patrakov

13 ms·

91.
by patrakov 1y ago
No. It only proves that TOTP, as implemented by mobile apps, is useless against phishing. The extension from https://authenticator.cc , with smart domain match enabled, would have caught this by showing all other TOTP codes besid
92.
by patrakov 1y ago
Reality check. Complaint: tickets created by the QA team for developers, even seemingly trivial ones, stagnate in Jira for months and sometimes years without anyone looking. Written plan: Hire somebody who will be actually responsible for p
93.
Shutterdial – search images by camera settings(shutterdial.com)
2 points by patrakov 1y ago|0 comments
94.
by patrakov 1y ago
There was a misguided line of reasoning that if you can back up a digital artifact, it is no longer eligible as a "something you have" type of security credential. Earlier versions of Google Authenticator did not have any export f
95.
by patrakov 1y ago
You could have also used "fridump" [0] to dump the app memory and search for strings that look like TOTP secrets. [0] https://github.com/rootbsd/fridump3
96.
by patrakov 1y ago
The article, if examined by a non-specialist like me, seems to contain an answer to this concern at the end: > There are papers that claim to have factored 21 with a quantum computer. For example, here’s one from 2021 [1]. But, as far as
97.
by patrakov 1y ago
Important: this is a checklist for privacy, not for general security.
98.
by patrakov 1y ago
Be careful with this statement. The whole premise behind banks requiring non-rooted phones is "we can be sure that sandboxing works on the original ROMs—e.g., it will prevent malware from screenshotting our app, and we know that certai
99.
by patrakov 1y ago
The elephant in the room is not addressed: software in Google Play with so many antifeatures that it can only be called malware (except that Google doesn't call it malware because it brings revenue), and no alternatives except apps out
100.
by patrakov 1y ago
It does not matter whether it works. It is a contract violation and, for some banks, a reason to debank you if found - check the bank app's usage terms and conditions.
101.
by patrakov 1y ago
ZeroSSL - they provide Sectigo certificates under the hood. Works well with Dehydrated.
102.
by patrakov 1y ago
I have a horror thought: "We cannot validate your identity as you are of the wrong nationality; therefore, you are not allowed to publish any Android apps."
103.
by patrakov 1y ago
You can still bring a foreign SIM card. 100% effective (via data roaming) at bypassing the firewall, but expensive.
104.
by patrakov 1y ago
It is not sufficient to disable backspace. This thing fails the authenticity test as follows: * Type a few letters * Use the left arrow several times to go to the beginning of the line * Type something else Expected result:
105.
by patrakov 1y ago
No. The verifiable part receives an already-decrypted copy of your traffic and mixes it with everyone else's traffic. Source: https://vp.net/l/en-US/technical#:~:text=cryptographic%20dat... I have not inspect
106.
by patrakov 1y ago
It's because the buyers did not check the independent lab tests of their LED bulbs, available from https://lamptest.ru/ (sorry, available in Russian only).
107.
The Ceph community on Reddit has been banned(lists.ceph.io)
10 points by patrakov 1y ago|3 comments
108.
by patrakov 1y ago
The scary part is not about losing her phone. It's about having to keep the old, no-longer-secure Android phone alive just for passkeys after getting a shiny (and secure) new iPhone.
109.
by patrakov 1y ago
What makes this "AI will replace you with a 10x AI-based engineer" narrative a non-starter is actually having a 10x non-AI engineer on the team.
110.
by patrakov 1y ago
> Of course ideally there'd be two people, one doing the medical stuff and the other then documentation, but health care is expensive enough as it is. In the 1980s USSR, every doctor actually had a nurse who did the paperwork. And s
111.
by patrakov 1y ago
And by the way, when I was a child, even before the computers came, here is how it worked in Russia. The doctor was listening to my breathing, looking at the throat, asking me and my mother questions, and saying various medical phrases to h
112.
by patrakov 1y ago
This essay resonated with me because it highlighted the similarity between AI-written texts, describing the result as a word salad. And this also reminded me about some words from my teacher of Russian Literature: that the "bright futu
113.
by patrakov 1y ago
> If it's a choice between filtering out people who freeze up at interviews, or letting in scammers who have no ability whatsoever, I'm afraid the first is still the best option. So far, my opinion is: you still can weed out sc
114.
by patrakov 1y ago
I am a Wire user. I am not happy that, if their server goes down, all the text and images that I shared with other users will become unavailable to me. As a special case, I am not able to look at my own old messages while using my laptop on
115.
by patrakov 1y ago
> So, those 5 golf players look better on the camera but their picture will be taken and shared with a phone 99.9999% of the times. The point not in the article is that a phone camera, when used correctly (i.e., not defaulting to 1x zoom
116.
by patrakov 1y ago
Regarding the focal length difference, which is very well illustrated by the first two photographs, I would frame this point differently from what the article does. Disclaimer: I don't have an iPhone 16, but my Poco X4 Pro 5G suffers f
117.
by patrakov 1y ago
What's missing is a comparison with hiring someone to write that page of text. I.e., how much excess CO2 would a human produce writing the same page of text vs doing nothing for the same amount of time (and that's not zero - ask a
118.
by patrakov 1y ago
The article title does not fully match the content. A more appropriate title would be: "In the issue tracker, write issues, not user stories". The primary call to action here is to separate product-level details (including "u
119.
by patrakov 1y ago
Just guessing: the rules, as they are written, prohibit any usage of LLMs (not just for text generation), and, as is the case with any regulations, must be interpreted literally.
120.
by patrakov 1y ago
That's mine! And it's already fixed; I am indeed amazed by the developer's responsiveness.

More ›