dsl

25 ms·

1.
by dsl 8d ago
I can write my own authenticator implementation in a few hours by hand, maybe 5 minutes vibe coded. https://www.rfc-editor.org/info/rfc6238/ Even if you throw your phone into a volcano and buy a new one, you can s
2.
by dsl 8d ago
If you are blanket accepting permissions passkeys do nothing to fix the attack you describe (on device phishing).
3.
by dsl 8d ago
Passkeys are not about securing things. The entire value proposition, and the reason big sites are pushing them, is they take the user out of the loop of authentication. You are no longer authenticating the user, you're authenticating
4.
by dsl 8d ago
Warren Buffet made the largest single tax payment in US history last year. He doesn't play any games.
5.
by dsl 12d ago
Telemetry is used to push service, which is the big money maker for dealerships. Roadside assistance, maps subscriptions, driving data for market research. Selling it is pure icing on top.
6.
by dsl 18d ago
I spent about an hour looking at the code and found some glaring issues that should be fixed before trusting it with real money. - Yahoo News is introduced twice (sentiment and news analysis) which double weights it - Sentiment analysis pro
7.
by dsl 18d ago
Authentication was never the problem, transport security was. This is why we pushed to deploy TLS everywhere instead of focusing on a scheme to PGP sign every webpage on the internet.
8.
by dsl 22d ago
That rebuttal held water 10 years ago, but fortunately we have made a lot of advancements since then. DNSSEC was a solution trying to solve the problem of DNS security while still maintaining transparency for DNS operators to spy on queries
9.
by dsl 22d ago
DNSSEC support is an anti-feature, it is dead/dying and the faster we can unburden ourselves from it the faster we can move on to better solutions. https://sockpuppet.org/blog/2015/01/15/against-dnss
10.
by dsl 1mo ago
I think the comment you replied to was referring to the fact that when Twitter was taken over the entire Trust and Safety team was done away with. This has allowed child sexual abuse material to flourish on the platform.
11.
by dsl 1mo ago
In naive implementations like Grok that is exactly what happens.
12.
by dsl 2mo ago
> but are they functionally useful or helpful to anyone currently? I've been building a SaaS that deals with data that can't be distributed to third parties. Some of the useful AI stuff I can add is not time sensitive and can r
13.
by dsl 2mo ago
Seeing as Apple is sunsetting a program that is far superior as a consumer, the two are not unrelated.
14.
by dsl 2mo ago
General compute is also the worst solution to the problem. Nvidia's entire business is dependent on Google not being able to make TPUs fast enough.
15.
by dsl 3mo ago
Put simply government officials created a scheme to buy up a bunch of unused water rights, then use state and federal dollars to pay themselves incentives to continue not using the water.
16.
by dsl 3mo ago
Here is your easy solution: Per employee tax = $0.20 * commute_miles * 2 * (commute_miles / 10)^2 * mandated_office_days_per_year * (1 + 2 * share_of_workforce_over_10_miles)^2 Tech companies can have more distributed offices and assig
17.
by dsl 3mo ago
THIS IS A GRIFT. Joel Ferry, the executive director of Utah's DNR retooled state laws to allow water right leasing and promoted HB187 which allows you to hold water rights without developing them. He also happens to be a large sharehol
18.
by dsl 3mo ago
Criminal prosecution isn't even an issue because it does not extend to the executives. PG&E somehow keeps paying fines to resolve murder charges. https://liberationnews.org/pges-rap-sheet-the-criminal-histo...
19.
by dsl 3mo ago
A webpage cannot provide a system I/O device (camera, microphone, speaker, etc.). That requires a signed driver on MacOS.
20.
by dsl 3mo ago
Heh. I built "Fusion" a few months ago as an MCP using OpenRouter. The idea was to give Claude a "panel of experts" to go talk to when it got stuck. After extensive testing and benchmarking I discovered that when you ask
21.
by dsl 4mo ago
TLDR: Adafruit found out Flux was being dishonest about their user numbers. They also found and responsibly disclosed that they could get their Firebase keys by opening up Chrome's devtools.
22.
by dsl 4mo ago
> pretty sure this is stems from the insane US legal requirement to not export SSL technology to enemy countries This is most likely OFAC. Lets Encrypt could apply for a license to do business with sanctioned entities, and given their us
23.
by dsl 4mo ago
That is like saying you can't get a virus on your computer because Facebook doesn't allow viruses to be posted to the internet. Differential parsing is a whole class of security bugs and they matter a lot. Take a look at HTTP Requ
24.
by dsl 4mo ago
You either die a hero, or live long enough to see yourself become Akamai. The reason everyone came running when Cloudflare first started was obviously the "burn VC money to gain marketshare" but it was also the sheer simplicity. T
25.
by dsl 4mo ago
> Yeah, but Google has the money for this. They are quite literally the most profitable company in the world. "Alphabet announced that its 2026 capital expenditures are expected to be $180-$190 billion, and that it expects 2027 capi
26.
by dsl 5mo ago
Compelling Microsoft to turn off your Office 365 at least requires Microsoft to be complicit. Sovereign infrastructure didn't protect Venezuela or Iran.
27.
by dsl 5mo ago
Which is just wildly backwards. It is the same mindset of the cyberpunk "privacy advocates" of the early 2000s, move your stuff to Sealand or Switzerland. The fundamental flaw with this plan is if your fear is genuinely of the Uni
28.
by dsl 5mo ago
gLinux already exists. Its meh. ChromeOS was honestly the best they could do.
29.
by dsl 5mo ago
The internet worked for so long because people responsible for each little island did what was for the most part in the best interests of the rest of the islands. If you didn't, other islands would shut off their links to you. Law enfo
30.
by dsl 5mo ago
Yes. At this layer the OS has no say in the matter.

More ›