⚡️⚡️ BIG THREAD! ⚡️⚡️ - GMO4DUMMIES CONCLUSIONS
On web-archive: https://t.co/RGxGjJm5Jc or direct: bit. ly/2LRL8Wt [no spaces course]
The initial GMO4D is on webarchive too: https://t.co/CFAhGWPahB !
Also direct: bit. ly/35RyHAE [no spaces]

New iPad Pro has Face ID, thinner bezels, squared off edges. A new touch sensitive Pencil that magnetically attaches to the edges. Thin enough to have a camera bump. Uses the XR's LCD cornering techniques.

The new 12.9" iPad Pro is physically smaller than the old one with the same screen size. It's roughly the same size as an 8.5 x 11 piece of paper. 5.9mm thick.

10 billion transistors in the A12X. 8-core CPU. 7-Core GPU. 35% faster single-core performance. 1000x faster GPU. iPad Pro is Xbox One S class GPU performance in "94% smaller" package, Ternus jokes.

Apple's silicon team is just dropping bombs every event.

live shot of Apple's silicon team

iPad Pro gets USB-C for up to 5K external displays and enables charging out to iPhones. Wild.

Just published 15,000+ words on security keys. 🔐📱💻

With SIM attacks at their highest, now is a great time to take a closer look at your online security.

Removing SMS from your two-factor auth is a start, but authenticator apps have downsides too...

https://t.co/Dk0MPJHL2V

Just look at these headlines from recent SIM swap and port attacks.

It's all too established for attackers to find ways to socially engineer control of your phone number and start gaining control of your accounts.

I first talk about some general security tips.

Unfortunately not all websites let you remove your phone number from accounts.

You may consider migrating your phone carrier to @googlefi , which requires email account access to do anything (and can be locked down with security keys and even Advanced Protection)

Beyond SMS, I talk about issues that TOTP authenticator apps (the code generators) have as a form of two-factor auth. They're so, so much better than relying on SMS for your second factor but they still have issues like utilizing shared secrets and lacking phishing prevention.

Enter security keys!

Utilizing public key cryptography they don't have any shared secret between the client and the server. They prevent phishing by taking the website domain into account.

Even if you get tricked by a clone phishing website, your key won't.

The 2018 State of JavaScript survey is out. They got 20,000 responses and have some delicious, delicious data. I'mma thread in some highlights:

First up: JavaScript flavors. There's TypeScript at 47% adoption, a tad higher than npm's own survey results (which said 46%). npm's survey is coming up again soon and will ask about TypeScript in a lot more detail.

I really, *really* like SoJ's "would not use again" question, which lets people who've abandoned a tech self-identify. This is noticeable in the graph above with Flow users -- 41% of people who've used Flow say they wouldn't use it again.

Now JavaScript frameworks. It's been a full year since npm's survey, so these numbers differ from ours in the directions I expected:
React 65% (vs. 60%)
Vue 29% (vs. 24%)
Ember 5% (vs 4%, I was expecting a bigger rise)

But there's a shocker in here: Angular.

npm's survey had Angular at 40% last year and SoJ has it at either:
- 58% (if you include those who don't want to use it again)
- 24% (if you count only those who like it)
Since npm's question didn't ask if they intend to *continue* using it I think that might explain this.

A long time ago I coded up a feature for SocialCoder which converts a link - any link - to a short URL. I use it all the time for sharing links to volunteer profiles and to volunteer opportunity listings.

The feature doesn't care what the link contains, it just hashes the URL, including any query params, and returns a shortened code.

More recently, around Christmas time, I added another feature where I can click a button to send a template notification to a charity that their new listing has been reviewed and published. I call it a next-steps email.

For the past few weeks, its all been working well. Its nice to keep automating things that previously were done by hand.

Fast forward to today.

A new opportunity listing is posted by a charity.

I review and publish it, tweet about it, then click a button to send the charity an emailed notification of next steps.

I read two-and-a-half decades worth of Jeff Bezos’s Amazon shareholder letters.

It’s like a mini MBA.

Here I’ve pulled out a free guide for startups, investing, marketing, and “web3”🧵

(It’s a thread, not an ebook)

First, why the focus on web3?

It’s the mid 90’s. A 30-year-old Jeff Bezos is trying to raise money for Amazon. And investors are wondering,

“What’s this internet thing?”

Fast forward, the year is 2022, and folks today are wondering,

“What’s web3?”

Now, a little background…

In 1994, Bezos quit a well paying job to start Amazon.

It wasn’t an easy decision. But Bezos used his famous “regret minimization framework.”

In other words, he didn’t want to be 80 and regret not doing what he really wanted to do.

But what did he want?

Bezos didn’t set out to disrupt retail from the outset.

He simply wanted to come up with a business idea based on the internet and then let the internet grow around it while he kept working on it.

Today, that idea is worth $1.7 trillion and counting.

Moving on to the lessons…

Each year since 1997, Bezos has written an annual letter to Amazon shareholders.

These letters reveal a great deal of lessons and secrets behind his massive success.

So what are they?