• 0 Posts
  • 10 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle
  • I have a specifically not NSFW one, but it feels relevant anyway. My wife was about to get ready for work, and while I can’t remember exactly what lead to it, there was some kind of “betcha can’t catch me” chase from the kitchen to the bedroom that was not sexual in nature, that’s just where her work clothes were. Well, to punctuate her victory she leaps onto the bed for a diving finish, including a rotation so she’d come down on her back like a high-jump. Majestic.

    Well, it would have been, if she’d not overshot a bit and smashed the back of her head off the edge of the headboard… Hard.

    We go to the hospital because she’s got a concussion, and when they ask how this happened, and you answer that she whacked her head really hard against a headboard, it opens up a whole new category of questions! The kind that involve me being asked to leave the room so we could answer the questions separately, just in case she had a different answer when I’m not present in the room with her… 😅

    The concussion was bad enough she needed a bunch of time off work, so naturally friends and family are concerned and have questions! Questions like “oh wow, that sounds pretty bad, how did it happen?”. And, like, it’s pretty hard to give an answer of “she banged her head really hard on the headboard with me before work” without people getting really squinty and blushy 😛

    So it’s not sexual! Honest! It just really really sounds like it…


  • psycotica0@lemmy.catoTechnology@lemmy.world•I don't like passkeys | Ethan Hawksley
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    4
    ·
    edit-2
    10 hours ago

    I don’t know that OP is wrong per-se, but I think they’re overstated a bit.

    Their statement that passkeys are better than people using the same password, but are a step back for people using a password manager, is maybe a bit much. It’s basically the same, but sometimes better.

    Most of their drawbacks are the hardware implementations, but that’s already true of people using hardware 2FA, and corporate management, which is already a problem if you use Apple’s or Google’s existing baked-in password managers.

    But if you don’t already have both of those problems, the standard is basically just “instead of having the password manager pretend to type in a box, what if they dumped something into the stream directly”, and that extends to what if the UI didn’t ask for anything and just said “hey, do you want to login? Just let me know and it’s done”

    And, like, should you be able to export from Apple’s built in store to migrate? Absolutely, but if you never used Apple’s passkeys in the first place, because ugh gross, then it’s not a problem you need solved yet.

    There is one problem I’ll admit, which is that it’s easier to make a sketchy password manager that just pretends to be a keyboard. I myself don’t actually use passkeys because I sync my passwords with git and use pass, which is cool and I love it. And then I type them using a dmenu script and xdotool, which is silly and I love it. But that doesn’t work with passkeys which I can definitely store in git, but would require a real actual connection between my browser and the tool, in a way that I don’t think currently exists.

    But just because I can’t use my sketchy crap, doesn’t always mean it’s a step back 😛


  • The return of SASL DIGEST! (Or these days probably CRAM or SCRAM)

    But yeah, the “hard” part would be that you don’t want the user to type in a password to the website because it could get snatched, so you’d want the User Agent to pop up a password prompt, you type it, and then it does the hashing etc internally and only dumps the hash into the request. So you’d still need some kind of standard for that.

    Which is basically just HTTP auth from the 90s. So the good news is that’s always been possible, and already has broad support and works with all browsers! 😛



  • This isn’t a real answer because as far as I know there’s no tool that helps you with this, but you should be able to put base-64 encoded images into markdown documents too. At the very least by just putting raw HTML image tags.

    What would be “nicer” would be if one could use the references feature that allows you to put links in the body but their destinations in the footer to stash the images at the bottom of the document, but I don’t think that’ll work, and I haven’t tried it.

    That having been said, I personally think a folder of files, with images separated from the text, and referenced with relative paths, is better for 100 other reasons, with the only disadvantage being that you’d have to zip it up to send it to someone else. But if you’ve got embedding as a requirement, you could maybe try jamming them into the markdown.

    Or make a new format! Mdgz, which is just a gziped tar of a file called index.md, and then a collection of any other files desired, and then get readers to resolve links only ever within that structure so it’s encapsulated. Should be pretty doable, easy to work with if you don’t have any special tools, but also possible to make tools for. I believe in you!






  • There are definitely levels to the ethics of AI in general and vibe-coding in particular… but I think for me mods for games you like feels like maybe the least bad? It still has issues around training and sourcing of input, and part of the associated environmental impact of training.

    But on the other hand the game was already proprietary, and most modders don’t make a career out of it, and there isn’t the same kind of “maintenance” as a normal project, and a busted mod isn’t dangerous to society, so those parts of the ethics don’t apply as cleanly. And there is something nice about the idea that some random person who likes this game, and has an idea about how they’d like it even better, can tweak some other company’s game to better fit their desires.

    I’ve been a professional programmer for like 20 years, but I don’t think I have the bandwidth to learn how to mod each game I like individually. I’ve never written any mod for any game, despite having made (gamejam) games before! So if we could hypothetically solve the input problem, I think people having the freedom to personalize their gaming experience from what Microsoft provides is kinda nice. But that’s obviously a big thorny “if” 😛