dbriles

Joined 6 years ago

Karma

Submissions

Member since

Mar 5

Recent submissions

I'm not sure I follow - automatic autofill and manual autofill would both raise red flags by not automatically filling in credentials (automatic autofill) or not suggesting credentials (manual autofill).

edit: I think I understand. My first point doesn't show that automatic autofill is better than manual, because both methods will raise red flags. I.e. this isn't a reason to choose automatic over manual autofill. I think this is a fair point.

I do think that both autofill methods have an advantage over simple copy/paste, especially given the XSS discussion in other threads here.

Comment · 5 years ago

Besides convenience, one of the benefits of autofill is that it offers some implicit feedback about potential phishing sites. For example, your O365 credentials shouldn't autofill on off1ce.com. If I was on a site and noticed that my credentials didn't autofill (or offer autofill) when they normally would, this would immediately raise some red flags for me.

The article does looks at how password managers autofill on different levels of subdomains, which is relevant to my point above - a hijacked subdomain would be a problem for many of the password managers he tested.

Comment · 6 years ago

Seems people are taking issue with my gripe about the pricing. To be clear:

I bought the iOS app, was happy to do so, and got a lot more than $25 of value from it. In my opinion, the developer might be better off with a subscription model rather than a one-time purchase.

Comment · 6 years ago

I agree with you - I definitely got more than $25 of value from the iOS app and was happy to pay the price. I guess my thing is that I wonder if the developer would be better off trying to solicit more users at a lower price (or a small, monthly/annual subscription) than a one-time purchase.

Comment · 6 years ago

Anki (and spaced repetition) is awesome! Some things I've had used it for to great success:

1. Memorizing Japanese vocabulary, pitch-accent, and basic grammar rules. It would probably be useful, at least to some degree, for any language like this.

2. Any certification which required strict memorization. All the basic ComptTIA certs were like this, and the CCNA:R&S cert (unfortunately) required memorizing commands and their syntax.

3. Verses in the Bible (though this is pretty basic in comparison, just Address <-> Text).

In all honestly I think one of the best things you can do if you need to memorize something is make the flash cards yourself, whether with Anki, another app, or even just index cards. This forces you to think about what it is that you're trying to memorize and phrase the text of the cards in a way that you understand. After that, reviewing is just kind of "maintenance" in my opinion. There was definitely a marked difference in my retention when I was using pre-made Anki decks vs. creating them myself. It is also easier to create cards using the desktop app.

It's a side note, but I also don't agree with Anki's pricing model. The app is free on Android[1] but $25 on iOS[2]. I think I heard (I don't have a source) that the developer's justification was that they needed to make money from the all the time and effort they spent creating Anki, plus hosting costs, etc - so why not do a cheaper price on both Android/iOS, or do a free-to-download app with a subscription model? For what it's worth you can use the web version on iOS but the app is a better experience IMO.

[1] https://play.google.com/store/apps/details?id=com.ichi2.anki

[2] https://apps.apple.com/us/app/ankimobile-flashcards/id373493...