Viewing profile — jmsgwd

If the database is not local, and there’s no authentication, what stops someone else from accessing it inappropriately?

> The idea that AWS's services are fully regionalized or isolated has always been a myth. This is highly misleading. It's true that there's a handful of global AWS services - but o…

But the fact that it's so boring is interesting.

> In the beginning there was a cron I thought you were paraphrasing John 1:1 for a moment! [1] [1] https://en.wikipedia.org/wiki/John_1:1

How else could you represent piano roll data than as a stream of events? I thought that was ubiquitous since the invention of MIDI. Are you saying other sequencers are unable to re…

Are you referring to Windows Kerberos here or NTLM?

That came across more snarky than I intended! Let me rephrase: for the majority of users, the usability and resilience benefits of synced credentials are enormous, and the security…

>Huh interesting, how does that work? I thought the way yubikeys operate the keys are generated on-device and are impossible to remove, and also come in limited number. I wasn't re…

Just to point out, protecting a key using the secure enclave and syncing it using end-to-end encryption aren’t necessarily mutually exclusive. The security property you care about …

There are many cross-platform password managers that sync very nicely, which would solve for the machines you control - the Windows gaming machine and Android phone. For machines y…

> I dont want an online backup. I want my credentials to only be on my computers. So now I gotta learn about which apps are ok, don't have cloud synching If an "online" password ma…

OK but you'd still be able to use the open source "password manager" to export the keys - which solves the issue lapcat raised in this thread - even if relying parties blocked it f…

Once "secure credential exchange" becomes supported by commercial credential managers, what's to stop someone implementing an open source password manager that implements the stand…

OK I see what you mean. Having the ability to switch between vendors but not the ability to export your data locally (e.g. as plaintext keys) is a new meaning of "vendor lock-in" I…

> Because by default, they do, and you have to explicitly install software to let it be moved Apple's native passkey implementation doesn't require doesn't require you to install e…

> passkeys in Safari requires iCloud Keychain This is not true - browsers including Safari support passkeys managed by third-party password managers. I'm using 1Password with brows…

Some password managers provide an offline root of trust which family members can use in this scenario. For example, 1Password tells users to print off an "Emergency Kit" which is a…

I keep hearing it repeated, but where does this "tied to a single device" idea come from? The default, built-for-the-masses implementation of passkeys is called "synced passkeys". …

> it might take only one intelligent life form for the space to (eventually) get filled with it It wouldn't need to be intelligent to do this; it could be a self-replicating machin…

Your first question is discussed in the book The Recursive Universe by William Poundstone (1984). One of the chapters asks "what is life?". It considers (and rejects) various optio…

How did they do damage to the hoods of a few cars?