[-] Boozilla@lemmy.world 3 points 1 day ago

I'm not against passkeys. They have some real advantages. And I understand more than you think.

My comment is primarily about the preferred ecosystems that tend to come along with these newer solutions (like Apple's iCloud or Google's Password Manager) and how the corporations take advantage of user laziness and bandwagon jumping.

They may not force you to be exclusive with them, but they definitely want you to be. And over time they will likely make it more and more inconvenient not to be locked in with them.

For contrast, I use BitWarden for password management and Bitwarden Authenticator for TOTP (and I keep safe copies of TOTP secret keys elsewhere). This is a generic open-standards-first approach to things, with relatively easy recovery should you lose something. You can export your passwords. You have copies of your secret keys. You are in no way locked in to BitWarden forever.

Passkeys can also work within that type of operational framework! Like TOTP which normally uses RFC6238, Passkeys tend to use CTAP or WebAuthn. All of the above are open standards. And this is a good thing!

But do you really think Apple, Google, Microsoft, etc, want to play nice long term? Hopefully they will. But I have also run into evil nonsense like LastPass, which even though they also used open standards, their software would not allow you to do simple things like recover your own secret keys, export your data, etc. (Not to mention the embarrassing security breach they had and the wretched response, the main reasons to dump them).

While I am not directly comparing an idiot company like GoTo Tech with Apple et al, they all have the same types of big brain MBA types working for them who love to constantly brainstorm new ideas on how to screw the users over by taking features away and calling it a "software upgrade".

So, passkeys as a security mechanism: sure, this gets my vote. But trusting the big corporations not to change the rules on us later....come on, get real. They love limiting or removing portability and recovery options whenever they can.

Bottom line: don't assume passkeys are inherently good or bad. It's simply a security standard that can work well if implemented correctly. Passkeys make logging in easier. But will they also make recovery / export / migration easier....? Because if it's not easy, people won't do it.

[-] Boozilla@lemmy.world 16 points 1 day ago* (last edited 1 day ago)

Whenever I read an article about security (and read the comments, even here on Lemmy) I'm constantly frustrated and depressed by a couple of things.

  1. Corporations making things shittier with the intention of locking customers in to their stupid proprietary ecosystem. And of course, they are always seeking more data harvesting. Security itself is way down the list of their priories, if it's even there at all.

  2. Users being lazy trend-followers who quickly sacrifice their security on the altar of convenience and whatever shiny new FOMO thing is offered up for "better security".

It's a very bad combination. Doing security right is a bit inconvenient (which users hate) and expensive (which corporations hate).

[-] Boozilla@lemmy.world 6 points 1 day ago

Like a lot of folks, I use and recommend Bitwarden for passwords management. Their Authenticator app is really good for mobile TOTP, too.

[-] Boozilla@lemmy.world 7 points 4 days ago* (last edited 4 days ago)

Streamlight makes some simple on/off models. Like the Streamlight Microstream 66323. Very bright for its small size.

[-] Boozilla@lemmy.world 4 points 5 days ago

I won't claim it's the equivalent of the Bambu Labs FDM printer, because I've never done FDM printing.

On top of that, I'm only familiar with the one resin printer I've used.

Anyway, it's an Anycubic Photon Mono X 4k. I've had really good luck with it, and I've printed over 200 miniatures and other things. I've had some failed prints but they were almost always my fault for doing something dumb, and there haven't been that many overall. I'm guessing easily less than 5%.

I wouldn't recommend the exact same model as mine, because they have newer ones (like an 8k version of mine and some others).

But I would definitely recommend the Anycubic Photon line as worth looking into. Read some reviews & watch some videos.

Good luck!

[-] Boozilla@lemmy.world 13 points 5 days ago

Some call this Cunningham's Law. It is remarkable how people will ignore a question, but trip over themselves to correct someone. Pedants are going to be pedantic (but may have a useful answer occasionally).

The developers where I work sometimes use this trick on our users. When they can't get a response from the users on a request for design input or feedback on something (which happens a lot) the devs will sometimes release some piece of garbage looking thing, and then the users will very quickly put in support cases with the requested info telling them the missing stuff, etc.

Human nature is why we can't have nice things.

[-] Boozilla@lemmy.world 3 points 5 days ago

Thank you, this is the sort of thing I was trying to point out. And I love how he ignored all my other points just to focus on this one ISO or installer he's using over and over again to "prove" that he's right.

Funny part is, I never said it was the default in the original post anyway. The whole point is, if it's turned on, you may want to turn it off.

21
[-] Boozilla@lemmy.world 8 points 6 days ago

There is also a registry hack for this but I have not looked into it or tested it. (And I agree with your sentiments re: Microsoft.)

[-] Boozilla@lemmy.world 3 points 6 days ago

First of all I believe you are incorrect.

You're doing a single anecdotal "test" from (I assume) one copy of the installation media. News flash, not all installation images of Windows 11 are the same.

And I will answer your anecdotal evidence with some anecdotal evidence of my own: almost every friend and coworker I've asked about this says Autoplay is on. And when I check Google or ChatGPT, they confirm that a fresh install of Windows 11 will have it on by default. So....I guess everyone else is wrong about this but you're right about every installation of Windows 11.

Secondly, your question ignores the fact that people should probably check to see if it's on. It can get turned on accidentally or even by an update. Microsoft is constantly messing arbitrarily with user preferences and settings with their weekly updates. You do know that, right?

Finally, you posted some version of this same reply multiple times in this thread. Why? Are you just doing that to "get upvotes for fun"?

BTW, there's no karma on lemmy....upvotes don't matter.

It's fine to correct someone, but first do a better job of checking your methodology, and second, don't assume their motivations for trying to share helpful info.

[-] Boozilla@lemmy.world 18 points 6 days ago

Think of it as a seatbelt. You don't plan on crashing your car, but shit happens. It's even possible a brand new USB drive from a "reputable" company could have something on it.

174

If you plug a USB drive into Microsoft Windows, in many cases it will try to do things "for you" with the drive. Not a great idea. There could be malware lurking on that USB drive.

There are a couple of things you can do to help mitigate the issue. These tips assume Windows 11.

Turn off Autoplay

  • Open Settings. Press Windows + I to open the Settings app.
  • Go to Bluetooth & devices. In the left sidebar, click on "Bluetooth & devices."
  • Select Autoplay. Scroll down and click on "Autoplay."
  • Turn Off Autoplay. You'll see a toggle switch labeled "Use Autoplay for all media and devices." Turn this off.

This will turn it off completely. You can, if you want, make individual settings for different types of devices.

Deny Execute Access (Pro or Enterprise versions of Windows 11)

  • Open Group Policy Editor. Press Windows + R, type gpedit.msc, and press Enter.
  • Navigate to the Removable Storage Access Policies. Go to Computer Configuration > Administrative Templates > System > Removable Storage Access.
  • Modify Policies. You can enable the policy "Removable Disks: Deny execute access" to prevent execution from removable drives.
  • Apply and Reboot.

Note, there are some cases where you may want to execute scripts or programs from a removable drive. If that's the case, you may not want to do this, or make a note of it so you can re-enable if needed.

586

This is not an anti-Kindle rant. I have purchased (rented?) several Kindle titles myself.

However, YSK that you are only licensing access to the book from Amazon, you don't own it like a physical book.

There have been cases where Amazon deletes a title from all devices. (Ironically, one version of "1984" was one such title).

https://www.nytimes.com/2009/07/18/technology/companies/18amazon.html

There have also been cases where a customer violated Amazon's terms of service and lost access to all of their Kindle e-books. Amazon has all the power in this relationship. They can and do change the rules on us lowly peasants from time to time.

Here are the terms of use:

https://www.amazon.com/gp/help/customer/display.html?nodeId=201014950

Note, there are indeed ways to download your books and import them into something like Calibre (and remove the DRM from the books). If you do some web searches (and/or search YouTube) you can probably figure it out.

27
16
23
131
submitted 4 weeks ago by Boozilla@lemmy.world to c/til@lemmy.world

I feel like an idiot for not knowing about these.

Every 2-3 months I have to snake out our shower drain with a 25' snake. Giant PITA.

After some web searches, I stumbled across these hair trap devices. They come in both external and internal configurations. Many different types to choose from.

I purchased an internal one, installed it, and am going to give it a try. In theory I can just pop it out and clean it instead of snaking the pipes. Folks tell me they work well. If this one doesn't work I'll try another type. They are fairly inexpensive.

260

We mostly watch news and sports in my house. So unfortunately, live TV. Occasionally we watch other things. I mute the commercials and browse my phone when they're on.

But I would love a TV that is smart enough to auto hide & mute every kind of ad. Even little logos on the athletes' uniforms. Hide the ads on the pitcher's mound. Hide the billboards and signs in the stadium. Show some cool little generic animation, music video, or slide show during commercial breaks. Hide the damned popup window ads and scrolling ads that some channels do. Remove product placements from movies and shows. Basically make all ads completely vanish.

57

Not asking for tech support here, just wondering if in theory it would be possible to create a plug-in or even a complete browser that blocks ads in a way that's impossible to detect. One model that comes to mind is a quarantined / containerized non-blocking virtual browser which queries the web server directly, then the UX filters the content from that container and presents it to the user ad-free. As far as the web server can tell, the containerized browser is just vanilla Chromium.

17
39
82
[-] Boozilla@lemmy.world 392 points 2 months ago

When I had to flash my BIOS and pray that it didn't brick my PC I cursed them, saying "Fuck Intel, I hope their stock plummets!"

You're welcome everyone.

[-] Boozilla@lemmy.world 316 points 1 year ago

It's important to note that the admins of beehaw are not happy about this solution, either. And they hope to refederate once they have better tools and enough mods / admins to deal with it.

They point wasn't to shadowban, that was a side effect. The point was to protect their member--who specifically wanted a certain type of safe friendly instance--from hostile weirdos sending dick pics and stuff like that. Nobody's happy with the situation, but it's the best they could do under the circumstances with the resources they have.

I also don't think it's wrong for instances to have their own strong rules and preferences. This is one of the GOOD things about the Fediverse. The software features and how people use lemmy will catch up eventually.

As for the confusion / chaos around multiple/redundant/competing communities and so on...that will get better over time as people figure things out. Honestly it's not that different than reddit with all of its splinter subs like "true-" whatever.

view more: next ›

Boozilla

joined 1 year ago
MODERATOR OF