Telaneo

some sites provide password reset some don't

I'm yet to see a site that doesn't provide a password reset (excluding websites without passwords). What inane webdev though that'd be a good idea?

I would have thought TOTP and challenge-response hardware tokens to count

Those are absolutely not passkeys. Passkeys are just WebAuthn (from what i can tell).

> This implementation is not spec compliant and has the potential to be blocked by relying parties.

The only conclusion I can come to when it comes to this and the earlier kerfuffle regarding being able to export the plain text of passkeys is 'the spec is bad and you should feel bad'.

Even then, unless you use one for work, where work can issue you a new one if you lose it, you're going to need (at least) two Yubikeys if you want to go that route, because not having a backup is a bad idea.

2FA secrets can be backed up, and everyone should do that, for the same reason you'd want to do it with passwords.

Passkeys can too, but there it's even more obfuscated than with 2FA.

Both pens and pencils exist.

Yes. Old people constantly do it, since they have no hope of remembering 15 passwords. Sometimes, they can barely remember 1 (one).

I've written down one: the master password for my Keepass database, along with instructions on how to get to and open that file. It's in a 'open if I'm no longer alive' envelope.

They're just text behind the scenes, so you can copy them if you really want to. KeepassX lets you do it, and got into a kerfuffle about it.[1]

It's an impossible design. It's all just obfuscation, most of which is confusing to users.

[1] https://github.com/keepassxreboot/keepassxc/issues/10407

I went to a physical branch to get it fixed and was told that branches don't have that kind of ability so I'd have to call customer support.

What are the branches even for if not customer support?

The sim card/internet plan supplied with the car isn't going to last forever (from memory, they buy a 5-year plan or whatever in line with the car's warranty period or similar. It might be possible to buy/subscribe to an extended plan, but I can't imagine why one would. I wouldn't expect any carmaker to seriously support the car past that anyway).

If you can share your phone's internet connection, then that works fine (and is probably ideal!), modulo my previous remarks.

I remember when it was just chronological, but it's been a long, long while since then. It might have been as far back as 2010 or earlier that change happened, but it was already 'big' by the time the change happened. I vaguely remember there being outrage because it was yet another change, along the same lines as all the design changed people also complained about, but complaining alone didn't prevent Facebook from keeping the changes.

I think it's reasonable to expect anyone interested in computers would be familiar with common compression tools

So 7zip and Winrar?

I joke, but only halfway. If you're only normal Windows user, you'd never hear of anything else (unless you want to go back to Winzip, which does still exist, but I've never heard of anyone using it any more).

What else is there to measure it by?

The return doesn't have to be money or fame. The journey itself can have some value, be that knowledge, wisdom, connections, whatever else. But all that is its return.

I didn't even know about tar or rsync until I started to use Linux, and I don't really see how else one get to the point where you need to know about them. And even symlinks are still in my mind as 'shortcuts but [...]' (even though the other way around is probably more accurate). Even as a dev, it's very possible to go through life without touching Linux.

My heart aches for those who can't opt out of using Windows.

Law enforcement aren't always moral (and sometimes even lawful!) when performing their jobs.

When it's minus -20°C outside, you'll be very happy for that heated steering wheel! For someone living in the desert, I wish there were cooled steering wheels, on the same level as heated/cooled seats, but maybe that's asking a but much.

Copying is not stealing. If you're of the opinion that that's stealing, then it is my opinion that stealing is OK.

Yet they still manage to be better than the baseline, since that's located somewhere around the Mariana Trench.

Ahh, DRM-ed cars. I should have seen that one coming, really.

Assuming your car has all the functions you care about, and the OTA updates aren't bringing you any bugfixes or feature updates you care about, is there any good reason to update? Or even have it online to begin with? I'm not expecting someone to hack my car; on the contrary, I'd rather have it be impossible for the automaker to reach my car in any way without it being obvious to me (i.e. me flipping a switch to get it online for whatever reason).

Given that the (user-facing) software that comes with the car is always broken (modulo Tesla and a few other modern exceptions), it's no wonder people want to replace that software with literally anything else that actually works.

This isn't the auto industry deciding that you need to use your phone. On the contrary, GM and others tried hard to push back on Carplay and AA. This is the buyers telling the auto makers that they want Carplay and AA since they know that that actually works, and they know that the software the car actually comes with will be garbage, or at the very least unfamiliar and not really worth dealing with when you can hook up your phone and let that actually solve the problems the user wants to be solved.

It's insane to me that anyone could be of the opinion that it's good that some automakers ban/don't implement Carplay and AA. It's just taking away user choice. It's hard to believe anyone could have this opinion without either never having driven a modern car, or just being an industry plan.

Pirating songs is not stealing. It's copyright infringement.

If I go to the store, pick up a carton of milk with my right hand, and magically get a second carton of milk in my left hand, then walk out the store with the carton of milk in my left hand, leaving the original carton in the store, then I have not stolen anything. If that is stealing, then I can only conclude that stealing is (a)moral, and we need a different word for what I would consider to be stealing.

Copyright infringement is not stealing.

It's a case of some people making it worse for everyone. If people behaved on the server, MS wouldn't have intervened, which then wouldn't have made 2b2t cave on a what feels like a core ideal. It may only have chipped a corner of that ideal, but it still stings.

That said, I think it is inevitable for any anarchist server that gets large enough to end up in this exact situation. MS wasn't going to let one of the biggest and most famous servers of its most popular game be filled with swastikas. Even less so when it's so popular with kids.

In a funnier world, 2b2t would have said 'no', but I have a feeling MS would escalate, and that whatever email or whatever the admins got probably implied as much, so maybe that world wouldn't be funnier after all.

If your app is paid, there should be a business behind it, which has a business address and other associated contacts.

Replace 'app' with literally any other product or service in that sentence, and it still seems reasonable to me. You should be able to reach the producer of your frozen nuggies from Walmart, as well as the manufacturer of their t-shirts.

If your product or service is free, then a lot of that flies out the window (assuming it isn't actively hurting someone). Netflix's free app doesn't really do anything if you don't pay, but since it's free, you can't bring a claim to Netflix to complain about it, since you haven't paid for anything. The moment you pay for service though, then your right to complain if there's a fault in the service kicks in, which may or may not involve the free app (which Netflix is pointing you to and telling you to use to use their service). Once a consumer has paid for something, they should be able to follow the trail back to whomever made the product they're using.

I know this may seem like moving goalposts, but I forgot to mention another point here, which is that I'm perfectly happy with allowing my customers to reach me by mail and they actually can reach me that way. What I'm much less okay with is someone knowing where my family and I sleep.

I have a mail forwarding service so that I don't have to give out my home address. If you send me mail to that address, I will see it!

In this case you have an address where people can reach you. I have no problem doing things this way. And even if you were a knobhead who only did that to fulfil the regulations and ignored any actual mail going to that address, being able to send mail there, have it go in a black hole, and then be able to go to whatever consumer protection agency and tell them 'I mailed them a letter and they never responded' has value in and of itself for the consumer.

It's another cost and hassle to have to set this up just to avoid the rare but possible doxxing situation that comes along with putting things out in public. The other part of this is that big corporations are obviously much better equipped to handle this scenario and they don't represent a single person's reputation or literal home in the same way.

I realize that addresses aren't really private but you never know what can happen. Maybe my app blows up and goes viral, there's some kind of controversy that gets out of my control via the media or something like that, and now my App Store listing for my viral app has my home address and a bunch of people on the Internet start sending me poop in the mail.

Fair point that it's a hassle for you as an individual. I get that you don't want to be doxxed. In an ideal world the people doxxing you would be prosecuted for doing that, but that's probably a big ask if you're in the US, at least from what I can tell. In Europe from what I can tell, while it's not a non-issue, it usually doesn't get worse than verbal abuse and people being angry on the internet, and while nobody deserves death threats, at least it's just words and not, ya know, letter bombs or swatting. Even relatively 'minor' offences caused by going viral, like stalking, are prosecuted and dealt with from what I can tell (exceptions obviously exist in both directions).

Now, all of this may be more of the fault of EU regulations and that's also perfectly fine but it makes me wonder a little bit if there can't be some kind of solution that is compliant but a little friendlier to small/solo businesses? If it's not possible I can definitely accept that.

I'm not sure what can be done beyond loosing the restrictions on the little guy, but I'm not sure if there's much political will for that (and don't get me wrong when I say this, but also, good reason). If there's a reasonable solution that upholds consumer protections and rights, I'm open for it.

Correct. They get one shot at correction, and if the fault isn't gone by then, refund it is (or the seller can just jump straight to a refund if they want to). You'd be surprised how often this happens.

Even then, I've had success with older HDMI and DP cables up to fairly high bandwidths. It's only on a longer cable and a 4K screen, as well as one 1440p screen that was just really picky for some reason, that I've had issues.

Meanwhile, the instant I want to transfer a non-trivial amount of bytes, USB 2 speeds come and make my life worse than it needs to be (or at least it did before I sat down, found decent speedy cables, bought them, and then put them in their dedicated spot for me to find the next time I need to transfer files).

Agreed on the purchase experience though. It was a pain to find decent cables, but at least it's possible to end up in a happy place.

It's not too bad if you know it can happen and more or less expect it. Nobody goes on 2b2t not expecting chaos.

Thankfully, there are other servers on which people play nice. And there's always the option to host your own with friends, which is my preferred option.