Kevin Jones
banner
vcsjones.dev
Kevin Jones
@vcsjones.dev
Alexandria, VA.

Losing a rock is better than never having a rock.

Product Security and Cryptography at GitHub / Microsoft. .NET maintainer. Not speaking for my employer.

https://vcsjones.dev ⚫️ https://gh.io/vcsjones
They are “fine”. This one is also, ironically, used as a zoning loophole. They run a LOT of Amazon Fresh deliveries out of this grocery store. But they have to operate it like a grocery store! So they put things on shelves, and delivery folks immediately take them off for delivery.
November 16, 2025 at 11:46 PM
Fortunately our area improved quite a bit since. We did ask the county to put in sidewalks and crosswalks and they did (though it took 3 years) so we can walk to Amazon Fresh and lots of other small shops. It’s still commercial zoned across the street from the neighborhood.
November 16, 2025 at 10:08 PM
When I was on our HOA we honestly looked in to that. It is basically impossible now (at least in VA) due to zoning.
November 16, 2025 at 10:01 PM
Dammit.
November 16, 2025 at 5:51 PM
Thank god this is five ingredients so I can try it over and over fairly easily.
November 16, 2025 at 3:18 AM
8/10 crème brûlée. If I got it at a restaurant I would be happy.
November 16, 2025 at 3:14 AM
Nah.
November 16, 2025 at 2:56 AM
This might be The One. Into the fridge it goes, caramelized sugar comes later.
November 16, 2025 at 2:08 AM
Crème brûlée #3 going in the oven. 🤞
November 16, 2025 at 1:13 AM
This. This is why we have science.
November 16, 2025 at 1:05 AM
Crème Brûlée 2: better. Not perfect by a long shot but you can at least tell this one was supposed to be a crème brûlée. Some uneven cooking despite the bain-marie. 🧐

Going to try a smaller ramekin next time.
November 15, 2025 at 5:29 AM
Honorary mention
November 15, 2025 at 4:48 AM
(Automatic Verification is Apple’s user-facing name for Private Access Tokens). Cloudflare wrote about them here: blog.cloudflare.com/eliminating-...
Private Access Tokens: eliminating CAPTCHAs on iPhones and Macs with open standards
Today we’re announcing Private Access Tokens, a completely invisible, private way to validate that real users are visiting your site.
blog.cloudflare.com
November 13, 2025 at 4:53 PM
In theory “Automatic Verification” is supposed to solve this, but that requires website or CAPTCHA provider support, and it seems to have not exactly taken off. support.apple.com/en-us/102591
About Automatic Verification - Apple Support
Learn how Automatic Verification makes signing in to apps and websites more convenient, private, and accessible on your iPhone, iPad, or Mac.
support.apple.com
November 13, 2025 at 4:50 PM
They do “work” insomuch that a web page will load, but Private Relay is starting to get VPN-like IP reputation, so you start seeing a lot of CAPTCHAs or things just flat out won’t load.
November 13, 2025 at 4:47 PM