MrStonedOne

Attack vector requires local execution access and allows for escaping limited privileges like non-root user accounts and breaking out of (some?) namespace jails used by containers and sandboxing systems.

MrStonedOne

il y a 2 ansdiscuss

than disable that specific functionality until you can make the framework instead of throwing out the whole thing in a tempter tantrum?

MrStonedOne

il y a 2 ansdiscuss

[dead]

MrStonedOne

il y a 2 ansdiscuss

I do not like being dependent on having a working phone to log in to my digital life.

Any break in my phone will take weeks for me to be able to afford to replace, meanwhile what? Im locked out of everything?

Why would I risk that?

Phone battery is dead so I got to wait 5 minutes to log into my forums while it charges enough to allow me to boot it and then boots?

Might as well move purely to yubikey in that case.

The whole point of using authy was the reliability of cloneable auth tokens between my desktop, laptop (desktop os) and phone.

3 piece holy trinity.

and what? you want to move that down to one?

Even if its backed up, what do I do while it is stolen or off for repairs?

The ENTIRE point of using authy over any other solution was that its wide app base made it more reliable.

They adversely selected for the userbase that would get mad over this

MrStonedOne

il y a 2 ansdiscuss

[dead]

MrStonedOne

il y a 2 ansdiscuss

you picked up the wrong definition of "free".

They meant free as in freedom.

MrStonedOne

Submissions

Ask HN: Where am I suppose to go when Hacker News is down?

A GitHub action for removing emojis from PR content

Puget Systems bit by patent that references their work (2014)

GitHub Suspends Repository for Space Station 13 fork /tg/Station 13

WireGuard 1.0. (because the other post didn't explain what WireGuard is)

Delhi High court orders YouTube to block access to two PewDiePie music videos

Managing Kubernetes [on DigitalOcean] Just Got a Lot Simpler

comments