Matt's Headroom

I’ve been largely hands-off with LLMs after testing the waters from time to time and not finding much utility in tech that can inherently lie to you.

I spotted Anthropic’s offer of six free months of Claude Max 20x for open-source maintainers today.

How I saved $60/yr on my family password management: I unironically think physical password books like these can be suitable solutions for people who aren’t yet ready to embrace software credential managers.

With the game calling itself “Prince of Persia” I initially thought it would somehow tie in to The Sands of Time trilogy from way back on the GameCube; I couldn’t quite make sense of this when I also heard that The Lost Crown was a metroidvania.

Astro Bot, just like Astro’s Playroom before it, wraps very responsive platform controls around an absolutely adorable visual aesthetic.

Talk about a visual aesthetic in search of gameplay.

There was some recent discourse about passkeys that bemoaned that they have so many issues that it’s better to stick with a password manager.

## DescriptionAuthentication is a complicated problem with ever-creeping scope.

## DescriptionHave you wondered about where to start with implementing FIDO for your web sites and services?

## DescriptionCome hear answers to five common “how do I…” questions that Relying Party developers ask when adopting FIDO2-based authentication.

## DescriptionAuthentication is a complicated problem with ever-creeping scope.

## Back to barbecuingIt’s been nearly 10 years since the last time I grilled anything at home thanks to pesky HOA rules at our last place.

Just a quick update, I’ve added all of the talks I’ve given at industry conferences since 2022.

## DescriptionThere have been a few blog posts (and resulting social media and forum discussions) going around the past few weeks about #passkeys, mostly painting them (or organizations who have been working hard to bring passkeys to users all over the wo…

A week or so after writing about passkeys support on the Quest 3 I had spent enough time with the device to know that it just wasn’t meant to be.

I recently appeared on the Software Engineering Daily podcast to talk about my work on SimpleWebAuthn!

I picked up a Meta Quest 3 thanks to Apple Vision Pro launch day hype, ostensibly to see what the latest and greatest in consumer VR looked like without dropping $3500 on a single gadget.

I played the original Ori and the Blind Forest a couple of years ago and appreciated its metroidvania for having tight movement and combat controls, and not trying to be too clever.

This game series flew completely under my radar all these years.

When WebAuthn first hit the scene, Relying Parties (RP’s) could choose to launch navigator.credentials.create() with one of two values for authenticatorAttachment (introduced in WebAuthn L1): "cross-platform" would have browsers guide users through securi…

## DescriptionWe started with passwordless, but why stop there?

## DescriptionHave you wondered what the relationship is between passkeys and WebAuthn?

## DescriptionIn this on-demand webinar we will discuss: An overview of the state of the passkeys and their progress toward replacing passwords The merits of WebAuthn (the foundation of passkeys), as an authentication method Passkey’s role in Duo’s Passwo…

What the hell is this game?

SimpleWebAuthn debuted in May 2020 as three interconnected libraries that aimed to make WebAuthn simpler to use across browsers and “NodeJS + CommonJS” applications.

Security keys are great!

There wasn’t a lot of news about passkeys at WWDC23.

Apple’s Vision Pro hardware announcement at WWDC23 was of course quite the spectacle.

## DescriptionCan you believe it’s been over a year since passkeys were announced?!

## DescriptionOver the past few years we’ve seen a meteoric rise in MFA adoption.

I was asked to be a guest on the Mac Admins Podcast, and Episode 304 is now live!

WebAuthn defines two possible values that Relying Parties can set to help users understand for which account they’re registering a credential and using in subsequent authentications: user.name (spec) user.displayName (spec) It was unclear to me from readi…

Edit (May 2025): Hello from 2025!

A year ago today, for no real reason I thought, “can I close all three rings on my Apple Watch for a whole year?”

Stray is a “cat adventure game” that I’d followed development of for over seven years!

I think I remember this game being touted as a true demonstration of the next-gen capabilities of the PS5.

## DescriptionYou’ve decided to “go passwordless”, but your users are confused by it all: “Why is my browser asking me to choose between Security Key or This Device?”

On October 12, 2022 Google announced the availability of a beta version of their upcoming passkeys implementation.

It’s been a few months since my last posts about Apple’s passkeys implementation (here and here).

I originally started this game back just before Elden Ring came out.

I’d missed playing all the other God of War games growing up for lack of a PlayStation console.

Testing passkey registration with “direct” attestation and tracking what happens.

At WWDC 2022 Apple released a session simply titled, “Meet passkeys”.

On May 5th, 2022 the FIDO Alliance coopted World Password Day (created by Intel Security in 2013, as it turns out) with its “Less Passwords Day”: Headlining this tongue-in-cheek reveal was the actually interesting announcement that Apple, Google, and Micr…

Last year at WWDC 2021 Apple announced a tech preview of their upcoming “passkeys”.

## NotesMy initial reaction to this game, from previews to launch, was “ah, another FromSoft game in the vein of Dark Souls?

## DescriptionWith widespread platform support for FIDO, it’s now easier than ever for developers to integrate FIDO strong authentication into their websites or apps.

I enjoyed the heck out of this game!

I brought my daughter grocery shopping with me tonight.

I recently rearranged the blog’s posts file structure to take advantage of Hugo’s Page Bundles feature.