refalo

joined 2 years ago
[–] refalo@programming.dev 1 points 2 years ago* (last edited 2 years ago)

I think the "rest of your tabs" would have to be sites that already include google js (e.g. for "sign in with google" type stuff) to even know you have a google cookie (otherwise what's the point of FPI/ETP/TCP/network partitioning/no-3rd-party-cookies/etc.), but I could be wrong.

[–] refalo@programming.dev 3 points 2 years ago* (last edited 2 years ago)

I would like to use it (or any biometric authentication at all) on Linux with my USB fingerprint reader (DigitalPersona 4500), but it seems broken in libfprint and the devs are unresponsive to their gitlab issues. Using a Windows VM just for fingerprint support is not something I want to do either.

[–] refalo@programming.dev 6 points 2 years ago* (last edited 2 years ago)

Security is a spectrum and not everyone has the same threat model. Also weaknesses that target passkeys might be useless for those who use passwords, and vice versa. And as another commenter said, you kinda lose the "something you know" when you're only using a passkey. Or you could use both if a service allows it.

[–] refalo@programming.dev 0 points 2 years ago

Yep. Though not sure about Russia but I know China can and does block the majority of usual Tor access methods including the obfuscating pluggable transports like obfs4/snowflake/etc.

[–] refalo@programming.dev 6 points 2 years ago* (last edited 2 years ago) (3 children)

There are already many signal proxies available, plus an unlimited number of VPNs to choose from (or self-host yourself on a VPS)

[–] refalo@programming.dev 14 points 2 years ago

My biggest problem with it (besides the people) is the fact that it still relies on Google's proprietary black box "Titan" security chip. You know, the one that they pinky-promised to open source but never did.

[–] refalo@programming.dev 27 points 2 years ago

need boot capabilities in order to "exploit" this

only with broken Secure Boot implementations

already patched in EPYC microcode

a nothingburger released suspiciously a day after Intel breaks news of being sued by their own shareholders (https://www.techpowerup.com/325414/intel-faces-shareholder-lawsuit-amid-financial-turmoil-and-layoffs-company-misled-investors)

[–] refalo@programming.dev 1 points 2 years ago (3 children)

if you're going for ultimate privacy... none, ironically.

[–] refalo@programming.dev 4 points 2 years ago (1 children)

Jimmy Donaldson? (MrBeast)

[–] refalo@programming.dev 3 points 2 years ago (2 children)

always drank diet/zero sugar for decades. then one day I stopped being able to. any time I drink it now I get massive headaches.

view more: ‹ prev next ›