reginald78

Yes, we've seen you repeat that we have to read it again. I reread this morning before the post, but really just found more things supporting my position.

To be very honest here, you risk having KeePassXC blocked by relying parties (similar to #10406).

From the linked https://github.com/keepassxreboot/keepassxc/issues/10406 > | no signed stamp of approval from on high > see above. Once certification and attestation goes live, there will be a minimum functional and security bar for providers.

| RP's blocking arbitrary AAGUIDs doesn't seem like a thing that's going to happen or that can even make a difference It does happen and will continue to happen because of non-spec compliant implementations and authenticators with poor security posture.

Is your argument that despite being doused with gasoline I can't complain because I'm not currently on fire?

Even with the current flimsy "What about iPhones?" defense against attestation, is there anything stopping say Microsoft from just forcing you to install a different app to use Microsoft services?

Well, having your passkey provider blocked for doing that might stop you.

https://github.com/keepassxreboot/keepassxc/issues/10407

Of course, they might just block you for not being on a whitelist of approved providers anyway.

It just wasn't an important consideration, unlike the attestation anti-feature.

The important part is the GDP is now increased because of the cost of energy and additional hardware needed expand and then compress the original data. Think of the economic growth all these new hassles provide!

This is only partially true. Nothing in the spec, all up to implementers. At least KeypassXC sure provides a way to access your data: https://github.com/keepassxreboot/keepassxc/issues/10407. Other software behavior may vary.

This thread is one of the guys from FIDO threatening to blacklist keypass for doing just that, using the spec'd passkey attestation feature as the tool to do so. Just because the attestation feature isn't widely used as a weapon just this second doesn't mean that is not the intended endgame, in fact I'd argue the hand was tipped in that very thread.

They're probably just trying to not get their implementation blackballed with the attestation feature like one of the FIDO devs immediately threatened to do to keepass: https://github.com/keepassxreboot/keepassxc/issues/10407

I think the dance is all for naught though, they'll end up locked out as non-standard once uptake is high enough IMO.

And how long until the attestation feature is used to ban their implementation? The threats have already been made to keepass.

Can't comment on Google specifically but hidden scrollbars mean I often don't realize a dialog has scroll bars until I reach out into the dark edges to find what I hope is there. Microsoft will even harness this as a dark pattern to hide options they don't want you to choose.

Perhaps your dad simply expected to scrollbars to be visible like they initially were.

I've definitely seen them. A quick search shows them available at BestBuy and Walmart at least.

IIRC the rule Mastercard cited was so vague that trying to workaround it almost seemed potentially pointless. It was basically a blanket "we think it makes MasterCard look bad so we end our relationship". Anyway, debit cards are still Visa/mastercard so using them as cash has the same problem. I was thinking they could just use Steam gift cards but since those are often themselves purchased in stores or with credit cards it seems to just push the problem a little further away.

I believe Steam did support bitcoin at one point but decided to end usage over because the price fluctuations made it to unpredictable on their end. Maybe the landscape has changed though.

There's a youtube channel shadiversity that I haven't watched in awhile. It is mostly about fantasy media and swords but also spends a lot of time on medieval building techniques and clothing. One of the more interesting videos I watched talked about how before and even after saw mills could process and produce different sized boards people would 'grow' them instead by trimming trees to produce long straight narrow branches. There was even a still living example in some English village that some trimmed 100 years ago before the process was completely stopped.

This also reminds me of those Japanese temples where in order to preserve the institutional knowledge of how to rebuild the temple in case of disaster the monks tear it down and rebuild it from scratch every 30-40 years assuring the next generation has experience.

The silly part is unraid has all the pieces to do this. The btrfs file system which unraid supports for array disks could identify bitrot, and the unraid array supports virtualizing missing disks by essentially reconstructing the disk from parity and all of the other disks. Combining those two would allow rebuilding a rotted file with features already present.

My impression is unraid developers have kind of ignored enhancing the core feature of their product to much. They seem to have put a lot of effort into ZFS support which isn't that easy to integrate as it isn't part of the kernel, when ZFS isn't really the core draw of their product in the first place.

I can only assume our accounts are linked by address and they do the recall notice (at least) by account address. In other words, they aren't linked but kind of are anyway.

Can't they just go back to selling crack cocaine to fund themselves again?

For some reason I received a recall notice for one of these from Amazon but I don't recognize it and could not find any purchases in my order history. I vaguely recall my wife might have bought something like this years ago as a gift for some one else but our accounts aren't linked.

I read the FAQ on mine and it assures me it is totally safe and the voice cannot be forged. This mechanism was defeated in a hacker movie from the early 90s using a tape recorder but is actually being pushed as state of the art. I can't imagine how this method could ever be safe, even if it were possible to use some kind of advanced detection which would fail any time I had a cold my voice can be recorded and played back in high fidelity!

I feel like while there were laws against furnishing alcohol to minors and the like, I never really heard of some one's parents getting charged because some kid crashed his car after boozing it up at a party back then. Maybe I just wasn't paying attention but it seems like the enforcement of that really stepped up.

Reminds me of the meme where they tricked an AI into deciphering a CAPTCHA by pasting the CAPTCHA crudely on top of a picture of a necklace and asking it to help read the inscription on their dead grandmother's jewelry.

Yeah, but they can't wash the copyright off of that source code without an LLM as a go between.

Yes, Capital One offers a similar virtual card service and when I read into the fine details it wasn't as useful as a thought. There were seemingly exceptions that could override spending limits for subscriptions and the control was mostly an illusion.

Are you sure you need the Microsoft one? After reading the giant support document at my employer I eventually figured out that any TOTP supporting app would work but most of the documentation made it sound like Microsoft was required anyway.

Keepass was straight up threatened with blackballing using the attestation feature an enforcement mechanism. This thing was barely out of the gate before the mask slipped.

In practice I think he is right unfortunately. Most people would just run Chrome and more websites would require Chrome since they could just tell Apple users to deal with it, making the mono-culture even worse.

F2P creates this problem. If you're eating $20-60 per account every time your anti-cheat is burned it isn't much fun anymore. But if you can roll new accounts for free, there's nothing to lose.

Was just reading about this one a few weeks ago, I couldn't find the article again but I believe it was based around the book Bottle of Lies. Basically the political pressure to keep drugs available and costs down has them looking the other way. And it has been going on since at least the Obama administration IIRC.

See the HIV infected blood products scandal with Bayer. The infected blood was pawned off on the third world since they (correctly) figured they'd have much less success suing them.

Meanwhile my retirement account is with a financial services company that pushes voice match authentication, an authentication mechanism that was a joke in 1980s.

I think a lot of these problems are exacerbated by the developers themselves. Dedicated servers were removed (so that games could be sunset-ed to avoid competing with sequels) erasing community and human moderation leaving players entirely dependent upon algorithms and spotty reporting. F2P games are pushed to get people on the micro-transaction treadmill which makes the cost of being cause nothing but also can create a financial incentive to cheat for items. Now everyone has to jump through a bunch of extra hoops because the control they demanded isn't enough to solve the problem they made worse with it. The answer is always to add more hoops.

It was initially drummed up as a play to create a regulation moat. But if you sell something like this to corporations they're going to want centralized control of what comes out of it.