• 0 Posts
  • 32 Comments
Joined 1 year ago
cake
Cake day: June 29th, 2023

help-circle
  • Agree that passkeys are the direction we seem to be headed, much to my chagrin.

    I agree with the technical advantages. Where passkeys make me uneasy is when considering their disadvantages, which I see primarily as:

    • Lack of user support for disaster recovery - let’s say you have a single smartphone with your passkeys and it falls off a bridge. You’d like to replace it but you can’t access any of your accounts because your passkey is tied to your phone. Now you’re basically locked out of the internet until you’re able to set up a new phone and sufficiently validate your identity with your identity provider and get a new passkey.
    • Consolidating access to one’s digital life to a small subset of identity providers. Most users will probably allow Apple/Google/etc to become the single gatekeeper to their digital identity. I know this isn’t a requirement of the technology, but I’ve interacted with users for long enough to see where this is headed. What’s the recourse for when someone uses social engineering to reset your passkey and an attacker is then able to fully assume your identity across a wide array of sites?
    • What does liability look like if your identity provider is coerced into sharing your passkey? In the past this would only provide access to a single account, but with passkeys it could open the door to a collection of your personal info.

    There’s no silver bullet for the authentication problem, and I don’t think the passkey is an exception. What the passkey does provide is relief from credential stuffing, and I’m certain that consumer-facing websites see that as a massive advantage so I expect that eventually passwords will be relegated to the tomes of history, though it will likely be quite a slow process.



  • What an absolute failure of the legal system to understand the issue at hand and appropriately assign liability.

    Here’s an article with more context, but tl;dr the “hackers” used credential stuffing, meaning that they used username and password combos that were breached from other sites. The users were reusing weak password combinations and 23andme only had visibility into legitimate login attempts with accurate username and password combos.

    Arguably 23andme should not have built out their internal data sharing service quite so broadly, but presumably many users are looking to find long lost relatives, so I understand the rationale for it.

    Thus continues the long, sorrowful, swan song of the password.




  • Respectfully, you were the one who pointed out the impact of the Network Effect.

    The adoption of a product by an additional user can be broken into two effects: an increase in the value to all other users (total effect) and also the enhancement of other non-users’ motivation for using the product (marginal effect).

    Thus, users don’t need to understand the credentials of the platform if the network effect is strong enough, but as users leave the network, the value (credentials) of the platform as a whole decreases.

    Another way to think about it is that the amount Twitter “matters” is directly related to how much we collectively agree it matters. While not directly transferable, I’d suggest that Keynes’ Animal Spirits concept can help us to understand why this might be the case - prevailing attitudes towards a platform can have a profound impact on their value.













  • I don’t know anything about your situation, and I truly don’t need details, but if you think you can’t afford access to any news outlet, I don’t think you’re trying hard enough.

    Since you’re apparently too poor to access any way to entertain or inform yourself, I’m guessing you’ve had ample time to mull over solutions to this problem, and I’m eager to learn what an ideal solution would look like from your perspective.

    Are you cool with paying for your news in exchange for your data/ads? Is there part of the editorial process we could remove to save money? Maybe we don’t need fact checkers and should just assume that journalists know what they’re talking about?

    I’m not sure how we simultaneously provide free journalism and ensure that those journalists have enough to eat themselves, but I share in your convictions that democratizing information is imperative.

    From where I sit, it seems like news organizations have moved away from showing ads for revenue to some extent, so the only option we have is to include news in our monthly budget and support journalists as much as we can.


  • Sort by Top and I’m sure the crusaders of New will have everything sorted out by then. If you find these ideas being upvoted, you’re in the wrong community and you may be in a lemmygrad community. You’re on the wrong side of the train tracks and need to seek higher ground.

    We don’t need to create literal echo chambers of people talking past each other because we block out any information that makes us uncomfortable. That’s not how we foster constructive dialog and


  • Yes, I too salivate at the idea that I could simply disappear all of the ideas I disagree with, but that is exactly how to turn a community into an echo chamber.

    So I have users A B C D E F who are known to me who have voted on a given post. D and E are idiots I disregard their votes. F literally hates everything I love so I count his votes inversely. A and B are fantastic I count them x10 I tend to agree with C so I count his x2.

    What you are suggesting here is, as I’m understanding it, a way to only get feedback from people you agree with and to never experience a critical discussion of ideas based on their merits.

    Now, I’m not here to suggest that Lemmy is some kind of shining beacon of drama-free intellectualism, where every idea is discussed without bias or agenda, but I DO think it is valuable to hear from people whose lived experiences led them to a different conclusion than the one I’ve reached. Obviously there needs to be a mechanism to remove trolls from the discussion, but I fear a world where we only see content that we agree with, because then we will truly be removed from reality, and that’s not why I’m here.