iiinova — where your digital self keeps evolving

Jonathan Garbee @garbee.me · 12/08/2026

My primary care almost always is. But I see her at like 8-9 AM. So the day hasn't picked up heavily.

000

Jonathan Garbee @garbee.me · 29/07/2026

Positive. We already had a reasonable system setup. It started timing out completely. Never timed out before.

000

Jonathan Garbee @garbee.me · 29/07/2026

it's happening now. We had a deployment check fail because the package wasn't available right away.

000

Jonathan Garbee @garbee.me · 09/07/2026

Probably to set the implicit role at least.

010

Jonathan Garbee @garbee.me · 03/07/2026

To be fair, Git even in the terminal kinda sucked until the past about 2ish years. And you only get the good stuff when you learn the new commands. Most won't. So... Git does have a poor history with usability. It is improving though!

010

Jonathan Garbee @garbee.me · 30/06/2026

Strictly on code signing, can you show any provider for any OS that is cheaper?

000

Jonathan Garbee @garbee.me · 30/06/2026

This has nothing to do with the App Store. Show me any code signer for desktop apps that is cheaper. Yes, Apple is the only one for Mac, but it is a better setup than Windows providers now.

000

Jonathan Garbee @garbee.me · 30/06/2026

It does not bypass gatekeeper. Once the binary is downloaded, it won't run unless it is signed until the user bypasses it in the security settings.

100

Jonathan Garbee @garbee.me · 21/06/2026

Grab some Earl Gray tea. Brew it. Then dampen a rag to apply it to the burn area. Sounds crazy, but something in the tea does counteract the burn. Out, at least it did for me when I tried the crazy thing.

010

Jonathan Garbee @garbee.me · 21/06/2026

I wonder if they are A/B testing headlines and it isn't sticky.

000

Jonathan Garbee @garbee.me · 18/06/2026

I'm surprised at magic carpet and not revolving door...

010

Jonathan Garbee @garbee.me · 18/05/2026

Irrelevant unless a constitutional amendment passes at the same time to remove the immunity that SCOTUS granted for “Core Duty”. Good luck ever getting that to happen.

000

Jonathan Garbee @garbee.me · 17/05/2026

They’d rather spend time and resources on a rebrand than making sure you can securely and easily use the console while using a passkey on your account… Not a good sign of priorities.

010

Jonathan Garbee @garbee.me · 27/04/2026

When there are no other applicants yet, yes you are.

000

Jonathan Garbee @garbee.me · 22/04/2026

As I recall, they are severely limiting the context window to Gemini. Slowly working to open it up. At least, that was the reason I saw on an issue in VS Codes GitHub on it.

000

Jonathan Garbee @garbee.me · 22/04/2026

It has been for…. Like a year roughly. They just redesigned it the other week.

000

Jonathan Garbee @garbee.me · 20/04/2026

And even in the case those what ifs some true, it’s not spyware. It’s straight up malware.

100

Jonathan Garbee @garbee.me · 20/04/2026

It overstates the issue, not understates. It’s built up entirely on a bunch of “but what if the right series of events japans in the future and multiple parts of Anthropic are hacked.” Is it not great in a few ways? Sure, Anthropic can do better. Is it spyware as defined? Not at all.

230

Jonathan Garbee @garbee.me · 20/04/2026

This article is specifically titled to get more clicks. From someone who claims to be a privacy and security focused person as this author, they should know better than to explicitly inflame a situation just for that purpose.

000

Jonathan Garbee @garbee.me · 20/04/2026

That have no local access. The hack scenario would also involve needing to infiltrate the desktop app and push a malicious deployment of that. A double whammy. The threat isn’t what it is made out to be. Should better be done? Yes, especially with surfacing what is going on. Is it spyware? No.

100

Jonathan Garbee @garbee.me · 20/04/2026

If we are going to hold up the “what if the developer is attacked and a malicious extension is published” as valid, then take the entire extension ecosystem offline. That’s a problem for everything. And what this native extension does, while bad in that condition, is still not much worse then ones

110

Jonathan Garbee @garbee.me · 20/04/2026

By specifically crafting an extension with a colliding ID and getting users to install that. Which involves going into developer areas and passing a warning or two about it. It’s a very difficult thing to do on the colliding identifier side. Unless there is a proof of concept on how to do that.

110

Jonathan Garbee @garbee.me · 20/04/2026

And every browser engine has this. This happens to all known browsers that are supported

010

Jonathan Garbee @garbee.me · 20/04/2026

Not “keys to the castle”. It literally does nothing but allow the defined extensions to communicate with the local app. If this were a huge issue, Chrome would not have the API to begin with.

220

Jonathan Garbee @garbee.me · 20/04/2026

Such a clickbait title. Along with someone semi uniformed on how these extension pieces work. This isn’t “spyware”. It does literally nothing without the extensions installed to trigger it. So what is spying on people by just installing the desktop app?

6300

Jonathan Garbee @garbee.me · 20/04/2026

Also, I’m pretty sure this is exactly how these are supposed to behave. Extension install can’t set this up. It has to be from the native app side. Claude is just setting it up automatically on install, just like 1Password does, instead of by making a person manually trigger it.

2130

Jonathan Garbee @garbee.me · 20/04/2026

It is not an extension. It is a JSON file that facilitates one of 3 explicitly defined extensions in being able to communicate with the local desktop app. Far different story.

1200

Jonathan Garbee @garbee.me · 14/04/2026

This photo is AI generated/manipulated. The real colors don’t look like that.

110

Jonathan Garbee @garbee.me · 14/04/2026

All I can say is… this kind of exploitative engineering is why NASA exists. You’re literally complaining about the people who have repeatedly done what has felt impossible being asked to do it yet again. First goal is a small reactor for it on the Moon to test, part of base power.

100

Jonathan Garbee @garbee.me · 14/04/2026

This doesn't explain where this image came from. It does not match with _any_ of the colors of the recent releases: www.flickr.com/photos/nasaw... If it came from NASA, it can be traced to them. The point isn't how NASA does it. It is why this account is spamming fake photos with fake attribution.

flickr.com

2026 Webb Images/Science

Explore this photo album by NASA's James Webb Space Telescope on Flickr!

040

Jonathan Garbee @garbee.me · 14/04/2026

I don't know. I just talked with people at the Kennedy Space Center the other week and got some highlight details. But the idea of Helium 3 for Fusion power is, not new. Been around since at least 1988. Reference: ntrs.nasa.gov/api/citation...

ntrs.nasa.gov

200

Jonathan Garbee @garbee.me · 13/04/2026

Nuclear reactor fuel. But first we are sending more machines to scout Mars before humans. Since the return trip from Mars isn’t figured out yet either.

100

Jonathan Garbee @garbee.me · 13/04/2026

Yes. To get Helium 3 from the ice caps.

100

Jonathan Garbee @garbee.me · 13/04/2026

The plan is still a moon base. But that isn’t until Artemis 4 to start happening. They need to test things before Lunar Landings.

110

Jonathan Garbee @garbee.me · 05/04/2026

They are not exhausted. You can watch them work live most of the day on the NASA stream. When they were doing interviews yesterday for news channels, one I saw asked about sleep. Christina said they are getting plenty of deep sleep and in fact she prefers sleeping in space.

010

Jonathan Garbee @garbee.me · 31/03/2026

It is hard to just shift all that off given other work. For these two reasons, axios can still be heavily used. Ideally places should look to migrate off, especially since Node 24 Fetch has native proxy handling, finally. But, the argument of security tends to fall flat to shipping features. :(

000

Jonathan Garbee @garbee.me · 31/03/2026

Two big parts of the equation, Node support older than 18 and momentum internally with larger projects. Some places still need to support older Node and moving to fetch is a breaking change. Also, if a company has a system setup around axios wrapping their API calls that measures into thousands.

200

Jonathan Garbee @garbee.me · 29/03/2026

Sure go for it. Which ones do you need?

000

Jonathan Garbee @garbee.me · 17/03/2026

Exactly, but it the devil we have for now that works across engines. And it needs to run in-page. Not from an external system. So unless we get a full accessibility tree, that assistive technology uses too, exposed in page context… it is what can do the job.

000

Jonathan Garbee @garbee.me · 16/03/2026

“Shouldn’t be working based on the DOM”, then how do you accurately know what accessibility systems will see? The accessibility tree APIs aren’t yet comprehensive or available. So there isn’t any other real option currently that also covers everything fully. DOM is one of the biggest aspects.

101

Jonathan Garbee @garbee.me · 16/03/2026

Ah, yea page DOM would be needed for that. So it’s a dud in that use case if this is just about accessing a parallel clean environment.

100

Jonathan Garbee @garbee.me · 16/03/2026

This could help tools like Axe-core run in a worker instead of the main thread. Not entirely sure of all the intricacies and if we could do it without more surface area. That way we don’t run in the main thread to scan.

101

Jonathan Garbee @garbee.me · 27/02/2026

Seriously, on the Firefox AI commit controversy. I don’t see the point in complaining. Anyone threatening to move to another browser over it isn’t escaping anything. Every major company is using AI heavily. Even in ways you don’t see through code. It’s just something we need to accept. AI is a tool.

000

Jonathan Garbee @garbee.me · 17/01/2026

For search, @kagi.com is really good. I didn’t see any mention of this aspect in the post.

100

Jonathan Garbee @garbee.me · 16/01/2026

Older safe style with a twist combination lock are pretty good. I just don’t trust this digital lock stuff. There is always a key backup, so kinda pointless.

030