samcat116

Every passkey setup flow I've ever seen has allowed me to use a hardware key or the OS provided store. Am I missing something?

I seem to be in the minority of HN users that love passkeys. I use them for any login that I reasonably can. When creating a passkey I create one in iCloud Keychain as well as in 1Password. I do agree that there needs to be a better import/export story, but I have confidence that will come.

Should password managers make it impossible to copy the plain text of the password? Thats the only way to make this truly not phishable

This 1000%. There are so many cool networking/virtualization/hardware things I love dealing with. But the stress of doing ceph upgrades isn't the right trade off usually.

> how do people get so sold on a thing that they'll go online and fight about it, even when they lack facts or often even basic understanding?

Are you new to the internet?

For smaller shops I'd argue storage is the hardest part. I've done several OpenStack and baremetal K8s deployments on prem and the part that always stressed me out the most was storage. I'd happily pay a markup for that vs just about anything else that would be more economical to do on prem for smaller simpler workloads.

I don't think passkeys would replace server logins so wouldn't be applicable there.

> How am I suppose to login to a console of a air-gapped server with passkeys?

Passkeys don't require the internet to work

Passkeys are tied to a DNS name, so unless they were able to take over the DNS of a site, they wouldn't ever even be offered to authenticate the password. Additionally the private key never leaves the device regardless, so if you were tricked to setup a new passkey on a fake site, you'd just end up creating a new Passkey for it and the site would get some new unique public key.

> what's stopping someone from making a version of the same scheme that redirects to a prompt on the real site which authorizes them as a new user?

This would require compromising the website as a whole

You just hit the share button for the passkey in Apple/Google Passwords/your password manager

There will be a regular M4 MacBook Pro I assume, just like how there’s a regular M3 MacBook Pro now. They did this same release order last year (Pros in the fall and Air this spring)

The M3 airs came out in March of this year, so it’s a bit soon.

M4 MacBook Air is rumored for the spring. Last announcement tomorrow is rumored to be the MacBook Pros.

Pinned and grouped tabs would never have existed.

I think a watch app rewrite is in the cards but for now its the old one.

Castro recently implemented this I believe.

> cars are faster One of the main advantages of roundabouts vs 4-way intersections is they force drivers to slow down, so this doesn't make any sense.

I think we could see a lot of these AI code tools start to pivot towards product folks for just this reason. They aren't meant for the people who find craft in what they do.

There are an incredible amount of ways that life is better today than 50 years ago. For starters the life expectancy has almost universally improved.

I'll say the same thing I always say on these kinds of posts. Both of the following can be true:

- A lot of companies and startups can get by with a few modest sized VPSs for their applications

- Cloud providers and other infrastructure managed services can provide a lot value that justifies paying for them.

I have never experienced this. I almost never have to log in after the initial login.

That makes sense, but I'd love to know why it wouldn't work for them (especially in a post about how things are becoming a monoculture OS and architecture wise).

> It seems unlikely that we'll get ARM-based machines, especially ones that we expose to people to log in to and use

I don't really get why this is an assumption, in fact I'd heavily bet against it the not so distant future.

This seems like a really lazy argument. You could say the same argument about getting rid of almost anything thats old and isn't working 100% for current requirements

If you don't have an official IT team, is there someone else that should be handling these requests?

They're quite specific in that they mention that teams would like to make use of existing helm charts for other software products. Telling them to build and maintain definitions for those services from scratch is added work in their mind.

> I have a hard time following much of the decision making around these gigantic migrations or technology efforts because the decisions don't seem to come from any user or company need

I mean the blog post is written by the team deciding the company needs. They explained exactly why they can't easily use etcd on ECS due to technical limitations. They also talked about many other technical limitations that were causing them issues and increasing cost. What else are you expecting?

The alerts being sent to Slack are normally from one of those alert databases (such as Prometheus and AlertManager). Slack isn't the source of truth for them, just a notification channel.

most people will defer updates indefinitely if they are able to.