• 0 Posts
  • 20 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle
  • This is dramatically unlikely for FIDO2 MFA services. It’s possible, but would require the device you’re using to remain connected to both the vault and the attacker infrastructure long enough for the data to be scraped. It happens, but nowhere near as frequently as just stealing the login credentials and using them asynchronously from the origin.

    The strawman here would mostly apply to high value targets, which most people aren’t. At the scale of the internet, most cybercriminals are going to pivot to stealing accounts that don’t require additional investment to harvest. It’s simple economics. Having MFA is an essential part of using the internet for anything you actually care about.

    Strong passwords are rapidly becoming worthless when we’ve been building ever more powerful compute farms for several decades. What used to take months or even years to crack in 2010 can be done in seconds today. But all of that info neglects that it’s irrelevant because most passwords are lost due to social engineering, malicious software, or the leading cause…… password reuse.




  • In today’s world, MFA (multifactor authentication) is a necessity for literally any account in which you store information you don’t want to be stolen by someone. I’m more upset that several services I use still don’t support it, or only support MFA via text or email, neither of which is secure enough to be of much use.

    You don’t want the place where you store your passwords, likely including your bank account, health insurance, social media accounts, etc. to be more difficult to hack? You live in a post-quantum world. Passwords aren’t enough.




  • The overwhelming majority of development to Chromium is done by Google and not the open source contributors to the project. Maintaining a browser is not something that can be done for free as a hobby. It requires an army of full-time developers to sustain.

    Given all of the major browsers except Firefox are using Chromium, the best case scenario for spinning off Chrome is that Microsoft would pick up the lion’s share of development to keep Edge up to date.

    This is the same reason that all of the major Linux distributions have large foundations to support them.

    The DoJ would do less harm to the internet if they just forced Google to sell off Search instead. Then they’d be an advertising and cloud services company that happens to maintain a major browser to serve their ads.




  • This article is basically summed up: “VPNs don’t completely eliminate your digital footprint, so don’t use them unless you need to accomplish these specific things.”

    It seems pretty disingenuous to discourage people from taking steps to protect their privacy in this way. It may not be sponsored, but it’s still bullshit.





  • “Awkward spinning selector wheel”

    Say what you want, but the iPod click wheel was anything but awkward. It was the most approachable and efficient interface and hardware on the market by miles and miles. Navigating other similar devices without it is an awful experience of buttons and layered menus that feel clunky and slow.

    I won’t deny that the Arcos and other jukeboxes were incredible devices, but they lacked accessibility and mass appeal. Their size and expense kept most people from even considering getting one. They were absolutely an enthusiast’s device and nothing more.

    The iPod ushered in the boom of portable media players and paved the road for Apple’s performance in the mobile phone space by establishing them as purveyors of a superior form factor and experience when it came to those devices. Apple owes its continued success in its personal computer and tablet product lines to the iPod’s design and their decision to focus on creating a cohesive ecosystem across their products based on those design principles.






  • I think the barrier to entry also helps a bit. The folks willing to put up with the rough edges that Lemmy has are also likely willing to participate with the intent of making Lemmy a success rather than just “hangers on” as it were. With a 1600% growth in “active” user population, there are definitely a ton of lurkers, yet. Once it becomes more approachable, we’ll see if the community feeling that Lemmy has begins to tarnish and fade as the volume of interaction and content rises.


  • Basically it works like this:

    Instances A, B, and C are federated initially. When a user posts on Instance A, users on Instances B & C can see and interact with the post directly. Any comments they make will be sent back to Instance A as the “home” instance for that content.

    Now let’s say Instance A decides they don’t care for the type of interaction they’re getting from Instance C’s users and decides to block - or defederate - Instance C.

    To users on instance A, nothing changes other than new posts and comments from users on Instance C will no longer show up. To users on Instance B, nothing changes other than new comments from users on Instance C won’t appear in posts they interact with on Instance A. However, for Instance C, things are suddenly branched.

    On Instance C, any posts that were created prior to defederation still exist in Instance C’s record. However, any comments that users on Instance C commit to those posts will no longer be distributed to users on Instances A or B, because Instance A maintains the “primary” record of the post. Similarly, Instance C’s users will not receive updated comments from users on Instance A OR Instance B, because again, Instance A is what determines which comments appear in federated instances. Furthermore, new posts created on Instance A will no longer show up in users’ feeds on Instance C. From the moment of defederation, Instance C’s copies of all posts on Instance A are now distinct, and the only new comments or updates they will receive will be from local users on Instance C.