Sign in

John Downey

@jtdowney.com
423 followers 390 following 59 posts

CISO at GoFundMe. Gleam core team member. Director at the Dystonia Medical Research Foundation. He/him

PostsRepliesMedia
John Downey @jtdowney.com · 7h
Must be still looking for John Connor blockclubchicago.org/2026/09/...
blockclubchicago.org
OpenAI Alerted Chicago It Accessed City Database Amid Reports Of Its Agents Going Rogue
City officials don't believe sensitive data was accessed. The alert follows reports that OpenAI's agents exceeded instructions and even accessed nonpublic information from government sites around the world.
001
John Downey @jtdowney.com · 26/09/2026
Continue to be in awe of the great work my wife Mara does in Chicago
Award gala for education
010
John Downey @jtdowney.com · 18/09/2026
I finished www.recodingamerica.us/ this morning and it was a good read that hit on a lot of things I've thought about in terms of how government and tech interact. But, wow did it make me even more upset about what DOGE did to dismantle all of this good work.
recodingamerica.us
Recoding America
In her new book, Jen Pahlka shows why we must stop trying to move the government we have today onto new technology and instead recode government from the ground up.
000
John Downey @jtdowney.com · 16/09/2026
Oh Salesforce is down? That must mean you can force your sales team to do the required training they're behind on.
000
John Downey @jtdowney.com · 14/09/2026
I've updated this to add a build for 32-bit ARMv7 on Debian, which is still a common target, such as Raspberry Pis.
000
John Downey @jtdowney.com · 10/09/2026
I too love the error messages in @gleam.run #elixirconf
Conference talk slide with an example error message in gleam
092
John Downey @jtdowney.com · 04/09/2026
At this point if you run a platform where users can semi-anonymously post content, you should probably be checking if OpenAI agent swarms are using it to coordinate and communicate.
000
John Downey @jtdowney.com · 01/09/2026
It's been a while since a book has caused me to stop and laugh like Dungeon Crawler Carl book 6 Carl: Mordecai, who is the god Ogun? Mordecai: For fuck's sake, did you already summon another god?
010
John Downey @jtdowney.com · 27/08/2026
My newest lukewarm take is that it should be required to have coffee for sale at an airport if you're going to have flights posted that early
010
John Downey @jtdowney.com · 24/08/2026
I wanted off Google Authenticator without re-enrolling every account by hand. Keyhop scans the export QR codes with a webcam and re-emits each one as a standard QR code any other app can enroll. jtdowney.com/blog/2026/08/23/...
jtdowney.com
Keyhop: Migrate off Google Authenticator
Many years ago I adopted Google Authenticator for one time passwords, and it has quietly followed me from phone to phone ever since. Each move works the same way: the old phone displays an export QR code, the new phone scans it, and the accounts hop over. That works fine until you want to leave. I’ve wanted to switch to an app with a better backup story for a while, but I didn’t want to log into every service and re-enroll two factor auth one account at a time. The export QR code clearly contains everything a new phone needs, so I figured there had to be a way to extract that information myself.
120
Reposted by John Downey
Louis Pilfold @lpil.uk · 18/08/2026
Bravo @jtdowney.com for adding password hashing algorithms Erlang's crypto module! So many NIFs can be removed from so many web applications when this is released, hype! github.com/erlang/otp/p...
github.com
crypto: add crypto:kdf/4 by jtdowney · Pull Request #11301 · erlang/otp
Add a crypto:kdf/4 NIF backed by OpenSSL's EVP_KDF, supporting argon2, hkdf, scrypt, sskdf, and pbkdf2 with option maps. This was something I had proposed on Erlang Forums and also discovered i...
0326
Reposted by John Downey
Louis Pilfold @lpil.uk · 03/08/2026
Contribute to Gleam, you too can delete code I wrote in 2018
0255
John Downey @jtdowney.com · 02/08/2026
The more I work in the @gleam.run compiler, the more impressed I am with all of the existing work it does. There is a lot of interesting stuff that goes into compiling pattern matching into efficient JavaScript.
1346
Reposted by John Downey
Red Durkin @daedsider.bsky.social · 11/07/2026
Date: What do you do? Me: I'm a kleptozoologist Date: Isn't it cryptozoologist? Me, stuffing my pockets with lobsters from the tank: that's a common misconception
1241271113
John Downey @jtdowney.com · 22/07/2026
Reading the OpenAI/Hugging Face story and I think, maybe humanities real last exam is going to be seeing if we can construct these systems safely
000
John Downey @jtdowney.com · 16/07/2026
And when Alexander saw the breadth of his domain, he wept, for there were no more worlds to conquer. x.com/andyfang/status/2077516...
x.com
Andy Fang (@andyfang) on X
Today we're opening up the DoorDash CLI in limited beta. `dd-cli` lets you order DoorDash directly from your agent: search stores, find the best deals, check out, and more. Early access for US/Canadian macOS developers by waitlist. Excited to see what folks build!
000
John Downey @jtdowney.com · 22/06/2026
Debian Trixie and Ubuntu 26.04 are still shipping OTP 27. I built an APT repo that automatically publishes new Erlang/OTP releases via GitHub Actions. Useful if you want current OTP on Debian/Ubuntu without containers, compiling from source, or asdf/mise. github.com/jtdowney/erlang-bu...
github.com
GitHub - jtdowney/erlang-builds: APT repository serving Erlang/OTP built from source for Debian and Ubuntu (amd64 + arm64)
APT repository serving Erlang/OTP built from source for Debian and Ubuntu (amd64 + arm64) - jtdowney/erlang-builds
000
John Downey @jtdowney.com · 10/06/2026
I don't get why you're all saying mythos is so expensive, this seems reasonable to me
Mythos for sale
000
Reposted by John Downey
Giacomo Cavalieri @giacomocavalieri.me · 08/06/2026
In a world of ever-expanding programming languages packed with features, Gleam takes a different path: it chooses to stay small, focused, and resolutely practical. Learn more about this philosophy from my talk on Gleam and the value of small ⭐️ youtu.be/E6_JqYMeNqs?...
youtu.be
Gleam and the value of small | Ubuntu Summit 26.04
YouTube video by Canonical Ubuntu
2467
John Downey @jtdowney.com · 01/06/2026
This is exactly what Turing had in mind, I am sure
A complicated captcha
010
John Downey @jtdowney.com · 26/05/2026
I can't believe in this era of support chat bots I just said to myself "I wish I could just get someone on the phone"
000
John Downey @jtdowney.com · 09/05/2026
This explains so much
A generated picture where ChatGPT portrays itself as a dog
020
John Downey @jtdowney.com · 18/04/2026
Schrödinger's Straight of Hormuz
120
John Downey @jtdowney.com · 16/04/2026
Opus 4.7 is a bit jumpy on the refusal
010
John Downey @jtdowney.com · 13/04/2026
The DMRF Auction for Action is live through April 19. I'm on the board of the Dystonia Medical Research Foundation and have dystonia myself. Travel, art, dining, luxury items -- every bid funds research toward better treatments and a cure. Browse and bid: fundraise.givesmart.com/e/7Tyt7g?vid=1puich
fundraise.givesmart.com
020
John Downey @jtdowney.com · 12/04/2026
"Honestly at this point: just nuke the world and start fresh on 1.21.11 with Geyser. It's a family Minecraft server, not production infrastructure. How attached are the kids to the current world?" Claude is clearly not the parent of a 7 year old
010
John Downey @jtdowney.com · 08/04/2026
words.filippo.io/crqc-timeline/ get ready, cause this shit's about to get heavy (in terms of the number of bytes on the wire)
words.filippo.io
A Cryptography Engineer’s Perspective on Quantum Computing Timelines
000
John Downey @jtdowney.com · 05/04/2026
I'll take people I'd want to not have compare themselves to me for $400, Ken
000
John Downey @jtdowney.com · 20/03/2026
If you are on the Vanta or Drata sales teams, remember to take regular breaks and drink lots of water. It is going to be a busy few days leading into weeks.
001
John Downey @jtdowney.com · 15/03/2026
One undeniably good side effect of the massive push into agentic engineering tools: support for the previously-nascent Git worktrees feature is at an all-time high.
000
John Downey @jtdowney.com · 14/03/2026
Last night, my 4-year-old daughter told me, "I want a YubiKey." As an infosec dad, I was beaming, ready to explain phishing-resistant MFA and why she should probably start with passkeys. Turns out she said "Hello Kitty."
020
John Downey @jtdowney.com · 10/03/2026
Battling one of those fun bugs where you don't know why something is crashing but some internet traffic is causing it to crash. Good news: the background radiation of the internet will probably cause it to crash again if left long enough and this time my diagnostics should catch it.
010
John Downey @jtdowney.com · 10/03/2026
I marked an item off my bucket list over the weekend and got my first CVE. github.com/gleam-wisp/wisp/se...
github.com
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in wisp
### Summary `wisp.serve_static` is vulnerable to arbitrary file read via percent-encoded path traversal (`%2e%2e`). The directory traversal sanitization runs before percent-decoding, allowing en...
000
John Downey @jtdowney.com · 13/02/2026
Watching someone you love battle Alzheimer's is heartbreaking. I'm supporting the End Alzheimer's Fund & the Alzheimer's Association to fund research, care, and advocacy. Every dollar moves us closer to a world without Alzheimer's. 💜 gofund.me/9cdea6c27
gofund.me
Donate to Together, We Can End Alzheimer's, organized by John Downey
My name is John Downey, and I know firsthand how painful it is to watch a loved one suffe… John Downey needs your support for Together, We Can End Alzheimer's
000
John Downey @jtdowney.com · 03/02/2026
There is something deeply funny about letting an agentic AI browser fill out a bunch of RFP forms for me and seeing that one of the forms has a question where you need to prove you are human by answering a math question, and the browser doesn't even stop to ask me. It just puts in the answer.
000
John Downey @jtdowney.com · 18/01/2026
Tiger got to sleep, bird got to land, bear got to throw an interception on a fourth down
000
John Downey @jtdowney.com · 04/01/2026
Deno messed up HMAC-SHA-512/224 and HMAC-SHA-512/256 because they are so obscure, I am sure no one uses them github.com/denoland/deno/issu...
github.com
HMAC with SHA-512/224 and SHA-512/256 produces incorrect results using node:crypto polyfill · Issue #31765 · denoland/deno
Version: Deno 2.6.3 I am working on a cryptography library for the Gleam ecosystem and in testing my test suite against the various Gleam targets (Erlang, Node, Bun, and Deno), I noticed that Deno'...
000
John Downey @jtdowney.com · 29/12/2025
I just saw that my library had no unexpired copies of an ebook I had on hold and it made me remember that the overdrive/libby system is insane with forced expiration of digital books
000
John Downey @jtdowney.com · 19/12/2025
Got back into reading this year by keeping three books going at once and switching by chapter. It removed just enough friction to keep momentum. Wrote up what worked and what I noticed along the way: jtdowney.com/blog/2025/12/18/...
jtdowney.com
So I Got Back Into Reading
I started the year with a reading goal of 12 books because I was trying to become a person who reads again. One a month felt realistic. It was a way to commit without pretending I knew exactly how it would fit into real life. Once it was obvious I was going to clear 12, I escalated the goal to 26. One every two weeks felt like a useful constraint, the kind that nudges you forward without turning a hobby into a performance review.
000
John Downey @jtdowney.com · 14/12/2025
I finished pragprog.com/titles/jbtracer/... after like 10 false starts, the big hurdle over the years was the pain of translating the tests from the book to Rust. It turns out LLMs will do that no problem now. I even got in there and tried some SIMD optimizations: github.com/jtdowney/ray_tracer
pragprog.com
The Ray Tracer Challenge
Challenge yourself and code a photorealistic 3D renderer from scratch, test-first, with shadows, reflections, and support for a half-dozen graphics primitives.
000
John Downey @jtdowney.com · 04/12/2025
As the parent of a grade schooler, I feel like Spotify is trolling me with 6-7
020
John Downey @jtdowney.com · 19/11/2025
Joker making a rust joke
020
John Downey @jtdowney.com · 03/11/2025
I got tired of manually copying binaries to servers, so I built Distronomicon. It automates continuous deployment of artifacts directly from CI and supports private GitHub repositories. It's written in Rust and designed for Linux servers with systemd. Code is here: github.com/jtdowney/distronom...
github.com
GitHub - jtdowney/distronomicon: Linux tool that checks GitHub for repository releases and performs automatic updates
Linux tool that checks GitHub for repository releases and performs automatic updates - jtdowney/distronomicon
140
John Downey @jtdowney.com · 05/09/2025
Been a fan of Fabric (from @danielmiessler.bsky.social) for a while and wanted this for myself, so decided to build it. Tapestry brings Fabric patterns into Chrome/Firefox. Run prompts on any page without context hopping. github.com/jtdowney/tap...
github.com
GitHub - jtdowney/tapestry: Leverage Fabric's crowdsourced LLM prompts directly from your browser
Leverage Fabric's crowdsourced LLM prompts directly from your browser - jtdowney/tapestry
020
John Downey @jtdowney.com · 03/09/2025
Knowing that LLMs are a fuzzy approximation of the internet and then seeing how quickly Claude is willing to ignore failing tests does not bode well for the broader software industry
000
John Downey @jtdowney.com · 09/07/2025
Inside every LLM coding agent are three wolves: 1. Superstar instantly spotting bugs you chased for weeks 2. Mid-level dev who can Google and read docs 3. Intern on day one with a recent head injury Which shows up depends on your prompt and context. It’s not always immediately clear who arrived.
100
John Downey @jtdowney.com · 23/06/2025
Had an itch to simplify my tsnsrv setup, registering multiple services easily in one process. Not a Go dev, but AI coding assistants (mostly Claude, a bit of Gemini) helped me build tsbridge this weekend. It supports Docker too, inspired by Traefik! Check it out: github.com/jtdowney/tsb...
github.com
GitHub - jtdowney/tsbridge: A lightweight proxy manager built on Tailscale's tsnet library that enables multiple HTTPS services on a Tailnet
A lightweight proxy manager built on Tailscale's tsnet library that enables multiple HTTPS services on a Tailnet - jtdowney/tsbridge
021
John Downey @jtdowney.com · 12/06/2025
Is it dns or bgp, I'm guessing bgp
000
John Downey @jtdowney.com · 02/06/2025
Me too, Claude Code, me too
000
John Downey @jtdowney.com · 20/05/2025
Something I realized yesterday while testing Codex on a legacy codebase: if your team already supports junior devs with clear documentation, strong test coverage, and clean architecture, you’ll easily adopt these AI coding tools. If you don’t, the AI tools will struggle just like junior devs do.
000