Telaneo · HackerTrans

Telaneo

1,396 karmajoined 12 maanden geleden

[email protected]

comments

33 minuten geledendiscuss

> Is the backlash really about privacy, or is the real problem a complete lack of trust in government?

Both.

Even if a hypothetical perfect police force could serve justice better with a panopticon, that is A.) not the police force that exists today, and 2.) who's to day that there won't be a worse government in X years that will use that panopticon and police force to be dicks?

The benefit of minor crimes being addressed today is very small compared to the potential disaster of tomorrow.

39 minuten geledendiscuss

On some level, it feels like (some) politicians haven't realised this, or have forgotten it.

We can either have a functioning democracy and justice system, where responsibility is delegated to people whose job it is to uphold society's values, or we can have individual people that do job themselves. If a judge or police officer isn't going to carry out justice, then eventually people are going to do it themselves. That tends to get messy, so we stopped doing that with good reason, and built institutions to better service justice, but if the institutions aren't doing their jobs, they should be reformed or thrown out.

7 uur geledendiscuss

If you're stuck with them, that's understandable.

There's no reason the banks should be dicks about it, but they often are in cases like yours. All the accounts I've opened in recent times have just been a matter of logging in with BankID and going through the form and selecting 'no' 10 times. Once you've got BankID and can go through the automated flow, there shouldn't really ever be any issues.

This is why it bothers me greatly that BankID is still controlled by the banks, since they can just decide that someone like you shouldn't get it. It should be government issued and issued to everyone, on the same level as an ID card or a passport.

9 uur geledendiscuss

And people wonder why we're in the rut that we are.

Sidenote: The poster in that article is insane to me. Imagine advertising yourself as the only alternative. I'd rather vote for an empty seat than for someone who's that arrogant! Then again, I don't really have to imagine it, since there have been quite a few politicians within the last 10 years who have functionally done that same, just without actually saying those words out loud.

9 uur geledendiscuss

> I'm in with DNB and Nordea and they both have functioning netbanks.

And both are banks I'd never want to associate with. I would have used Sbanken before the DNB buyout (and I even did for a bit!), but now that's of the table too.

There are a few more options, but many are just worse if you look at their fees and interest rates.

I've been very happy with Bulder. The only thing they're missing is a web portal. The fact that they're missing that annoys me greatly, but they've been good to me in every single other aspect, so it's hard to be dissatisfied (especially compared to the other banks where I and others have been burned). Their app works fine on de-Googled Android, and so long as that's true, I can live with my choices.

9 uur geledendiscuss

If the users' willingness to do stupid things is boundless, then locking down the system further isn't really of any benefit, since users will continue to venture as far as they need to, no matter the number of safety barriers they've passed. The only solution to that problem is a fully locked down device (which I hope we can all agree should not be the only option).

eergisterendiscuss

Even if there are keys that offer more, the number 1 brand in hardware keys having that limit is not a good look if the idea is to transfer 'everything' to it.

eergisterendiscuss

Wifi is becoming more common on desktop motherboards, but it's still not a guarantee, especially on the lower end. On the higher end they can throw in wifi to make the feature list bigger without cutting into their margins. Out of my sample size of 4 over the past 5 years, only two had wifi. And honestly, I'd opt out of having that if I could trade that for a lower price or some other feature I'm missing, since I haven't used the wifi on those boards at all.

3 dagen geledendiscuss

> Aren't they effectively locked in the database of whatever password manager is used?

Not in the case of Keepass, since you can export them.

> I know you can export them, sort of, but that feature may blacklist your password manager and make it useless.

Yes, and this is why passkeys are flawed.

> Are they portable? I thought passkeys are locked to the device.

There's nothing preventing you from syncing your passkeys and using them on different devices. This even seems to be the happy path in the locked down eco systems (You can create a passkey on an iPhone, which is then synced to iCloud, and now you can use that same passkey on a Mac).

3 dagen geledendiscuss

They've given concrete reasons to not work with them. If Fairphone made devices that fulfilled the requirements, then there wouldn't be any issue.

3 dagen geledendiscuss

Fairphone hasn't talked about GrapheneOS at all, instead opting to be in bed with Murena and /e/os, so I doubt they've even bothered to read the list of hardware requirements. They didn't bother with the Fairphone 6, which was released barely a year ago.

3 dagen geledendiscuss

The hardware doesn't support the relevant security features GrapheneOS requires.

https://grapheneos.org/faq#future-devices

3 dagen geledendiscuss

I can in fact buy one at a local brick-and-mortar store, but the price is triple/quadruple the amount I'd pay for a copy of my house key. Add in that the whole flow is something grandma is not going to be able to grok, and the whole idea is still-born.

If I were administrating that part of her life too, then maybe, but I'm not really happy with how Yubikey has solved for this problem either. If I could buy them for nearly throwaway amounts of money, and I could make backup copies without issue, then I might even jump on that particular train myself.

3 dagen geledendiscuss

I have 7 house keys and 2 car keys. Getting a new house key is a breeze and cheap, and even if I lose them all, a lock smith can make me whole again. Getting a new car key is a bit more expensive, but also largely not a hassle.

Having spare Yubikeys is more of a hassle than both of those (and more expensive!), and the worst case scenario of losing them all is much more catastrophic. If I have no house key, I still get into my house. If I have no car key, I still get into my car (after a fair bit of hassle). If I have no Yubikey, I have permanently lost access to the accounts it was tied to.

If physical hardware tokens were as cheap as house keys and not much more difficult to set up and copy, then it would be kind of reasonable. As it is, it's unworkable. Even password managers manage to make this work. You can throw your database on every storage device you have and write the master password down on paper, and the chances of you not being able to have access to it are pretty darn close to zero.

3 dagen geledendiscuss

> some sites provide password reset some don't

I'm yet to see a site that doesn't provide a password reset (excluding websites without passwords). What inane webdev though that'd be a good idea?

3 dagen geledendiscuss

> I would have thought TOTP and challenge-response hardware tokens to count

Those are absolutely not passkeys. Passkeys are just WebAuthn (from what i can tell).

3 dagen geledendiscuss

> > This implementation is not spec compliant and has the potential to be blocked by relying parties.

The only conclusion I can come to when it comes to this and the earlier kerfuffle regarding being able to export the plain text of passkeys is 'the spec is bad and you should feel bad'.

3 dagen geledendiscuss

Even then, unless you use one for work, where work can issue you a new one if you lose it, you're going to need (at least) two Yubikeys if you want to go that route, because not having a backup is a bad idea.

3 dagen geledendiscuss

2FA secrets can be backed up, and everyone should do that, for the same reason you'd want to do it with passwords.

Passkeys can too, but there it's even more obfuscated than with 2FA.

3 dagen geledendiscuss

Both pens and pencils exist.