ev1

So far I haven't seen a single major company doing phone based (insecure) 2fa not use the number for marketing, data abuse, etc.

Non-standards based "authenticator" dedicated apps phone home and spy on you. Intentionally trying to break or block actual TOTP.

> Side note: the McDonald's app is nice in not requiring (or apparently even allowing) passwords to log in. However, there's a problem with its state transition, where the user needs to exit from the dialog that sends the sign-in link before they go to their email and click on the sign-in link, otherwise the user gets dumped to the next step without having actually signed in.

The mcdonalds app loads several dozen data collection sdks, pihole practically had a meltdown when it launched

I have encountered numerous sites that port scan localhost via websocket/img onerror/etc.

The answer is generally "move" unfortunately. Surge pricing for things like club and concert nights runs orders of magnitude higher than normal rides for the same wear and tear. These don't really happen in small towns, and in larger places it's multiple times a night nearly every night.

> children with his executives,

Why do people do this? I mean in any industry. Just why? Is there something I don't understand about executives or C-levels or something?

The biggest shock to me here is "aarch64 Windows doesn't have calc.exe"

No, your browser converts it before access

> Infosys will ban all OSS contributions from their developers.

Sounds... good to me?

To be entirely neutral on this reply, it's not part of the title on the linked article and against guidelines to add it like that.

I have not installed the TM app - you can add a ticket to Apple Wallet from the website, and every order I've seen has "don't have a phone? go to the box office for tickets when you arrive" somewhere

Why are the 5 star reviews all for a nonstick frying pan?

I see entire massive threads requested and responded in a single compressed call to /api/graphql/xxx/TweetDetail

Loading an entire next page is also a single call to the same endpoint. There is nowhere remotely that I see the mobile client even making a hundred gql calls for tweets.

Is there something I'm missing or is he misusing "app" when he means backend service to service GQL calls?

Reddit fingerprints you very aggressively. Cookies are not used here. Every single pageload, they scan all your fonts, plugins, etc.

They also exfiltrate this data back in ways to prevent blocking, by completely randomizing the API endpoint used to submit it and also not use a dedicated endpoint. For example on each pageload it might send to /submit, or /register, or /friend, it'll just pick a random valid endpoint and "front" that

They also continue to do this while you are logged out to tie your IP to the fingerprint.

    hxxps://www.redditstatic.com/reddit-init.en.4-tSxFR4sOk.js

^F "Arial"

Commonly spoofed fingerprints will result in a permanent ban automatically.

Amusingly, some of my friends that use it for Marketplace express a desire for Craigslist to be popular again, if not only for the absolutely insane people on Marketplace that demand to pay $20 for an item listed at $300 and then start spamming you and making public posts about how you're a thief and scammer for trying to rip off a single parent who just wanted to get their kid a present for $20, linking your profile the entire time.

CFA app loads a bunch of rather fucked up surveillance SDKs under the guise of anti coupon fraud or something. Probably related to that.