aeternum

Long-term leases seems very similar to ownership, ultimately equivalent. Like what is the difference really between a 70 year lease with automatic renewal vs. owning the land?

There is still speculation with these long-term leases, and the article even mentions that the leases themselves became marketable assets, very similar to a land deed.

People will name heat waves, but look up stats on how many die of cold vs. heat.

For the argument to work it must be that climate change causes more extremes on both sides. It's difficult to look at the evidence through an objective lens, but whenever I've looked it seems like warming the earth by a few degrees is most likely to save lives overall. There are of course other unknowns and it it's a very risky experiment to run.

In many ways, EVs and renewables esp. turbine generators are byproducts of coal. Look into how the vast majority of rare-earths are mined.

Would the founding fathers support a wealth tax and do you?

Hundreds of executive orders okay only when my guy is in charge

To be fair, a lot of it is moving to drones killing drones.

My prediction is that future wars will actually involve increasingly fewer humans and will be more about tech+manufacturing vs. tech+manufacturing. And of course insurgents + lowcost tech vs. increasingly nonlethal hightech.

This would allow wars to continue without as much of the growing political backlash.

Those who make fun of crystals fail to realize that technology is literally a race to who can etch the finest/smallest inscriptions into the most perfect crystals. Followed by who can best feed the knowledge of the world into those very crystals via optimal mechanations such that those crystals produce intelligence.

Interesting theory but 20 bytes seems like a lot to match given only the entropy of dates. Can you make this theory quantitative, IE show that with the entropy of n, arbitrary date, and choice of rand implementation there are sufficient degrees of freedom to hit 20 bytes?

>that is their fault and not a failure of the technology.

Respectfully, you should consider reconsidering this mindset. The best engineers and tech designs take into account not only how users will use a technology but also how they will misuse it.

Profit incentives work great for the person paying. The problem is you are no longer the person paying, your insurance is. And insurance pays for filling cavities, they pay nearly nothing for preventative services.

It's easy to say add inspections. What specific regulations/laws would you put in place and how do you prevent regulatory capture?

The phishing site will say something like "Your passkey is out of date, click here to create a new one" I call that cred reset since it is similar to password reset, perhaps some sites support multiple passkeys, in that case the phishing site will use the register new passkey path instead of reset existing.

Phishing sites already frequently target the reset/create-new-password path because it's actually easier to get a user to generate a new password vs. trick their password manager. Plus 2FA is usually required anyway since no 'remember me' cookie is avail so a password reset is equal in difficulty to a password login.

That method still works just fine with passkeys right?

The key problem is that sites have made users so used to having to generate a new password/credential that they think nothing of it. It's something you just do every few months for most websites esp. secure websites like banks. Even on the same device users are being trained to generate multiple passkeys, one for chrome, one for safari/apple, how about a third for the phishing site.

Stealing passwords is already an incredibly rare attack nowadays. The attack is almost always on the cred reset path. Suppose a user loses their phone with the secure enclave and wants to login to your site using their laptop without a secure enclave.

Are you really going to block that cred reset on the grounds that it's a downgrade? You're going to have a lot of users calling your support asking why they can't login after switching devices.

So you allow it, then oops it was not a laptop, it was a phishing site.

>Hardware Attestation solves this problem

Only in theory. Suppose you are a bank, which enclaves/sources/devices do you support vs. not support? What do you do for users on a desktop PC that don't have an enclave? Phishing sites will leverage your weakest enrollment option.

Phishing is even easier. Instead of "open your password manager, copy your password and paste it here" it becomes "your passkey is out of date, click here to enroll a new passkey. As part of this process a reset link will be sent to your email and code to your phone. Do not share the code with anyone."