• 1 Post
  • 16 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle
  • This is dramatically unlikely for FIDO2 MFA services. It’s possible, but would require the device you’re using to remain connected to both the vault and the attacker infrastructure long enough for the data to be scraped. It happens, but nowhere near as frequently as just stealing the login credentials and using them asynchronously from the origin.

    The strawman here would mostly apply to high value targets, which most people aren’t. At the scale of the internet, most cybercriminals are going to pivot to stealing accounts that don’t require additional investment to harvest. It’s simple economics. Having MFA is an essential part of using the internet for anything you actually care about.

    Strong passwords are rapidly becoming worthless when we’ve been building ever more powerful compute farms for several decades. What used to take months or even years to crack in 2010 can be done in seconds today. But all of that info neglects that it’s irrelevant because most passwords are lost due to social engineering, malicious software, or the leading cause…… password reuse.


  • CthuluVoIP@lemmy.worldtoYou Should Know@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    36
    arrow-down
    3
    ·
    3 months ago

    This is a good thing. Any account you care about and don’t want to be accessed by anyone without your consent should have multifactor authentication enabled. Use an app like Google Authenticator or a hardware token like a Yubikey. 2FA through text or email is insecure and easily bypassed.

    Friends don’t let friends raw dog the internet. Don’t be dumb and get your shit stolen. Use MFA everywhere.




  • The overwhelming majority of development to Chromium is done by Google and not the open source contributors to the project. Maintaining a browser is not something that can be done for free as a hobby. It requires an army of full-time developers to sustain.

    Given all of the major browsers except Firefox are using Chromium, the best case scenario for spinning off Chrome is that Microsoft would pick up the lion’s share of development to keep Edge up to date.

    This is the same reason that all of the major Linux distributions have large foundations to support them.

    The DoJ would do less harm to the internet if they just forced Google to sell off Search instead. Then they’d be an advertising and cloud services company that happens to maintain a major browser to serve their ads.



  • CthuluVoIP@lemmy.worldtoTechnology@lemmy.worldYou probably don't need a VPN
    link
    fedilink
    English
    arrow-up
    60
    arrow-down
    5
    ·
    1 year ago

    This article is basically summed up: “VPNs don’t completely eliminate your digital footprint, so don’t use them unless you need to accomplish these specific things.”

    It seems pretty disingenuous to discourage people from taking steps to protect their privacy in this way. It may not be sponsored, but it’s still bullshit.




  • “Awkward spinning selector wheel”

    Say what you want, but the iPod click wheel was anything but awkward. It was the most approachable and efficient interface and hardware on the market by miles and miles. Navigating other similar devices without it is an awful experience of buttons and layered menus that feel clunky and slow.

    I won’t deny that the Arcos and other jukeboxes were incredible devices, but they lacked accessibility and mass appeal. Their size and expense kept most people from even considering getting one. They were absolutely an enthusiast’s device and nothing more.

    The iPod ushered in the boom of portable media players and paved the road for Apple’s performance in the mobile phone space by establishing them as purveyors of a superior form factor and experience when it came to those devices. Apple owes its continued success in its personal computer and tablet product lines to the iPod’s design and their decision to focus on creating a cohesive ecosystem across their products based on those design principles.








  • At least the issues with lemmy.world seem to have been resolved. While I’m sure some folks were put off by the challenges, I don’t think that the migration is anywhere close to finished. What’s key now is to ensure that Lemmy has good engagement and content for people to interact with. From what I’ve seen, a lot of users here were lurkers primarily on Reddit, but are contributing more here in order to help get things off to a good start. If we keep that energy and keep improving the experience, then it’s entirely possible that Lemmy can be seen at a minimum as a viable alternative to Reddit for folks who don’t like what they’ve got going on over there.