4 ms·

Because people want to play games and https://xkcd.com/1200/ https://xkcd.com/1200/

gnulinux 7y ago
I don't get this xkcd. If you steal my computer while I'm logged in you can't log into my bank account of you don't know the password. Which bank has indefinitely long sessions? Mine's time out after like 10 mins of inactivity. The only plausible attack scenario is if you steal my computer while I'm logged into my KeePassX. It has all my passwords visible. But that session times out as well.
- deleted 7y ago
  [deleted]
- oldmanhorton 7y ago
  I assume most people use the browser built in password manager with no master password. If you can launch chrome, you're in.
  - zwily 7y ago
    Safari’s password manager requires TouchID or entering your computer password on every password retrieval.
    - mrkramer 7y ago
      Chrome's as well.
- geofft 7y ago
  There's two didn't attack models, "steals permanently" and "runs code on and returns to you" (which includes both "steals from your hotel room and puts back" or "installs malware on"). Yes, for the first one it's hard to get to the bank account and I agree the comic is inaccurate. For the second, it's very easy to install a keylogger or a cookie-logger or a malicious browser extension or whatever. Riot installing a kernel module is more like the latter.
- valiant55 7y ago
  I mean, if you are logged into your email that's pretty much game over for most sites including possibly your bank. Just request a password reset and change it to whatever you'd like.
- kgwxd 7y ago
  title="Before you say anything, no, I know not to leave my computer sitting out logged in to all my accounts. I have it set up so after a few minutes of inactivity it automatically switches to my brother's."
fulafel 7y ago
This XKCD point is not wrong, but it's also a kind of whataboutism: Windows as used by most users is not very good at protecting user data since unsandboxed applications are typically all run as the same user with free access to all the account's files. Most platforms are edging towards sandboxing applications, with OS X app store, UWP, and the various Linux snap/flatpak/appimage etc things. Web apps and iOS/Android have their own tings.
- swinglock 7y ago
  But this is literally only about Windows. It's a Windows kernel module used for a Windows only video game. What do you call that fallacy?
  - jsjddbbwj 7y ago
    These kernel mode drivers would also exist for Linux if someone actually made games for Linux.

I don't get this xkcd. If you steal my computer while I'm logged in you can't log into my bank account of you don't know the password. Which bank has indefinitely long sessions? Mine's time out after like 10 mins of inactivity. The only plausible attack scenario is if you steal my computer while I'm logged into my KeePassX. It has all my passwords visible. But that session times out as well.

deleted 7y ago
[deleted]
oldmanhorton 7y ago
I assume most people use the browser built in password manager with no master password. If you can launch chrome, you're in.
- zwily 7y ago
  Safari’s password manager requires TouchID or entering your computer password on every password retrieval.
  - mrkramer 7y ago
    Chrome's as well.
geofft 7y ago
There's two didn't attack models, "steals permanently" and "runs code on and returns to you" (which includes both "steals from your hotel room and puts back" or "installs malware on"). Yes, for the first one it's hard to get to the bank account and I agree the comic is inaccurate. For the second, it's very easy to install a keylogger or a cookie-logger or a malicious browser extension or whatever. Riot installing a kernel module is more like the latter.
valiant55 7y ago
I mean, if you are logged into your email that's pretty much game over for most sites including possibly your bank. Just request a password reset and change it to whatever you'd like.
kgwxd 7y ago
title="Before you say anything, no, I know not to leave my computer sitting out logged in to all my accounts. I have it set up so after a few minutes of inactivity it automatically switches to my brother's."

fulafel 7y ago

This XKCD point is not wrong, but it's also a kind of whataboutism: Windows as used by most users is not very good at protecting user data since unsandboxed applications are typically all run as the same user with free access to all the account's files. Most platforms are edging towards sandboxing applications, with OS X app store, UWP, and the various Linux snap/flatpak/appimage etc things. Web apps and iOS/Android have their own tings.

swinglock 7y ago
But this is literally only about Windows. It's a Windows kernel module used for a Windows only video game. What do you call that fallacy?
- jsjddbbwj 7y ago
  These kernel mode drivers would also exist for Linux if someone actually made games for Linux.