secabeen

The tech sector is the most software-defined and virtual of all sectors, it's natural that they are first to change. Other industries need to make capital investments to adapt to change.

You can see a similar history with electrification. A few industries went quickly, but then it took like a decade of little growth before the true benefits showed up. As an example, take a factory that was built around hyrdo-power like a grain mill. You can't just take an electric motor and drop it in in place of the water wheel. It doesn't fit, the wheel is outside, there isn't room between the mill and the wall, etc. Only when you completely rebuild a new mill building designed around the features and limitations of the electric motor do you see the major benefits.

Same thing here; it will be new factories and new companies that are designed from the ground up around AI and its benefits and limitations that really move the needle.

This appears to have global effect if placed in a <Location> block in the root apache2.conf:

  # PHP 20261020 Remediation (Global)
  <Location />
    <If "req('Content-Type') =~ /multipart/i">
        Require all denied
    </If>
  </Location>

Yeah. The use of the word "scan" in the original article and the title is misleading. It doesn't scan your system looking for passwords and testing them. It appears to take the password you give to HA (either as your HA Password to login to HA, or for an integration) and check those. That is a much smaller impact than is being assumed by many here.

Pretty much all the major vendors offer this now.

The problem is that they determine the other apps that are supported. There is no "generic" export.

The problem is this:

> 1Password for iOS exports ... directly to other supported apps, including your passkeys.

They pick the list of other supported apps. There is no ability to export to a standard encrypted file, nor is there a way to develop an open source app that can receive an export over the objections of 1Password Inc.

My read of it is that there won't be an endpoint for an FOSS script to connect to to make the request. All that stuff will be provider2provider on private channels that aren't publicly exposed.

GMail search fundamentally has an advantage over a mobile email client as Google can and does maintain dedicated indexes for your email on their servers. While a mobile client could do the same, it's not really something that you want to do on a battery-powered device.

It would be a great thing for IMAP servers to do, but none of the major open source ones really take on that feature, and Google wants you in their web-client, so searches via IMAP are low-quality at best.

> For passkey export, there is a FIDO specification for both a format and secure protocol for exchanging passwords and passkey information between password managers, with support on all Apple platforms, and implemented by 1Password, Bitwarden, Dashlane, and more:

Note who is excluded from this list: the End User. The protocol only allows exchange between password manager vendors who choose to interconnect.

Bitwarden is the only vendor I'm aware of that currently allows this, and it wouldn't surprise me if their new management takes this away in the medium term.

The FIDO alliance is trying very hard to squash any workflows that a scammer can use to convince an elderly retiree with $1mil in savings to wire their life savings to Russia. Unfortunately, nearly all of the export paths that we want as hackers overlap with these attack vectors. The drafts of the Credential Exchange format or Protocol assume that end-users and open-source tools are not valid targets.

> You have to pay the government rent in perpetuity.

You are paying the government rent in perpetuity for the services they provide, including enforcement of your property rights. If you wish to live on land without paying government rent, you will need to go to a place without effective government. Today, that would be Syria, parts of Sudan, or Mali as examples. I doubt you want to live in those places as a 1st world resident, but if you do, there's little stopping you.

Largely, because books are heavy, and there's limited demand for most used books. If you've ever been at a book sale on the last day, there are always lots of leftover ones that no one wants.

There's a general sense that librarians are preservationists. This is far from the truth. Most books get pulped within a few years of printing. Librarians are constantly discarding books that don't get checked out to make space for new books.

I can imagine a few more. Here's one that is 100% effective:

* Wait until your account was created > 18 years ago.

That may not be enough for you, and that's fine, this is not a governmental service or site, with a mandate to serve everyone. You can chose not to use discord, and discord can choose not to have you as a customer. YMMV.

It's the classic "make your problems worse to fix my problems" that you see across tech. Since they don't care if you get locked out or leave their platform, it's designed to make them maximally profitable. It's the same thing you see when sites "offer" to let you do pre-registration work before an event or transaction, even though doing that work at registration is often trivial.

Want to get a RealID? You can spend 30 minutes scanning and uploading your supporting documents through the website, or you can hand your documents to the person at the desk and they'll evaluate it in 30 seconds. Over thousands of people, it's rational for the organization to optimize away that 30 second review (it also gives people a recovery option if they don't bring the right documents.) For the customer who is competent enough to bring the right documents, the latter approach is way more efficient. I regularly have to put myself in the "I'm old and hate technology, so lets do this the manual way at the desk" flow even though I'm totally capable of doing the electronic flow.