Oof, that is really not a good look. This should have been clearly disclosed and probably with a per-notification for the patch release.
- 0 Posts
- 93 Comments
There are a few main benefits.
- For hardware-backed keys they can’t be stolen aside from physically stealing the hardware. So unless your machine has malware there is no way for an attacker to authenticate using them.
- Even for software keys the site you authenticate to doesn’t learn enough to impersonate you. For example if for some reason your bank leaked some logs with PW + MFA someone could use that to log in as you (although admittedly short timeouts on MFA validity makes that window very small).
- The browser ensures that you only authenticate to the correct domain. So it prevents phishing. (Although a password manager that only fills into the correct domain also accomplishes this.)
So I think if you are using unique passwords with an automated password manager the effective benefit is quite small. However for the “average computer user” who likely has less than 5 passwords that they use for everything it forces a pretty high base level of security.
kevincox@lemmy.mlto
Programming@programming.dev•Best way to check the readibility of QR codes
2·29 days agoI doubt Gaussian blur is an accurate model of real-world situations.
At the end of the day if you are worried about the codes being painted over print a few out and paint over them. Then scan with a variety of scanners.
If I had to come up with some more digital tests I would guess that a few of these are more representative of real-world situations:
- Lower contrast. For example lighten or darken the whole code. This would simulate things like scanning in low light or with glare.
- Block out sections of the code. This will test error correction levels and simulate partial damage or pockets of extreme glare.
- Skew the code in various ways. This simulates the perspective shift of people scanning the code from an angle.
Ideally combine them in a bunch of scenarios then try to scan with a variety of scanner implementations.
kevincox@lemmy.mlto
Technology@lemmy.world•Google's next-gen reCAPTCHA system could spell trouble for de-Googled phonesEnglish
51·1 month agoIt also supports iOS.
kevincox@lemmy.mlto
Linux@lemmy.ml•Valve Lepton: It's been 5 months since we heard anything about Valve's Android compatibility layer for Linux.
3·1 month agoNo, the DRM wouldn’t work at higher levels so you would have the same requirements with regard to 4k.
kevincox@lemmy.mlMto
Open Source@lemmy.ml•Self-hosted, booru-style gallery for a personal image collection written in Go
3·1 month agoPlease be civil and polite. This type of aggressive comment insulting people because of the tools that they use isn’t welcome here.
kevincox@lemmy.mlto
Programmer Humor@programming.dev•Please let me squash a merge commit
1·1 month agoYou seem to be making this very complex. But it really isn’t. Yes, git doesn’t track renames. So you are working around it by splitting your operation into 2 commits.
- A pure rename.
- A file change.
This way 1 is always considered a rename and 2 is just a regular file change with the same path. You may also consider tweaking the default rename detection threshold with flags like
--find-renamesor options likediff.renameLimit.Would it be nice if Git tracked renames? Probably. But that isn’t how the data model works so it is unlikely to happen soon. But maybe they could add some metadata.
kevincox@lemmy.mlto
Programmer Humor@programming.dev•Please let me squash a merge commit
3·1 month agoI think it doesn’t really make sense. Because you can’t “squash” one commit. squash is taking multiple commits and making them one.
When you do a “squash merge” you are really saying “squash all the commits that are on this branch and not the target” then merge.
So you can’t “squash a merge commit” you need at least one additional commit to squash in.
kevincox@lemmy.mlto
Privacy@lemmy.ml•Flo period tracker sells user data to Meta and Google
7·1 month agoNo, but you can still choose to choose software that doesn’t steal and sell your data. You can also support laws that make doing this illegal.
kevincox@lemmy.mlto
Privacy@lemmy.ml•Flo period tracker sells user data to Meta and Google
30·1 month agoThe idea that putting this on your phone is bonkers is bonkers to me. Why would you want to carry around a journal or paper when you have everything on your phone? It can also be more easily backed up and synced.
It shouldn’t be normal that this data is stolen and sold. That is 100% the problem, not the fact that people track things on computers.
You have obviously never tried dereferencing a null pointer.
They are legal if you follow the regulations. The problem with the “rideshare” companies is that they don’t. We should just call them “unregulated taxis” rather than pretending that they are a different service. I think just about every taxi company these days is on some app or another (often the same that call unregulated cabs in countries that actually got their shit together and banned the unregulated ones).
Nah it’s worse. Bitcoin actually has legitimate uses. (Yes, they are a minority of actual usage, but they exist.) NFTs are only useful for speculation, gambling and money laundering.
“Rideshare” is also the least accurate term used to dodge regulations. It is just a taxi/cab. You are paying someone to get you from one place to another. They aren’t sharing their ride, they were never going where you are going before you told them to.
You forgot step 2. Throw sacrificial drive into trash.
kevincox@lemmy.mlto
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ@lemmy.dbzer0.com•Minecraft PS3 Edition's Source Code has been leakedEnglish
42·3 months agoThis is also likely interesting because console SDKs are usually highly restricted. So not only is the Minecraft code leaked (which is probably moderately interesting) it is likely that the console APIs are quite interesting to emulator developers and reverse engineering for other PS3 games.
kevincox@lemmy.mlMto
Open Source@lemmy.ml•Open-Source Developers: Share Your Privacy-Friendly Apps & Tools
71·6 months agoPlease be polite. If you don’t like a post you can downvote it. If you would like to comment please be more civil.
While Amazon is awful it isn’t just them. It is a systematic issue with our economic system. Our society constantly makes efforts to keep the poor poor so that they are forced to work for low pay resulting in a cycle of abuse. Basically every public company will end up in the same situation and we see that with every large company. If a large public company isn’t shit the CEO will be fired by the shareholders and replaced with one who makes the company shit.
So yes, avoid Amazon, but also talk to your government representatives. The cycle will always continue until the incentives are changed. To properly exit this shit system we need to change our society and government.
kevincox@lemmy.mlto
Programming@programming.dev•Anyone have any favorite diffing tools?
13·7 months agoI use https://difftastic.wilfred.me.uk/ which is well, fantastic. I have it set up as the default diff for Git and it is really nice.


The problem is that only your heaviest users are going to pay to remove the ads, so it doesn’t make sense to price the subscription at any sort of average user. You need to slide the price point way up the distribution just to break even.