digiown

8 ms·

91.
by digiown 8mo ago
> handsomely rewarded after-the-fact The other more important effect is that it neuters any kind of quid pro quo type of corruption, if paired with a big enough stick. It's hard to bribe someone if they will get to live in luxury fo
92.
by digiown 8mo ago
sigh I doubt it'd work here though. You know you can just print out a fake ID and show it to the camera. I doubt the app will be able to tell. Attestation doesn't really change this. If it truly never leaves your device, you&#x2
93.
by digiown 8mo ago
> I don't use any of them and somehow successfully talk to you here There's no train monopoly, I can just walk to the office! A monopoly does not have to exert total control to be a problem. I shouldn't have to walk to the
94.
by digiown 8mo ago
And one that drops frames when I scroll through on Firefox.
95.
by digiown 8mo ago
I can spam or send misinformation here just fine without being a corporation. And it's legal speech. Should platforms not be able to moderate this? > news organization and such to have unrestricted speech [...] by keeping them in a
96.
by digiown 8mo ago
Facebook+Instagram+Whatsapp/iMessage is a "natural monopoly" because of their network effect, just like the older monopolies. You can run a telephone cable to your neighbor, but good luck reaching anyone else. I can run a cha
97.
by digiown 8mo ago
I'm not sure that would work. How about spam or adverts? That's protected speech. And downranking based on viewpoint is not any different from censoring. Yeah you can say X but no one will see it. I can see potentially requiring p
98.
by digiown 8mo ago
Future? Just look at China. They do all this already.
99.
by digiown 8mo ago
Can't you just modify the client to send the resulting signal then? I'd anticipate a ton of tutorials like: Just paste this script into the console to get past the age gate!
100.
by digiown 8mo ago
It's rent seeking, the antithesis of capitalism. It's always been. Enabled by abuse of government power. And no, it's not a partisan issue. You see this pattern across the American economy. The boomers locked in their house v
101.
by digiown 8mo ago
A minimum wage should not necessarily afford you a median home, that's why it's called a minimum. But for a functional developed nation I argue it should afford you a private room or a very small apartment. Ideally the cost betwee
102.
by digiown 8mo ago
You wouldn't have a free society for long if the general purpose computers are taken away. The government controls corporations which controls your computers, and with an order all of your devices will be turned against you like the te
103.
by digiown 8mo ago
It is quite hard to do this safely on typical Linux systems, since there is a substantial amount of writable system data (e.g. syslog, /etc, /var). If unencrypted they will leak data, and if encrypted there is little difference fr
104.
by digiown 8mo ago
If you have a password manager, 2FA is pointless anyway. Password manager already serves as two factors: possession of the database and the secret to decrypt it. 2FA is a mitigation against people getting pwned by reusing passwords or using
105.
by digiown 8mo ago
It was perhaps not phrased that well. I meant that it would prevent passkeys from being used on user-controlled systems at all, since there wouldn't be a way for a passkey implementation to hide the attestation key from the user if the
106.
by digiown 8mo ago
> Approximately nobody thinks users shouldn't be able to access their keys in the general case Citation needed. To me it seems to be the quiet part that they aren't saying out loud. If it's just a consequence of the spec b
107.
by digiown 8mo ago
> right to be different without being refused service You can check my comment history to see the arguments I have against attestation. That's exactly what I argue. It's not an open source problem, it's a user freedom pr
108.
by digiown 8mo ago
One thing it enables is being the sole credential, as in, not needing usernames. It helps with faster logging in and is not prone to security issues caused by browser autofill. This also means sites can allow you to sign up without collecti
109.
by digiown 8mo ago
I'm not sure letting a webapp access your home is a good idea. You're basically YOLOing random remote code to run on your machine. Maybe we can have it access some specific folder for its own data. And then there's also Apple
110.
by digiown 8mo ago
KeepassXC implements passkeys in a respectful way. I don't see how this is "Windows crap". If they want to force attestation on passkey implementations, whether or not Linux supports it will not matter.
111.
by digiown 8mo ago
Corporate interests HATE general purpose computing, and the freedom to run what you want. With that freedom, you can hurt their interests by blocking ads, stripping out spyware, or avoiding giving up your privacy, and they can't let yo
112.
by digiown 8mo ago
I do get that there are use cases for actual hardware bound keys for enterprise settings. But having non-exportable credentials (effectively non-ownable) is not acceptable in a consumer setting. This is a thinly veiled attempt at strengthen
113.
by digiown 8mo ago
It's an export format. The storage is always encrypted with the database key. And you can view the key directly anyway just like you can view passwords, and copy it from there.
114.
by digiown 8mo ago
That's the thing, they can't yet. They are proposing an attestation scheme. I'm not sure the details are out yet, but the authenticator would presumably use one of the hardware security mechanisms (like a TPM bound key) to &q
115.
by digiown 8mo ago
Passkey/webauthn is a cool tech, and I'd really like to use it everywhere, but I find the anti-user attitudes of the spec authors concerning. The spec contains provisions about "user verification" (the software must forc
116.
by digiown 8mo ago
This actually. AI is dramatically better at helping users deal with perennial issues that Linux gets, and using the command line to fix them, compared to Microsoft's fresh new bug introduced last Tuesday or navigating anti-user GUI.
117.
by digiown 8mo ago
This sounds like one of these theme park "skip the queue" tickets. It will absolutely slow down the rest.
118.
by digiown 8mo ago
I wouldn't be surprised if the implementation is - Turn down the thinking token budget to one half - Multiply the thinking tokens by 2 on the usage stats returned - Phew! Twice the speed IMO charging for the thinking tokens that you ca
119.
by digiown 8mo ago
This makes little sense, IMO. Information is information. There is no difference between this and just having a short/simple passphrase with the PKBDF iterations turned very high. You might as well shard secrets using Shamir and encode
120.
by digiown 8mo ago
The sandboxing on mobile platforms puts the OS vendor in a special position to enforce a monopoly on apps and features. Apple enforces it aggressively, while Google only reluctantly so far. It also prevents the user from exerting full contr

More ›