4am

joined 1 year ago
[–] 4am@lemm.ee 16 points 4 weeks ago (1 children)

I can’t believe Microsoft is doing EEE on malware

[–] 4am@lemm.ee 27 points 4 weeks ago

I wish instead of complaining to people that they didn’t read the docs or whatever that linux devs would scour the internet for these criticisms (like when specifics are provided) and then develop solutions for them.

Yeah, people are shitting on your product because it’s not obvious. Make it more obvious!

(Thankfully this is starting to happen…)

[–] 4am@lemm.ee 32 points 1 month ago (2 children)

He did debate with Hasan on stream for like 3 hours and I’m sure (assuming) he got a lot of texts from his business partners (one of whom I understand is Muslim) so maybe he really did take a hard look at himself.

I sure hope so because, man - what he said was ignorant AF.

[–] 4am@lemm.ee 7 points 1 month ago

Wasn't there multiple password managers that got powned over the years ?

Pretty much only LastPass

[–] 4am@lemm.ee 1 points 1 month ago (1 children)

That’s weird, it works for me. Is there something you need to click on the mobile site?

[–] 4am@lemm.ee 16 points 1 month ago (5 children)

Bitwarden just announced a consortium with Apple, Google, 1Password, etc to create a secure import/export format for credentials; spurred by the need for passkeys to be portable between password managers (but also works for passwords/other credential types)

[–] 4am@lemm.ee 24 points 1 month ago (10 children)

All the major password managers store passkeys now. I have every passkey I’ve been able to make stored in Bitwarden, and they’re accessible on all my devices.

Article is behind the times, and this dude was wrong to “rip out” passkeys as an option.

[–] 4am@lemm.ee 4 points 1 month ago (2 children)

It's not illegal for Nintendo to run retroarch.

[–] 4am@lemm.ee 19 points 1 month ago (2 children)

You think they wrote their own emulator instead of just taking one of the free ones on the internet (who they will likely sue later). That's cute.

[–] 4am@lemm.ee 8 points 1 month ago

Read the article, it’s literally about replacing Import/Export CSV plaintext unencrypted files with something more secure.

I.e. moving your passwords/passkeys between password managers. This is not about replacing stuff like OAuth where one service securely authorizes a user for another.

[–] 4am@lemm.ee 10 points 1 month ago

With passkeys you never need to worry about the storage method used by the site. Some sites STILL store passwords in plaintext. When that database gets hacked, it’s game over.

A public passkey, even stored in plaintext, is useless to an attacker.

Maybe that doesn’t matter for you or me, with our 64-character randomly generated passwords unique to each service, but the bigger picture is that most people just use the same password everywhere. This is how identity theft happens.

[–] 4am@lemm.ee 22 points 1 month ago

That’s exactly how passkeys work. The server never has the private key.

view more: ‹ prev next ›