I think people on HN overestimate the security literacy of the average computer user in a personal/corporate setting. If a sophisticated attacker wanted to target an organiztion with passwords/push auth, it'd be trivial to get some subset of members to copy-paste passwords from managers and accept prompts. I think far more likely than lock-in is that FIDO members genuinely want to make their customers more secure, something that passkeys very much do accomplish for the average user.
That being said, I'm not rushing to enable passkeys on every site. If you already use a good password that enforces origin binding (the key strength of WebAuthn) and you extend that security perimeter through good OpSec (i.e., being careful when copy-pasting passwords), you're not getting much benefit.
Or Bing/Microsoft?
Or the new trendy thing where you have to put in your email before password field is shown (because it may require 2-auth).
All of these platforms made authentication less secure because a) due to so many differen domains handling authentication I no longer can know if I am at the one I should trust b) since there's often no password shown password mamagers no longer automatically fill in username fields
These idiots broke the system that worked so well before with a password manager and it no longer works. For very little reason.
Don't say it's users who are to blame, it is as much the big companies who are making it worse because they are dysfunctional.
I believe there is cultural issue with boys’ upbringing. Recently my 8-year-old daughter was spending a week with her mother’s relatives in middle Finland. One day she sent me a picture of an old Volvo in a ditch. “Guess what dad, my cousin drove it off the road and I was in the car!”
The cousin in question is ten years old. I was absolutely furious that they let the boy drive a real car and that my little girl was in it with no adult supervision. But my in-laws didn’t see a problem: “He was only driving on a private road — there’s no risk — everybody does it here — this is the best way to get the boys used to engines and driving.”
In my opinion this is how you train teenagers to think that safety and rules don’t matter, and that they’re invulnerable. But I can’t change these people’s views, so all I can do is try to make sure my daughter doesn’t ride with her cousins from now on.
Was the car driven recklessly or was it a parking/reversing mistake? This kind of thinking just brings unnecessary racism.
You would think that UK would have a lower rate of traffic incidents with it's "safe" approach to driving but numbers speak the opposite.
It was around midnight and we happened to come across a very large mobile crane on the pavement blocking our way. As we stepped out (carefully), into the road to go around it, one of my Finnish colleagues started bemoaning that no cones or barriers had been put out to safely shepherd pedestrians around it. I was very much "yeah, they're probably only here for a quick job, probably didn't have time for that", because I'm a Londoner and, well, that's what we do in London.
My colleague is like "No, that's not acceptable", and he literally pulls out his phone and calls the police. As we carry on on our way, a police car comes up the road and pulls over to have a word with the contractors.
They take the basics safely over there in a way I've not seen anywhere else. When you do that, you get the benefits.
I'm not sure if we're thinking of the same field of AI development. I think I'm talking about the super-autocomplete with integrated copy of all of digitalized human knowledge, while you're talking about trying to do (proto-)AGI. Is that it?
You just listed possible options in the order of their relative probability. Human would attempt to use them in exactly that order
For nearly 50 years theorists believed that if solving a problem takes t steps, it should also need roughly t bits of memory: 100 steps - 100bits. To be exact t/log(t).
Ryan Williams found that any problem solvable in time t needs only about sqrt(t) bits of memory: a 100-step computation could be compressed and solved with something on the order of 10 bits.
Though biological products like psilocybin (or weed etc) are harder to measure and control by producers, in strength than purely chemical products like LSD or MDMA. It's hard to trace what mother nature did exactly when producing this particular mushroom cap, but it could be possible to trace what the chemist did when producing this particular blot. If only it were legalized and we could have actual control, tracability, and prosecution of malpractice...
With LSD it's always a solution (either in paper or in liquid), so you can only trust the producer.
It's also a bit depressing to think that there are posts so near what I started at 15 years ago (mid-low 20s), despite 54% inflation over that period, per the BoE calculator (another claims 64%).