confusedbytheBasics @ confusedbytheBasics @lemmy.world

Posts

1

Comments

248

Joined

2 yr. ago

Thanks. I remember Google news showing an article about them already deprecating webp but now I don't see it. I wonder what format the article was about.

Huh? I'm pretty sure nobody important is trying to make webp happen in 2023.

What do you change after a clean Windows install? I used to have a script that would turn everything off but it doesn't work anymore.

Google search and assistant quality has dropped quite a bit over the last few years. Even so I have the best experience with their ecosystem. Apple, Amazon, and Samsung just aren't as flexible and feel worse to use.

In this case I'm not confused. Fungi isn't foundational the way this meme implies. Monera and protista existed before fungi and would go on even if all fungi were to vanish. In fact were monera and plantae to vanish nearly all fungi would parish. It's pretty simple to tell which kingdom is more foundational. ¯(ツ)/¯

Human hunters also have the distinct advantage of being able to carry water with them.

Wrong. :(

Everyone is living authentically so there isn't the friction you imagine. Riker isn't shamed for liking sex. Troi isn't shamed for liking sweets. People are done shaming each other for being themselves. At least that was the idea.

Wait... you would get behind ruining Wikipedia just so you wouldn't have to see fundraising banners when you use it?

I'm also curious about this. Are we supposed to accept that land rights were created whenever writing first reached an area?

The first recorded people in an area were almost certainly not the first people to live there.

That's why I agreed with you. :P

I agree. I didn't realize we were talking about average users. I thought we were talking about people building NAS.

It can be. It doesn't have to be. If ECC is too expensive I recommend avoiding ZFS.

If you are planning to use zfs its worth a few extra bucks for ecc.

Thanks for the civil discussion. While my views haven't changed I have learned a lot about possible objections from informed people.

Let's hope this new auth standard is implemented responsibly by all the major parties and that weak passwords and phishing become relics of the past.

But that’s the whole thing we are trying to solve here. We are trying to eliminate human factor and by extension bad habits people have when it comes to security. So expecting people to use good passwords and pins for keys will be the same as expecting people to have good passwords for accounts. Perhaps even worse because of claims it’s better security so people might even relax more.

I feel like it's 2001 and I'm trying to convince my users to switch from passwords to RSA keys for SSH. Yes there are potential weaknesses. Yes it's still much better.

Also timeouts with pins and passwords mean very little once someone has your device. This is why I don’t consider it good two-factor. PIN might be in your head, but nothing is preventing someone brute forcing it. Once you image the device you can do whatever you want. With credit cards, you’d need ATM to keep doing it and lockout is a serious problem there.

Even if all we've done is reduced potential attackers from everyone with an Internet connection to people with physical access to the device we've still massively increased the average user's security. And we've done more than that.

Also unless you can clone the device somehow hitting max guesses and losing access just like an ATM is part of the design.

It’s a step in right direction for sure, but I’d prefer if keys didn’t depend on PIN or password.

I lost track of your suggestion over the weekend but what was your suggestion for second factor other than a pin or password?

Kinda. Given that nobody else supported it Google dropping it did sort of kill it. Passkeys are very different as they are already supported by Apple, Microsoft, and scads of smaller companies.

True. In the context of this thread it doesn't matter though.

You link to articles about law enforcement hacking phones to get data as a reason not to use biometrics? If they are hacking your device it doesn't matter if you use a password or a fingerprint.

Use a pair of hardware tokens and a long pin if you want maximum security. If you want to use a sync-able software token do that and set a strong pin.

You like long passwords? Go ahead and put one on your passkeys. You don't have to use a short pin.

It is two factor. Something you have, key in TPM or hardware token, and something you know: the PIN. Or if you choose to enable biometric it shifts to two things you have the: key and your face/fingerprint.

Remember you only have limited attempts to guess the PIN and biometric auth is subject to configurable timeout conditions before the PIN is required.

Any security conscious person will use a strong PIN. Many will choose to use biometrics as well for convenience. Most people are still setting their password to Sm3llyK@t42 on every website. A protected key and a 4-digit pin/finger print is a huge leap in security.