📛Maven

He got got because the user used an Apple ID that was linekd to their real identity, which is one of the things Proton is obligated to provide in cases like this.

Proton says all the time, they are obligated to comply with the letter of the law, so do not store anything identifiable anywhere they’re legally required to provide it. They tell you exactly what not to do, to avoid this precise case. They do not want to provide anything they don’t have to, but they also do not want their company shut down.

Is it chilling? I was already going to stay where I am, whether I made a copy or not. Sharding off a replica to go on for me would be strictly better than not doing that

But like… do I care? “I” will survive, even if I’m not the one who does the surviving.

What are you talking about? They show the headphone battery being replaced in the same image as the case. It’s a little button cell that hinges out.

No, you see, you just get every citizen to pay a little bit into the bridge, and then everyone can use it. Maybe we put some of that money aside and establish a group of people to care for the bridge, upkeep and whatnot. It wouldn’t be fair to just pick them arbitrarily, so we should probably hold some kind of vote. And, well, I guess the money will run out, so maybe we take a little more from everyone every year, just to keep it in good shape

Huh? That sounds like what? Gov–

Oh fuck wait shit i mean DONT TREAD ON ME

Good

Let’s just make all wars robots fighting robots, and nobody has to get killed.

More like cope pilot.

That’s probably true, but perfect can’t be the enemy of good. Getting everyone who currently uses the worst method (a single global password) to use a better method means that better method has to be easier than that, and as things lie right now, most security researchers agree that the method most likely to succeed is removing roadblocks, both client-side and server-side, to make password mangers even easier and more secure (whether you want to store it locally or not is really up to you, and again, it is already an option). We’re not talking about people who already try to stay secure, or care about the exact details. You and I already know we care about security and do our best, presumably. The crucial thing is to onramp Bob Q. Public, the middle manager whose password on everything is rover73 because he loves his dog, and any solution more complicated than remembering one password and clicking one button is going to be too much change for him to get around to doing it

Epochalypse…

Okay, I’m glad you have a system, but it’s not really relevant? I didn’t say you should use a password manager. I said it’s good for the majority of people who can only remember one or two passwords.

Most people do not. The average user has one or two passwords, and maybe swaps out letters for numbers when the site forces them to. Because remembering dozens of passwords is hard. If you, personally, can remember dozens of secure passwords, you’re some kind of prodigy and the use-case for a password manager doesn’t apply to you, but it still applies to the majority.

In general, yes. Big sites get hacked all the time. Passwords from those sites get cracked all the time. Anyone who uses the same password on multiple sites is almost guaranteed to have that password stolen and associated with a username/email at some point, which goes on a list to try on banks, paypal, etc.

Conversely, to my knowledge, there has been one major security breach at a password manager, LastPass, and the thieves got more-or-less useless encrypted passwords. The only casualty, at least known so far, is people who used Lastpass to store crypto wallet seed phrases in plaintext, who signed up before 2018 when the more secure master password requirements were put in effect, chose an insecure master password, and never changed it once in the four years prior to the breach.

It’s not perfect, but the record is lightyears better.

Put it this way: Without a password manager, you’re gambling that zero sites, out of every single site you sign on to, ever gets hacked. From facebook, google, netflix, paypal, your bank, your lemmy or mastodon instances, all the way down to the funny little mom-n-pop hobby fansite you signed up for 20 years ago that hasn’t updated their password hashing functions since they opened it. With a password manager, you’re gambling that that one site doesn’t get hacked, a site whose sole job is not to get hacked and to stay on the forefront of security.

(Also, you don’t even have to use their central servers; services like BitWarden let you keep your password record locally if you prefer, so with a bit of setup, the gamble becomes zero sites)

Right. Most people that have password managers. Making a password manager easier and more convenient to use means some portion of people who aren’t using one may start.

1. Password managers are, generally speaking, far more security conscious than the average website. I’d rather send a password to my password manager a couple times a day than send passwords to every website I interact with.

2. One click to confirm vs. 2-3 to autofill. Tiny gains in speed 🤷‍♀️ If you make a password manager even slightly more convenient than just using gregspassword123 for everything, you can onboard more normies.

…Somehow I don’t trust a search engine whose front-and-center banner is for crypto trading

I won’t lie, I was really dubious on the idea of paying for search, but after the demo I really came around and signed up for the year. Kagi results are far and away better than anything else on 90% of my queries. The only thing I miss is, when you use google in your searchbar, you can use it as a calculator. E.g. if I type “13 * 42”, the top suggestion is “= 546”, you don’t even have to press enter… So I got really used to using that as my default calculator. But Kagi just blanks you, so I’ve had to start keeping a desktop calculator open all the time lol

God, they even want to make leisure time into a side hustle. Is it so much to ask that they let me not think about my participation in capital for like, two hours?

Have you ever clicked a captcha and it’s just checked itself off for you?

That’s because your page use behaviour looked human enough it wasn’t worth the robot test

Obligatory relevant XKCD

Wear a facemask with 255.255.255.0 and/or /24 sharpied on it and if anyone asks, tell them you’re complying with mask mandates