TeMPOraL

24 ms·

541.
by TeMPOraL 3mo ago
> Setting your preferred password/passkey manager on Android 17 Which approximately no one is using yet. Maybe in two weeks, when the new Samsung flagships roll out, to two months, when they start updating current generation devic
542.
by TeMPOraL 3mo ago
> Of course it is conceivable to want to directly access the plain text password for reasons you mention, although that would be exceedingly rare (at least for me). It's a daily occurrence for me, because especially because of g
543.
by TeMPOraL 3mo ago
> we (as a global society) can't decide who that should be in the web of trust? Our banks? Governments? Schools? Doctors at time of birth? Yes? I mean, that's what literally is there by default in every country. They're
544.
by TeMPOraL 3mo ago
Is the "phishing resistance" just inability to view and manage your own data? That's a bug, not a feature then.
545.
by TeMPOraL 3mo ago
It's still ignoring one of the main features of passwords for regular people, which is authority delegation via password sharing , aka. "could you please log in to my ${service} and do ${something}, my password is ${password}..
546.
by TeMPOraL 3mo ago
No, the majority will not. If through some miracles, passkeys gain sudden and wide adoption, there will be a day of reckoning come around the next mobile refreshment cycle, maybe earlier. People break their phones . That is normal experien
547.
by TeMPOraL 3mo ago
Does it provide a way to edit or at least view it?
548.
by TeMPOraL 3mo ago
That's because it actually works, so the dismissals are doubly silly in that they fly in the face of trivially observable reality.
549.
by TeMPOraL 3mo ago
> How can you be sure that the undo stack is in sync with the clipboard? Simple: they're not meant to be. Undo stack and clipboard are orthogonal. It's like foundational rule of computing.
550.
by TeMPOraL 3mo ago
Maybe that's a point in favor of LLMs? "XY problems" are my pet peevee, because nearly universally whenever I see one called out, it's actually the responder not being able to comprehend that the asker may actually just
551.
by TeMPOraL 3mo ago
And/or maybe the vendors were annoyed that people would lend the keys anyway, refusing to accept that it is normal because that's how delegation of authority works in real life too. House keys are also things you often lend to a
552.
by TeMPOraL 3mo ago
That's the point: passkeys, and even 2FA, address rare and unlikely threat scenarios, while defeating most common use cases (delegation by sharing credentials), and making people vulnerable to most common threats (like, losing or break
553.
by TeMPOraL 3mo ago
Humanity having millennia of experience securing them: also yes.
554.
by TeMPOraL 3mo ago
> Major password managers don’t even allow you to export your passkeys to a file that you can read/backup yourself That's a red flag to me. It's enough that phone backup systems go out of their way to prevent you from ac
555.
by TeMPOraL 3mo ago
Password managers are themselves cross-device footguns and I could easily write the same headline for them myself. I've been working in tech for 20 years now, and I don't use them. ETA: Well I do use auto-fill in browsers/mob
556.
by TeMPOraL 3mo ago
Also from experience, most sites will implement it in every wrong way possible. For example, all the major sites that allow the total of 1 active TotP authenticator app - trying to add one forces to delete the other. Which is fine while you
557.
by TeMPOraL 3mo ago
That's my point: it's not a consequence of connecting a monitor. An external element is making it look like such. This difference tells you that, for example, you cannot fix the problem by fixing the monitor, because the problem
558.
by TeMPOraL 3mo ago
I disagree, the mechanism is the only important thing. Everything else is storytelling and superstition.
559.
by TeMPOraL 3mo ago
ToS are usually not worth the toilet paper they're printed on. They're not legally binding.
560.
by TeMPOraL 3mo ago
Indeed.
561.
by TeMPOraL 3mo ago
The point is that frequent transitions seem to incentivise rhetorical instead of literal backstabbing.
562.
by TeMPOraL 3mo ago
It's propagating in the runtime state - it's a "Trusting Trust" thing.
563.
by TeMPOraL 3mo ago
Here's my real unpopular opinion: the actual value of democracy is bloodless transition of power. Everything else is window dressing.
564.
by TeMPOraL 3mo ago
Those details are the only thing that matter. Without them, all you have is superstition.
565.
by TeMPOraL 3mo ago
20 years ago people would've called it a trojan horse. But then, by standards of two decades ago, every website that cannot legally avoid showing a GDPR popup would be classified as malware. As it should be today. Alas, standards have
566.
by TeMPOraL 3mo ago
> Yeah, I commented on the McAfee LG thread but the stuff that comes bundled with hardware is embarassing. I don’t know how Razer, Logitech, nvidia, MSI, asus, etc get away with it. The stuff is awful, even their “good” software. Well,
567.
by TeMPOraL 3mo ago
My point is not to shift the blame to Microsoft; it's primarily LG that's at fault here. My point here is simply that it's not the monitor that is installing this . Neither the malware nor the URLs to malware exist on the de
568.
by TeMPOraL 3mo ago
You too deserve to eat. Does it mean we're all supposed to pay you in perpetuity for that HN comment you just posted, because we read it and it's encoded in our brains now?
569.
by TeMPOraL 3mo ago
> but illegal to train on output of LLMs. Since when?
570.
by TeMPOraL 3mo ago
It's not meant to do anything about LLMs. It addresses the procurement of training data. I'm glad the courts demonstrate some basic lucidity that sadly seems to have escaped tech discussion sites some time ago.

More ›