Viewing profile — tashian

Fiddling with the knobs is the fun part. https://www.youtube.com/watch?v=la2u4VlGwbQ

The notion of "zero trust" shouldn't just mean corporations not having to inherently trust users and networks. It should also mean users not having to inherently trust corporations…

I did a little synth project recently that uses an AudioWorklet processor to morph between single-cycle waveforms, and it worked super well. When I tried to do this with the Web Au…

or to hide the AI content areas

Just copy/paste from the chat window. I kept running into token limits. I came away from it wanting a much better workflow. That's the next step for me in learning AI... playing wi…

I used Claude to help me build a side project in 4 hours that I would never have built otherwise. Essentially, it's a morphing wavetable oscillator in React ( https://waves.tashian…

Good point. Primarily, the YubiKey is there to lock away the private key while making it available to the running CA. Certificate signing happens inside the YubiKey, and the CA pri…

It's true, the defaults are quite strict. As for the "hours" max interval, this is the result of a design decision in Go's time duration library, dealing with the quirks of our cal…

I love this idea!

Hi, I'm the author of the post. Thanks for your questions here. > -Complete overkill requiring the use of a YubiKey for key storage and external RNG source - what problems does thi…

How should a company figure out what to charge for something in the first place? Especially a startup that doesn't have much market data to go on, and may be making something entir…

AI agents run in isolated VMs, but PDFs have been out here running in the open for 30 years!

Reminds me of the Hamming distance texture: https://chalkdustmagazine.com/features/the-hidden-harmonies-...

I learned C by running a MUD — a DikuMUD derivative. I was in high school, in the 90s, and I didn't know any programmers in my town who could teach me how to really code. My high s…

I tried learning to make sourdough bread by reading the Tartine Bread book. The problem is, baking bread is such a sensual activity. You need to understand what it feels like when …

Hi, I'm one of the authors of CLI Guidelines. See my post https://smallstep.com/blog/command-line-secrets/ for a bit more of a deep dive about using secrets on the command line. Cr…

Cruise certainly knows.

I ran one in the 90s for a couple years. I was 15. I had two lines at 16.8kbps. 100 megabyte HD, which was enough to hold a giant archive of Amiga downloads. It was fun, lots of lo…

Not every day, but I appreciate the global tech perspective of https://restofworld.org

https://tashian.com I write about various tech topics. Writing is thinking. It helps me learn.

I loved this podcast episode on the same topic: https://www.reboot.io/episode/wisdom-for-work-13-accountabil...

Ah, this was a grammar error on my part. Sorry about that, let me clarify. TPMs do offer up their endorsement key (or an endorsement key certificate) to third parties. And, TPMs ca…

I agree with the sentiment of the piece, but I disagree with the idea that TPMs don't add much value for end users. TPMs were originally designed in the early days of ecommerce, wh…

Philip Greenspun's blog posts about web development got me into building web applications in college and sold me on the design principles behind ArsDigita Community System (ACS), w…