1101010010

Then don't render and show me the plain text and images ... like almost all other websites I visit without scripts enabled.

Stealing or guessing a password is infinitely easier than compromising a Yubikey or otherwise hardware-based authentication factor. This is a demonstrable fact and any argument to the contrary is simply pearl clutching. I challenge you to find even a single incident resulting from a compromise of this 2nd factor, until you do there's nothing to discuss. And because you don't find it, it will ultimately demonstrate passwords are not even necessary when accounts are protected in this way.

There's no reason to moderate fruit. No one has even gotten sick or fat on a fruit diet, and it's literally impossible to eat anything but an isocaloric amount of fruit because of the fiber.

Passwords are bearer credentials and as such, they are not a meaningful layer of defense when in the custody of even a modestly competent system administrator.

As I'd said, you need to look no further than annual threat reports to see that credential theft is the most common avenue of abuse - by a lot. Hardware assertions, on the other hand, which in WebAuthN standards are also bound to domain origins, simply remove this risk entirely. Let me repeat: you cannot phish a WebAuthN assertion. Yes, you can pull off a physical attack, but at this point of the game, it is over because the adversary could just implant a bootkit, keylogger or backdoor on your valuable system.

The threat landscape certainly changes but the economics of computer fraud and abuse remains largely the same: attack the most vulnerable link in the chain for maximum profit for the least amount of cost - the human and her portable password (and other forms of exportable factors, roughly in order of security: SMS-based, HOTP/TOTP apps, email magic links, Duo-style "confirmations").

I have made a conscious commitment to stop all use of emojis. They seem innocent enough, but ultimately they're debasing language and limiting the range of free expression. For example, in 2018, most major platforms changed their revolver emojis to water gun icons, in an apparent attempt to "do something" about gun violence. This would be a laughable proposition if it didn't border on dystopian. We should not allow these corrupt companies and consortiums to dictate our capabilities of conveying ourselves based on their political ideologies. Orwell understood well vagueness and use of euphemisms as powerful tools of oppressing political opposition, and wrote beautifully of it in Politics and the English Language (1946).

Passwordless authentication means removing the most critical failure factor from authentication: the human.

> I should not be able to steal a yubikey

This type of attack is not based in reality; most attacks are done remotely from a location with limited jurisdiction and practically no repercussions. When there is no credential to phish because it's a hardware-backed cryptographic assertion, security is drastically improved. WebAuthN literally provides credential phishing immunity, which is by far the most prevalent source of account compromise today (see: annual Verizon threat report). It is so superior, I would even go so far as to share my password to, say, my Google account provided it is protected exclusively with a hardware authentication factor.

> To use the Mastodon web application, please enable JavaScript

Why? To read text and see a picture?

Are they healthy compared to what? This article, which is almost certainly written by a bot, is reductionist nonsense ("cranberries are mostly carbs and fiber") which actively pollutes and debases nutrition education. It's actually kind of impressive how the food industry has us convinced that fruit - FRUIT - could be anything but healthy for the frugivorous-natured apes we are.

My last day at the office was almost 5 years ago, and I was one of the lucky ones with a closed-door office in a sea of "open floor" cubicles. As I walked in to the roughly 12x18' room which was occupied by 4 other people (only 2 in the year prior), I was met with a cacophony of noise as all four of them were participating in their own separate video calls, mostly with staff on the same campus (there was a massive meeting room shortage).

It dawned on me then how emotionally and psychologically draining the entire routine experience had become and I turned around and went home at once. This ended up being the best decision I had ever made for my career, my family and my personal well being. I hope to never return to an office space again.

> Jassy said he and the S-team, a tight-knit group of senior executives from almost all areas of Amazon's business, decided at a meeting earlier this week that employees should be in the office "the majority of the time (at least three days per week)."

Was the meeting in a physical office? Can we expect the policy to apply to them as well as the rest of the staff? You know, to make it easier to "ask ad-hoc questions on the way to lunch, in the elevator, or the hallway" of leadership.

Love Titanic history and all of its glory - a magnificent machine doomed by human arrogance and hubris (we even went so far as to call it "unsinkable").

And for only $2 you can relive the experience first-hand in full 1996 CGI splendor! https://www.gog.com/en/game/titanic_adventure_out_of_time

Ah, yes, nothing like running an unaudited application as root for security! Especially love the part where the developer signs with a 1024-bit DSA key and then uses ssh as root to deploy to a public webserver the sparkle updates:

> scp SlothAppcast.xml root@sveinbjorn.org:/www/sveinbjorn/html/files/appcasts/SlothAppcast.xml

The references to "Mac OS X" (now over 10 years old) are the cherry on top.

> Don't buy soy guys, it's a fucking estrogenic nightmare at home.

Phytoestrogen is very different than the literal estrogen and resulting molecular mimicry found in animal products - the real nightmare.

> Seshadri left Google the second his "three year mandatory retention period" was up

What is a mandatory retention period? Sounds like a stock vesting schedule to me.

The coverage is actually an absolute joke and then some.

Just read the nytimes article for example: a train crashed, people are worried, but officials say “so far, everything is good” - that's it. No reporters on the ground, no investigation, no discussion with local residents, no critical independent thought to be found. It literally ends with "Officials said the main concern on Saturday was the potential for poor air quality" - that's it, everyone, just some foul smell, go back to work! It is a blatant state propaganda mouthpiece and regurgitation, Pravda style.

> more fun to talk about UFOs and Chinese espionage than an environmental disaster.

Exactly right: news has become entertainment, not useful and actionable facts produced by intelligent reporters to inform the lower-intelligence public - this is the whole problem.