Protecting Cookies with Device Bound Session Credentials Posted by Ben Ackerman, Chrome team, Daniel Rubery, Chrome team and Guillaume Ehinger, Google Account Security team Following our April ...

security.googleblog.com/2026/04/prot...

Rossen on stage with « a Loom-friendly stack » slide

Data points about Spring MVC performance improvements

At @springio.net keynote, Rossen shares how Spring embraces Virtual Threads, Structured Concurency, and what is coming in Spring Framework 7.1+ to support streaming on Spring MVC stack (RestClient server-sent events for example), as well as related performance improvements.

#java #springio26

Tree with purple blossoms, with the rising sun behind.

Mornings

Absurd In Production Five months of durable execution with just Postgres.

Since some asked: five months of Absurd in production. Durable execution on plain Postgres with tiny SDKs. The design held up fine, partitioning is still hard and some closing thoughts on the future of Open Source. lucumr.pocoo.org/2026/4/4/abs...

Supply Chain Attack on Axios Pulls Malicious Dependency from... A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...

🚨 Active supply chain attack on axios@1.14.1. The latest version pulls in plain-crypto-js@4.2.1 -- a brand-new package that didn't exist before today.

We're still investigating. If you use axios, pin your version and audit your lockfile. socket.dev/blog/axios-n...

4-panel comic. (1) [Glowing black dot surrounded by clouds.] DOT: I think I did a good job with this universe. Pressure waves dance through gas clouds. They clump together and then pressure pushes them apart. (2) [Some of the clouds are clumping together.] DOT: Oh weird, that big clump of clouds is staying together. Their gravity is overcoming the pressure and more gas is falling in. (3) [More clouds are sucked in.] DOT: It’s not stopping! The heat is rising but the collapse is only accelerating! I messed up. I messed up *bad*. (4) [The clump has become a shining star.] DOT: NOOOOOOOO!!! My beautiful clouds! Ruined! It’s all ruined!

Star Formation

xkcd.com/3222/

Picture of a blossoming flower

Starting

Anonymous credentials: an illustrated primer This post has been on my back burner for well over a year. It’s been sitting here unwritten, not because the topic is unimportant — in fact, with every single month that goes by, I become mor…

I wrote a new post on anonymous credentials and how to build them. All of this is in service on a longer future post on how these will fit into age verification systems. blog.cryptographyengineering.com/2026/03/02/a...

Major milestone!
Curity Identity Server 11.0 is out 🚀

→ Ephemeral Clients - OAuth for AI agents without registration
→ Managed Database Schemas for simpler upgrades
→ SCIM Groups and Entity Management
→ Rebuilt UI Kit

Learn more: bit.ly/4cnSOJJ

The cost of turning written business logic into code has dropped to zero. At best, near-zero.

The cost of integrating services and libraries, the plumbing of the code world, has dropped to zero. At best, near-zero.

What does that mean for the future?

New blog post: brooker.co.za/blog/2026/02...

Logic for Programmers The mathematics that will help you in your everyday programming.

After four months of edits and multiple mental breakdowns, I am delighted to announce the release of *Logic for Programmers* v0.13! All content is in, all that's left is copyediting (and technical editing and layout and proofreading and)

logicforprogrammers.com

Tomorrow: Tune into this live session for a practical look at what's needed to build APIs that AI agents can safely use.

🕚 Jan 21 | 11:00 AM EST
🎟️ Still time to register: nordicapis.com/events/api-standards-for...

Open Access Publication & ACM Open Access Publication & ACM

As of today, all ACM publications and related artifacts in the ACM Digital Library are open access. 🎉 @acm.org
www.acm.org/publications...

Frying pan with some food in it: cod fish, potatoes, and cabbage.

Christmas Day tradition: "Roupa Velha" (literally "Old Clothes"). Shredded cod fish, potatoes, and cabbage, from Christmas Eve. With lots of olive oil and garlic, of course.

Rice pudding with cinnamon decoration.

Final version, ready to release, with the traditional cinnamon based decoration.

Two recipients with Rice Pudding.

Cooling down.

Pan in a stove with simmering rice pudding.

Christmas Rice Pudding "Arroz Doce" - simmering

git/Documentation/gitdatamodel.adoc at master · git/git Git Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://gitgitgadget.github.io/). Please follow Documen...

this fall I worked with the core Git folks on writing an official data model for Git and it just got merged! I learned a few new things from writing it. github.com/git/git/blob...

The wait is over. Rewatch 50+ industry-leading talks on this year's most important API topics. 🎉 Mic drop. 🎤

Watch here: bit.ly/3KoOcaI

#PlatformSummit #PlatformSummit2025

I don't know about others but it is wild to me to be willingly giving this up as an engineer.

I'd rather painstakingly hunt-and-peck every character into the IDE than "save time" and lose my credibility attached to my name.

A Lamy Safari?

MCP and AI Agents: Identity Strategies for Safe API Access | Webinars AI technologies are advancing fast, bringing both new opportunities and new challenges for digital businesses. There is the potential to…

New webinar alert 📣

On December 4, join our live session to explore how to embrace innovation while protecting your data, your users and your brand reputation.

We'll cover practical design patterns for securing AI agent connections to APIs. Register: bit.ly/4ht83BK

Holding an OxCaml tutorial at ICFP/SPLASH 2025

Then I dive into the tutorial we held about Oxidised OCaml, the performance-oriented fork at oxcaml.org that @yminsky.bsky.social announced earlier this summer. Try the tutorial in a convenient devcontainer, and take our quiz to help develop the language! @thenumb.at anil.recoil.org/notes/icfp25...

APIs are now consumed by ghosts, zombies and robots 👻🧟‍♂️🤖

Catch Jacob Ideskog's keynote (@curity.io) at #PlatformSummit2025 to learn how OAuth secures what lurks in the dark.

📅 Oct 14–15 | Stockholm
👉 https://nordicapis.com/events/platform-summit-2025/

Open Social — overreacted The protocol is the API.

i wrote about atproto and why it matters

Future of API Security and Identity at Platform Summit 2025: AI, MCP, and Digital Sovereignty | Curity Discover key API security and identity themes at Platform Summit 2025. Explore the rise of non-human identities, MCP and AI-to-API connections, and identity’s role in digital sovereignty with Curity e...

New on the Curity blog: Exploring the Future of API Security and Identity at Platform Summit 2025 (October 13-15)

Have a read: bit.ly/46vVAIp

Anatomy of a Billion-Download NPM Supply-Chain Attack A massive NPM supply chain attack has compromised foundational packages like Chalk, affecting over 1 billion weekly downloads. We dissect the crypto-stealing malware and show you how to protect your p...

Supply chains are so much fun! jdstaerk.substack.com/p/we-just-fo...

a child looking down at a golden retriever named Samaria resting in their lap. the child pets the dog's face.

a person holding a child on their hip crouches down on the sidewalk to pet a golden retriever on the head.

a child wearing all gray sits on a yellow curb. a golden retriever lays on the sidewalk next to them, and rests their head in the child's lap.

A group of 6 LCC K9 comfort dogs arrived in Minneapolis yesterday in the wake of the latest mass shooting. The organization deploys comfort dogs following tragic events. The dogs wore their "please pet me vests," offering love and comfort to those processing this heartbreaking tragedy. 15/10 for all

PRO: Frees kids up for extra shifts at the plant CON: Nagging guilt it was actually AI that earned that C-

Pros And Cons Of Using AI For Schoolwork theonion.com/pros-and-cons-of-using-a...

"Whatever languages make easy become the default and determine a lot of other things. What languages make hard get ignored for many reasons. This is why so many of our curricula today look not that different from the curricula from the mid-1980s onward, ..."