unconfirmedsourcesDOTgov

joined 1 year ago
[–] [email protected] 1 points 3 weeks ago

Steam has voice channels? 🀯

[–] [email protected] 1 points 1 month ago

Ahh OK that makes sense thanks

[–] [email protected] 4 points 1 month ago (2 children)

Hol up, Kagi is indexing discord servers?

[–] [email protected] 6 points 1 month ago

Mostly you can't - most fsd options I'm aware of are mostly in the robotaxi space. Here's a website that tracks where they're available.

Otherwise your best bet today that I know of would be Mercedes Drive Pilot, which has a Level 3 rating for being autonomous.

[–] [email protected] 7 points 1 month ago (1 children)

I prefer to digest text too, but still would choose to taste a meal than read a typed up printout of the flavors it contains.

If I showed up at a restaurant and was presented with a menu that didn't describe anything about the dishes on offer, I'd be pretty disappointed.

Point being that we have limited time and a nearly limitless amount of options for how to spend it. Text summaries are a tool we can use to decide whether something is worth our time (and money) investment if we're on the fence about it.

[–] [email protected] 2 points 1 month ago

Thank you for distilling that down, cleared up all of the confusion I had. Cheers.

[–] [email protected] 3 points 1 month ago (2 children)

Oh, I was just interested in making a pun based on the name. πŸ˜‚

To be perfectly honest I was under the impression that we had collectively bailed on PGP in favor of GPG, but based on the Wikipedia article it seems like PGP is still getting updates so maybe that's not the case?

[–] [email protected] 7 points 1 month ago (4 children)

Well it's not very good, it's just pretty good.

[–] [email protected] 30 points 1 month ago

Agree that passkeys are the direction we seem to be headed, much to my chagrin.

I agree with the technical advantages. Where passkeys make me uneasy is when considering their disadvantages, which I see primarily as:

  • Lack of user support for disaster recovery - let's say you have a single smartphone with your passkeys and it falls off a bridge. You'd like to replace it but you can't access any of your accounts because your passkey is tied to your phone. Now you're basically locked out of the internet until you're able to set up a new phone and sufficiently validate your identity with your identity provider and get a new passkey.
  • Consolidating access to one's digital life to a small subset of identity providers. Most users will probably allow Apple/Google/etc to become the single gatekeeper to their digital identity. I know this isn't a requirement of the technology, but I've interacted with users for long enough to see where this is headed. What's the recourse for when someone uses social engineering to reset your passkey and an attacker is then able to fully assume your identity across a wide array of sites?
  • What does liability look like if your identity provider is coerced into sharing your passkey? In the past this would only provide access to a single account, but with passkeys it could open the door to a collection of your personal info.

There's no silver bullet for the authentication problem, and I don't think the passkey is an exception. What the passkey does provide is relief from credential stuffing, and I'm certain that consumer-facing websites see that as a massive advantage so I expect that eventually passwords will be relegated to the tomes of history, though it will likely be quite a slow process.

[–] [email protected] 12 points 1 month ago (20 children)

What is your suggestion for a superior solution to the problems passwords solve?

[–] [email protected] 69 points 1 month ago (24 children)

What an absolute failure of the legal system to understand the issue at hand and appropriately assign liability.

Here's an article with more context, but tl;dr the "hackers" used credential stuffing, meaning that they used username and password combos that were breached from other sites. The users were reusing weak password combinations and 23andme only had visibility into legitimate login attempts with accurate username and password combos.

Arguably 23andme should not have built out their internal data sharing service quite so broadly, but presumably many users are looking to find long lost relatives, so I understand the rationale for it.

Thus continues the long, sorrowful, swan song of the password.

[–] [email protected] 2 points 2 months ago

Not to mention they're probably paying double for it - once through their taxes for the public school the kids aren't attending plus the tuition for the private school.

view more: next β€Ί