irate944

@irate944@piefed.social

• ⁨Comment⁩ on ⁨Password managers are less secure than promised⁩ ⁨⁨3⁩ ⁨days⁩ ago⁩:

  Copy pasting a comment that I saw on Reddit

  ——

  Link to the original study (with a less sensationalized title):

  https://zkae.io

  A few important notes:

  • the study is about Bitwarden, LastPass, Dashlane and 1Password. Proton Pass isn’t mentioned.

  • the study presumes that they’re working with a malicious server (read this as compromised server, controlled by an attacker). The attacks they talk about in the article would not work on a normal server. Here’s their quote:

  No need to panic: all of our attacks presume a malicious server. We have no reason to believe that the password manager vendors are currently malicious or compromised, and as long as things stay that way, your passwords are safe. That said, password managers are high-value targets, and breaches do happen.

  • Here’s another quote, about other password managers:

  You can ask your provider the following questions:

  1. ⁠Do you offer end-to-end encryption? What security do you provide in case your server infrastructure were to be compromised?

  2. How do you check that public keys and public-key ciphertexts are authentic?

  3. How do you authenticate security-critical settings, such as the KDF type and the iteration count?

  4. Do you provide integrity guarantees for a user’s vault as a whole? Can a malicious server add items to your vault?

  You can also ask your favourite password manager to commission an audit checking for our attacks in their products.

  • If you still feel unsure/unsafe, then adopt an offline password manager (I highly recommend keepassXC).
• ⁨Comment⁩ on ⁨2 North American 4 you has been created⁩ ⁨⁨4⁩ ⁨days⁩ ago⁩:

  You’re right, this is normal. Off the top of my head: - tempura originated because of the trade between the portuguese and japanese - portuguese monopoly on cinnamon trade with Sri Lanka and India, allowed Europe to get it for cheap and it became a main ingredient in a lot of desserts and confections - the UKs tea culture came from a portugese noblewoman, who learned it from China

  Cultures are constantly taking ideas from each orher

• ⁨Comment⁩ on ⁨Chatbots Make Terrible Doctors, New Study Finds⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Yeah you’re right, I was just making a joke.

  But it does create some silly situations like you said

• ⁨Comment⁩ on ⁨Chatbots Make Terrible Doctors, New Study Finds⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  I could’ve told you that for free, no need for a study

• ⁨Comment⁩ on ⁨Ad blocking is alive and well, despite Chrome's attempts to make it harder⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  My company forced us to use only Chrome on our PC’s and one of the things I was worried about was the ads. I put youtube in the background while I work.

  And I was surprised by how…… My experience was exactly the same as Firefox and Brave. Ok, actually, one or two ads managed to slip through and appeared in the front page - albeit rarely and randomly - but I never got those ads at the beginning of the video. On other websites, I never got ads.

  I was wondering, then, if there was some catch. Maybe the trackers would still get through or something. But according to that link, not even that? lol

• ⁨Comment⁩ on ⁨FIFA boss Infantino wants Russia to return to football⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  I want Russia to leave Ukraine alone

• ⁨Comment⁩ on ⁨How AI assistance impacts the formation of coding skills⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  I would love to read an independent study on this, but this is from Anthropic (the guys that make Claude) so it’s definitely biased.

  Speaking for myself, I’ve been using LLM’s to help out with jumps in small gaps of knowledge. Like for example, I know what I need to do, I just don’t know/remember the specific functions or libraries that I need to do that in Python. LLM is extremely useful for these moments; and it’s faster than searching and asking on forums. And to be transparent, I did learn a few tricks here and there.

  But if someone lets the LLM do most of the work - like vibe coders - I doubt they will learn anything.

• ⁨Comment⁩ on ⁨One-Third of U.S. Video Game Industry Workers Were Laid Off Over the Last Two Years⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  but they’re easily outnumbered by the console market

  I don’t think this is the case nowadays. I remember reading an article that PC market was outselling the console market.

  But yes, the mobile market is a giant

• ⁨Comment⁩ on ⁨One-Third of U.S. Video Game Industry Workers Were Laid Off Over the Last Two Years⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Anyone managed to download the report? Here it just says “report submitted” and then nothing happens. No emails no nothing.