iamnothere

5 ms·

61.
by iamnothere 8d ago
Maybe each token also needs a second key, with the DKEK used for authentication and the second used only for revocation. The main reason not to reuse the DKEK is so a lost key can be easily decommissioned. You would need some out of band wa
62.
US Treasuries Have Become Unappetizing for Foreign Central Banks and Governments(wolfstreet.com)
151 points by iamnothere 8d ago|132 comments
63.
by iamnothere 8d ago
I didn’t think of this in the moment, but you’re right, this is an even bigger risk than compromise. There’s regularly a thread here about someone getting locked out of their cloud accounts, and now we’re going to gate everything behind tho
64.
by iamnothere 8d ago
Yes, so is humanity as a collective species, and the Earth as a complete ecosystem. But also “consciousness” is different from what 99% of us believe it is, it’s much less special/magical and much more common. And also, the outward cha
65.
by iamnothere 8d ago
> Why would you choose that over a synchronizing passkey manager? No second factor, compromised passkey manager leads to compromise of all accounts. This is a huge problem. > A third party OAuth provider puts you at the mercy of the s
66.
by iamnothere 8d ago
Absolutely! U2F keys are unlimited, but I only have so many slots on my hardware key. And now sites are moving away from supporting U2F towards a passkey-only model. No! I have limited slots!
67.
by iamnothere 8d ago
This is a fair criticism and needs work, I have some short thoughts on it here: https://news.ycombinator.com/item?id=49755217
68.
by iamnothere 8d ago
People keep their entire lives in cloud accounts these days. Their passwords, financial history, copies of important documents, baby photos, etc. Losing access to it is incredibly disruptive and may result in unrecoverable losses. It should
69.
by iamnothere 8d ago
Many people are moving to only a single portable device that’s easily lost, broken, or stolen, without any understanding of backups or fallbacks for their accounts. And many are moving to virtual wallets like Cashapp rather than banks with
70.
by iamnothere 8d ago
This is a legitimate problem, and one of the few cases where a third party login provider makes sense, at least for non-critical “apps”. If both tokens can be authorized to that provider, then you don’t need to enroll any more tokens for ap
71.
by iamnothere 8d ago
There needs to be industry and government leadership on this to gradually require hardware token usage, for at least critical financial and government applications. Right now everyone is putting their energy behind passkeys, but those are m
72.
by iamnothere 8d ago
Second factor should be gradually ushered in everywhere over a period of years, starting with banking, until it becomes second nature for users. This would effectively end concerns over strong or reused passwords, and would make phishing
73.
by iamnothere 8d ago
I don’t like how tokens have gradually evolved from a secure 2F device that you carry with you (Yubikey etc) to a single factor “passkey” that’s built in to your computer/phone, or worse, a password manager with export capability. It s
74.
by iamnothere 8d ago
On my keychain in a USB hardware token. With a couple of backup tokens in fire safes.
75.
by iamnothere 8d ago
I hate seeing all the blind negativity towards the rationalists, both because the general idea of improving structured thinking is good, and because there were some great essays on Lesswrong and adjacent blogs over the years. People who can
76.
by iamnothere 8d ago
This is how the internet works now. There are only two clubs, and if you refuse to be associated with either one then someone will helpfully come along and assign a group for you.
77.
by iamnothere 9d ago
As long as you want. What should be illegal is hiring a bunch of people to follow everyone around and share notes. Willfully misunderstanding the impact of scale will not convince anyone. It’s obvious what you’re doing.
78.
by iamnothere 9d ago
Perhaps we could make it illegal to record an area beyond a certain scale, along with mandating that multiple systems recording distinct properties should not be networked together and must not share data with other systems. The exact langu
79.
by iamnothere 9d ago
Good to see the “and ALPRs” added. Flock is not the only game in town, and many cities are switching to other vendors while saying that they dumped Flock. P.S. to the “Flock is YC” guy: everyone posting here knows. You’re not adding anythin
80.
by iamnothere 9d ago
Thank you, good to see someone who actually knows what the word means. Sibling comment is correct too, the term has been misused and muddied in the US since the 1930s, and it no longer has a coherent meaning here. (If you mean “Democrats” t
81.
by iamnothere 9d ago
There’s good kinds of drama (competent dev forcefully rejects bad ideas) and bad kinds of drama (activist/corporate takeovers, subpar dev doubles down on mistakes, etc), but I haven’t been following it, so I have no idea which one this
82.
by iamnothere 9d ago
For a long time they did weekly releases, which explains the “hundreds” of releases. It looks like they have made enough progress to move to periodic point releases. (I should probably take another look at it.) I’m not qualified to judge th
83.
by iamnothere 9d ago
RMS was correct, as usual. Of course he could not have predicted the additional 1 million deaths due to military action (and estimated 3.5 million more from subsequent effects) in the resulting Middle Eastern/Central Asian conflicts ov
84.
by iamnothere 9d ago
I guess I was just referring to average buyers, who don’t often pay extra.
85.
Court Upholds Belgian Pirate DNS Blocking Order, OpenDNS Exit Looms(torrentfreak.com)
5 points by iamnothere 9d ago|0 comments
86.
by iamnothere 9d ago
This is true, but I was not assuming extra payments and I don’t know where you got that assumption from. Many people can’t afford to make extra payments given the already high cost of housing and the rising cost of everything else.
87.
by iamnothere 9d ago
It’s not really a finished product yet (in terms of being production-ready), but it would already be usable as an embedded kiosk for applications where you own the pages being accessed.
88.
by iamnothere 9d ago
I was not aware of this, and now I suddenly understand the weird hate that the project gets from drive-by commenters. (I don’t agree with it, but I can see a plausible motivation.)
89.
by iamnothere 9d ago
If you’re paying the same amount monthly, your cash flow is the same. Are we not comparing apples to apples here? I mean a traditional fixed mortgage. I’m comparing a mortgage with a high rate and lower principal to one with a lower rate an
90.
by iamnothere 9d ago
Sales have remained low (at GFC levels) while inventory has continued to climb. In other words supply is up and demand is flat. Doesn’t look good to me, but I’m not a professional market analyst. It all depends on how long buyers (in aggreg

More ›