ChatGPT tell me what to think about this meme

Over/under on the 4 people who downvoted this being colorblind?

J Jonah Jameson, in his chair

Tl;dr? Way too much filler text.

For things that are on Twitter but not on other websites. Of which there is still a lot. People who rely on Nitter for updates from organisations or people who only have a Twitter presence, will not stop checking those accounts just because Nitter is down. They'd just go on actual Twitter instead. Nitter at least gives them options.

Nitpick: the author seems to be under the impression that attestation occurs at login, but what I remember from reading A Tour of WebAuthn is attestation can only happen when a credential is created. In the case where Xitter wants to prevent you from logging in from Lineage OS, the effect is broadly the same. The difference is, instead of Xitter refusing login, either (a) Xitter refuses to create an passkey login option for you if the device does not offer attestation or if the attestation indicates the device could later expose the credential to an "insecure" operating system OR (b) the device simply can't have Lineage OS installed at all or erases the credential or prevents Lineage from accessing the credential while Lineage OS is running.

I'm also not sure if governments or government agencies being members of the FIDO alliance is an indication of nefarious intent. Their intelligence agencies engage in offensive operations, but are also interested in defending their countries against cyberattacks, yes? Moreover, the NSA is not a member. NIST is, but NIST is a standards body, not an intelligence agency.

Don't give them ideas

Keep in mind the Nitter developers are associated with Poast, despite attempts to scrub this.

Poast is:

a website that has become a haven for racist, antisemitic and misogynist posting also has close ties to Truth Social, the social media site founded by former President Donald Trump, according to a report published Thursday.

It feels so good to be German now that everyone has spent all these years making fun of us for worrying about privacy.

my sides, in orbit

Great read, I didn't know that about passkeys. I don't use them although I've been prompted to, I always find it weird when they ask you to use something with absolutely no explanation.

Well, not ordering from Amazon is at least a start for opting out.

I agree that we should be careful about how we use passkeys, but I don't think "do not use them" is valid advice.

This article only convinces me that a company like Netflix could support passkeys in a non-restrictive form (unattested, copyable, etc) and then ratchet up restrictions slowly as adoption increases. But this is really the same game we play with all other dark patterns like price hikes, pay-to-still-watch-ads, user tracking, etc. The savvy will realize quickly that enshittification is happening, and they will seek alternatives.

To me, this is not adequate justification for boycotting the entire passkey technology. I find them convenient, and I use them in my own homelab identity provider. Only a handful of the services I use even support them properly yet, but I wish more did.

The author argues that passkey attestation would allow (eventually, via silent ratchet) any website to make demands about the software you run on your hardware. That would be a new thing and a reduction in freedom and privacy.

true, the annoying thing about nitter is that it actually makes twiitter usable lol

This is FUD about passkeys. The core issue they have is with attestations. Well servers already have ways to require attestations that don’t involve passkeys.

Maybe there’s some strong arguments against attestations, but I haven’t seen them. All I’ve seen is people arguing that attestations make it hard to violate sites’ terms of use or to evade bans.

A salty mod already said I can't crine at yo stan. 🤣✌️

My “addiction”‽

You must have me confused for a capitalist.
Try reading this as a certified distributed freak.

I personally use a self-hosted passkey manager, and I don't see the point of boycotting WebAuthn. Making my account less secure by relying on TOTP exclusively seems like a dangerous trade-off. And whatever amount of user adoption is irrelevant if the Big Web decides to make attested passkeys mandatory.

People are going to continue using Twitter because of network effects and not being committed to an ideal enough to give up access to information and content. But if they can be persuaded to use a frontend, at least Twitter is getting much less out of those people.

We're never going to break the monopoly of these companies over the web by relying on the willingness of people to make personal sacrifices, tools like Nitter are really important.

Pretty sure the owner would have to doxx themselves in order to fight this in court, not sure if they're prepared to do that or just shut it down. Either way many other instances will stay running all over the world and this game of Whack-a-Mole (Streisand Edition) will continue ad infinitum.