tonymet

The fundamental blind spot engineers have had with every authentication protocol for 30 years is forgetting that trust must be mutual. The lone exception has been phishing prevention with user-selected avatars, and that didn't last long.

Every advancement in "security" has assumed the service needs to more strictly identify the customer, without caring about the customer's trust for the service, or experience with performing the identification ritual.

So when your bank asks you for a code or your mom's maiden name, they never offer anything to verify they are who they say they are. whenever I ask they say "of course we're from chase, we just called you", without realizing how absurd that is.

Now Passkeys suffer an even worse dilemma. Now the customer has 4 dimensions of tools to record & use in order to log in. Did I use email, google, facebook, apple ID to log in? Did I save this code via phone, text, authenticator app (which one, there are multiple incompatible ones)? Did I use a passkey ? where is that passkey located? my phone, my browser storage, my authentication extension.

We started with a single dimension of email + password to log in. Now it's an entire decision tree that has to be recorded. How do you even record this?

  disqus :  credential = email, password = "see bitwarden", 2fa = microsoft authenticator, passkey = "on iphone in icloud"

  viator: credential = google sso, password = same, 2fa = symantec, passkey = "edge on windows 11 laptop in office" 

I thought engineers were tested for scaling during the interview process. This protocol doesn't even scale to a single site.

call it a boot loader or whatever you like, the system that helps you diagnose boot issues.

Lack of proper IO connector is the reason I abandoned Raspi. SD card crashes are nearly a guarantee. Total pita too since there’s no display during the BIOS.

I hope you have auto pay disabled

I see what you mean. Sort of what slate is going for . Let’s see how that goes.

The capability may be there, sure

A helpful guide, but usb c usability from a consumer standpoint is atrocious. From the specs it runs so many modes, PD (at various power levels), classic 5v , alternative modes. Sadly, there’s no way of knowing which mode a device or cable is supporting.

They could have done a better job color coding the connectors like resistors, so you could know the protocols supported by the cables and devices.

I have to label my own cables according to data support, PD, max power, etc. And many of my “usb c” devices only work with usb-A to usb-C cables.

The connector design targeted the industry and not consumers. Hopefully they will improve that.

Give it time. I have 10+ year lightning connnectors working great. usb c isn’t quite as sturdy

You're right the facilities may be there for telemetry & feedback, but none of the Tesla competitors are structured to manage that telemetry and feedback. Often the brands are repackaging software from vendors (e.g. Bosch) that are terrible at fixing things.

Let's face it, this really is about Tesla, vs the rest of the major players (ford, kia, VW etc)

The practical solution here would be closing the feedback loop with customers. The business does want happy customers, it's important they return to purchase in 5 years. The problem with car companies is that they don't get immediate feedback (telemetry, tickets, etc) when they do push an issue. And they obviously don't have gradual roll outs the way tesla does.

Rather than hamstring all software by requiring DOT testing before firmware updates are published, follow Tesla's model which has been very reliable within the industry

wouldn't that be impossible in this case? since android auto needs to draw to the screen, control infotainment, etc. even a dedicated USB + rocker switch for android auto would still need a software path to do those things

Reducing scope . For example , preventing private emails from being accessed by the model

I was hoping this was a climbing harness that could service other trades too

for that sort a tool it would be nice to restrict access to specific labels , or API query patterns.

you're right. i would rather see this handled using a better authorization protocol like Chromecast did, rather than taking over the UI.

Losing control over the UI for the car, to support media playback isn't even a good engineering approach, let alone being a good user experience.

Really great idea. What are some of the access controls available

A variety of performance assessments more similar to commercial pursuits.

Group projects with tangible artifacts, including finished prototypes that meet objectives. More emphasis on group projects. If AI accelerates productive development like with software, move the objectives up the ladder in complexity, or expectations.

Peer assessments and performance reviews like employment . This also helps prepare students for adult life.

If the subject matter is merchandisable, have the students operate an enterprise. My local high school has the students operate a food cart for example, and it opens to the public one weekend a month, otherwise open to students. Students are responsible for inventory, marketing, accounting, maintenance , customer service etc.

More verbal challenges . These can be operated by AI with human supervision while being recorded, with spot checks from supervisors.

Every diagnostic has a precision / recall curve and some fall through the cracks. But you have to shift your approach when old testing no longer becomes viable. Better that than to revert to the stone age of informatics.

I admired Costco for installing USA-made manhole covers rather than use those made in India, which most municipalities have shifted to for lower cost.

I’m probably the only person who would notice that. Sort of how Steve Jobs explained that a good carpenter cares about the backside of the dresser as much as the front, even if no customer will ever notice.

Instruction needs to shift to accommodate AI rather than preventing it from being used to complete assignments and tests.

Assignments and tests were always lossy, and over time more cheating crept in.

Instruction should shift to benchmarking productive output, strategic thinking and group collaboration. Similar to labs where you are tested on completing an experiment or a project with artifacts. Or an MBA program with quarterly group objectives. A major part of the group effort is dealing with collaboration and overcoming obstacles like laggards.

Hopefully people will realize how poor testing is for preparing students for the real world. the ultimate goal is preparing the students for a productive life, most commonly in commercial enterprise, but even academic pursuits require collaboration, productivity and other characteristics that were not well assessed by traditional testing and homework.

Imagine if customers demanded MacBooks boot into Android when an android phone was connected .

The cars primary UI is the screen. Car Clay defers the cars experience to Apple .

Customers have been demanding CarPlay because most car UIs are poor. But if done properly, they can exceed CarPlay while being consistent and well integrated

It won’t boot, but someone please upload Slackware to your repo and have Microsoft burn it

Most of your arguments are not profitable . If another team wants you to implement something unreliable , you will be responsible for service . You will need to have an argument to prevent that from happening .

The 4 hour work week isn’t life

this should really show average install cost. Even phones have 8-12gb because the software is so atrocious. It would be like comparing cars by pricing per horsepower. Nobody is running a 12 horsepower vehicle on the highway, and doing so would be dangerous because of the change in average power & speed.

thanks that's actually helpful. I wasn't aware of the revisions. i have a 2023/2024 POC with mips. I'm guessing it's gen whatever. I'm sure a lot of people don't mind it. I ride a lot and sweat a lot so I'm more sensitive to airflow than most.

how does a plastic liner improve breathability? the foam layer has clearance over the scalp/ hair. The mips layer sits over the scalp and prevents airflow.

eventually hosting costs money, so ads will be needed

i agree about steam deck and i think a couple solid hardware players need to take a risk, like xbox did with series S. try to draw a line and encourage game studios to join in

I would argue AAA are avoiding the safe bets by forcing "new experiences" into safe money-making genres.

At Xbox Showcase, many of the popular beats were bringing back elements from Halo or Gears of War that fans missed.

The formula for making hits seems to be pretty clear, but the studios are bucking it.

that's what I'm working to figure out. The business model worked until around 2018 . Software could target gen + 1 , and things would balance out as hardware got cheaper. Now we have the inverse, where hardware is only going up, so why are software developers still pushing hardware into unattainable territory?

The capitalism part actually made sense until it didn't

MIPS is great but every layer is a tradeoff with venting. without MIPS the vents allow air onto your scalp. with MIPS you effectively have a plastic shower cap over your head, beneath the EVA foam insulator.

I'm anti MIPS