[–] 4 points 2 weeks ago (1 child)

That warning about a modified fingerprint only applies if you’ve sshed to that host before. How many people carefully check the fingerprint if it’s the first time they’ve connected?

  • source
  • [–] 8 points 3 weeks ago

    The source for this is 5 months old. It’s based on a paywalled Financial Times report called “Banks seek to offload risk to avoid ‘choking’ on data centre debt” from May 3, 2026.

  • source
  • [–] 3 points 3 weeks ago (1 child)

    It wouldn’t be a silent ratchet though. Attestations require a hardware-backed passkey, which makes them non-transferable. And you can’t convert a software-backed passkey into a hardware-backed passkey. So if your passkey is stored by a password manager that syncs, you’re good.

    [Okay, technically it doesn’t have to be hardware-backed to be attested. But if it’s software-backed the attestation becomes of such low quality that it’s not accomplishing the goal anymore. When a device attests that the passkey is coming from device X running OS Y, but that exact same passkey is also synced to other devices running other OSes, the server loses most of the reason to trust that attestation.]

  • source
  • parent
  • context
  • [–] 7 points 3 weeks ago (3 children)

    This is FUD about passkeys. The core issue they have is with attestations. Well servers already have ways to require attestations that don’t involve passkeys.

    Maybe there’s some strong arguments against attestations, but I haven’t seen them. All I’ve seen is people arguing that attestations make it hard to violate sites’ terms of use or to evade bans.

  • source
  • [–] 5 points 5 months ago (1 child)

    No, it’s the opposite. Apple argued strongly that passkeys are intended to be a replacement for passwords and so must be syncable. And that’s how it’s implemented on Apple OSes. It syncs to iCloud Keychain or your password manager, and so that same passkey is available on all your devices. It’s not even locked into Apple’s ecosystem because of cross-platform password managers.

  • source
  • parent
  • context
  • [–] 8 points 8 months ago

    I think you described what Apple implemented for its Declared Age Range API. The API has one additional privacy protection, which is that the API only gives age bracket information rather than precise age.

  • source
  • [–] 3 points 10 months ago (1 child)

    The details about falling assumes Earth level gravity too. That might be different enough to change the scale of things. When gravity is especially high you aren’t likely to evolve very tall creatures because vertical movement becomes punishingly expensive.

    For massive size differences I would expect that to affect brain size and intelligence. Below a minimum size you’re not likely to get higher intelligence because the brain just isn’t complex enough.

    There’s also interesting problems with heat. Larger bodies have less surface area to dissipate heat and so are more prone to overheating. Tiny bodies may lose heat to their environment too easily.

  • source
  • [–] 23 points 11 months ago

    This RCA message archiving feature is on “fully managed” Pixel devices, which are COBO: corporate owned, business only. You shouldn’t be doing anything personal on such devices.

    There’s also “work profile” which is a different kind of management for mixed personal and work use. With work profile, the admin has no visibility into the personal side of the device.

    It’s simplest and safest to follow what you wrote and never bring personal and work anywhere near each other. But there’s downsides to that, like having to carry two phones. I think there’s some situations where most people will feel safe doing personal things on a work device.

  • source
  • parent
  • context
  • view more: next ›