iiinova — where your digital self keeps evolving

Reposted by Paul Rohr

Sorry it took so long, I was at a conference

Reposted by Paul Rohr

Ash vs the Evil Dead @ashflanagan.bsky.social · 11/10/2026

Everyone in creative work for hire knows most of the job is clients asking you for something bad and stupid and you figuring out how to make something completely different while convincing them it's what they asked for. The AI era means everyone gets to see what clients actually want

61207322

Reposted by Paul Rohr

Filippo Valsorda @filippo.abyssdomain.expert · 12/10/2026

Publishing “Cryptographic Right Answers” for developers is a tradition by now. Colin Percival started in 2009, Thomas Ptacek followed up in 2015, and then Latacora carried on in 2018 and 2024. I put together a list updated for the renewed urgency of migrating to post-quantum algorithms.

words.filippo.io

(Post-Quantum) Cryptographic Right Answers

In the tradition started by Colin Percival and Thomas Ptacek, a set of “Cryptographic Right Answers” updated for the accelerated post-quantum transition timeline.

212149

Reposted by Paul Rohr

Will Thomas @williamthomas.bsky.social · 09/10/2026

In today's AIP History Weekly Edition, we look at the first Nobel Prize in Physics in 34 years to be awarded to a single person. Halzen is a peculiar choice for a solo prize, given IceCube's multifaceted collaborative structure and Halzen's own view that his leadership role was almost accidental.

aip.org

Francis Halzen and the anatomy of a solo Nobel Prize

AIP History Weekly Edition: October 9, 2026

183

Paul Rohr @pevohr.bsky.social · 09/10/2026

Any chance you could do a followup piece about how much organizing +/or advertising the People Powered Maine folks have been able to do since then? I'm probably not the only one having trouble understanding how tight the financial vs. legal constraints are for 501(c)(4) organizations vs. 527 PACs

peoplepoweredmaine.org

People Powered Maine | Organized People, Not Money

A permanent, volunteer-led organizing group in every Maine county. See what we stand for, find an event, or sign up to volunteer.

000

Paul Rohr @pevohr.bsky.social · 09/10/2026

But our version of that same story is just plain better. So let's not be afraid of telling it After all, if you're a normal person living in the current world, which would you rather entrust all your personal information to: • Meta Accounts (theirs), or • Atmosphere accounts (ours)?

000

Paul Rohr @pevohr.bsky.social · 09/10/2026

TL/DR. Today's carefully-polished email introducing Meta Accounts is a massive marketing gift to the Atmosphere The choices they made in how to tell their story to hundreds of millions provide a blueprint into the mental models they believe everyone already has about shared/linked accounts

101

Paul Rohr @pevohr.bsky.social · 09/10/2026

G. Call to action Once again, they're hampered by the limited benefits of consolidating your Meta Accounts under one corporate umbrella: Meta Platforms, Inc., located at 1 Meta Way in Silicon Valley Instead, what might you be able to "discover" by focusing outward, across the Atmosphere?

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

F. Copy In their case, Meta needs to reassure their users that the effects of them centralizing more data in one place are benign. Yet note the underlying values they appeal to: • app-specific profiles + contacts • control what you share + store Our version of that story is WAY better

What's staying the same?

• Your profiles. You still have different profiles across apps. There's no change to your messages, contacts, friends and followers.

• Your content. There's also no change to how you share your content, like stories and statuses, across profiles.

• What's in your account. You control what's in your Meta Account. You can choose which profiles are in your Meta Account anytime.

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

E. Copy This section is a huge opportunity to differentiate the two ecosystems What's the underlying appeal of "one login across apps", "convenience", "control your privacy", or deciding whether to "use your existing account" vs. "create a new one from scratch"? Who do you trust to provide that?

What's new

•One login across apps. Enjoy seamless access with your Meta Account, using the same login info as you use today. You can also create a single password for more convenience.

• Enhanced security features. Use a passkey to securely log in with your fingerprint or face scan instead of a password. Get other personalized recommendations from Security Checkup.

• Settings in one place. Control your privacy, security and personal details for different profiles, all in one place. Turn automatic sharing on or off, customize the ads you see and more.

• Easy setup for apps and devices. Your Meta Account works across apps like Threads and Meta Al, plus devices like our Al glasses. Just use your existing Meta Account to log in, or create a new one if you want to start from scratch.

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

C. Visual design Horizontal alignment within each row reinforces the association between service-specific icons + brand names. Vertical rhyming of handles represents what's the same about each account (ie, you) D. Copy None of the "you can" claims are clear benefits. We can do MUCH better here

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

A. Visual design Note how 3 distinctive symbols are used here to convey + summarize the relationship between brands: • big blue stylized infinity (3x) = overarching concept (them: Meta, us: Atmosphere) • tiny icons = 1 per product B. Copy Your "account works across ... making it easier to ..."

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

As a thought experiment, imagine hiring the most talented markerter you know to rewrite this email so it's about Atmosphere accounts rather than Meta Accounts What would stay the same? Where would the most meaningful changes be?

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

Copywriting advice (from Meta) on how to explain Atmosphere accounts: Riff off today's carefully-designed email sent to Threads users explaining the "benefits" of more closely linking that account to their Instagram account … but sell real benefits (to me, not some company)

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

Ooh. Can someone link to an archived stream of that latest talk?

100

Paul Rohr @pevohr.bsky.social · 09/10/2026

Good to know There's an opportunity here to create an iconic consumer-grade brand -- on a par with the butterfly or the swoosh -- so fingers crossed that we'll be able to attract suitable design talent to pull that off

000

Reposted by Paul Rohr

Rudy Fraser @rude1.blacksky.team · 09/10/2026

some days it feels like the world, my loved ones, my own employees don’t understand what I’m trying to build. and then I end up at a bar in Maine being offered a beer because the digital infrastructure I created is used by a whole other community and their members know it. and I feel reaffirmed.

1326123

Paul Rohr @pevohr.bsky.social · 09/10/2026

Hey @esb.lol, is that globe a placeholder, or does @toni.bsky.team have someone working on a separate visual identity for the Atmosphere brand? The name is great -- as is its origin story -- but for those explainers to spread mimetically, the ecosystem needs an iconic identity (+ canonical website)

Screenshot excerpt for a potential variant to the Bluesky sidebar

Adds a new beta "Atmosphere" entry in the slot between "Notifications" + "Feeds". Unlike all of the existing black + white icons, this entry has a colorful globe icon

110

Paul Rohr @pevohr.bsky.social · 09/10/2026

Have you seen @velitchkov.eu's essay about all the "orders" of builders who might benefit from LLM-assisted coding? www.linkandth.ink/p/the-new-co... Much of my interest in open source has always been as a recruiting ground for growing more cultores or novatores, + I hope that can continue

060

Paul Rohr @pevohr.bsky.social · 09/10/2026

So I keep asking stuff like: • which concepts or feelings are most resonant? • what are we not expressing clearly enough? • how can we be more concise? • what helps the brand become as ubiquitously iconic as it deserves to be? Definitely still a work in progress ...

010

Paul Rohr @pevohr.bsky.social · 09/10/2026

Agreed. Each of your wording choices makes total sense in context I'm just always pushing to identify which phrasings work best when trying to develop an overall brand identity for the Atmosphere

110

Paul Rohr @pevohr.bsky.social · 08/10/2026

But hats off to you both for "already". Such a powerful framing!

020

Paul Rohr @pevohr.bsky.social · 08/10/2026

Ditto, but "accounts" + "databases" still feel slightly too techie to me. I tend to prefer variants which lean into any facet of what you personally own/control

210

Paul Rohr @pevohr.bsky.social · 08/10/2026

Emphasizing the view (in appview), rather than the app(s). Sweet!

010

Reposted by Paul Rohr

Jim Ray @jimray.bsky.team · 08/10/2026

GM. It’s not that atproto is illegible to devs or even civilians but inscrutable via the systems of power that have taken over the internet. The sin of social media wasn’t technical but aligning with the desires of established power and ours is the long hard work of breaking that alignment.

1023237

Paul Rohr @pevohr.bsky.social · 08/10/2026

Is it time to call an in-house meeting to see if your various teams can agree on a consensus venn diagram to sort out all the terminology overlaps? protocol • space • simplespace • opensocial dot group vs. product • spaces • communities

000

Paul Rohr @pevohr.bsky.social · 08/10/2026

I've read lots of promising ideas recently from: @dholms.at @bnewbold.net @alexbenzer.com But it's not clear whether any of y'all have converged on a common vision of what the various overlapping terms mean or how they fit together ... making it harder for outsiders to give meaningful feedback

110

Paul Rohr @pevohr.bsky.social · 06/10/2026

But while consumers may not look for that particular certification, we all definitely have expectations about inappropriate snooping

120

Paul Rohr @pevohr.bsky.social · 06/10/2026

It'll be an inflection point in the atmosphere ecosystem the first time any of the following implementations get that level of formal certification: - PDS, - appview, +/or - the entire stack an app is built on Evidently that hasn't been table stakes for the MVPs which have shipped to date 😉

230

Paul Rohr @pevohr.bsky.social · 06/10/2026

Really glad to see this parallel sub-🧵where you, @ezraboeth.com, + @tamme.schichler.de are thinking through where to draw this line ... not just for your product, but also as an example for other AppView builders

030

Paul Rohr @pevohr.bsky.social · 06/10/2026

To justify users trust, *every* well-behaved provider in the stack should robustly log admin access to user data to track + verify whether that access was appropriate The easier it is to snoop, the harder it should be to avoid logging who did what + why

220

Paul Rohr @pevohr.bsky.social · 06/10/2026

In theory, that problem already existed for public data, but was mitigated by the fact that atproto inherently gives everyone equal access to the same data Spaces increase the risk, insofar as some entities -- particularly appview admins -- can now have significantly more access than the rest of us

110

Paul Rohr @pevohr.bsky.social · 06/10/2026

Because apps have access to the same data for lots of people, they've always been a more tempting target for easy abuse ( Although my PDS stores a wider range of data about me, providers can easily differentiate themselves by how strongly they protect it. They're far easier to switch, too )

110

Paul Rohr @pevohr.bsky.social · 06/10/2026

Yep, from a trust perspective appviews have always been scarier than PDS hosts In both cases, once somebody has a copy of your data, you can't undo that. If they leak or abuse it, all you can do is shut them off, sue for damages, + entrust someone better with future access to your data

110

Paul Rohr @pevohr.bsky.social · 06/10/2026

For example, the potential blast radius just feels different for these two "bundled trust" scenarios: simplespace = one admin for my data + personal spaces (PH + SH) vs. happyview = one admin for everyone's data across lotsa spaces (AV + SH) ... hence the OP's well-framed question

120

Paul Rohr @pevohr.bsky.social · 06/10/2026

But when a single entity plays multiple such roles, that can blur the ability of users to reason about who they're entrusting with how much access to (copies of) their data

130

Paul Rohr @pevohr.bsky.social · 06/10/2026

Unless I've misunderstood @dholms.at, the protocol: • prevents a standalone space host from forging user credentials to con my PDS host into allowing the wrong user/app to access my data (proactive) • lets me revoke credentials for appviews which overshare the data I let them access (reactive)

120

Paul Rohr @pevohr.bsky.social · 06/10/2026

Theoretically, there's a separation of concerns here: • user = which apps can do what • PDS host = which app/user combo can access what data (read or write) • space host = which users belong to space (read access to view) • appview = which users belong to space (write access to view)

130

Paul Rohr @pevohr.bsky.social · 06/10/2026

Update PDS implementers seeking prior art should check out @jaz.sh's vlpds, which seems to have baked this in from the get-go: vlpds.jazco.dev/docs/oauth-2...

OAuth access tokens. These are checked against their session row on every request. So /oauth/revoke, a refresh (which replaces the token) or a revoke-all takes effect immediately, despite the 15 min lifetime. Takedowns are checked there too.

010

Paul Rohr @pevohr.bsky.social · 05/10/2026

The corresponding bug report will have its first birthday in less than two weeks. Last time I checked (late July) @matthieu.bsky.team was aware of it, but alas ... Presumably implementing this is more of a science project (or a protocol issue), rather than a trivial agentic fix

github.com

After revoking an OAuth session access tokens are still usable · Issue #4278 · bluesky-social/atproto

Describe the bug When you log in to your'e PDS via OAuth with an app a session is created and the app gets an access token if you next revoke the session the access token is still usable to create ...

251

Paul Rohr @pevohr.bsky.social · 04/10/2026

Please go ahead + take a stab at it If any existing takes were already close enough, we could collaboratively refine it by adding 10% here or tweaking 20% there But odds are that the real answer will only be discovered by someone staring at a blank page + generating a fresh take. Go for it!

010

Paul Rohr @pevohr.bsky.social · 02/10/2026

Think of it as a clickable opportunity to explain what the Atmosphere is. Or highlight how Atmospheric something will be before you start using it: • apps = @tangled.org, @pckt.blog, @anisota.net • services = @blackskyweb.xyz, @microcosm.blue, @pds.ls • sites = @standard.site publishers • etc.

010

Paul Rohr @pevohr.bsky.social · 02/10/2026

Once you've branded an "official" Atmosphere icon, add it to the Bluesky profile page for any app/site which: • publishes its own lexicons, +/or • lists other lexicons it supports The former can be done immediately (via DNS lookup), while the latter would rely on a new com.atproto lexicon (TBD)

100

Paul Rohr @pevohr.bsky.social · 01/10/2026

Maybe each opens a template/wizard for quickly drafting a specific kind of post? - photo, - gps track, - music, - game, - tech report, - clip art, - diary, - notes, - etc.

010

Reposted by Paul Rohr

justin from the internet @threlk.net · 30/09/2026

the path to broad adoption is, somewhat definitionally, mundane use cases like this

184

Reposted by Paul Rohr

Ashleigh Lambert @ashleighlambert.bsky.social · 30/09/2026

Holly the bear mom doing more to advocate for her disabled child than the US govt does for disabled people

031

Paul Rohr @pevohr.bsky.social · 29/09/2026

Sticking with the less-than-catchy Latin terminology, it's worth identifying other use cases beyond mere generation of code according to existing patterns For example, there's no mention of: novatores = those who introduce new methods, ideas, or products

Cultores
Those who tend. They tend the commons, and the commons now gets oversown.

The cultores are the open-source maintainers. They can’t keep up anymore with the amount of AI-generated pull requests they have to review. In Mitchell Hashimoto’s words, agents “eliminated the natural effort-based backpressure that previously limited low-effort contributions.” Now, a plausible bug report or pull request takes minutes to produce but still takes an hour for a human to judge. Reviewing can take up to six hours a day, a GNOME extensions reviewer wrote.

011