• 0 Posts
  • 244 Comments
Joined 1 year ago
cake
Cake day: February 27th, 2025

help-circle







  • manxu@piefed.socialtoPrivacy@lemmy.mlPasskeys
    link
    fedilink
    English
    arrow-up
    7
    ·
    7 days ago

    I think the thought process from the site’s perspective is simple: most of the attempts to hack into an account come from devices they have never seen, from places the user has never been. All a passkey does is tie your account to a “logical place,” a device (whether a browser, a phone, or a specific hardware key).

    The passkey itself doesn’t tell the server anything it doesn’t know already, it just confirms it, so there really isn’t a whole lot of privacy implication beyond general concerns.

    The big problem, and it’s a more universal problem, comes when you are trying to log in from a device that has no passkey. Maybe you forgot your phone, or you bought a new computer, or something else. The “forgot password” flow, and the related “I am on a new device” flow are some of the weakest spots for computer security, because they presume that something happened that automatically lowers security credentials.

    What I like about one-time codes like GAuth is that you can transfer the keys from device to device yourself. You are very rarely going to be in a position where you can’t access the keys, and as a result it’s fine to put you through extraordinary measures to reset your security. The issue with passkeys is that it’s pretty common that you’ll be using a new device, and as such you can’t be forced to go through hoops every time you need to register a new one.


  • I don’t think we have spent enough time considering how groundbreaking the COVID response was.

    Suddenly, there was a safety net. All COVID-related medical expenses were covered by the government, testing was free. When vaccines came out, they also were free and distributed with an equivalency-focused, needs-based attitude.

    It was like the catastrophe showed what life can be like, what a huge benefit free healthcare is, and how much being able to rely on stabilization helps out everybody.

    Then came 2022 and it was literally all over. Suddenly, you have to pay for everything, and the poorest feel the pain of hunger again. For literally no good reason, as there is plenty money sloshing around.






  • I once bought a home security setup from a famous four-letter brand. After five years, the base station to which the cameras connected received and update. After it rebooted, it didn’t recognize four of the cameras and told me I should just get newer ones, because that kind of thing happens with older models.

    And that is when the Smart Home bubble popped at manxu’s Newly Dumb Home. Very open to open source connectivity, the functionality was great, but I am never again buying into a closed ecosystem.







  • There is no need to put the “sovereign” in quotes: these are sovereign payment processors, run by the countries in Europe themselves. Pressure from an Australian political group is going to make absolutely no difference to them.

    The main target in any case is different: when an ICC judge was sanctioned by the Trump administration, they lost all access to online payments and platforms. Depending on American companies for card/online payments is too risky and creates a dependency that could shut down European economies at a whim from the White House.