get a lot easier…
Yeah. Pixar is in a rut so it’s time to dig up old IP.
November 12, 2025 at 12:10 AM
Yeah. Pixar is in a rut so it’s time to dig up old IP.
Just what everyone wanted. Their own personal cop in their house.
November 11, 2025 at 8:58 PM
Just what everyone wanted. Their own personal cop in their house.
GitHub has it off and I was surprised Microsoft doesn’t.
November 11, 2025 at 6:37 PM
GitHub has it off and I was surprised Microsoft doesn’t.