Viewing profile — mwwaters

The Windows 11 ISO on a two year old Lenovo laptop did not have the Ethernet or WiFi driver. “Have Disk” also did not work for whatever reason when I downloaded the driver to a USB…

The passkey method uses Bluetooth to ensure proximity.

The far bigger benefit is phishing resistance (with hardware-contained keys themselves being phishing-proof on a non-compromised system). It moves to the account recovery flows, bu…

The first FRED link shows how noisy that subgroup is. It’s bounced around with 83-84% during that time. It was 83.8% in March and 83.5% through much of 2024.

OAuth first and foremost is driven by getting secret information from, let’s say, Big Company. It’s understandable that there are many steps for some random Joe to get Google email…

When I really dove into it, I understood mostly why all the complexity was all there if I cared about data at the identity provider . When it’s only used for SSO, it’s extreme over…

That is for whatever it considers reverse-engineering the model to try to create a competing one.

The “enough of us” is at least a majority of voters agreeing. I’m not sure what the alternative to that is.

For doing some reporting stuff internally, there isn’t a certification. But there are definitely humans who have to certify financial statements and communications for financial of…

SLAAC and link-local is very different from DHCP/NAT/etc. in IPv4 world. Link-local addresses are pretty arcane in IPv4 while they are a central idea in IPv6. That’s fine. As point…

Yeah, that’s the issue. There is a lot of boilerplate or I can ask for ideas, but outside of boilerplate the review step make generation seemingly worse.

There’s certainly a lot of uncertainty. But pro-AI posts never seem to pin themselves down on whether code checked in will be read and understood by a human. Perhaps a lot of engin…

The scams are more sophisticated than getting gift cards to pay the IRS. A number saying that it’s from the bank will say they need to verify some account information. I have had t…

I’ve heard the actual OEM cost is offset by the manufacturer getting paid for all the bloatware included.

Electricity price regulation, at least for transmission, has been a thing for states for 100+ years and federally since the 1930s. Pipelines and railroads also have price regulatio…

Electric utilities face price caps and there are not electricity shortages. It depends on the level of market failure, but there are not a ton of hospitals to choose from regardles…

Medicare has overhead, but you’re not saying whether it is more than commercial insurance. The admin expense/profit portion of commercial insurers also don’t take into account prov…

The legal infrastructure for banking and securities ownership has long had defaults for liability assignment. For securities, if I own stock outright, the company has to indemnify …

If the side loaded app does not have permission to use the passkeys and cannot somehow get the user to approve passkey access of the new app, that would be a good alternative to st…

In the case of some knowing or blindfully unknowing money mule in the chain or at the end of the chain, the intermediary or final banks may not be at fault. The bank could have fol…

The phisher’s app or login would be from a completely new device though. Passkeys are also an active area to defeat phishing as long as the device is not compromised. To the extent…

There is some world where somebody scammed through sideloading loses their life savings, and every country is politically fine with the customer, not the bank, taking the losses. B…

Maybe I’m biased working in insurance software, but I don’t get the feeling much programming happens where the code can be completely stochastically generated, never have its code …

I took this thread as asking whether PRs that are pulled in should be reviewed.

The issue in the late-90s was all the investment created a lot of real revenue for telecoms and other companies. Even though there were a lot of shenanigans with revenue, a lot of …