Viewing profile — jonafato

This is a Medium blog on an nytimes.com subdomain, so perhaps you've hit an account or browser specific limit. I'm not getting a paywall in or out of private browsing mode, you may…

While I like my Yubikeys, they definitely aren't more convenient or intuitive for people who aren't accustomed to using multifactor authentication already. The webauthn spec [0] in…

The domain is the author's name (see the sidebar on the right).

It's only a stupid premise if you take the feature for face value and assume that the people behind it expected it to magically solve all of the tracking problems on the web. Alter…

There's a similar effort in the Python / Django world called Jazzband ( https://jazzband.co/ ). This model will probably become more and more necessary as maintainers need to move …

There are some "blessed" recommendations at https://packaging.python.org/guides/tool-recommendations/ (the Python Packaging Authority is about as official as you're going to get), …

I think plenty of people in the Python community will earnestly say that while acknowledging that there isn't universal agreement on what that one good way is. It's an ideal to str…

The PyPA team has done a lot over the past five years. The changelog for pip ( https://pip.pypa.io/en/stable/news/ ) contains quite a bit, PyPI was migrated to Warehouse, and there…

I quite liked Vienna ( http://github.com/ViennaRSS/vienna-rss ) while I had a Mac. It has options to run both as a standalone application and synced with various online services.

I was more thinking of malware / some otherwise rogue process. This seems like something that's worth having in the world of fake support remote desktop scams.

Can anyone comment on their "zero touch is safe" claim ( https://krypt.co/faq/ )? As far as I understand, tokens like YubiKeys require a touch as an explicit action by the user to …

I disagree that it's clear. Words have meanings, and > By "unlimited", we really meant "limited". shouldn't be a valid defense for misleading consumers. The plan would be more accu…

Not OP, but I think they're referring to this story [0] about a survey conducted by the Program for Public Consultation at the University of Maryland. The results showed 83% opposi…

ISPs and other network operators are notorious for injecting content into webpages [0]. Even if someone is doing this for "harmless" or even "benevolent" reasons, someone else is c…

HTTPS is for the users' benefit. They should be able to trust that they're getting the content they asked for without modification or snooping.

I don't know that this invalidates mtgx's general point. Right now, data brokers have effectively zero liability, but we don't treat other companies dealing with dangerous or toxic…

Doesn't sound like this is what you're looking for, but LightBot ( http://lightbot.com/ ) is a wonderful game with similar sounding game play.

It's a bit misleading to post that quote without including the validity section as well. People are not as quick to abandon their ethics as the original results of that experiment …

There are "improve this document" links at the top of each of the pages (a bit confusing, as that link doesn't really belong with the site navigation links). e.g. the OpenSSH doc l…

Copperhead OS is a great project and seems to be short on funding (based on threads on Twitter and Reddit). If you'd like to support it, donations can be made at https://copperhead…