this post was submitted on 06 May 2026
710 points (98.9% liked)

Technology

84410 readers
3140 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] JackbyDev@programming.dev 15 points 3 hours ago (3 children)

This is sort of like saying "I leave my valuables in plain sight by my door because it has a lock on it and door locks are trustworthy." I'm not super into cyber security and stuff but it seems like one of the most common problems is programs managing to get access to memory they shouldn't have access to. It seems to happen all the time! Just like many locks for you door are trash.

[–] quack@lemmy.zip 1 points 20 minutes ago

Defense in depth is a concept they teach you in cybersecurity 101. But that's expensive and time consuming, so you end up with shit like this.

[–] partofthevoice@lemmy.zip 2 points 1 hour ago* (last edited 1 hour ago)

It’s ridiculous. It presupposes that cybersecurity doesn’t value or employ defense in depth. Completely untrue.

Look at the attack vector researchers were trying to solve when they created OAuth2.0 w/ PKCE.

[–] jama211@lemmy.world 1 points 2 hours ago (2 children)

And yet you and most people use a door with a lock instead of something more secure because... in general they do work well for the purpose they're trying to serve. Most criminals aren't master criminals, and master criminals aren't coming after your house.

[–] JackbyDev@programming.dev 3 points 1 hour ago* (last edited 1 hour ago) (1 children)

Don't overthink the metaphor. These things are fragile and fall apart. The "door with a lock" is the "guarantee" (wink wink) that the operating system won't let programs see memory they shouldn't be allowed to. Putting your valuables in a safe instead of sitting in the floor would be encrypting the passwords in memory in the metaphor.

Also, cyber security and physical security are very different. With cyber security you need to understand that there are orders of magnitude more people looking for simple problems. Like a criminal checking every door in the world automatically, just looking for ones that are unlocked. Someone not being a "target for master criminals" isn't really applicable for this. Besides, that's a critique of what level of security an individual should have, but pointing out the flaw in Edge is a critique of something that claims to be secure that isn't.

[–] jama211@lemmy.world 1 points 2 minutes ago
[–] mirshafie@europe.pub 2 points 2 hours ago (1 children)

I extracted IE6 passwords from hundreds of people when I was 13, for fun. If passwords are now being stored plaintext again, they are going to leak. Some of the people who steal those passwords won't be doing it just for fun.

[–] jama211@lemmy.world 1 points 1 minute ago* (last edited 1 minute ago)

to be honest passwords on their own are on their way out as a form of security entirely for this reason - they're inherently weak no matter how they're stored as they're a single point of failure. we're even moving on from 2 factor to passkeys.

[–] pwxd@lemmy.zip 14 points 11 hours ago (1 children)

"Yeah totally secure! Just trust me!.." basically

This is LITERALLY isn't secure; they should atleast make it encrypted. This is just the same as using your notes app as password manager! But it's microsoft, and they're willingly giving your bitlocker encryption key to the FBIs for your drives. So I'm not surprised..

[–] Rooster326@programming.dev 4 points 2 hours ago* (last edited 2 hours ago)

I feel it may be worse than using your notes app.

A malicious attack doesn't know which notes app, nor the filename.

This has every browser opening the exact same passwords.txt in root.

[–] fira@lemmy.today 7 points 11 hours ago (1 children)
[–] teyrnon@sh.itjust.works 3 points 3 hours ago (3 children)

Edge is on my computer, and I can't delete it, at least not with my limited IT experience. It's buried deep in the operating system, and it opens up seemingly randomly, I use firefox.

Looking online about getting rid of it, others described it as cancer.

[–] Benaaasaaas@group.lt 3 points 1 hour ago

It's not that hard, all you need is usb drive and choosing a distro (the hard step)

[–] jaykrown@lemmy.world 1 points 1 hour ago

The solution is to use Linux Mint.

[–] mirshafie@europe.pub 1 points 1 hour ago

Not sure how it works in Win11 but historically it has not been possible to remove Internet Explorer or Edge from Windows.

[–] boogiebored@lemmy.world 6 points 11 hours ago

phew it’s an expected feature, thank goodness!!!

if they patch this, they should be dragged through the town square after that comment

[–] FosterMolasses@leminal.space 36 points 23 hours ago

Everytime I read a Microsoft headline these days

[–] GreenBeanMachine@lemmy.world 49 points 1 day ago (1 children)

That's the added trust and security they always boast about

[–] Alberat@lemmy.world 10 points 22 hours ago

trust is multiplicative, not additive

[–] BaraCoded@literature.cafe 9 points 18 hours ago

How will the NSA spy on you if Microsoft doesn't hand them your passwords?

[–] Blackdoomax@sh.itjust.works 6 points 18 hours ago

Trust me bro

[–] Passerby6497@lemmy.world 34 points 1 day ago

Safety and security are foundational to Microsoft Edge. Access to browser data as described in the reported scenario would require the device to already be compromised. Design choices in this area involve balancing performance, usability, and security, and we continue to review it against evolving threats.

"We value user safety and usability, but if you're already compromised you can go fuck yourself"

[–] uenticx@lemmy.world 5 points 19 hours ago

M365 chat also fetches a copy of whatever secured file links you send to each other. Goes without saying, but never use Microsoft products if you value security.

[–] Microtonal_Banana@lemmy.zip 4 points 19 hours ago (2 children)

I haven't used a Microsoft browser or operating syatem in almost 25 years.

[–] osanna@lemmy.vg 1 points 3 hours ago

aside from when i was working in IT, same. My personal devices are linux or macos.

[–] amgine@lemmy.world 1 points 3 hours ago (1 children)
[–] jama211@lemmy.world 2 points 2 hours ago (1 children)

I've actually never met a vegan who acts like this.. linux users however

[–] mirshafie@europe.pub 1 points 1 hour ago

True, and I've met many of both groups. Vegans are usually pretty chill.

[–] baronvonj@piefed.social 154 points 1 day ago (2 children)

Microsoft SSH agent persistently stores your unencrypted private keys in the registry. They're still there unlocked and usable after you reboot.

https://github.com/PowerShell/Win32-OpenSSH/issues/1487

[–] mbp@slrpnk.net 26 points 1 day ago (1 children)

God, the final comment in that thread makes my blood boil.

[–] rbos@lemmy.ca 1 points 3 hours ago

That is infuriating. Leaving those keys available to the user means that worms can later use you to compromise additional machines. It turns a local problem into a much bigger one. There's a recursive script out there that automatically scans your ssh files and attempts to access all hosts in your history..name escapes me at the moment.

load more comments (1 replies)
[–] azvasKvklenko@sh.itjust.works 17 points 1 day ago (1 children)

I don’t worry, I just don’t use Edge or Windows or any MS software really (except for Teams at work)

load more comments (1 replies)
[–] weaponG@lemmy.world 11 points 1 day ago (1 children)

Nothing in this timeline surprises me any more.

[–] FosterMolasses@leminal.space 6 points 23 hours ago (1 children)

Lucky. I have surprise fatigue lol

I just can't be indifferent to reading news like "US To Start Firing Unspayed and Neutered Dogs Into The Ocean From Florida Coast"

load more comments (1 replies)
[–] MrKoyun@lemmy.world 3 points 20 hours ago

How can a company manage to be so bafflingly incompetent and why are there people out there still standing for it.

[–] quantumvoid0@programming.dev 98 points 1 day ago (4 children)

does this company intentionally want users to stop using it? cuz day by day either theres a new windows bug or just shittier softwares

load more comments (4 replies)
[–] 58008@lemmy.world 25 points 1 day ago (12 children)

2026 is gonna be the year I finally move to Linux. I have huge concerns about many aspects of switching, but they're being overtaken by concerns about staying with Windows. I don't even mind if my overall user experience is a bit worse on Linux (I am trying to have reasonable expectations that it won't be the walk in the park Linux advocates on Lemmy like to claim), I just have much more faith in its security, privacy, customisability and - most importantly - the motivations and intentions of its developers.

[–] jama211@lemmy.world 1 points 2 hours ago* (last edited 2 hours ago)

Controversial take from someone who dual boots windows and linux on my home PC and uses macs as work machines but, honestly windows is fine. IMO if you're the kind of person who cares about a good running machine you'll have configured settings and gotten rid of the bloatware and done a bunch of stuff to make windows a relatively decent experience anyway, and linux requires a similar amount of effort to get running the way you want it also, but can be a differently polished experience.

Modern OS's are much of a muchness in practice with regards to their pros and cons. Please don't downvote me to hell linux lovers, it's my honest opinion after decades of use of all three.

[–] Bytemeister@lemmy.world 1 points 2 hours ago

I switched my mom to Linux because teaching her how to use Linux as her daily driver was easier than trying to unfuck windows on her computer.

Back up your data and then go nuts.

[–] BozeKnoflook@lemmy.world 15 points 1 day ago

Best of luck! If you've got questions or problems feel free to DM me (or reply here) and I'll try to help as best I can. I've been using linux since the mid 90s, so I have a decent idea of how it all works :)

load more comments (9 replies)
[–] GainGround@kopitalk.net 45 points 1 day ago (1 children)

Our lives are in the hands of morons. What the fuck.

load more comments (1 replies)
[–] sturmblast@lemmy.world 2 points 19 hours ago

.... They are so bad

load more comments
view more: next ›