Sign in

April King

@april.social
15K followers 203 following 1.4K posts

Staff Security Engineer at some random tech company, previously Mozilla, Dropbox, LinkedIn, and (pre-Elon) Twitter. Has read @kateconger.bsky.social’s autobiography. web @ grayduck.mn // also github.com/april

PostsRepliesMedia
April King @april.social · 01/09/2026
i’ll have to ponder this when i hail some stranger’s tesla to autonomously drive me home from the gym today.
010
April King @april.social · 07/08/2026
is anybody at @discord.com still using their app?
screenshot demonstrating how poorly the discord app uses space
5496
April King @april.social · 31/07/2026
terrible timing, i donated at the beginning of july. :(
020
April King @april.social · 31/07/2026
Mythos did _not_ find a weakness in AES-128 (which uses 10 rounds), but in reduced round AES (which uses seven). Said weakness may extend to AES-128 or AES-256 with further cryptanalysis, but there’s no guarantee of that.
070
April King @april.social · 19/06/2026
i guess it seems like it’s working as intended to me? people are searching for an SCP and it’s summarizing it? is it mixing in SCP content for unrelated searches? that seems way more problematic.
030
April King @april.social · 16/06/2026
I’ve also seen it for customer service agents, who tend to be paid not the best and who have access to extremely sensitive customer data. For engineers? Never, unless they’re suspected of espionage.
020
April King @april.social · 03/06/2026
thanks! been having a difficult time finding things to be excited about in tech so i’ve not been posting much.
380
April King @april.social · 03/06/2026
he said “quite a while” (and it keeps a running total for when he restarts, it doesn’t always start at 0)
130
April King @april.social · 03/06/2026
TI Basic apparently!
150
April King @april.social · 03/06/2026
walked into the living room this morning and saw this. apparently my 13-year-old son somehow had gotten inspired to make a DVD bouncing program for his TI-84.
8968
April King @april.social · 23/05/2026
my six-speed nd3 is my daily driver, no matter the weather. drove her all last winter here in minnesota and she handled like a champ.
030
April King @april.social · 08/04/2026
any news on why this is? sean kershaw is one of the best city officials i have _ever_ worked with, he was incredibly dedicated and hard-working.
110
April King @april.social · 09/03/2026
i wonder how rotted one’s brain needs to become to genuinely believe that over 10% of adults, and 23% of young adults, at one point identified as trans.
040
April King @april.social · 25/01/2026
My adoptive dad was guilty of DWB, and he would have more interactions with the traffic police every year than I’ve had my entire life. If you’ve ever ridden with someone who follows every single traffic rule, it is agonizing, but that’s him.
1133
April King @april.social · 08/11/2025
oops, sorry! fixed!
110
April King @april.social · 07/11/2025
One of my favorite things about the Twin Cities is that every single stadium -- NFL, MLB, AAA MLB, NBA, CFB, NHL, MLS -- are in the middle of the cities, all serviced by a single rail line.
030
April King @april.social · 07/02/2025
and since they’re already living there, maybe we should pay them in special company dollars that they can use to spend at the company stores?
090
April King @april.social · 29/01/2025
this is still agonizingly painful to me, Twitter had the _best_ culture of any place I've ever worked at. there were definitely some outliers (cough cough former Periscope team) but I've never seen a tech employer with a culture like that, either before or after.
1152
April King @april.social · 23/01/2025
I live next to a freeway, I-94 in particular, because that location is one of the very few where I can walk to most anything without driving. It’s genuinely diabolical to design a city this way. (I have multiple air purifiers running into my house as a result.)
1310
April King @april.social · 20/12/2024
yes there are common feeds that are based on things that your followers like. but you can have systems where the algorithm knows who liked a thing but anyone but the person who posted it does not.
030
April King @april.social · 20/12/2024
(also there’s a button directly next to it, the retweet button, that is expressly designed for publicly supporting a thing)
070
April King @april.social · 20/12/2024
mostly that it has ruined countless numbers of lives of people who don’t realize
190
April King @april.social · 20/12/2024
you can make it opt-in
140
April King @april.social · 20/12/2024
as someone who used to work at twitter and who spent the last half-decade working with T&S teams, this whole aaron thing (where the bluesky head of trust liked a porn scam post) almost stretches incredulity. imagine designing a social media network in the 2020’s with public likes.
2645
April King @april.social · 10/12/2024
phishing training 🤢🤢🤮
260
April King @april.social · 10/12/2024
was asked a really interesting question in an interview yesterday: given a budget, which areas of security spending produce the greatest and worst (or negative) ROI? my answer: positive: SSO/OAuth, hardware keys worst: DAST, DLP, honorable mention to poorly configured IDS’s what’s your answer?
12716
April King @april.social · 01/12/2024
humans will do literally anything besides bring back hypercard
261
April King @april.social · 28/11/2024
there's a pretty solid trans / non-binary / GNC discord, if they fall under that.
020
April King @april.social · 28/11/2024
from my report? if so, I'm very sorry about that. 😅
010
April King @april.social · 28/11/2024
I made it while I was working at Mozilla!! *flails her arms widely*
110
April King @april.social · 26/11/2024
i have an electrolysis tank! i can fix it!
1110
April King @april.social · 26/11/2024
blame the way that money works on the internet, sadly there isn’t any of it to be found in short technical blog posts.
110
April King @april.social · 25/11/2024
thanks for the kind words! i love any article where i get a chance to hand-draw doodles. this one was a question a developer at my company asked me and my answer was long enough to turn into a blog post. :)
130
April King @april.social · 24/11/2024
thanks for all your hard work and for implementing the feature request that i’m about to make on github. 😂
070
April King @april.social · 23/11/2024
if the President of Nintendo of America can be named “Doug Bowser,” then truly anything is possible.
1310
April King @april.social · 22/11/2024
hah, no kidding. this was all handwritten, like a love letter from the 1920's. and thanks for letting me know, the typos have been fixed now. :)
020
April King @april.social · 22/11/2024
ooooooo thanks!!
120
April King @april.social · 22/11/2024
haha awesome! hello! 👋
020
April King @april.social · 21/11/2024
Your article is SO GOOD, I can't believe I hadn't seen it before. It's very fun to see how some things (e.g. cookie overwriting) have been solved, but despite all that time so much behavior has continued to be left undefined. Compared to modern web specs, it is downright embarrassing.
040
April King @april.social · 21/11/2024
got it, no worries! i'll see if I can fit it in sometime this afternoon!
010
April King @april.social · 21/11/2024
oooo do you have a quick test case that I could throw into a playground of some sort? i’d be happy to add it if so.
110
April King @april.social · 21/11/2024
they’ve been aware of my research for a couple years now, and really do want to try to fix it. i don’t envy them the task because it’s such an old and bad specification and any changes will break a lot of people’s workflows. even google was afraid to make changes here.
070
April King @april.social · 21/11/2024
I tried to open up a security bug with Netflix about a year back but ran into issues because it’s a security risk only so much as it would affect availability. Personally this stuff would scare me at least a little, especially given the history of it actually happening. And thanks for sharing!
110
April King @april.social · 21/11/2024
This was an incredible story! Thank you so much for sharing! It's kind of wild that it's almost a decade later and yet a malformed cookie can still break Netflix.
120
April King @april.social · 21/11/2024
Thank you!! 💛
020
April King @april.social · 21/11/2024
it’s really quite delightful too, i’ve never before seen a specification that disagrees with itself.
080
April King @april.social · 21/11/2024
Thanks, and that's very kind of you to say. :) It's been over two years from start to finish, it was quite the dive and I hope you enjoy the write-up.
160
April King @april.social · 21/11/2024
Handling Cookies is a Minefield: Inconsistencies in the HTTP cookie specification and its implementations have caused a situation where countless websites (including Facebook, Netflix, Okta, WhatsApp, Apple, etc.) are one small mistake away from locking their users out. grayduck.mn/2024/11/21/h...
facebook errornetflix errorokta errorwhatsapp error
1216853
April King @april.social · 17/11/2024
I’m in one of the at-risk groups for mpox and golly has it been a giant pain to get the vaccine at a place covered by insurance.
010
April King @april.social · 15/11/2024
do you think companies find this to be a feature or a bug? 🤔
0140