FatActor

14 ms·

91.
by FatActor 4y ago
https://www.grammarly.com/blog/appeal-to-authority-fallacy/
92.
by FatActor 4y ago
> What makes you think this would do anything more than assuage your fears through security kabuki? And > But after careful evaluation I've gone to them and people much more experienced in security have also moved to them as well
93.
by FatActor 4y ago
It's turtles all the way down. Would you rather NOT have the option for other experts to see the code?
94.
by FatActor 4y ago
Thank you for the link. > It's also been built by people who are respected in the security industry. This means almost nothing. It is an appeal to authority. Experts can still miss things. Yes, it is better than experts saying a pro
95.
by FatActor 4y ago
How do we know 1Password doesn't have similar glaring oversights like LP? We can't audit their code unless it is open source? I'm not going to just believe them at face value because some random internet personality says so.
96.
by FatActor 4y ago
I've been reading about this intently since the press release from LP because I decided to switch to a "real" password manager over the holidays. I've had a quite a few misconceptions corrected by HN. After using both 1p
97.
by FatActor 4y ago
The secret key is is 35 random characters that are assigned to your account when you set it up and must be appended to your password to decrypt. Whenever you log in, you need to enter your password and the key. The browser extension will ca
98.
by FatActor 4y ago
Sen. Wyden from Ore. frequently speaks at DefCon and when he answers Q's he also asks lots of Q's. He talks with that odd (IMHO cringey) politician cadence, but he's a smart dude when it comes to tech, especially privacy.
99.
by FatActor 4y ago
Why is virtue signalling bad? It's demonstrating that you care about something related to human dignity. Do you really think that is so awful that you laugh at it? What would have been better virtue signalling?
100.
by FatActor 4y ago
Comparing corporations from 80 years ago under a regime that was toppled to a shitty CEO from today is utterly meaningless. The point of conscientious spending is to affect change. Not buying an Audi today does not send a message to Nazi Ge
101.
by FatActor 4y ago
Can you explain why thousands of years of aboriginal society doesn't qualify as a civilization?
102.
by FatActor 4y ago
Sweet. I've been looking for this. I decided to ditch my home-grown solution and switch to a real manager this week. One note: 1Password uses WebAuth for Yubikey and LastPass uses text input. This makes LastPass work across *remote ter
103.
by FatActor 4y ago
That's not the discussion here. Just because something is a law does not mean it is aligned with the ethics we have chosen as a society. There are thousands of laws written by wealthy people to protect their wealth. This is one of them
104.
by FatActor 4y ago
Musk's big win was making EVs luxury cars and having rich people subsidize his research (along with billions from the gov't). That gave him a lot of space to collect real-time research data for years. It is interesting that you ma
105.
by FatActor 4y ago
1pw really doesn't play nice with yubikeys. LP has no issues (i think it doesn't use WebAuth, which 1P does). 1P UI is nicer. LP is a bit clunky. Not being able to add notes/docs to 1P in the extension kinda stinks ... why ca
106.
by FatActor 4y ago
Can't edit so I'll reply to myself. Thanks, folks, I should have jsut RTFA'd I misunderstood secret key as a failsafe, it is not: https://support.1password.com/secret-key-security/ I installed both LastP
107.
by FatActor 4y ago
The secret key bothers me. A lot. Where do you store this mission critical piece of data? This is a value you cannot memorize (unless you are Rain Man) and it can be used to gain access to your account. The whole point of a password manager
108.
by FatActor 4y ago
Mass-produced consumer EVs are a relatively new tech and they will have problems for another few decades and get better because technology gets better over time (see: the past 1000 years). And I'm not a fanboy by ANY stretch of the ima
109.
by FatActor 4y ago
The idea of describing an opposing view as derangement is disingenuous because it implies you know the mental state of the person, and it also completely avoids having to discuss the merit of the argument by derailing it. It is also questio
110.
by FatActor 4y ago
Color me shocked that you're completely ignoring the merit of the post. Stay on target, Red 5. This is about Tesla selling dangerously flawed software and misnaming it. This doesn't fall under what lawsuits would refer to as &quot
111.
by FatActor 4y ago
I use a unique email address for every account I create on my domain. My provider (runbox) is so good at spam filtering, I can't tell if using unique emails has benefited me in any way. The only address that ever gets spam is the one I
112.
by FatActor 4y ago
Granted this isn't even a well-thought-out essay, it is someone trying to research a quote. I don't see that as click-bait. To counter your point: do you refer to "Popular Science" as news? or "Scientific American&q
113.
by FatActor 4y ago
Not sure what country you are posting from, but here in the US about 40% of one of our two political parties thinks the other is a bunch of satanic baby-blood drinking pedos. Dismissing someone for talking bout conspiracy theories is overlo
114.
by FatActor 4y ago
I'm trying to understand how Top-N frequency distribution flattens and becomes less useful as search space increases. It is a both a statistical and a psychological issue. If you can't help don't comment.
115.
by FatActor 4y ago
If you read any topic on password managers on HN, there is very little technical discussion, its emotional and grandstanding. A majority of the comments tell people why their password manager sucks and your scheme is the best. It's any
116.
by FatActor 4y ago
How is it nitpicking? The distribution tail effectively goes to a frequency of zero. Increasing to 10M doesn't solve the problem because the space is so vast, by the time you get to a fraction that has the similar area under the curve
117.
by FatActor 4y ago
First, where do I find the most popular one million 12-character passwords that use A-Z/a-z/0-9? Second, the top 1M of 6/7/8 character passwords have a statistically higher probably of being the correct password than the
118.
by FatActor 4y ago
I missed that part. What is the problem about URL exposure? EDIT: all three replies to this comment are about sex-shaming people via their email address, ip, home address. hardly pearl clutching. go to DefCon some day, you'll see how t
119.
by FatActor 4y ago
This is not the worst case scenario. This is literally the best case hack scenario. Why? Because we already know that encrypting something using their strategy is essentially uncrackable. AES256 is quantum resistant. The worst case would