Viewing profile — ev1

So far I haven't seen a single major company doing phone based (insecure) 2fa not use the number for marketing, data abuse, etc. Non-standards based "authenticator" dedicated apps …

> Side note: the McDonald's app is nice in not requiring (or apparently even allowing) passwords to log in. However, there's a problem with its state transition, where the user nee…

I have encountered numerous sites that port scan localhost via websocket/img onerror/etc.

The answer is generally "move" unfortunately. Surge pricing for things like club and concert nights runs orders of magnitude higher than normal rides for the same wear and tear. Th…

> children with his executives, Why do people do this? I mean in any industry. Just why? Is there something I don't understand about executives or C-levels or something?

The biggest shock to me here is "aarch64 Windows doesn't have calc.exe"

No, your browser converts it before access

> Infosys will ban all OSS contributions from their developers. Sounds... good to me?

To be entirely neutral on this reply, it's not part of the title on the linked article and against guidelines to add it like that.

I have not installed the TM app - you can add a ticket to Apple Wallet from the website, and every order I've seen has "don't have a phone? go to the box office for tickets when yo…

Why are the 5 star reviews all for a nonstick frying pan?

I see entire massive threads requested and responded in a single compressed call to /api/graphql/xxx/TweetDetail Loading an entire next page is also a single call to the same endpo…

Reddit fingerprints you very aggressively. Cookies are not used here. Every single pageload, they scan all your fonts, plugins, etc. They also exfiltrate this data back in ways to …

Amusingly, some of my friends that use it for Marketplace express a desire for Craigslist to be popular again, if not only for the absolutely insane people on Marketplace that dema…

CFA app loads a bunch of rather fucked up surveillance SDKs under the guise of anti coupon fraud or something. Probably related to that.

Yeah all of these listed still require an equivalent to SSN.

Reloadables require SSN verification, afaik.

> It makes the days going back to the office feel more refreshing, like I have more oxygen For some reason, every time I'm in a conference room I inevitably pass out. Even if I'm n…

For younger group, you don't generally know or give out your number in the first place for person to person communication, which means that for the rare chances you are expecting, …

I don't know how well this generalises, but in my sample size most people including myself don't even know our own phone number if asked. You don't exchange phone numbers. You migh…

In my groups (gen z), I do not know a single person that even makes calls, ever. Phones are on silent/dnd. If you ever get a "real" phone call (not via discord, whatsapp, etc) it's…

> trusted solution from a trusted company that gives me the ability to conduct serious work and send/receive sensitive business data over a variety of connections in a secure way >…

> clearly a decision made based on personal views of a single person or a small group. At the same time there are many other git repo hosting sites that are not run and written pre…

usually the way people do this is just running a vpn onprem on company equipment alternatively cloudflare zero trust

Include 2FA seeds or backup codes, or put a backup yubikey somewhere recoverable offsite.