Nice to hear that WebAuthn PRF is being added.

I found it useful to understand what it does and what sample usecases there are..

Also: people need to understand that „sane“ is highly subjective.

Wieso steht da zum Beispiel „Die Ausweis App ist nicht geöffnet“ statt „[…]nicht geöffnet oder die Erkennung läuft noch“ oder was auch immer, irgendwas um Nutzern zu erklären was grade abgeht.

Außerdem muss man sich für alles mögliche ständig neu anmelden als wäre es nicht möglich eine Login Session für 3min offen zu halten. Diese ganze vermeintliche hohe Sicherheit sorgt einfach dafür, dass Nutzer nicht in der Lage sind die ID zu nutzen und deshalb auf unsicherere Methoden wechseln.

Zusätzlich, dass die BundID ohne Nutzung gelöscht wird, dass ein Session Cookie gesetzt wird der bestimmte Anmeldeoptionen deaktiviert (und somit für eine bestimmte Fehlerkondition die Lösung nur durch löschen der Cookies möglich ist), and so on.

Memory safety has been achieved internally.

Storing your SSH (private) key in the password manager instead of the filesystem. Has the benefit of being properly secured the same way as other credentials and additionally gets synced, etc.

It's not just that the things built are low-quality. It's that also the wrong things end up built.

You might've heard of "outcomes over outputs" - the idea that the things you make should have some kind of purpose beyond being there. People have to keep saying this because most teams don't listen.

Yes also in general to „premature optimization“: choosing appropriate data structures is not premature, because when you notice performance issues, it’s very hard to change. Cant believe how often this happens.

Also: „please give us new features early“ - „why does this feature keep changing, it’s breaking our production app“

Absolutely love working on trains (high-speed/long distance).

Interesting, I wonder why relative performance differs so much. Maybe I was hitting an edge case in Firefox..

Have you tried Firefox? I tried doing full screen SVG filters and FF was even worse (>1s per frame)

Sure, it is for general stores, but this is more of a coherent brand/art thing. Intuitively limiting supply below demand is also bad for sales, but many companies make it work because it’s part of the „experience“ and hype. It being an experience vs. just a store is probably the motivation here.