billdietrich1

5 ms·

1.
by billdietrich1 4y ago
I "like" plenty of speech I disagree with, if the speech is fact-based and informative and rational and interesting. I enjoy a good debate, I learn stuff, it's good. I don't "like" speech that lies, hates, tri
2.
by billdietrich1 4y ago
Is climate change a problem ? Could you make a product to help address it ? Is malware / phishing / security a problem ? Could you make a product to help address it ? Sure products exist in those fields. But none of them "
3.
by billdietrich1 4y ago
Probably: The search engines and sites you access are reporting "guy in ZIP code 12345 is interested in <x>". Later, Windows says "what ads should I show to this guy who is located in ZIP code 12345 ?". Chances a
4.
by billdietrich1 4y ago
Several of these are just updates of existing laptops to use newer generation of CPU, not "ground-breaking" at all.
5.
by billdietrich1 4y ago
Please check my reasoning; I don't want hardware keys doing FIDO or something because: - would have to have 2 or 3, in case of loss - would have to register each key separately to each account - when traveling, probably would have just
6.
by billdietrich1 4y ago
"Neglecting" nuclear energy is the right thing to do. Nuclear is losing the economic competition. We should be pushing full speed ahead on renewables and storage. Those other countries who supposedly want to buy US nuclear tech
7.
by billdietrich1 4y ago
Answer to "What sites does this work with ?" carefully gives no useful information at all. "Keep both your digital identity and crypto assets in this secure browser extension" sounds like a very bad idea. "Vessel do
8.
by billdietrich1 4y ago
It's going to be the most locked-down and telemetry-based version of Linux you ever saw. Think a Chromebook but far, far worse. Yes, there will be Linux stuff inside it. But it won't be desktop Linux as we know it.
9.
by billdietrich1 4y ago
> 5. Mass migration due to sea level rise Sea level rise is far from the only impact of climate change that will cause mass migrations. Droughts, floods, changes in growing season, changes in temperature, migration or death of fish popu
10.
by billdietrich1 4y ago
Could someone please explain this ? I don't understand what he means: "I don’t think they [Flatpaks] have the security story and I also don’t think they have the ability to deliver the same integrity of execution over time that S
11.
by billdietrich1 4y ago
As a normal home user, I avoid SSO like the plague. I don't want to wake up one day to find that Google has decided I'm a spammer or something, and turned off my Google account, thus disabling my login to 30 other sites.
12.
by billdietrich1 4y ago
Not YubiKey, but: ETrade (now being acquired by JP Morgan) uses the Symantec VIP hardware token. A quick search for JP Morgan 2FA leads me to believe that JP Morgan uses something similar. On my ETrade account, I give username and password
13.
by billdietrich1 4y ago
You could spend 20 minutes reading the list, and come up with 2 or 3 things you want to do right away. A lot of security things are one-and-done: install uBlock Origin browser extension, enable VPN, enable software auto-update. Then they j
14.
by billdietrich1 4y ago
I don't have a threat model. I just have typical data (financial, family, hobbies, etc) and want a reasonable level of protection against all threats (snoops, thieves, scammers, police, govt, etc). So I just use standard best practices
15.
by billdietrich1 4y ago
For most sites I use, JS detracts from the "user experience". I just want to read an article, not deal with accept-cookie popups or ads or menus etc. Even on interactive sites such as my bank accounts, I'd rather have a plai
16.
by billdietrich1 4y ago
Also, I think Google Auth gives no way to make a backup of its data, although outside solutions exist.
17.
by billdietrich1 4y ago
I think tools need to get easier, and be "safe by default". For example, operating systems should be aware of and support third-party encryption such as VeraCrypt. Today, a VC volume may be reported as "unformatted" by
18.
by billdietrich1 4y ago
No, I disagree. Most people are so baffled by computers that they don't want to know "why" or "how things work". They just want to be told what to do, or better still they just want you to make it work. So just te
19.
by billdietrich1 4y ago
I think most people's threat model is the same. They just want to protect all their data against all threats, to a reasonable level of inconvenience. It's too general to be useful. So, instead of trying to come up with a threat m
20.
by billdietrich1 4y ago
No RSS feed ? :-(
21.
by billdietrich1 4y ago
https://www.billdietrich.me/ Static site, handcrafted HTML/CSS/JS. A late-90's look because I want to keep everything simple, portable, able to use locally, and I'm no expert in UI or CSS. https:&#x2F
22.
by billdietrich1 5y ago
Is there no good way to size-cap and rate-limit anonymous accounts ? Maybe not, if the bad guys slowly build up a large mesh of accounts and use bots that use lots of different IP addresses etc.
23.
by billdietrich1 5y ago
But we have anonymous cash transactions, and somehow law enforcement still works.
24.
by billdietrich1 5y ago
Why should you care ? Because maybe your data (with mistakes in it, too) will be used to make decisions about things you want (jobs, insurance), without you even knowing why you got denied. Because often that collected data gets exposed i
25.
by billdietrich1 5y ago
But KYC generally is not required for cash transactions. Why can't we have anonymous digital transactions, as long as they are size-capped and rate-limited ? How is sending $300 through that kind of CBDC system different from me hand