pontilanda

7 ms·

31.
by pontilanda 4y ago
Unfortunately there are so many ideas that will "never" gain ground. People are still stuck with the user/password paradigm and it will take some serious push to move to something like Passkeys, which is obviously the best if
32.
by pontilanda 4y ago
Your assumption is that there's zero time between a leak and the abuse. If my password reaches the abuser after it expires, then I have been saved by the rotation. Also rotation + "no reuse" policy essentially guarantees that
33.
by pontilanda 4y ago
I hate that HN users downvote concepts they disagree with. One can agree that rotation is good in theory and bad/annoying in practice (due to laziness). We can only argue about how much of an impact it makes, but it certainly does not
34.
by pontilanda 4y ago
Given PixiJS is a 2D renderer by default I wouldn’t expect performance as high as Three.js. Pixi3D seems to be a way to add the occasional 3D object to your 2D drawn application.
35.
by pontilanda 4y ago
Are you me? This is uncannily like my experience.
36.
by pontilanda 4y ago
Who’s going to pay for that? They’re completely dependent on Google right now.
37.
by pontilanda 4y ago
Kinda off topic and really barking up the wrong tree. Mozilla is literally the only company maintaining a non-webkit browser (Blink is still a WK fork)
38.
by pontilanda 4y ago
> I wonder if a large part of what makes social media unhealthy is exposing human nature to mass communication. Bingo. I do not believe for a moment that social media company A or B is worsening society. Heck, Facebook links your presuma
39.
by pontilanda 4y ago
And? What are you going to do with a singular token that you don’t know what company it belongs to? But obviously those devs at GitHub don’t know what they’re talking about so they’ll gladly notify two companies at once. It’s super easy too
40.
by pontilanda 4y ago
> There isn't a country in the world which does this Does what? The thing extra is the fingerprint but literally every modern country requires ID registration and more. My government also knows this IP belongs exactly to me. Stop sp
41.
by pontilanda 4y ago
That’s why I mentioned “depending on copy” (or more broadly “UI”). If I’m clicking a “Generate password” button I expected a new password every time. But here it’s an autocomplete-like dropdown rather than an action. By your definition, suc
42.
by pontilanda 4y ago
I cannot see the issue because the regex are pre-approved by GitHub. And even then, the service will only return the string, not who wrote it. Unless GitHub approves /Jonh Doe said:.*/ there is no issue whatsoever.
43.
by pontilanda 4y ago
It’s a combination of missing hyphens (it should be “secret-scanning partners” to avoid adjective ambiguity) and people’s inability to open links and read anything past the title. Sprinkle a bit of Sinophobia and we’re golden.
44.
by pontilanda 4y ago
Is it a bug or a feature? Depending on the exact wording, I completely expect the browser to suggest the same password for the same website in the same session for the same user. Websites are crap and sometimes you need to enter the same pa