deltoidmaximus

Joined 11 months ago

Karma
367
Submissions
185
Member since
Nov 10
View on Hacker News

Recent submissions

Comment · 2 days ago
I've long suspected Amazon's search is so crappy because it makes their ads necessary to actually surface a product. I guess Google got the idea as well.

The worst part is I've seen search other video sites that used to surface exact titles stop working around the same time. I'm not sure how to reliably find things I know are there anymore.

Comment · 2 days ago
This is pretty horrible news that I hadn't really heard about, especially since American cars are so expensive now.

Why was this not a problem in the past? I know covid and tariffs have changed the supply picture a lot but I was vaguely under the impression there was some kind of parts availability requirement for manufacturers.

Comment · 10 days ago
On my LG TV, which is pretty old, the wifi module is just a standard m.2 e-key that I can remove. I wonder if that is still the case or if they are integrated now.
Comment · 11 days ago
Parent doesn't actually need to propose anything, this will happen regardless because the incentive structure demands it and the same technology makes it cheaper than ever before to perform the poisoning.
Comment · 11 days ago
And inevitable once LLMs were invented. A knowledge lemon market.
Comment · 12 days ago
It could happen I suppose, but most likely it would be an American company adding unnecessary spyware/rentware to a commodity product that didn't really need software in the first place and then lobbying to make the bare product illegal somehow.
Comment · 17 days ago
Hard to say if publishers are going to want to pay the (now increased) hardware costs to stream hosted games when before the AI boom they kept failing to get the idea of the ground. Certainly I don't think we'll see it happen unless the AI bubble pops reducing hardware demand for AI.
Comment · 17 days ago
The cauldron is already warm. I encourage people to read these issue trackers.

https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

https://github.com/keepassxreboot/keepassxc/issues/10406

"The unfortunate piece is that your product choices can have both positive and negative impacts on the ecosystem as a whole. I've already heard rumblings that KeepassXC is likely to be featured in a few industry presentations that highlight security challenges with passkey providers, the need for functional and security certification, and the lack of identifying passkey provider attestation (which would allow RPs to block you, and something that I have previously rallied against but rethinking as of late because of these situations)."

"This implementation is not spec compliant and has the potential to be blocked by relying parties."

Proponents keep trying to hand wave away the attestation lock-in problem as some vague faraway threat that we may never encounter. It isn't. It's the actual plan.

Comment · 18 days ago
What are they doing when you give blood?
Comment · 19 days ago
Comment · 19 days ago
Comment · 19 days ago
Comment · 19 days ago
This is the obvious endgame. Right now you have people who will say that passkeys are unphishable so we should switch to them. When you point out that people will lose their devices and credentials they'll then tell you can just use account recovery emails to get back in. They actually argue you absolutely need an iron clad door with a guard employed by some one else to protect account on some random website (that the website decided was precious, not you) But that's OK because they left a same old shoddy back door open in case you can't get in. So why even bother? Because that isn't the point. The plan is to remove the back door after enough people are trapped, they just need to keep the screaming to minimum while they get everyone in there.
Comment · 19 days ago
> The thing that sucks a lot is that brokerages seem to also restrict the allowed software/hardware. Don't know the details, but none of my FIDO2 hardware keys were able to be used. I consistently use these hardware keys through WebAuthn, so I was surprised when my brokerage explicitly told me my hardware key is unsupported and I must use either Windows Hello or the iOS Passwords app.

Of course not, you still have some control over those FIDO2 hardware keys and they don't lock you to a limited set of devices. That's what the attestation is for, to allow banning the use of sign-in with anything but a couple megacorp providers. The few small time hangers on will be expelled in time. They're useful idiots for the adoption phase.

Notice that after lots of complaining about there being no way to transfer keys in the spec they developed some planned working group that will in the end only allow transferring from Google/Microsoft/Apple and maybe a few other dumpster companies. They aren't going to give that control up.

Comment · 26 days ago
The trouble with this is the baseline is getting to high. You've got age verification coming, google rolling out phone verification for websites, etc. Once that is rolled out, accepted and "easy" it will be used for everything important "for security" and then everything not important because hey, you were doing anyway?

The reasonable position will be slow marched into hell same as the rest of them, just a few steps behind.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton