Vibe, CFA, FIDO2, EPI, Python, eLoran, OPAQUE,MPA, SAE Level 3, Web

1. Tested the Mistral Vibe CLI, it's quite nice. Haha, I like the retro page design and their color effects. Back to old school!

2. The UX with Controlled Folder Access is something that somebody should probably suffer for... All the error messages are confusing, no clear indication what's causing the problem. No sane information to the end user, nothing informing them about the block. No way to lift the block for the blocked application. User interfaces are bad confusing and basically non-existent. But this helps, only things the user need to know is the specific program name and path: Add-MpPreference -ControlledFolderAccessAllowedApplications "C:\Path\To\App.exe" - I'm sure this is perfectly good for average user. TL;DR; CFA UX is absolutely horrible - Unsurprisingly I'm not the only one claiming so, lol. - It wastes incredible amounts of time and effort.

3. FIDO2 / WebAuthn / Passkeys, new problems. Vendor Lock-in, as usual, it's one of their goals. Bad and confusing UX. Many websites failing with error messages which do not make any sense at all. Not forgetting the SPOF - Single point of failure is major problem. Users could get locked out at any time for multiple reasons. - Credential Exchange Format (CXF) is positive development, but it also makes it then possible to steal the keys.

4. European Payments Initiative (EPI) QR codes allowing SEPA standard instant payments. Sure those should work, but do not. Well, maybe one day, it's possible to pay using QR code in EU. Long discussion. Everyone claims, IT SHOULD WORK... Sure it SHOULD, but practically it does NOT. Interestingly these EPI QR codes are quite good, bad (depends on viewpoint) competitor to digital euro. Both allow digital instant payments. Only key difference is that the EPI based SCT Inst requires online connectivity when Digital Euro does not (based on proposition). kw: SCT Inst, A2A (Account-to-Account)

5. I didn't know Python 3.13 switched to mimalloc (@ Wikipedia), but that's great news for THP and TLB on systems like Threadrippers with lots of RAM.

6. OPAQUE (RFC 9807) (@ rfc-editor.org) - Oh, it made to final RFC already. Nice! I like it. I thought SRP is quite good, but OPAQUE is clearly better. - As I've posted several times, I really hope more platforms and programs would support it. kw: aPAKE, PAKE, Passwords - Long discussion about this with colleagues pros and cons, and recognizing that Personal Access Token (PAT) (@ Wikipedia) are likely needed with some parts of the stack.

7. Microsoft PowerAutomate and M365 Copilot Agent Edit functions are completely broken and both refuse to work. And this situation has been ongoing for a long time. - Thank you for that Microsoft! - Maybe my IP address block is blocked by them. It could have been caused when they had so buggy code that it caused authentication redirection loops. I might have made millions of login requests back then. But it was their fault.

8. In China SAE Level 3 car automation licenses were granted. Interesting times. Well, we all know where this is going to go, but when, is the actual question.

9. Web Servers - Evaluated H2O, HFS and Copyparty for a friend... We ended up setting H2O as front, to handle generic web-server tasks, and then Copyparty behind it for closed user groups and file sharing.

10. Some Python 3.14 tests with concurrent.futures, and InterpreterPoolExecutor tests. This pattern seems to fit very well for many of my Python tasks for utilizing multiple CPU cores for true concurrency. Tested viability and practicality with database, web services, etc. Seems good to go, so I'll know what I'm using next time when project which would benefit from such pattern emerges. I like my code being simple, efficient and especially reliable for production systems. That's also usually something customers also appreciate. No random bugs or crashes (fingers crossed).

11. Something different? Checked out GNSS alternatives like: eLoran (@ Wikipedia), NextNav (TerraPoiNT) (@ Wikipedia) and LDACS (@ eurocontrol.int) and - LDACS (@ ldacs.com) kw: PNT, ICAO + Extra twist Golden Dome (@ Wikipedia)

2026-09-06