cmdli

12 ms·

121.
by cmdli 3y ago
Where are they accessing porn that doesn’t already restrict all of Reddit? I feel like schools wouldn’t allow either.
122.
by cmdli 3y ago
I mean, 3rd party developers could already restrict NSFW content, so I don’t think forcing it on them is much of a help…
123.
by cmdli 3y ago
This is something that would be very nice to support, and saving to just a local file and allowing users to use their own storage mechanisms is definitely an intended use case. Right now it stores the entire vault encrypted on disk, but I w
124.
by cmdli 3y ago
Generally, the idea is that the private keys are stored on a TPM chip so they cannot be exported for security reasons, similar to a YubiKey or a crypto wallet. I know Apple and Google are looking into trying to allow users to somehow export
125.
by cmdli 3y ago
I've been working on passkeys for about a year now, and from my experience passkey support is fairly inconsistent. Every website+browser+OS combination can do things slightly differently or ask for a different set of features from the
126.
by cmdli 3y ago
Just because this is a common misunderstanding of passkeys, I'm going to state it again here: passkeys don't have to be locked to a hardware chip inside your device in order to work. It is entirely possible to have use passkeys
127.
by cmdli 3y ago
This is something that I think is a bit of a security tradeoff. Hardware-based keys are absolutely more secure than software ones, but they come with significant usability limitations. I worry that if RPs restrict themselves to only hardwar
128.
by cmdli 3y ago
Passkeys are just the product-facing name for WebAuthN, which FIDO2 devices should support. Theoretically, any FIDO2 device should support WebAuthN and therefore be used for websites, but right now there are a number of different implementa
129.
by cmdli 3y ago
I am a bit biased (I've been working on passkeys for about a year now on https://bulwark.id ), but I don't think that passkeys either should nor have to reduce user control. Ultimately, passkeys do not have to be tied
130.
by cmdli 3y ago
It has been fairly useful to me as an observer and voter in understanding how the elections go down. Understanding what the chances are of each candidate and how certain voting groups can influence the election can (sometimes) reduce being
131.
by cmdli 3y ago
Author here. This is somewhat an ad, but also a bit of a manifesto for what I think is the main problem with the current passkey managers (only Apple and Google currently have released theirs). 1Password is also working on passkeys, which I
132.
The Problem with Passkeys(bulwark.id)
28 points by cmdli 3y ago|15 comments
133.
by cmdli 4y ago
Let me provide you with an example of why functionality seems important. Let's say that you perfectly record the neuron activations of a real-life human brain for one second, including all sensory input. Then, you play back those neuro
134.
by cmdli 4y ago
I mean, if we found a planet that was filled with plant life, that doesn't seem to display any level of thought, speech, or emotion, would we consider that sentient? Do we consider trees to be sentient? On some level, self-similarity i
135.
by cmdli 4y ago
I personally believe that non-biological things can be sentient, but I would argue that Large Language Models are not. The only working example of sentience we have is ourselves, and we function in a completely different way than LLMs. I pu
136.
by cmdli 4y ago
Bulwark Passkey: https://bulwark.id It is an open source passkey manager that allows you to export your passkey credentials in an open format. I built it because I think passkeys are much better than passwords, but all the curre
137.
by cmdli 4y ago
Shameless plug to my own passkey manager, which is 100% open source: https://bulwark.id One of the big challenges to passkeys right now is that they aren’t as versatile as passwords, but this doesn’t have to be the case. Passkey
138.
Ask HN: What would it take for you to switch to passkeys?
16 points by cmdli 4y ago|37 comments
139.
by cmdli 4y ago
Budgets are always going to be finite, and eventually you will have to choose. Until we run out of space to explore with robots, we don't really need to send out humans.
140.
by cmdli 4y ago
> So the idea that "humans does not need blah" is not correct, because you don't know what humans need. Thing is, we do know what humans need. We need better battery technology, improved drugs and mental health, better pow
141.
by cmdli 4y ago
> To most people, we wouldn't be ruining anything ecologically important or otherwise sacred by colonising it and bending it to our needs. I would 100% disagree with that. If you explained to people that Mars was a habitat untouched
142.
by cmdli 4y ago
Are there any plans to support passkeys/WebAuthN? I feel like that should be a fairly straightforward thing to support since all browsers support it.
143.
by cmdli 4y ago
> The primary structural issue is that low-income wages have completely stagnated if not fallen with the inflation over the last several decades while wages for mid-upper to ultrawealthy have gone up, dramatically. This is statistically
144.
by cmdli 4y ago
I mean, you did pick a particularly low point on that series. It looks like the average pre-pandemic is closer to 63.0%.
145.
by cmdli 4y ago
Because more important users get special treatment? If you are a user that are of special importance to the business (like politicians, news outlets, or major Twitter users), then of course their requests are going to get escalated more qui
146.
by cmdli 4y ago
I could be wrong about this, but it seems like it would change for most users since Facebook/Google/Amazon/etc have a big incentive to push third party App Stores: ad tracking. Apple currently limits it, so I would not be sur
147.
by cmdli 4y ago
I don't want to fearmonger too much, but you may not have a choice in using 3rd party App Stores, assuming you use popular apps like Facebook or Instagram. The large tech companies may remove their apps from the original App Store and
148.
by cmdli 4y ago
Nobody is stopping you from escaping the walled garden; you can absolutely go buy an Android device which is equivalent to an iPhone but without these sorts of restrictions. The trouble is that the walled garden approach only works if the w
149.
by cmdli 4y ago
Let me provide a concrete example: right now I can download and use Facebook, with less tracking than Facebook likes, on the App Store. If Facebook is allowed to offer a sideloaded app with all the tracking included, what do you think the c
150.
by cmdli 4y ago
Users aren’t being empowered, developers are. Users will have to use whatever App Store the developer chooses, and they wont have any extra choice.

More ›