Amazon allows 2FA, but I’m pretty sure they don’t require it.

I have seen some that seem to be doing that kind of thing, but many others that will reject a bad username before asking for a password.

To double check, I just now tried putting a known bad email address into the username field for amazon.ca and was not then asked for a password, but told that no account could be found.

My possibly flawed understanding of login security is that a failed login should reveal nothing about why the login failed in order to prevent information leakage that can be exploited.

And yet more sites do it, even on desktop. As far as I can tell, most of them are also doing it in a way that breaks security by validating the username before asking for the password.

I saw that. When I get a bit more time, I’ll dig through their custom layout to see what I can figure out.

Thanks.

I’m going to try Unexpected. The swipe for symbol reminds me of my favourite on-screen keyboard, Fitaly. Unfortunately, nobody ever made it available for modern smartphones.

Edit: The main thing I see missing is the option to swipe for uppercase. That may be possible in settings, but I didn’t see it in a quick glance.

Oh, probably. I just hope it 30 years before my death. I’m 67. :)

Well, if you can tolerate Google, they actually offer this. If I don’t interact with my accounts for 3 months, it will send the email I’ve composed to designated recipients.

Thanks!

It looks like I need a Windows machine (or VM or wine). Is that correct?

You had me at “BASIC”! I’m going to check it out.

I think that BASIC has historically been my most productive language. My favourite implementation was something called “Z-Basic”, a compiled BASIC with device-independent graphics that could run on and target Apple//, Mac, and PC.

I’m basically a doofus when it comes to web. I had no trouble using Zola as the generator with Abridge and Terminimal as themes.

Me too.

I found that my 2600 t-shirt keeps them at bay. First, they ask what 2600 is, then they make sure that nobody allows me near their computers.

I didn’t suggest otherwise. I was merely pointing at a couple of examples where some pretty smart, pretty experienced people used Go to successfully implement entire collections of algorithms in some very performance-sensitive systems. It’s just by coincidence that I chose those examples because that is where my study is right now. Ask me in a year and I might point to your project as an example when the next person is asking for similar advice.

If Go isn’t going to be fast enough to perform your task, then you’re probably going to be sorely disappointed when you finally get the performance you’re after and then have to stick it at the end of a wire with all kinds of stuff between you and your end users:

Operating systems, databases, hardware, virtual machines, containers, webservers, firewalls, routers, HTML/CSS/whatever, DNS, certificate authorities, more routers and firewalls, ISPs, modems, more routers and firewalls, WiFi connected machines of all kinds, and random browsers implementing any of several different rendering engines.

Quite frankly I can’t imagine a language that won’t offer enough performance to meet your needs in that environment.

The CSS also came, with the idea that HTML should focus on text information while CSS should do so on the visual design.

My biggest beef with CSS is that it’s on the wrong end of the wire. What ever happened to the idea that the client is in charge of rendering?

Or maybe it’s that the clients have abdicated their responsibility: the browser included with OS/2 Warp had a settings page that let me set the display characteristics of every tag in the spec. Thus, every site looked approximately the same: my font, my sizes, my indents, my spacing, whether images displayed (or even downloaded, I think) and whether text split at an image or wrapped around it. And it’s not like I had to customize everything for each site: if you used a tag my browser recognized, my browser took over.

Bluesky Social, or at least their PDS (personal data server) uses Go and their Docker package includes Caddy, a webserver written in Go.

I don’t know what you’re doing, but I have difficulty accepting that Go cannot meet your performance requirements.

1. I’m a programmer, so I must know how to get X done in Y software.

2. I don’t use <social media app> or <messaging system> so I’m some kind of Luddite and can’t possibly know anything useful about computers.

One thing that fascinates me about #1 is that the absolute raw dependency people have on Google doesn’t seem to ever lead to searching for a tutorial.

That IT subject matter like cybersecurity and admin work is exactly the same as coding,

I think this is the root cause of the absolute mess that is produced when the wrong people are in charge. I call it the “nerd equivalency” problem, the idea that you can just hire what are effectively random people with “IT” or “computer” in their background and get good results.

From car software to government websites to IoT, there are too many people with often very good ideas, but with only money and authority, not the awareness that it takes a collection of specialists working in collaboration to actually do things right. They are further hampered by their own background in that “doing it right” is measurable only by some combination of quarterly financial results and the money flowing into their own pockets.

In the spirit of “-10x is dragging everyone else down” I offer my take on +10x:

It’s not about personal productivity. It’s about the collective productivity that comes from developing and implementing processes that take advantage of all levels of skill, from neophyte to master, in ways that foster the growth of others, both in skill and in their ability to mentor, guide, and foster the growth of others. The ultimate goal is the “creation” of more masters and “multipliers” while making room for those whose aptitudes, desires, and ambitions differ from your own.

That is something I just don’t get. I’m a hobbyist turned pro turned hobbyist. The only people who I ever offered my services to were either after one of my very narrow specialties where I was actually an expert or literally could not afford a “real” programmer.

I never found proper security to have any impact on my productivity. Even going back to my peak years in the first decade of this century, there was so much easily accessible information, so many good tutorials, and so many good products that even my prototypes incorporated the basics:

• Encrypt the data at rest
• Encrypt the data in transit
• No shared accounts at any level of access
• Full logging of access and activity.
• Before rollout, back up and recovery procedures had to be demonstrated effective and fully documented.

Edited to add:

It’s like safety in the workplace. If it’s always an add-on, it will always be of limited effectiveness and reduce productivity. If it’s built in to the process from the ground up, it’s extremely effective and those doing things unsafely will be the productivity drain.

Oops! I guess I wasn’t paying close enough attention.