TODO.md: updates, misc cleanups

1 files changed, 5 insertions, 5 deletions

diff --git a/TODO.md b/TODO.md
index 99c7089..232ab2e 100644
--- a/TODO.md
+++ b/TODO.md
@@ -12,10 +12,6 @@ this stuff may not make any sense.
 * add sticky footer:
   https://css-tricks.com/couple-takes-sticky-footer/
 
-## projects
-* gemboree
-* themble
-
 ## posts
 * animated svg, another example here:
   - <https://old.reddit.com/r/programming/comments/t45aqe/5_things_you_dont_need_javascript_for/>
@@ -97,6 +93,7 @@ this stuff may not make any sense.
   anscoms quartet
   base rate fallacy
   "law of small numbers" from "thinking fast and slow": http://psychology.iresearchnet.com/social-psychology/decision-making/law-of-small-numbers/
+  selection bias (elections and polling)
 * retro gaming handhelds: psp, 2dsxl, rg350m, rgb10 max
 * lvm thin provisioning (see notes from x1.txt and linked gist)
 * log4j and dependency usefulness as a function of time for projects
@@ -187,7 +184,6 @@ this stuff may not make any sense.
 * hq (~/git/hq)
 * secure C wiki is confluence!?!?
   <https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Coding+Standard>
-* write about go-import support <https://go.dev/ref/mod#vcs-find>
 * fuzzing (afl)
   <https://www.fuzzingbook.org/>
   <https://wfuzz.readthedocs.io/en/latest/>
@@ -203,6 +199,7 @@ this stuff may not make any sense.
   ref: Introduction to Probability with Statistical Applications, ch 2.5
   1e10/81 (1234567890.1234567890)
   gambler's ruin (intro to prob, ch 3.5)
+  constant-time fibonacci
 * fzf, ripgrep
 - https://krebsonsecurity.com/2022/08/the-security-pros-and-cons-of-using-email-aliases/
   (email aliases, suggest whitelist instead of blacklist)
@@ -222,6 +219,7 @@ this stuff may not make any sense.
     https://arstechnica.com/information-technology/2022/08/plex-imposes-password-reset-after-hackers-steal-data-for-15-million-users/
     https://old.reddit.com/r/programming/comments/wxx674/password_management_firm_lastpass_was_hacked_two/
     etc
+  - passkeys (good replacement, too complicated internally)
 - compare sanitizer api, dompurify, fastest htmlesc
 - summary of shrinkage (static site, minification, figures with multiple
   sources, mod deflate, mod brotli, http2, adjusting content types)
@@ -233,6 +231,7 @@ this stuff may not make any sense.
   - see k3-notes.txt for info on brotli
   - headers
   - build hooks?
+  - go-import support <https://go.dev/ref/mod#vcs-find>
 - tiny-binaries redux w/go 1.19, point out grype scanner output for
   minimal images
 - browser addons:
@@ -318,6 +317,7 @@ this stuff may not make any sense.
 - <https://old.reddit.com/r/programming/comments/yd8pix/information_for_decisionmakers_considering_the/>
 - <https://www.unep.org/resources/emissions-gap-report-2022>
 - <https://www.theregister.com/2022/10/29/kathleen_booth_obit/>
+- <https://www.lawfareblog.com/securing-open-source-software-act-good-whatever-happened-legal-liability>
 
 ## done
 * add project folders