iiinova — where your digital self keeps evolving

Reposted by Matthew Miller

What are passkeys? @whatarepasskeys.info · 22/09/2026

Introducing whatarepasskeys.info! A consumer-friendly resource for learning about #passkeys, shaped by 2+ years of community feedback, with an Advanced mode for technical readers. Running a site/app with passkey support? Link it in your docs or enrollment flows to help users understand them!

whatarepasskeys.info

Passkeys Explained: The Easier, Safer Way to Sign In

Passkeys replace your password with a unique digital key. Easier and safer to use — no passwords to remember, no codes to wait for.

174

Matthew Miller @iamkale.millerti.me · 02/09/2026

The Docs site also gained versioned docs, which in retrospect is something I should have started doing years ago. Better late than never though, right? 🫠 simplewebauthn.dev/docs

The SimpleWebAuthn docs site header shows off an expanded dropdown listing two docs versions, "14.0.x" (currently selected) as well as "13.3.x".

000

Matthew Miller @iamkale.millerti.me · 02/09/2026

I just released SimpleWebAuthn v14.0.0 with support for ML-DSA passkeys, as well as a bunch of other fun new features including a helper for calling the WebAuthn Signal APIs. Check out the release notes for all the details 🚀 github.com/MasterKale/S...

github.com

Release v14.0.0 - The one after they go quantum · MasterKale/SimpleWebAuthn

The headlining feature of this release is @simplewebauthn/server gaining support for passkeys using the ML-DSA-44, ML-DSA-65, and ML-DSA-87 PQC algorithms in supported runtimes. And in those same s...

331

Matthew Miller @iamkale.millerti.me · 29/04/2026

I gotta say I'm extremely disappointed in Gerard Butler these days, he still hasn't inspired us to rise up and overthrow the machines

010

Matthew Miller @iamkale.millerti.me · 22/04/2026

I do think "talk to chatbot and hope I'm not being lied to" is slightly better UX these days than "search in Google and try to find legit results" but $20/mo good? 🤔

010

Matthew Miller @iamkale.millerti.me · 22/04/2026

I'd probably cancel my Claude Pro if they remove Code from the $20 tier, I wasn't using it enough to run into limits and I can't see myself ever using it enough personally to upgrade to the Max 5x plan.

230

Reposted by Matthew Miller

Tim Cappalli @timcappalli.me · 21/04/2026

I'm working to aggregate some common questions about #passkeys, both from non-technical and technical perspectives. These will be used in an end user facing site in the future. Any and all feedback is welcome. forms.gle/wmaydkzmUp2e... (also would appreciate some reposts to widen the audience)

32221

Reposted by Matthew Miller

GlaireDaggers🍉🏳️‍⚧️🎃 @glairedaggers.bsky.social · 16/02/2026

oh.... my god?? actual chart from learn.microsoft.com/en-us/traini... btw

Screenshot of what's apparently supposed to be a "git flow" chart from Microsoft learning materials.

It's full of bizarre spelling errors and fucked up diagram elements that make it pretty clear the thing was AI generated.

951303366

Matthew Miller @iamkale.millerti.me · 24/11/2025

Hmm, I've never encountered such a need for credential ID introspection. An RP shouldn't need to care about credential ID length - it's essentially a random value for the purposes of storing it from and passing it into WebAuthn API calls. SimpleWebAuthn certainly doesn't require the introspection 🤔

010

Matthew Miller @iamkale.millerti.me · 24/11/2025

I noticed that the credential ID returned from verifyRegistrationResponse() isn't being used when saving the cred to the DB. Did you already catch and fix that? I wonder if that's contributing to the difficulties in using the cred for auth afterwards...?

110

Matthew Miller @iamkale.millerti.me · 03/11/2025

Can I interest you in WebAuthn's Virtual Authenticator browser automation API? It's great for setting up automated end-to-end front end tests if you're running them in an actual browser. It automates the user's interaction with WebAuthn's modals w3c.github.io/webauthn/#sc...

w3c.github.io

Web Authentication: An API for accessing Public Key Credentials - Level 3

110

Matthew Miller @iamkale.millerti.me · 31/10/2025

Gotta get the timeline back to fun video game and programming stuff. I can lean on my RSS setup to keep up with (filtered, non-real-time) current events.

000

Matthew Miller @iamkale.millerti.me · 31/10/2025

I had to make a "Politics" list and move some follows over to it because my Following timeline has not been good for my mental health. To the point my wife is concerned that I seem tired or depressed all the time...this also happened to me in 2017. Gotta dial it back like I had to back then too 🫠

100

Matthew Miller @iamkale.millerti.me · 30/10/2025

Affinity is still absolutely massive - download a 980MB file into an uncompressed 3.5GB executable 😵

A macOS file transfer dialog shows that the Affinity application being copied to the Applications directory is 3.5GB in size.

000

Matthew Miller @iamkale.millerti.me · 30/10/2025

Holy smokes, Affinity Photo, Designer, and Publisher are all now just a single app, and it's FREE? This is seriously great news, it might get me to switch back from Pixelmator Pro 🤔

120

Matthew Miller @iamkale.millerti.me · 30/10/2025

And I recently updated my two-year-old PRF blog post to add a header that discourages naive use of PRF blog.millerti.me/2023/01/22/e...

blog.millerti.me

Encrypting Data in the Browser Using WebAuthn

My sneakernet hacker fantasies are becoming reality 👟

161

Matthew Miller @iamkale.millerti.me · 30/10/2025

This is why a small contingent of us have been politely discouraging people to use PRF, because of that footgun in particular. To be fair to some credential managers, I think they've come around and are trying to use PRF to encrypt an unlock token for local access, not E2EE of the entire vault 🤔

371

Matthew Miller @iamkale.millerti.me · 28/10/2025

Another slam dunk campaign slogan the Democrats will absolutely not capitalize on

020

Reposted by Matthew Miller

Radley Balko @radleybalko.bsky.social · 28/10/2025

I know it’s too much to expect them to know their history, but if the American Revolution had a motto, it definitely would not have been “immigrants go home.” It would have been “get your fucking soldiers out of our cities.”

190120223045

Reposted by Matthew Miller

Tim Cappalli @timcappalli.me · 27/10/2025

At Authenticate, @iamkale.millerti.me, @nishantkaushik.com, and I decided to mix up the usual "Passkeys 101" and cover common misconceptions about #passkeys. Topics around cloud sync, phishing resistance, workforce usage, and concerns about vendor lock in. blog.timcappalli.me/p/preso-auth...

blog.timcappalli.me

Passkey Mythbusters: Short Takes on Common Misunderstandings @ Authenticate 2025

Passkeys promise to replace passwords with a simpler, more secure login experience, but myths and confusion still hold many organizations back. This session at Authenticate 2025 tacklea some commonly ...

132

Matthew Miller @iamkale.millerti.me · 27/10/2025

My shitposting did not contribute to his arrival therefore I will be deemed unworthy

010

Matthew Miller @iamkale.millerti.me · 23/10/2025

Hey my dude, I'm the guy who made the library and I think it's okay to make mistakes so long as you learned something new from it. Think of it this way: now you know why LLMs are wrong when they suggest that WebAuthn should support optional mediation! Good luck on whatever you're working on 😌

010

Reposted by Matthew Miller

Wario64 @wario64.bsky.social · 22/10/2025

No Man's Sky Breach Trailer www.youtube.com/watch?v=eNaY... Patch notes www.nomanssky.com/2025/10/expe...

213425

Reposted by Matthew Miller

Pavel @spavel.bsky.social · 21/10/2025

Office IT is infuriated by my script that makes everyone's Yubikey print out the entire script of the Bee Movie (2007)

1231

Matthew Miller @iamkale.millerti.me · 19/10/2025

That Kid Pix shirt 👨‍🍳 💋

000

Matthew Miller @iamkale.millerti.me · 18/10/2025

Here lies Matt Miller. Cause of death: Roko's Basilisk

000

Reposted by Matthew Miller

Joshua Erlich @joshuaerlich.bsky.social · 12/10/2025

people in Portland are taking down ICE with what looks like a party from Chrono Trigger

4838143

Reposted by Matthew Miller

matt @stavola.xyz · 07/10/2025

The more I play with this, the more I love it. Even if I'm the only one using mlf.lol to generate #atproto lexicons, it has been worth it. It really hits the pleasure centers of my brain just right.

A screenshot of the mlf.lol playground, displaying an example of ATProto lexicon generation from a source MLF file. The MLF source uses inline types, def types, tokens, records, constraints, references, and references to a "standard library." Thematically, the source refers to posters on an old school forum.

4515

Reposted by Matthew Miller

Don Moynihan @donmoyn.bsky.social · 11/10/2025

RIFs can’t be done without agency leadership so this is RFK Jr extending his purge of CDC scientists to help Vought’s shutdown agenda. Genuine public health risks created by aggrieved men.

372180771

Matthew Miller @iamkale.millerti.me · 11/10/2025

you've met antifa, now say hello to antif-rog 🐸

000

Matthew Miller @iamkale.millerti.me · 09/10/2025

I'm a library maintainer that publishes to both now. I'll continue publishing both because I want to target as much of Node, Deno, CF Workers, etc... as I can, and NPM may never get native JSR support. I think if I wrote something specifically for Deno I'd simply publish to JSR for how easy it is 🤔

050

Matthew Miller @iamkale.millerti.me · 07/10/2025

"Hey MattGPT, what can you tell me about <thing>?" "As a Large, Livid Man..."

000

Matthew Miller @iamkale.millerti.me · 07/10/2025

Geezus, what a headline. RIP NPR

021

Reposted by Matthew Miller

ProPublica @propublica.org · 07/10/2025

Heather Honey, a high-profile denier of Donald Trump’s loss in the 2020 election, was appointed to a senior DHS position in which she’ll help oversee election security. “DHS now appears poised to become a primary amplifier of false election conspiracies pushed by our enemies,” one expert said.

propublica.org

She Pushed to Overturn Trump’s Loss in the 2020 Election. Now She’ll Help Oversee U.S. Election Security.

Heather Honey has been appointed to a senior position in the Department of Homeland Security. State election officials and voting experts are concerned.

33839487

Reposted by Matthew Miller

ve, the ghost of info past @vortexegg.com · 06/10/2025

Cyberpsychosis is when too much cyber, but unlike the literalist “wow cool robot” depictions of cyborgs in media like the Cyberpunk™️ universe, what is really meant is being too enmeshed in networks of cybernetic feedback loops that cause a person to loose touch with the feedback of actual reality

312525

Reposted by Matthew Miller

Jake Gold @jacob.gold · 06/10/2025

A ~$6/mo VM rented from any decent cloud provider will (typically) run a small private PDS for years with uptime approaching 100%. K.I.S.S. github.com/bluesky-soci...

github.com

GitHub - bluesky-social/pds: Bluesky PDS (Personal Data Server) container image, compose file, and documentation

Bluesky PDS (Personal Data Server) container image, compose file, and documentation - bluesky-social/pds

4445

Matthew Miller @iamkale.millerti.me · 06/10/2025

It's intended to be a common noun, e.g. "I just registered a passkey," or "passkeys are way easier to use to sign into websites."

010

Matthew Miller @iamkale.millerti.me · 05/10/2025

Does the collective groans of soreness after adult marching band trigger the Loud Environment warning on your watch?

110

Matthew Miller @iamkale.millerti.me · 05/10/2025

So you're saying you hate cleartext??

060

Matthew Miller @iamkale.millerti.me · 04/10/2025

SimpleWebAuthn packages now feature build transparency logs on NPM and JSR! I achieved this by publishing from GitHub Actions workflows now instead of from my local machine. Check out the release notes for more info: github.com/MasterKale/S...

github.com

Release v13.2.2 · MasterKale/SimpleWebAuthn

Changes [browser] [server] In the spirit of contributing to increased software supply chain transparency, both libraries are now published via GitHub Actions workflows. Package listings on JSR and...

021

Matthew Miller @iamkale.millerti.me · 04/10/2025

i'm sorry but if keikaku doori doesn't mean anything to you then i don't think we can be friends

110

Matthew Miller @iamkale.millerti.me · 04/10/2025

Giving this streaming thing a try tonight, if you catch this within the next hour or so come on by and say hi. Tonight I think I'll try to automate publishing to JSR and NPM www.twitch.tv/iamkalegaming

twitch.tv

IAmKaleGaming - Twitch

Nothing special yet, still stretching my wings. Expect lots of kale jokes

010

Reposted by Matthew Miller

The Daily Show @thedailyshow.com · 30/09/2025

Excited to introduce Vibes from Meta. Eat your slop, piggies!

11173452623