Badabinski

joined 5 months ago
[–] Badabinski@kbin.earth 5 points 1 month ago (3 children)

I just don't get why I can't use something like TOTP from my phone or a key fob when logging in with a passkey from my desktop. Why does my second factor have to be an on-device biometrically protected keystore? The sites I'm thinking of currently support TOTP when using passwords, so why can't they support the same thing when using passkeys? I don't want to place all my trust in the security of my keystore. I like that I have to unlock my phone to get a TOTP. Someone would have to compromise my local keystore and my phone, which makes it a better second factor in my opinion.

EDIT: like, at work, I ssh to servers all over the damn place using an ssh key. I have to get to those servers through a jump box that requires me to unlock my phone and provide a biometric second factor before it will allow me through. That's asymmetric cryptography + a second factor of authentication that's still effective even if someone has compromised my machine and has direct access to my private key. That's what I want from passkeys.

[–] Badabinski@kbin.earth 14 points 1 month ago

This is obviously wrong. The children yearn for the mines, not the slaughterhouse. They should be swinging a pickaxe at some pitchblende in an unventilated tunnel after school, not cutting up meat.

(/s obvs, I find the whole "the children yearn for the mines" thing to be just my kind of dark humor.)

[–] Badabinski@kbin.earth 18 points 1 month ago

This is a bad take. Several cities in my state banded together to create a municipal fiber network called UTOPIA. The fiber is owned by the cities that bought in and is used by several different ISPs. The ISPs pay UTOPIA for access, and then they have to compete with each other for subscribers based on performance, features, and cost. Like, there's genuine market competition for internet! If the state owns the infrastructure and then forces the playing field to be level, then everyone benefits. People in the cities with UTOPIA got fast fiber internet waaay faster than anyone else, they have a plethora of choices (want a static IP and a business plan in your residence? There's an ISP that sells that!) at great prices, ISPs get access to subscribers without having to maintain fiber, and the cities who bought in get to make money from this and attract residents and businesses who benefit from the service.

My city didn't buy in. Google Fiber eventually came to town so I was able to kick Comcast out, but I am uneasy about what'll happen if Google decides to drop their ISP business. If I was in a city with UTOPIA, it would just be one ISP folding and I'd be able to pick a new one and switch over right away.

EDIT: cool, Cory Doctorow wrote a blag post about it: https://doctorow.medium.com/https-pluralistic-net-2024-05-16-symmetrical-10gb-for-119-utopia-347e64869977
UTOPIA users have access to 18 different ISPs. I feel like that speaks for itself right there. This is the future we all should have had.

[–] Badabinski@kbin.earth 5 points 1 month ago (1 children)

It already is. My company runs hundreds (possibly thousands) of ARM64-based instances right now. It's done great things for our cloud spend. We still have more x86 stuff than ARM because some applications just don't perform as well on ARM, but I can imagine that ratio will change as software gets more optimized (specifically the JDK, golang's compiler, and GCC/LLVM) and Ampere releases new systems with better single thread perf.

EDIT: Ampere, not Alterra. God damn tech company names.

[–] Badabinski@kbin.earth 4 points 1 month ago

You can run Asahi Linux on M1 MacBooks right now. If you didn't see the news, they've even been able to run some relatively modern AAA games with decent enough frame rates. Granted that's only the M1 macs, but there's at least one relatively modern ARM laptop that you can run Linux on.

I'll totally concede that the new Snapdragon laptops aren't running Linux yet. It seems like Qualcomm is taking Linux support seriously, but I'm a bit skeptical as someone who has been absolutely fucked by a shitty Qualcomm kernel module.

[–] Badabinski@kbin.earth 15 points 1 month ago (5 children)

I just wish that companies enabling passkeys would still allow password+MFA. There are several sites that, when you enable passkeys, lock you out of MFA for devices that lack a biometric second factor of authentication. I'd love to use passkeys + biometrics otherwise, since I've often felt that the auth problem would be best solved with asymmetric cryptography.

EDIT: I meant to say "would still allow passkeys+MFA." hooray for sleep deprivation lol.

[–] Badabinski@kbin.earth 5 points 1 month ago

https://sourceforge.net/p/flightgear/flightgear/ci/next/tree/

This random git repo I picked from their source forge page seems to have some pretty recent commits. I'm guessing they just have a slow release cycle.

[–] Badabinski@kbin.earth 2 points 1 month ago (1 children)

That's basically all I use from my Anduril flashlights. I don't bother with the candle modes and all that shit. I've only ever used Anduril v2 flashlights, so maybe Anduril v1 was less intuitive?

[–] Badabinski@kbin.earth 4 points 1 month ago (3 children)

I like the shutdown mode because the moonlight mode thing it does is great at night. Like, I use it if I need to find something in my nightstand and want to avoid waking up my partner.

EDIT: also, hello fellow flashlight nerd. I'm writing this with an Emisar D4K in my pocket.

[–] Badabinski@kbin.earth 3 points 1 month ago

lmao, kinda. There are a fair number of flashlights that are sold with Anduril though. I've personally never installed it/flashed it.

EDIT: if what I've described sounds like an acceptable solution, you should check out the Wurkkos I mentioned. I absolutely hate lights that put a strobe between me and the the mode I want, and I've been very happy with mine.

[–] Badabinski@kbin.earth 10 points 1 month ago (11 children)

Flashlights that use the open source Anduril v2 interface are... tolerable, I'd say. It's not good, it's not intuitive, but it does at least make it easy to just turn the damn flashlight on and off.

  1. Click once to turn it on, once to turn it off
    • While it's on, hold the button down to change the brightness
  2. Click twice quickly to put it in turbo mode, click twice quickly to take it out of turbo mode. One click turns the light off
  3. Click twice and hold your second click to turn the light on in turbo mode. Once you let go of the button, the light turns off. I actually really like this mode
  4. Strobe is three clicks, but it's not the discotheque-ass crazy strobe, it's usually an SOS pattern. One click turns it off
  5. Click four times to lock the flashlight. This stops it from turning on in your pocket. This is a big deal for some flashlights because they're bright/hot enough to burn you if left on in an enclosed space. Four clicks takes it out of lock mode

The interface gets way more complicated after that, but I don't bother with any of that shit. Luckily, it's hard to accidentally activate the crazy bullshit.

There are also lights that mimic this pattern, but differ in a few key ways. The Wurkkos FC11 is a great option that's relatively cheap. The 4000 K version is $35 and is bright with a nice neutral color temperature (I find it much easier on the eyes.) It follows the interface rules I outlined above except that it's missing number 3 and the strobe is of the flashy hold-a-rave variety. Still, you have to specifically press the button 3 times in a row pretty quickly to trigger it. I never have accidental raves with mine.

[–] Badabinski@kbin.earth 16 points 1 month ago

Yeah, the time drift between the earth and moon is small, but it'll noticable for latency-sensitive software.

God, I'd hate to be the dev that has to deal with relativistic time zone conversions. What a fucking nightmare that'd be...

view more: ‹ prev next ›