foxylad

Your list of "already uncovered" fraud seems more like a list of RW hot-buttons: Clintons - check. Transgender - check. Various lame-stream media - check. Covid bats - check. Muslims - check. Incest movies - check. I'm just surprised they haven't turned up the payments for the NASA movie studio where they faked the moon landings.

But not a single administrator skimming off their department's budgets, which I would imagine is 90% of government fraud.

Also no-one is shooting the messenger. Mainly they are complaining that completely unauthorised people are rooting through all government data with no oversight. No matter what your politics, the president should have got these people vetted and followed the carefully designed processes to keep this data safe. If you're not seriously concerned that one day your tax info is going to turn up in an unsecured AWS bucket, then I can offer you a unique video of out-takes of Neil Armstrong falling off the LEM ladder for just $5,000.

As someone who runs mail servers, I wish they'd be MORE strict to stop the drive-by spammers. Every so often our servers get blocked because someone starts sending spam from a machine on the same netblock.

It might be good point-of-difference for some hosting service: have brutal KYC so your netblock is well regarded.

CNN is on https://lite.cnn.com/. The home page is a single 30KB HTML file (my browser also insists on downloading their 6KB favicon).

A thing of beauty, compared to their normal home page with 90+ files of 12MB.

I moved to the fediverse (a Mastodon instance) over a year ago. I found it less exciting at first, before realising that Twitter was only exciting because I could get outraged at the a*holes it insisted on exposing me to.

Now I love the fediverse. Local instances mean more local news/gossip, but at the same time I can follow global interests (just saw a post from Brian Krebs, for instance) just as easily. Hashtags let me follow my interests, and comments are more constructive and perceptive because there is no reward for provoking people. I don't doom-scroll any more and I don't have to filter out advertising - I'm much more efficiently informed.

Or anyone with gold teeth.

Find a new niche? I could imagine large companies incorporating these into presentations at conferences to liven things up.

Amazon could reduce this PR disaster by organising to give returned Astros to school programming clubs. Along with a way to hack the firmware, of course.

How long before you have to stop and spend 5 minutes in a store on your route? Google is an advertising business, and can now literally drive traffic to your store.

I'm guessing you're young. One day surprisingly soon you'll hear about someone your age dying from something entirely preventable, and you'll get real interested in those small changes.

Yes, we use email as the identifier, and yes we verify on signup.

We certainly aren't exceptional, and I expect that implementation will become easier as passkeys become more popular, and browser/device APIs develop. So hopefully later adopters will find it even easier than we did.

The issues the article raises are real, but it paints passkey implementation as much harder than it actually is. It's in Corbado's interests to exaggerate the difficulties.

We added passkeys to existing password authentication for a python flask app, and it took about 40 hours. 20 hours to get basic registration/authentication working, and another 20 hours to tweak the UX (things like popping up a "Want to use passkeys?" dialog occasionally, a passkeys page so users can manage them - all huge problems according to the article).

So please don't put passkeys in the too-hard basket after reading this article. Users love them, and they are going to be ubiquitous very soon.

We ask the user to name each passkey. One more modal dialog during registration, but seems to work well.

Kagi search shows this HN post, a link to kids encyclopedia page on Carmack, and his Wikipedia page as the first three links.

I started using Kagi last month, and am really enjoying it - it's like Google at it's prime.

Or simply make exchanging bitcoin for anything of value illegal. It makes extortion of all kinds too easy, and company data is just the tip of the iceberg.

I was in Italy recently, and saw articles about the epidemic of kidnappings there in the 70s. It won't be long before organised crime figures out how to use crypto to bring back the glory days.

Killing bitcoin would shut down an enormous illegal economy overnight. And stop the crazy electricity consumption at the same time. Maybe you can help me here, but I'm having difficulty thinking of a single real downside.

Odd - I have a pi-hole on my home network and never hit the issue with YouTube. The only breakage I've found is the top "results" (actually sponsored ads) on Google search don't work, but I always scroll past those anyway to discourage bad behaviour.

In fact pi-hole works so well that I'm always struck by how awful the internet has become when I venture away from my home network. Doctorow's enshitification in action.

Does anyone have experience of both Pitivi and Openshot?

And now AI-Something.

Had a weird timestamp bug yesterday, and I did (stupidly) consider if it was an artifact of hitting 1.7 billion seconds.

We have a Phillips microwave built in 1987, still going strong. In this domain, older is WAAAAAAY better.

My 3d printing journey seems to have ended with a Prusa Mini. Really solid and well engineered device, and it's delightful that Prusa acknowledge the open-source hardware and software they depended on to build their company.

BambooLab... well it is a nice machine, and they have definitely advanced the the field with input shaping. But this machine is pretty much a Prusa Mini with linear rails, and I'd bet there is open-source in their firmware and slicer, but there's no way to find out because their business model is to give nothing back to the ecosystem they have leveraged. That leaves a bad taste for me, but I'm sure many people will be quite happy to ignore such esoteric concerns and happily lock themselves in.

Until BambooLab have a bad financial quarter. Then the optional cloud integration will become mandatory with a subscription, and the spool detection system will start reject non-BambooLab filament.

Doctorow has struck a chord with his distillation of enshittification, and you are right on the money raising it here.

(Meanwhile Prusa has just released input shaping for the Mini.)

Sad you didn't see Linux as a better alternative to OSX. I credit it with making me at least 10% more productive over the twenty years I've used it, partly because it is stable and fast, but mostly because it isn't trying to sell me stuff while I work.

Doctorow's enshitification is everywhere. I use Debian so haven't experienced Windows for twenty years, but I recently travelled for three months away from the Pihole that blocks ads on my home network.

The web was practically unusable. I guess it's the boiling frog and most people have just got used to having to scroll past three pages of ads to see what they want, but suddenly experiencing "normal" ad loads literally stopped me browsing the web.

Off topic - but how can Cloudflare block access to an internal website when accessed by via VPN? And if CF has some kind of request verification API that the internal server is using, why would you use it for an internal resource?

Mastodon.nz fared very well during recent heavy rain events in New Zealand. Absolutely no tech limitations, and more importantly no arbitrary management-imposed limits.

Comparing a not-for-profit that made one decision you didn't like to a company that has a long history of screwing over the entire personal computing ecosystem for commercial gain is delusional.

Turbo C -> C++ Builder -> LAMP -> Appengine.

A career in one line.

OP here: thanks for poking your head over the parapet. But we've submitted that form three times over five months, with no discernible effect.

I have wondered if a pattern-matching algorithm is penalising us for having a similar IP address to a spammer. But given that practically all servers are now located at hosting companies, IP address is a completely valueless signal - and an arbitrarily damaging one. We have no control over other servers near us in IP space, and can't even ask our hosting company to deal with the spammer because we have no idea which IP address they are on.

If you have access to an internal directory, could I prevail on you to pass this concern on to the Gmail spam filter team? I think there is a genuine bug here, and if they fix it and let me know, I promise to post a followup article saying that fixing this shows GMail isn't killing independant email on purpose.

OP here. For those thinking that Gmail MUST have valid reasons, and that we abusing the system in some way, consider...

1. We are registered with Gmail, Microsoft and Yahoo to provide feedback when someone marks our messages as spam (we DO do everything right). We get reports less than once a week, so if I've got my maths right, less than 0.002% of recipients think we're spammers.

1. Our two servers send around 10,000 messages a day, spread fairly evenly over time. That works out at three or four messages per server per minute. If we were spammers, we'd be ashamed of ourselves.

I take my hat off to you - an impressive amount of research went into this!

MessageMyWay is opt-in and has a robust opt-out mechanism - and is sadly moribund. It sends a maximum of a couple of hundred emails a day.

And we are registered with GMail spam feedback loop and Microsoft's SNDS, both of which tell us when someone marks a message as spam. This happens less than once a week, so this isn't the signal that triggers the rate-limiting.

We are registered with Google's spam feedback loop, and Microsofts SNDS, so we get informed about any messages marked as spam. We get maybe one a week, so this isn't what triggers the rate-limiting.