microcosm.blue/car-commit-object-debugger

GPG signature verification

When you’re building software with people from around the world, sometimes it’s important to validate that commits and tags are coming from an identified source. Git supports signing commits and…

Generating a new GPG key - GitHub Docs

If you don't have an existing GPG key, you can generate a new GPG key to use for signing commits and tags.

atproto CAR signature verifier

drop a CAR file, see if its signature can be verified

A DEVELOPER MADE A REAL COMMIT WITHOUT EVER TYPING GIT ADD OR GIT COMMIT -- JUST TO PROVE THE COMMANDS YOU LIVE BY ARE A THIN SHELL OVER A DATABASE YOU'VE NEVER ONCE OPENED 55 minutes from Tim Berglund, a longtime Git teacher and GitHub evangelist, taking the tool apart down to https://t.co/vJNRCmSBb9

A DEVELOPER MADE A REAL COMMIT WITHOUT EVER TYPING GIT ADD OR GIT COMMIT -- JUST TO PROVE THE COMMANDS YOU LIVE BY ARE A THIN SHELL OVER A DATABASE YOU'VE NEVER ONCE OPENED55 minutes from Tim Berglund, a longtime Git teacher and GitHub evangelist, taking the tool apart down to… https://t.co/z8Tf4udInA pic.twitter.com/vJNRCmSBb9— slash1s (@slash1sol) June 4, 2026

Keytrace — One identity, many proofs.

Link your GitHub, domain, and other accounts to your internet handle. Cryptographically signed, user-owned, and portable.

com.atproto.repo.createRecord | Bluesky

*This endpoint is part of the atproto PDS repository management APIs. Requests usually require authentication (unlike the `com.atproto.sync.*` endpoints), and are made directly to the user's own PDS instance.*

Git: The complete guide to sign your commits with an SSH key

Please read the introduction I wrote about why signing your git commits ...

How to Write a Git Commit Message

Commit messages matter. Here's how to write them well.

Link your GitHub, domain, and other accounts to your Bluesky identity. Cryptographically signed, user-owned, and portable.

Breadcrumbs: physical attestations for ecosystem contributions

Hey atmospheric friends, over the weekend I started experimenting with physical attestations, as part of my exploration of an ATScience community labeller. breadcrumbs: physical objects — NFC tags, printed QR codes — that let someone attest to their own participation in something, or let an authority attest that someone did something specific. Two record types separate self-attested contributions (crumbs) from community-authored ones (badges). Lexicons: - `id.breadcrumbs.trail` — self-minted...

GitHub MCP Exploited: Accessing private repositories via MCP

We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows.

[PROPOSED WORK ITEM] DID-KR Key Recovery Extension as a CCG Work Item · Issue #256 · w3c-ccg/community

New Work Item Proposal: DID Key Recovery (DID-KR) Link to Abstract or Draft GitHub Repository: https://github.com/sirraya-labs/did-kr Rendered HTML Specification: https://sirraya-labs.github.io/did...

com.atproto.repo.listRecords | Bluesky

*This endpoint is part of the atproto PDS repository management APIs. Requests usually require authentication (unlike the `com.atproto.sync.*` endpoints), and are made directly to the user's own PDS instance.*

Incorporating Archives

Ready to make it official? Here you’ll find guides, samples and examples to make the process a bit easier.