reginald78
Joined 2 years ago
Karma
543
Submissions
279
Member since
Jul 1
Recent submissions
Comment · 1 year ago
Comment · 1 year ago
Even with the current flimsy "What about iPhones?" defense against attestation, is there anything stopping say Microsoft from just forcing you to install a different app to use Microsoft services?
Comment · 1 year ago
Well, having your passkey provider blocked for doing that might stop you.
https://github.com/keepassxreboot/keepassxc/issues/10407
Of course, they might just block you for not being on a whitelist of approved providers anyway.
Comment · 1 year ago
It just wasn't an important consideration, unlike the attestation anti-feature.
Comment · 1 year ago
The important part is the GDP is now increased because of the cost of energy and additional hardware needed expand and then compress the original data. Think of the economic growth all these new hassles provide!
Comment · 1 year ago
> This is only partially true. Nothing in the spec, all up to implementers. At least KeypassXC sure provides a way to access your data: https://github.com/keepassxreboot/keepassxc/issues/10407. Other software behavior may vary.
This thread is one of the guys from FIDO threatening to blacklist keypass for doing just that, using the spec'd passkey attestation feature as the tool to do so. Just because the attestation feature isn't widely used as a weapon just this second doesn't mean that is not the intended endgame, in fact I'd argue the hand was tipped in that very thread.
Comment · 1 year ago
They're probably just trying to not get their implementation blackballed with the attestation feature like one of the FIDO devs immediately threatened to do to keepass: https://github.com/keepassxreboot/keepassxc/issues/10407
I think the dance is all for naught though, they'll end up locked out as non-standard once uptake is high enough IMO.
Comment · 1 year ago
And how long until the attestation feature is used to ban their implementation? The threats have already been made to keepass.
Comment · 1 year ago
Can't comment on Google specifically but hidden scrollbars mean I often don't realize a dialog has scroll bars until I reach out into the dark edges to find what I hope is there. Microsoft will even harness this as a dark pattern to hide options they don't want you to choose.
Perhaps your dad simply expected to scrollbars to be visible like they initially were.
Comment · 1 year ago
I've definitely seen them. A quick search shows them available at BestBuy and Walmart at least.
Comment · 1 year ago
IIRC the rule Mastercard cited was so vague that trying to workaround it almost seemed potentially pointless. It was basically a blanket "we think it makes MasterCard look bad so we end our relationship". Anyway, debit cards are still Visa/mastercard so using them as cash has the same problem. I was thinking they could just use Steam gift cards but since those are often themselves purchased in stores or with credit cards it seems to just push the problem a little further away.
I believe Steam did support bitcoin at one point but decided to end usage over because the price fluctuations made it to unpredictable on their end. Maybe the landscape has changed though.
Comment · 1 year ago
There's a youtube channel shadiversity that I haven't watched in awhile. It is mostly about fantasy media and swords but also spends a lot of time on medieval building techniques and clothing. One of the more interesting videos I watched talked about how before and even after saw mills could process and produce different sized boards people would 'grow' them instead by trimming trees to produce long straight narrow branches. There was even a still living example in some English village that some trimmed 100 years ago before the process was completely stopped.
This also reminds me of those Japanese temples where in order to preserve the institutional knowledge of how to rebuild the temple in case of disaster the monks tear it down and rebuild it from scratch every 30-40 years assuring the next generation has experience.
Comment · 1 year ago
The silly part is unraid has all the pieces to do this. The btrfs file system which unraid supports for array disks could identify bitrot, and the unraid array supports virtualizing missing disks by essentially reconstructing the disk from parity and all of the other disks. Combining those two would allow rebuilding a rotted file with features already present.
My impression is unraid developers have kind of ignored enhancing the core feature of their product to much. They seem to have put a lot of effort into ZFS support which isn't that easy to integrate as it isn't part of the kernel, when ZFS isn't really the core draw of their product in the first place.
Comment · 1 year ago
I can only assume our accounts are linked by address and they do the recall notice (at least) by account address. In other words, they aren't linked but kind of are anyway.
Comment · 1 year ago
Can't they just go back to selling crack cocaine to fund themselves again?
> To be very honest here, you risk having KeePassXC blocked by relying parties (similar to #10406).
From the linked https://github.com/keepassxreboot/keepassxc/issues/10406 > | no signed stamp of approval from on high > see above. Once certification and attestation goes live, there will be a minimum functional and security bar for providers.
> | RP's blocking arbitrary AAGUIDs doesn't seem like a thing that's going to happen or that can even make a difference > It does happen and will continue to happen because of non-spec compliant implementations and authenticators with poor security posture.
Is your argument that despite being doused with gasoline I can't complain because I'm not currently on fire?