• 0 Posts
  • 18 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle
  • It’s the QTE debate all over again. If it’s a forced mechanic, meaning there’s no alternative than to learn the pattern and parry effectively, I agree with this guy that it sucks. But I haven’t seen many games where that’s the case.

    Modern accessibility standards seem to be doing a better job of making games enjoyable by a wider range of players, giving options to disable QTEs entirely on one end, or offering alternative solutions to fights besides mastery of timing dependent actions on the other.




  • This is dramatically unlikely for FIDO2 MFA services. It’s possible, but would require the device you’re using to remain connected to both the vault and the attacker infrastructure long enough for the data to be scraped. It happens, but nowhere near as frequently as just stealing the login credentials and using them asynchronously from the origin.

    The strawman here would mostly apply to high value targets, which most people aren’t. At the scale of the internet, most cybercriminals are going to pivot to stealing accounts that don’t require additional investment to harvest. It’s simple economics. Having MFA is an essential part of using the internet for anything you actually care about.

    Strong passwords are rapidly becoming worthless when we’ve been building ever more powerful compute farms for several decades. What used to take months or even years to crack in 2010 can be done in seconds today. But all of that info neglects that it’s irrelevant because most passwords are lost due to social engineering, malicious software, or the leading cause…… password reuse.


  • CthuluVoIP@lemmy.worldtoYou Should Know@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    36
    arrow-down
    3
    ·
    5 months ago

    This is a good thing. Any account you care about and don’t want to be accessed by anyone without your consent should have multifactor authentication enabled. Use an app like Google Authenticator or a hardware token like a Yubikey. 2FA through text or email is insecure and easily bypassed.

    Friends don’t let friends raw dog the internet. Don’t be dumb and get your shit stolen. Use MFA everywhere.









  • I appreciate that his obit outlines how exasperating Kevin was. But ultimately he did a lot of good even if he did get a bit of a god complex from his notoriety. No matter how you slice it, 59 is too young, and Kevin was far from enough of a jerk to deserve that fate. I hope his family can mourn and find peace. See you on the flip side, Kevin.




  • It’s most likely a combination of both. I’m not a huge fan of the divisive “normies” vs “whatever the hell we are” stance, but Reddit became what it is because it was poorly designed from the beginning to handle how rapidly it needed to scale. It was never envisioned when the project started as an internet killing behemoth, but ultimately that’s what it became. Without in-built tools to manage that growth, Reddit succeeded because the community willed it to be and in spite of its own codebase.

    What’s happened to it now is likely correlated to a number of factors:

    • Significant user growth as the popularity of the site among habitual internet users grew over time
    • Positioning within popular culture - namely the practice of appending Google search queries with ‘reddit’ to improve results, which is common among people who otherwise don’t browse the site at all
    • Unchecked bot traffic with limited mechanisms to control or curtail the propagation of duplicative, low effort / value, incorrect, harmful, or misleading information on a massive scale
    • A philosophical pivot from being a community driven by community to a company driven by a desire for profits
    • Algorithmic manipulation of how content is displayed to maximize advertiser return at the expense of organic community dynamic shifts a combination of 1- a rapidly grown userbase, 2- positioning within popular culture (vis a vis, appending Google search queries with reddit to improve the results is common even among people who otherwise don’t use Reddit)
    • The hurt feelings of a CEO with an easily bruised ego


  • Basically it works like this:

    Instances A, B, and C are federated initially. When a user posts on Instance A, users on Instances B & C can see and interact with the post directly. Any comments they make will be sent back to Instance A as the “home” instance for that content.

    Now let’s say Instance A decides they don’t care for the type of interaction they’re getting from Instance C’s users and decides to block - or defederate - Instance C.

    To users on instance A, nothing changes other than new posts and comments from users on Instance C will no longer show up. To users on Instance B, nothing changes other than new comments from users on Instance C won’t appear in posts they interact with on Instance A. However, for Instance C, things are suddenly branched.

    On Instance C, any posts that were created prior to defederation still exist in Instance C’s record. However, any comments that users on Instance C commit to those posts will no longer be distributed to users on Instances A or B, because Instance A maintains the “primary” record of the post. Similarly, Instance C’s users will not receive updated comments from users on Instance A OR Instance B, because again, Instance A is what determines which comments appear in federated instances. Furthermore, new posts created on Instance A will no longer show up in users’ feeds on Instance C. From the moment of defederation, Instance C’s copies of all posts on Instance A are now distinct, and the only new comments or updates they will receive will be from local users on Instance C.