Although when setting this up, Gmail really make you feel like they might pull support at any minute.
I wonder if Fastmail could log you in to Gmail in a way that's consistent with Google's security model, similar to how you can "log in with Google" on many services. I'd much prefer it over the app password thing.
> I wish there was a stronger differentiation between syncable and device-bound passkeys.
But there is no difference. I'd prefer if services just let me generate a passkey and leave it entirely up to me how I manage it. Whoever setup granny's device should have done so with a cloud based manager.
I think Google tries to make some confused distinction, or maybe that has more to do with FIDO U2F vs FIDO2. There you can add either a "passkey" or a "security key", but iirc I added my passkey on my security key so... yeah
A whole paragraph on how freakishly ugly he was. I google images and he looked perfectly normal and fine in the portraits which I assume at least some were accurate.
I've been using my aeropress a lot lately after having it mostly collect dust for the better part of a decade. What I've found, as I've hopefully matured a bit since I got it, is that my problem with it was always more of a problem with myself; being a bit of a contrarian. The thing is just too revered, and for really no good reason. People are so damn pretentious about it with their recipes and championships.
James Hoffman, mentioned in the OP, has an excellent method of using it though. Removing all the bullshit and serving a slap in the face to the culture around it, I've actually come to enjoy this device using his no-nonsense "recipe".
I still prefer a good pour over but sometimes a quick plunge with the aeropress hits the spot.
Also not a web person, but my guess is that the bottle app makes the requests from the "server" end, so even though you're accessing the app in your browser, the browser is only communicating with the local app server and thus isn't in the way to enforce CORS.