Please write me a haiku about a man accidentally sitting on his balls

Honestly I have no idea what you’re talking about.

Bluesky ain’t the Fediverse.

I knew it sounded familiar. Nice sleuthing

Maybe? I’d say that TOTP is probably more ‘phishable’ than passkeys - but I doubt there are actual stats on it.

If an end-user is the kind of person that’s fooled by a fake bank website that is on the wrong domain with a sketchy certificate - and approve 2FA requests without much thought - then it is probably likely they’d be fooled by a fake bank website that says, “per our recent updates, [yesterday’s date] is the last date to switch to using an updated web browser. Our bank website is no longer compatible with this web browser, please open one of these browsers [list of any major browser useragent not identified as the current browser] and attempt login again”.

That could either completely bypass their pre-configured bank passkey with legacy login to the fake bank, or the attackers could just pushing them to configure a new passkey to the fake bank on the new browser (the attackers wouls set up a real passkey to the real bank in parallel, using the supplied credentials in the background).

There is certainly proof of concept and examples in the wild of significant cases of people being tricked into approving additional devices with passkeys.

This is making me look at those thick multicolour pens differently.

I swear most people have forgotten what TOTP was used for in the first place - two-factor auth to protect people re-using passwords getting hit by password breaches on other services, people using low complexity passwords, and to protect people’s breeched devices (e.g. computers getting viruses or malware or drive-by credential nabbers that give the attacker access to your credentials in some way). In short, to solve some poor security practices. 2FA via TOPT still solves all of those problems.

Passkeys fix a different problem. On their own as a technology they essentially just increase the quality of a password, while tying that password to a single device. So they fix the problems of re-used passwords, and unsophisticated passwords. But with many implementations they fall back to being single-factor auth - if a user has access to your device, they can use the passkey (with exceptions such as passkeys stored on a physical second-factor like a Yubikey that requires physical approval to use).

TOTP meanwhile requires two devices to be accessed by design.

As myself and most tech-aware users already use unique, sophisticated passwords - they don’t solve a problem for us.

However, if businesses allow passkeys as a simple password alternative, while still allowing TOTP as a second factor, I’d be happy to do so for critical access items (mostly banking). However, I’m not aware of this being the case for any common implementations in major businesses.

Passkeys are just ‘Yubikey without the Yubikey or physical approval’ - pointless to me. False sense of security even.

Blockchain is here. NFTs are here. The Metaverse is here.

Not long ago they were the ‘unavoidable evolution of technology’ that we were sometimes scolded for mocking.

Maybe they won’t go away, ever. But that’s actually not important.

Just because a technology exists doesn’t mean it will be relevant whatsoever in the future - even if the technology is ostensibly a huge market with billions of dollars being poured into it, and there’s nothing wrong with calling out stupid technology and complaining about it.

The AI LLM slopaverse is both a stupid business model and a stupid technology (given the amount of investment and valuations). Considering real world utility of LLMs I’d say it deserves around 1/1000th of the current investment - if rational people ran the world.

Because the guy that owns DigitalOcean is a cunt.

Considering household insects like cockroaches often look for warm, dry locations to lay their oothecas (egg capsules), and have been known to get fried and damage equipment while doing so - I’d say you actually might have a useful symbiotic pal there, protecting your gear (do I see an MT-6000? Great gateway).

I don’t want to play up the ‘everything in Australia will kill you’ meme cos it’s honestly not that bad here. I generally love bugs, ants, spiders, lizards, whatever. Will happily interact with most to move them to safety if they’re in a dilemma. But bull ants I do give a wide berth.

Their sting is pretty intense, especially if you walk over a nest and get a few on you - tend to hang on and keep stringing until you swat them off. I’d say they’re up there will paper wasps pain-wise (which I hear is similar to yellowjackets for comparison).

They’re a menace to kids. So aggressive and the workers are solitary foragers, so kids can just be minding their business playing, very far from any bull ant nest (which kids learn very young to avoid), and a roaming bull ant will see/feel a little human stomping around (figuratively), having fun, smiling, and just decide “I’m going to fuck up their whole day”. But hey, we’re on their continent I guess.

Because FOSS isn’t the problem. The problem the law seeks to address is profit-driven big businesses like Meta and Fortnite who don’t care to provide any protections for kids or actively target them in their manipulative behaviour, hence targeting the laws at the actual problem (non-FOSS software).

Good job standing up to unsafe bullshit in the workplace. It’s never easy.

Nah its 100% serious if its been posted to a community named ‘Epic Red-Pilled Memes’.

These are people that don’t understand irony.

It’s from the misinformation and rage-bait network, that makes it immune to facts.

Just ask the sacked Facebook independent fact-checking department.

I’d want to visit that garden, place looks picturesque.

Just search. It’s easy. There’s heaps of data on LTT being shit, but particularly in Linus being a greedy, grubby little man.

https://en.wikipedia.org/wiki/Linus_Media_Group

Scroll down to ‘controversy’ and see if that’s someone you want to support.

Bummer. When this kinda thing happens to me I just accept the fate the universe has delivered me, and pick off the sticker for like 45 minutes while watching an episode or something.

No other removal method has proven reliably non-damaging.

What a reactionary zealot response.

This is a dumb exclusionary policy being fairly pointed out, not ageism.

I’ll explain it with a comparision of the language used.

The language used for benches like this in my country, Australia: “Priority seating. Please stand for seniors, pregnant, or handicapped people”.

Priority, based on needs. Anyone can use it otherwise.

The language used in this sign: “Benches are for seniors are handicapped citizens only”

Exclusionary, based on privilege and needs. If you are old and infirm and a citizen ONLY YOU may ever use this bench, and if you’re not a citizen (tourist, asylum seeker, migrant worker) you can fuck off regardless of your needs. Pregnant women? Who cares, they’re not old and they’re women.

This is not a subtle distinction. This is language used to assert a hierarchy and exclude underclasses, and it’s embedded into every aspect of US society without most people even noticing because they’ve never seen different.